@dexterai/x402 5.4.2 → 6.0.0-rc.0

package/dist/tab/index.d.ts

@@ -1,17 +1,17 @@
-import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, V as VaultAdapter } from '../types-CSuISjXA.js';
-export { A as AuthorizeSessionOptions, L as LiveSessionDetails, d as LiveSessionExistsError, S as SessionScopeExceededError, b as TabCloseResult, c as TabClosedError, a as TabState, U as UnsupportedNetworkError } from '../types-CSuISjXA.js';
-import { HumanAmount, AtomicAmount, SignedVoucher } from '@dexterai/vault/types';
+import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, F as FinalVoucherV2ReservationInput, a as FinalVoucherV2ReservationReceipt, d as ReserveFinalVoucherV2, b as VaultAdapter } from '../types-45M9fb5M.js';
+export { A as AuthorizeSessionOptions, H as HistoricalV1MigrationRequiredError, L as LiveSessionDetails, c as LiveSessionExistsError, S as SessionScopeExceededError, e as TabCloseResult, f as TabClosedError, g as TabState, U as UnsupportedNetworkError, V as VerifyFinalVoucherV2Reservation } from '../types-45M9fb5M.js';
+import { AtomicAmount, HumanAmount, SignedVoucher } from '@dexterai/vault/types';
 export { AtomicAmount, HumanAmount, SessionKey, SessionScope, SignedVoucher, TabNetworkId, VoucherPayload } from '@dexterai/vault/types';
 import { PublicKey, Connection } from '@solana/web3.js';
 import { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
 export { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
-import { a as PayResult } from '../types-Co5YYhVB.js';
-export { SessionRegisterMessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, sessionRegisterMessage, sessionRevokeMessage, voucherPayloadMessage } from '@dexterai/vault/messages';
+import { b as PayResult } from '../types-BhXu7cgi.js';
+export { SessionRegisterMessageArgs, SessionReplaceV1MessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, finalVoucherV2Sequence, sessionRegisterMessage, sessionReplaceV1Message, sessionRevokeMessage, sessionVoucherV2AuthorizationNonce, sessionVoucherV2Nonce, voucherPayloadMessage, voucherV2SequenceOrdinal } from '@dexterai/vault/messages';
 export { BuildRegisterSessionKeyArgs, BuildRevokeSessionKeyArgs, buildRegisterSessionKeyInstruction, buildRevokeSessionKeyInstruction } from '@dexterai/vault/instructions';
 export { buildSecp256r1VerifyInstruction } from '@dexterai/vault/precompile';
 export { DEXTER_VAULT_PROGRAM_ID, INSTRUCTIONS_SYSVAR_ID, SECP256R1_PROGRAM_ID } from '@dexterai/vault/constants';
-export { d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, a as scopeCapAtomic, s as signVoucher } from '../sessions-BG2OYLBi.js';
-import '../types-xQu1U4xk.js';
+export { S as SignContextBoundFinalVoucherV2Input, a as SignContextBoundFinalVoucherV2Result, d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, s as scopeCapAtomic, b as signContextBoundFinalVoucherV2, c as signVoucher } from '../sessions-rPdO1CgK.js';
+import '../types-BvQpNtFw.js';
 
 /**
  * The `Tab` runtime — the live object returned by `openTab()`.
@@ -50,13 +50,83 @@ declare function voucherToHeader(signed: SignedVoucher): string;
  * /tab/open. THROWS if protection cannot be confirmed — a tab that is not
  * drain-protected must never be returned to the caller.
  */
-declare function armTabOpen(facilitatorUrl: string, buyerSwigAddress: string, maxAmountAtomic: bigint, network: string, counterparty: string): Promise<{
+/**
+ * @deprecated V6 has no buyer-side V1 arming route. This retained symbol is a
+ * deterministic migration fence for callers compiled against the old helper;
+ * it performs no fetch, signing, or chain action.
+ */
+declare function armTabOpen(_facilitatorUrl: string, _buyerSwigAddress: string, _maxAmountAtomic: bigint, _network: string, _counterparty: string): Promise<{
     armed: true;
     signature: string;
 }>;
 declare function openTab(options: OpenTabOptions): Promise<Tab>;
 declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
 
+/** Canonical network carried by the managed native-Tab transaction record. */
+declare const FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+/** Domain for the authority-signed transaction binding. Changing any bound
+ * field requires a new domain/version rather than silently changing bytes. */
+declare const FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN = "dexter-native-tab-v2-reservation/v1";
+/** UTF-8 prefix stored by the SPL Memo instruction. */
+declare const FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX = "dexter-native-tab-v2-reservation/v1:";
+/** Shared economic identity committed by the authority-signed Memo. This is
+ * intentionally independent of provider lifecycle IDs and SDK retry keys so
+ * the SDK and facilitator can derive identical bytes from their common facts. */
+interface FinalVoucherV2ReservationBindingIdentity {
+    network: string;
+    programId: string;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionNonce: number;
+    reservationAmountAtomic: string;
+    previousCumulativeAtomic: string;
+    voucherDigest: string;
+    cumulativeAmountAtomic: string;
+    sequenceNumber: number;
+}
+/** Normalize the SDK's historical Solana alias to the CAIP-2 value persisted
+ * by the managed facilitator. No other alias is accepted by this contract. */
+declare function canonicalFinalVoucherV2ReservationNetwork(network: string): string;
+/**
+ * Byte-for-byte mirror of the facilitator's voucher identity digest. It binds
+ * the complete signed voucher, not merely its amount or local counter.
+ */
+declare function finalVoucherV2Digest(voucher: SignedVoucher): string;
+declare function finalVoucherV2ReservationIdentity(voucher: SignedVoucher): {
+    voucherDigest: string;
+    idempotencyKey: string;
+};
+/**
+ * Low-level cross-system digest over the shared reservation identity. This
+ * helper exists so transaction builders and verifiers can lock byte-for-byte
+ * parity without manufacturing a SignedVoucher for an already-derived digest.
+ */
+declare function finalVoucherV2ReservationBindingDigestFromIdentity(identity: FinalVoucherV2ReservationBindingIdentity): string;
+/**
+ * Digest that must be carried by the same Dexter-authority-signed Solana
+ * transaction as the exact `settle_voucher(increment=true)` reservation.
+ *
+ * The Vault instruction binds the on-chain amount and account identities. This
+ * separate domain binds that economic effect to the complete FINAL voucher and
+ * shared economic identity. Provider lifecycle, receipt, and retry identifiers
+ * are deliberately excluded. The digest is computed locally from the voucher
+ * bytes; a provider-supplied `voucherDigest` is never trusted as the source of
+ * this transaction binding.
+ */
+declare function finalVoucherV2ReservationBindingDigest(input: FinalVoucherV2ReservationInput): string;
+/** Exact UTF-8 SPL Memo payload required in the reservation transaction. */
+declare function finalVoucherV2ReservationMemo(input: FinalVoucherV2ReservationInput): string;
+/**
+ * Validate the provider's immutable voucher-bound receipt before asking the
+ * chain adapter to prove the post-state independently. A receipt is evidence
+ * of the provider's durable lifecycle record; it is not a substitute for the
+ * adapter's chain read.
+ */
+declare function assertFinalVoucherV2ReservationReceipt(input: FinalVoucherV2ReservationInput, receipt: FinalVoucherV2ReservationReceipt): void;
+
 /**
  * tabFromGrant — open a buyer-side Tab from a GRANTED session key.
  *
@@ -81,8 +151,11 @@ declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
  *     odometer starts there so the first voucher strictly exceeds everything
  *     the chain has already terminally counted. The chain is the durable
  *     counter; there is no local state store to lose.
- *   - drain-protection arming via the facilitator's `POST /tab/open`,
- *     fail-closed exactly like `openTab` (an unarmed tab is never returned)
+ *   - a context-bound V2 reservation fence before every newly issued FINAL
+ *     voucher. Historical low-bit V1 grants are rejected before I/O: the v6
+ *     facilitator has no compatible buyer-side V1 arming/recovery endpoint.
+ *     Seller-side V1 verification remains available for obligations that were
+ *     already issued under the deployment that originally opened them.
  *
  * CUSTODY NOTE — why this constructor may hold a session secret when
  * `resumeTab` refuses to: the passkey path's "session keys are memory-only"
@@ -154,20 +227,31 @@ interface TabFromGrantOptions {
      */
     sellerUrl?: string;
     /**
-     * The buyer's Swig STATE address (`vault.swig_address`) for the `/tab/open`
-     * arming call. When omitted it is read from the on-chain vault account —
-     * one extra RPC read, never a guess.
+     * The buyer's Swig STATE address (`vault.swig_address`) bound into the exact
+     * V2 reservation request and receipt. When omitted it is read from the
+     * on-chain vault account — one extra RPC read, never a guess.
      */
     swigAddress?: string;
     /** Facilitator base URL. Default: DEFAULT_FACILITATOR_URL (https://x402.dexter.cash). */
     facilitatorUrl?: string;
     /** Vault program id override (test/devnet). Default: DEXTER_VAULT_PROGRAM_ID. */
     programId?: PublicKey;
+    /**
+     * Required for every context-bound V2 grant. Called with the exact FINAL
+     * voucher before it can be returned to merchant-facing code. The
+     * implementation must durably persist and establish that voucher's exact
+     * on-chain reservation, be idempotent for identical bytes, and resolve only
+     * after authoritative finalization. Low-bit V1 grants are rejected before
+     * this seam or any external I/O because v6 cannot reconstruct their arming
+     * identity safely.
+     */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
 }
 /**
  * Construct a live `Tab` from a granted session key. Fail-loud at every step:
- * key/params mismatch, dead or drifted on-chain session, exhausted cap, and
- * unarmed drain protection all THROW — an invalid tab is never returned.
+ * key/params mismatch, dead or drifted on-chain session, exhausted cap, and a
+ * missing exact V2 reservation fence all THROW — an invalid tab is never
+ * returned.
  */
 declare function tabFromGrant(options: TabFromGrantOptions): Promise<Tab>;
 
@@ -179,6 +263,11 @@ interface TabOffer {
     asset: string;
     /** CAIP-2 network from the challenge (x402 v2 form). */
     networkCaip2: string;
+    /** Preserved verbatim from accepts[].extra for policy-aware callers. */
+    voucherHeader?: string;
+    registrationEncoding?: string;
+    termsVersion?: string;
+    acceptanceRule?: string;
     resourceUrl?: string;
 }
 type TabOfferResult = {
@@ -206,6 +295,16 @@ type TabOfferResult = {
  */
 declare function resolveTabOffer(url: string, init?: RequestInit, fetchImpl?: typeof fetch): Promise<TabOfferResult>;
 
+/**
+ * Hosted-v1 commercial semantics advertised by the default Tab scheme.
+ * A different refund/dispute or delivery rule requires a new terms version;
+ * callers must never reinterpret these strings in place.
+ */
+declare const HOSTED_TAB_TERMS_VERSION: "dexter-tab-hosted-pay-before-delivery/v1";
+declare const HOSTED_TAB_ACCEPTANCE_RULE: "pay_before_delivery_seller_2xx";
+declare const HOSTED_TAB_VOUCHER_HEADER: "x-tab-voucher";
+declare const HOSTED_TAB_REGISTRATION_ENCODING: "base64(188-byte sessionRegisterMessage)";
+
 /**
  * Step-3a buyer orchestration: pay a URL through a tab with ZERO seller
  * knowledge. Resolution + lifecycle only — composes resolveTabOffer,
@@ -238,6 +337,8 @@ interface PayUrlWithTabOptions {
      * `OpenTabOptions.onLiveSession` (K-T4e).
      */
     onLiveSession?: 'error' | 'replace';
+    /** Exact V2 reservation fence forwarded to openTab. */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
     /**
      * Open-tab registry keyed by counterparty base58. Pass the SAME Map across
      * calls to reuse one open tab per seller instead of re-registering
@@ -313,4 +414,4 @@ interface ResolveTabTermsOptions {
  */
 declare function resolveTabTerms(url: string, init?: RequestInit, opts?: ResolveTabTermsOptions): Promise<TabTermsResult>;
 
-export { DEFAULT_FACILITATOR_URL, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, atomicToHuman, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };
+export { DEFAULT_FACILITATOR_URL, FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN, FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX, FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2, type FinalVoucherV2ReservationBindingIdentity, FinalVoucherV2ReservationInput, FinalVoucherV2ReservationReceipt, HOSTED_TAB_ACCEPTANCE_RULE, HOSTED_TAB_REGISTRATION_ENCODING, HOSTED_TAB_TERMS_VERSION, HOSTED_TAB_VOUCHER_HEADER, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, ReserveFinalVoucherV2, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, assertFinalVoucherV2ReservationReceipt, atomicToHuman, canonicalFinalVoucherV2ReservationNetwork, finalVoucherV2Digest, finalVoucherV2ReservationBindingDigest, finalVoucherV2ReservationBindingDigestFromIdentity, finalVoucherV2ReservationIdentity, finalVoucherV2ReservationMemo, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };

package/dist/tab/index.js

@@ -1,6 +1,6 @@
-var ye=class extends Error{constructor(n){super(`Network ${n} is not yet supported by @dexterai/x402/tab`);this.network=n;this.name="UnsupportedNetworkError"}},he=class extends Error{constructor(n,r){super(`Session scope exceeded: ${n}${r?` (${r})`:""}`);this.reason=n;this.name="SessionScopeExceededError"}},Q=class extends Error{constructor(n){super(`Tab ${n} is already closed`);this.channelId=n;this.name="TabClosedError"}},bt=class extends Error{constructor(n){super(`a LIVE session already exists for counterparty ${n.allowedCounterparty} (session ${n.sessionPubkeyHex.slice(0,16)}\u2026, expires ${n.expiresAtUnix}; on-chain spent=${n.spentAtomic}, crystallized=${n.crystallizedCumulativeAtomic}, frontier=${n.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=n;this.name="LiveSessionExistsError"}};import{PublicKey as Mt}from"@solana/web3.js";import{bytesToHex as ee}from"@noble/hashes/utils";import Bt from"tweetnacl";import{sessionRegisterMessage as St,sessionRevokeMessage as en,voucherPayloadMessage as wt,buildVoucherMessage as tn}from"@dexterai/vault/messages";import{sha256 as sn}from"@noble/hashes/sha256";function nn(){let t=Bt.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Tt(t,e,n){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:n}}function xt(t,e,n){if(n.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${n.length}`);let r=BigInt(e.cumulativeAmount),s=BigInt(t.scope.maxAmountAtomic);if(r>s)throw new Error(`voucher cumulative ${r} exceeds session cap ${s}`);let o=Math.floor(Date.now()/1e3);if(o>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${o}`);let a=wt({channelId:n,cumulativeAmount:r,sequenceNumber:e.sequenceNumber}),i=Bt.sign.detached(a,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:i}}function rn(t){return Ae(t.maxAmountAtomic)}function Ae(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function ke(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let n=new TextEncoder().encode(t.sellerUrl),r=sn.create();return r.update(t.vaultPda.toBytes()),r.update(n),r.update(e),r.digest()}var on=3600,Ie="https://x402.dexter.cash",$t=6;function Z(t,e=$t){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[n,r=""]=t.split(".");if(r.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let s=r.padEnd(e,"0"),o=`${n}${s}`.replace(/^0+(?=\d)/,"");return o===""?"0":o}function be(t,e=$t){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let n=t.padStart(e+1,"0"),r=n.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",s=n.slice(-e).replace(/0+$/,"");return s?`${r}.${s}`:r}var Ne=class{channelId;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber=0;closed=!1;lastSignedVoucher=null;previousSignedVoucher=null;constructor(e){this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,n=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:be(this.cumulativeAtomic.toString()),remaining:be(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-n)}}async signNextVoucher(e){if(this.closed)throw new Q(this.channelId);let n=BigInt(e);if(n<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(n>this.internals.perUnitCapAtomic)throw new he("cap_exceeded",`single voucher increment ${n} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let r=this.cumulativeAtomic+n;if(r>this.internals.totalCapAtomic)throw new he("cap_exceeded",`cumulative ${r} would exceed totalCap ${this.internals.totalCapAtomic}`);let s=this.sequenceNumber+1,o={channelId:this.channelId,cumulativeAmount:r.toString(),sequenceNumber:s},a=await this.internals.vault.signWithSession(this.internals.session,o);return this.previousSignedVoucher=this.lastSignedVoucher,this.lastSignedVoucher=a,this.sequenceNumber=s,this.cumulativeAtomic=r,a}rollbackVoucher(e){let n=this.lastSignedVoucher;if(!n||n.payload.sequenceNumber!==e.payload.sequenceNumber||n.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let r=this.previousSignedVoucher;if(r)this.sequenceNumber=r.payload.sequenceNumber,this.cumulativeAtomic=BigInt(r.payload.cumulativeAmount),this.lastSignedVoucher=r;else if(n.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null;else return!1;return this.previousSignedVoucher=null,!0}async stream(e,n){if(this.closed)throw new Q(this.channelId);let r=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),s=new Headers(n?.headers);s.set("X-Tab-Voucher",nt(r)),s.set("Accept","text/event-stream");let o=await fetch(e,{...n,headers:s});if(!o.ok){let a=await o.text().catch(()=>"");throw new Error(`tab.stream HTTP ${o.status}: ${a.slice(0,500)}`)}if(!o.body)throw new Error("tab.stream response has no body");return mn(o.body)}async close(){if(this.closed)throw new Q(this.channelId);let e={settleTx:""};this.lastSignedVoucher&&this.cumulativeAtomic>0n&&(e=await cn(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network));let n=(this.internals.closeMode??"revoke")==="revoke";return n&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:be(this.cumulativeAtomic.toString()),sessionRevoked:n,...e}}};function nt(t){return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ee(t.sessionPublicKey),sessionRegistration:ee(t.sessionRegistration),sessionSignature:ee(t.sessionSignature)}),"utf8").toString("base64")}function Se(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function an(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let n="non_monotonic_cumulative";if(e.error!==n&&e.reason!==n)return!1;let r=Se(e.attempted_cumulative),s=Se(e.on_chain_spent),o=Se(e.frontier);return r===null||s===null||o===null?!1:r>s&&r<=o}async function cn(t,e,n){let r=`${t.replace(/\/$/,"")}/tab/settle`,s={channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ee(e.sessionPublicKey),sessionSignature:ee(e.sessionSignature),sessionRegistration:ee(e.sessionRegistration),network:n},o=await fetch(r,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(s)}),a=await o.text();if(!o.ok){if(o.status===409&&an(a))return{settleTx:""};throw new Error(`tab settle ${o.status}: ${a.slice(0,500)}`)}let i;try{i=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(i.reason==="covered_by_frontier"){let u=Se(i.attemptedCumulative),p=Se(i.onChainSpent),d=Se(i.frontier);if(u!==null&&p!==null&&d!==null&&u>p&&u<=d)return{settleTx:""}}if(!i.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let c={settleTx:i.settleTx};return typeof i.grossAmount=="string"&&(c.grossAmount=i.grossAmount),typeof i.feeAmount=="string"&&(c.feeAmount=i.feeAmount),typeof i.netAmount=="string"&&(c.netAmount=i.netAmount),c}async function rt(t,e,n,r,s){let o=`${t.replace(/\/$/,"")}/tab/open`,a=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({buyer_swig_address:e,seller:s,max_amount_atomic:n.toString(),network:r})}),i=await a.json().catch(()=>({}));if(!a.ok||!i.success||!i.armed)throw new Error(`tab_open_unprotected: ${i.error??`http_${a.status}`}`);return{armed:!0,signature:i.signature??""}}async function Et(t){if(t.network!==t.vault.network)throw new ye(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new ye(t.network);let e=BigInt(Math.floor(Math.random()*4294967295)),n=new Mt(t.vault.vaultPda),r=ke({vaultPda:n,sellerUrl:t.seller,nonce:BigInt(e)}),s=ee(r),o=BigInt(Z(t.perUnitCap)),a=BigInt(Z(t.totalCap));if(o<=0n)throw new Error("perUnitCap must be > 0");if(a<o)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(Z(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let i=t.sessionDuration??on,c=Math.floor(Date.now()/1e3)+i,u=un(t.seller),p={channelId:s,maxAmountAtomic:a.toString(),revolvingCapacityAtomic:t.revolvingCapacity?Z(t.revolvingCapacity):a.toString(),expiresAtUnix:c,allowedCounterparty:u},d=await t.vault.authorizeSession(p,{onLiveSession:t.onLiveSession});return await rt(t.facilitatorUrl??Ie,t.vault.swigAddress,a,t.network,u),new Ne({vault:t.vault,network:t.network,seller:t.seller,counterparty:u,session:d,channelIdHex:s,channelIdBytes:r,perUnitCapAtomic:o,totalCapAtomic:a,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??Ie})}async function ln(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function un(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new Mt(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*mn(t){let e=t.getReader(),n=new TextDecoder,r="";try{for(;;){let{done:s,value:o}=await e.read();if(s)break;r+=n.decode(o,{stream:!0});let a;for(;(a=r.indexOf(`
+var _e=class extends Error{constructor(n){super(`Network ${n} is not yet supported by @dexterai/x402/tab`);this.network=n;this.name="UnsupportedNetworkError"}network},Y=class extends Error{constructor(n){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${n}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=n;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},xe=class extends Error{constructor(n,r){super(`Session scope exceeded: ${n}${r?` (${r})`:""}`);this.reason=n;this.name="SessionScopeExceededError"}reason},re=class extends Error{constructor(n){super(`Tab ${n} is already closed`);this.channelId=n;this.name="TabClosedError"}channelId},Ut=class extends Error{constructor(n){super(`a LIVE session already exists for counterparty ${n.allowedCounterparty} (session ${n.sessionPubkeyHex.slice(0,16)}\u2026, expires ${n.expiresAtUnix}; on-chain spent=${n.spentAtomic}, crystallized=${n.crystallizedCumulativeAtomic}, frontier=${n.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=n;this.name="LiveSessionExistsError"}details};import{PublicKey as se}from"@solana/web3.js";import{bytesToHex as ie}from"@noble/hashes/utils";import ft from"tweetnacl";import{PublicKey as pt}from"@solana/web3.js";import{contextBoundVoucherV2Message as $n,finalVoucherV2Sequence as qn,sessionRegisterMessage as Wn,sessionVoucherV2AuthorizationNonce as Hn}from"@dexterai/vault/messages";import{deriveSessionPda as jn}from"@dexterai/vault/session";import{sessionRegisterMessage as Fe,sessionReplaceV1Message as Bn,sessionRevokeMessage as Un,sessionVoucherV2Nonce as Dn,sessionVoucherV2AuthorizationNonce as Mn,finalVoucherV2Sequence as Kn,voucherV2SequenceOrdinal as Fn,voucherPayloadMessage as Dt,buildVoucherMessage as Ln}from"@dexterai/vault/messages";import{sha256 as Zn}from"@noble/hashes/sha256";function Gn(){let t=ft.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Ft(t,e,n){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:n}}function Lt(t,e,n){if(n.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${n.length}`);if(t.registration.length===188&&new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let r=BigInt(e.cumulativeAmount),o=BigInt(t.scope.maxAmountAtomic);if(r>o)throw new Error(`voucher cumulative ${r} exceeds session cap ${o}`);let s=Math.floor(Date.now()/1e3);if(s>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${s}`);let a=Dt({channelId:n,cumulativeAmount:r,sequenceNumber:e.sequenceNumber}),i=ft.sign.detached(a,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:i}}var zn=/^[0-9a-f]{64}$/,Xn=(1n<<64n)-1n;function Mt(t){return Buffer.from(t).toString("hex")}function Jn(t){return Uint8Array.from(Buffer.from(t,"hex"))}function Kt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r+=1)n|=(t[r]??0)^(e[r]??0);return n===0}function $t(t){if(!zn.test(t.channelId)||t.sessionPublicKey.length!==32||t.sessionPrivateKey.length!==64||t.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(t.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let e=BigInt(t.cumulativeAmountAtomic);if(e>Xn)throw new Error("native_tab_v2_cumulative_amount_invalid");let n=new pt(t.programId),r=new pt(t.vaultPda),o=new pt(t.sessionPda),s=new pt(t.seller),[a]=jn(r,s,n);if(!o.equals(a))throw new Error("native_tab_v2_session_pda_mismatch");let i=t.sessionRegistration,c=new DataView(i.buffer,i.byteOffset,i.byteLength),l=c.getBigUint64(128,!0),m=c.getBigInt64(136,!0),f=c.getBigUint64(180,!0),d=t.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(d)||d<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Kt(i,Wn({programId:n,vaultPda:r,sessionPubkey:t.sessionPublicKey,maxAmount:l,expiresAt:m,allowedCounterparty:s,nonce:t.sessionNonce,maxRevolvingCapacity:f})))throw new Error("native_tab_v2_registration_identity_mismatch");if(l===0n||f===0n||f>l||m<=BigInt(d)||m>0x7fffffffffffffffn-604800n||e>l)throw new Error("native_tab_v2_registration_semantics_invalid");Hn(t.sessionNonce);let u=ft.sign.keyPair.fromSeed(t.sessionPrivateKey.subarray(0,32)),p=!1;try{p=Kt(u.publicKey,t.sessionPublicKey)&&Kt(t.sessionPrivateKey.subarray(32,64),t.sessionPublicKey)}finally{u.secretKey.fill(0)}if(!p)throw new Error("native_tab_v2_session_key_mismatch");let x=qn(t.sequenceOrdinal),y=$n({programId:n,vaultPda:r,sessionPda:o,seller:s,sessionNonce:t.sessionNonce,channelId:Jn(t.channelId),cumulativeAmount:e,sequenceNumber:x}),b=ft.sign.detached(y,t.sessionPrivateKey);return{channelId:t.channelId,cumulativeAmount:t.cumulativeAmountAtomic,sequenceNumber:x,sessionPublicKey:Mt(t.sessionPublicKey),sessionSignature:Mt(b),sessionRegistration:Mt(i)}}function Yn(t){return Re(t.maxAmountAtomic)}function Re(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function Le(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let n=new TextEncoder().encode(t.sellerUrl),r=Zn.create();return r.update(t.vaultPda.toBytes()),r.update(n),r.update(e),r.digest()}import{sha256 as mn}from"@noble/hashes/sha256";import{bytesToHex as Te}from"@noble/hashes/utils";var un=/^[0-9a-f]{64}$/,ln=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,Qn=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,qt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",Ht="dexter-native-tab-v2-reservation/v1",dn=`${Ht}:`;function Wt(t){if(t===null||typeof t=="string"||typeof t=="boolean")return t;if(typeof t=="number"){if(!Number.isFinite(t))throw new Error("canonical_non_finite_number");return t}if(typeof t=="bigint")return t.toString();if(Array.isArray(t))return t.map(Wt);if(typeof t=="object")return Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0).sort(([e],[n])=>e.localeCompare(n)).map(([e,n])=>[e,Wt(n)]));throw new Error("canonical_value_unsupported")}function pn(t){return JSON.stringify(Wt(t))}function ht(t){if(t==="solana:mainnet"||t===qt)return qt;throw new Error("native_tab_v2_reservation_network_unsupported")}function yt(t){return Te(mn(new TextEncoder().encode(pn({channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:Te(t.sessionPublicKey),sessionSignature:Te(t.sessionSignature),sessionRegistration:Te(t.sessionRegistration)}))))}function $e(t){let e=yt(t);return{voucherDigest:e,idempotencyKey:`native-tab-v2:${e}`}}function fn(t){return Te(mn(new TextEncoder().encode(pn({contract:Ht,network:ht(t.network),programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:t.voucherDigest,cumulativeAmountAtomic:t.cumulativeAmountAtomic,sequenceNumber:t.sequenceNumber}))))}function gn(t){let e=yt(t.voucher);return fn({network:t.network,programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:e,cumulativeAmountAtomic:t.voucher.payload.cumulativeAmount,sequenceNumber:t.voucher.payload.sequenceNumber})}function jt(t){return`${dn}${gn(t)}`}function K(t){throw new Error(`native_tab_v2_reservation_receipt_invalid:${t}`)}function gt(t,e){(!Number.isSafeInteger(t)||t<0)&&K(e)}function oe(t,e){(!e||typeof e!="object")&&K("missing");let n=yt(t.voucher);(!un.test(t.voucherDigest)||t.voucherDigest!==n)&&K("input_voucher_digest"),t.idempotencyKey!==`native-tab-v2:${n}`&&K("input_idempotency_identity");let r=BigInt(t.voucher.payload.cumulativeAmount),o=BigInt(t.previousCumulativeAtomic),s=BigInt(t.reservationAmountAtomic);(r<=o||r-o!==s||s<=0n)&&K("input_reservation_delta"),(t.voucher.payload.channelId!==t.channelId||(t.voucher.payload.sequenceNumber&2147483648)===0||(t.sessionNonce&2147483648)===0||t.voucher.sessionPublicKey.length!==32||t.voucher.sessionSignature.length!==64||t.voucher.sessionRegistration.length!==188)&&K("input_voucher_identity"),e.contract!=="dexter-native-tab-open-receipt/v1"&&e.contract!=="dexter-native-tab-open-receipt/v2"&&K("contract"),un.test(e.operationId)||K("operation_id"),ln.test(e.callerOperationId)||K("caller_operation_id"),Qn.test(e.transaction)||K("transaction"),e.commitment!=="finalized"&&K("commitment"),gt(e.confirmationSlot,"confirmation_slot"),gt(e.postStateSlot,"post_state_slot"),(e.confirmationSlot===0||e.postStateSlot<e.confirmationSlot)&&K("post_state_slot");let a,i;try{a=ht(t.network),i=ht(e.network)}catch{return K("network")}(i!==a||e.buyerSwigAddress!==t.buyerSwigAddress||e.vaultPda!==t.vaultPda||e.sessionPda!==t.sessionPda||e.seller!==t.seller||e.channelId!==t.channelId||e.sessionPublicKey!==Te(t.voucher.sessionPublicKey)||e.voucherDigest!==n||e.cumulativeAmountAtomic!==t.voucher.payload.cumulativeAmount||e.sequenceNumber!==t.voucher.payload.sequenceNumber||!ln.test(e.providerReceiptId)||e.reservationAmountAtomic!==t.reservationAmountAtomic||e.currentOutstandingBeforeAtomic!=="0"||e.currentOutstandingAfterAtomic!==t.reservationAmountAtomic)&&K("economic_identity"),gt(e.pendingVoucherCountBefore,"pending_voucher_count_before"),gt(e.pendingVoucherCountAfter,"pending_voucher_count_after"),e.contract==="dexter-native-tab-open-receipt/v1"?e.callerOperationId!==t.idempotencyKey&&K("idempotency_key"):(e.rootOperationId!==t.idempotencyKey||!Number.isSafeInteger(e.generation)||Number(e.generation)<2||!e.predecessorCallerOperationId||!e.predecessorLifecycleOperationId||!e.predecessorReleaseDigest||!e.stableReservationId||!e.economicEffectDigest)&&K("successor_identity")}import{deriveSessionPda as sr}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as er,buildRevokeSessionKeyInstruction as tr,deriveSwigWalletAddress as Uo}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as nr}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Ee,SECP256R1_PROGRAM_ID as rr,INSTRUCTIONS_SYSVAR_ID as or}from"@dexterai/vault/constants";var ar=3600,At="https://x402.dexter.cash",hn=6;function ae(t,e=hn){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[n,r=""]=t.split(".");if(r.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let o=r.padEnd(e,"0"),s=`${n}${o}`.replace(/^0+(?=\d)/,"");return s===""?"0":s}function Pe(t,e=hn){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let n=t.padStart(e+1,"0"),r=n.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",o=n.slice(-e).replace(/0+$/,"");return o?`${r}.${o}`:r}var qe=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;previousSignedVoucher=null;constructor(e){if(this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=e.initialSequenceOrdinal??0,this.isFinalV2=yn(e.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!e.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,n=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Pe(this.cumulativeAtomic.toString()),remaining:Pe(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-n)}}async signNextVoucher(e){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(e)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(e){if(this.closed)throw new re(this.channelId);let n=BigInt(e);if(n<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(n>this.internals.perUnitCapAtomic)throw new xe("cap_exceeded",`single voucher increment ${n} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let r=this.cumulativeAtomic+n;if(r>this.internals.totalCapAtomic)throw new xe("cap_exceeded",`cumulative ${r} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,s={channelId:this.channelId,cumulativeAmount:r.toString(),sequenceNumber:o},a=await this.internals.vault.signWithSession(this.internals.session,s);if(a.payload.channelId!==s.channelId||a.payload.cumulativeAmount!==s.cumulativeAmount||(this.isFinalV2?(a.payload.sequenceNumber&2147483647)!==o||(a.payload.sequenceNumber&2147483648)===0:a.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");return this.internals.beforeVoucherRelease&&await this.internals.beforeVoucherRelease({voucher:a,incrementAtomic:n.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}),this.previousSignedVoucher=this.lastSignedVoucher,this.lastSignedVoucher=a,this.sequenceNumber=o,this.cumulativeAtomic=r,a}beginOperation(e){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=e}endOperation(e){if(this.operationInFlight!==e)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(e){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(e)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(e){let n=this.lastSignedVoucher;if(!n||n.payload.sequenceNumber!==e.payload.sequenceNumber||n.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let r=this.previousSignedVoucher;if(r)this.sequenceNumber=r.payload.sequenceNumber,this.cumulativeAtomic=BigInt(r.payload.cumulativeAmount),this.lastSignedVoucher=r;else if(n.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null;else return!1;return this.previousSignedVoucher=null,!0}async stream(e,n){if(this.closed)throw new re(this.channelId);let r=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(n?.headers);o.set("X-Tab-Voucher",bt(r)),o.set("Accept","text/event-stream");let s=await fetch(e,{...n,headers:o});if(!s.ok){let a=await s.text().catch(()=>"");throw new Error(`tab.stream HTTP ${s.status}: ${a.slice(0,500)}`)}if(!s.body)throw new Error("tab.stream response has no body");return dr(s.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new re(this.channelId);let e={settleTx:""};this.lastSignedVoucher&&this.cumulativeAtomic>0n&&(e=await cr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network));let n=(this.internals.closeMode??"revoke")==="revoke";return n&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Pe(this.cumulativeAtomic.toString()),sessionRevoked:n,...e}}finally{this.endOperation("close")}}};function yn(t){return t.registration.length!==188?!1:(new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function bt(t){return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ie(t.sessionPublicKey),sessionRegistration:ie(t.sessionRegistration),sessionSignature:ie(t.sessionSignature)}),"utf8").toString("base64")}function Ie(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function ir(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let n="non_monotonic_cumulative";if(e.error!==n&&e.reason!==n)return!1;let r=Ie(e.attempted_cumulative),o=Ie(e.on_chain_spent),s=Ie(e.frontier);return r===null||o===null||s===null?!1:r>o&&r<=s}async function cr(t,e,n){let r=`${t.replace(/\/$/,"")}/tab/settle`,o={channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ie(e.sessionPublicKey),sessionSignature:ie(e.sessionSignature),sessionRegistration:ie(e.sessionRegistration),network:n},s=await fetch(r,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(o)}),a=await s.text();if(!s.ok){if(s.status===409&&ir(a))return{settleTx:""};throw new Error(`tab settle ${s.status}: ${a.slice(0,500)}`)}let i;try{i=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(i.reason==="covered_by_frontier"){let l=Ie(i.attemptedCumulative),m=Ie(i.onChainSpent),f=Ie(i.frontier);if(l!==null&&m!==null&&f!==null&&l>m&&l<=f)return{settleTx:""}}if(!i.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let c={settleTx:i.settleTx};return typeof i.grossAmount=="string"&&(c.grossAmount=i.grossAmount),typeof i.feeAmount=="string"&&(c.feeAmount=i.feeAmount),typeof i.netAmount=="string"&&(c.netAmount=i.netAmount),c}async function ur(t,e,n,r,o){throw new Y("armTabOpen")}async function Gt(t){if(t.network!==t.vault.network)throw new _e(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new _e(t.network);if(t.vault.sessionVoucherVersion!==1&&t.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(t.vault.sessionVoucherVersion===1)throw new Y("openTab");if(t.vault.sessionVoucherVersion===2&&(!t.reserveFinalVoucherV2||!t.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let e=BigInt(Math.floor(Math.random()*4294967295)),n=new se(t.vault.vaultPda),r=Le({vaultPda:n,sellerUrl:t.seller,nonce:BigInt(e)}),o=ie(r),s=BigInt(ae(t.perUnitCap)),a=BigInt(ae(t.totalCap));if(s<=0n)throw new Error("perUnitCap must be > 0");if(a<s)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(ae(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let i=t.sessionDuration??ar,c=Math.floor(Date.now()/1e3)+i,l=mr(t.seller),m={channelId:o,maxAmountAtomic:a.toString(),revolvingCapacityAtomic:t.revolvingCapacity?ae(t.revolvingCapacity):a.toString(),expiresAtUnix:c,allowedCounterparty:l},f=await t.vault.authorizeSession(m,{onLiveSession:t.onLiveSession}),d=yn(f);if(t.vault.sessionVoucherVersion!==(d?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let S;if(d){if(!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let u=f.registration,p=new DataView(u.buffer,u.byteOffset,u.byteLength),x=new se(u.subarray(32,64)),y=new se(u.subarray(64,96)),b=new se(u.subarray(144,176)),_=p.getUint32(176,!0),V=p.getBigUint64(180,!0),C=Fe({programId:Ee,vaultPda:n,sessionPubkey:f.publicKey,maxAmount:a,expiresAt:BigInt(c),allowedCounterparty:new se(l),nonce:_,maxRevolvingCapacity:BigInt(m.revolvingCapacityAtomic)});if(!x.equals(Ee)||!y.equals(n)||!b.equals(new se(l))||V!==BigInt(m.revolvingCapacityAtomic)||!Buffer.from(u).equals(Buffer.from(C)))throw new Error("native_tab_v2_registration_identity_mismatch");let[F]=sr(y,b,x);S=async({voucher:M,incrementAtomic:E,previousCumulativeAtomic:N})=>{let h=$e(M),v={network:t.network,programId:x.toBase58(),buyerSwigAddress:t.vault.swigAddress,vaultPda:y.toBase58(),sessionPda:F.toBase58(),seller:b.toBase58(),channelId:o,sessionNonce:_,reservationAmountAtomic:E,previousCumulativeAtomic:N,...h,voucher:M},w=await t.reserveFinalVoucherV2(v);oe(v,w),await t.vault.verifyFinalVoucherV2Reservation(v,w)}}return new qe({vault:t.vault,network:t.network,seller:t.seller,counterparty:l,session:f,channelIdHex:o,channelIdBytes:r,perUnitCapAtomic:s,totalCapAtomic:a,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??At,beforeVoucherRelease:S})}async function lr(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function mr(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new se(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*dr(t){let e=t.getReader(),n=new TextDecoder,r="";try{for(;;){let{done:o,value:s}=await e.read();if(o)break;r+=n.decode(s,{stream:!0});let a;for(;(a=r.indexOf(`
 
-`))!==-1;){let i=r.slice(0,a);r=r.slice(a+2);let c=pn(i);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(p,d)=>d==="n"?`
-`:"\\");yield new TextEncoder().encode(u)}}}}finally{e.releaseLock()}}function pn(t){let e=null,n=[];for(let r of t.split(`
+`))!==-1;){let i=r.slice(0,a);r=r.slice(a+2);let c=pr(i);if(c.eventName==="end")return;if(c.data!==null){let l=c.data.replace(/\\(\\|n)/g,(m,f)=>f==="n"?`
+`:"\\");yield new TextEncoder().encode(l)}}}}finally{e.releaseLock()}}function pr(t){let e=null,n=[];for(let r of t.split(`
 `))r.startsWith("event:")?e=r.slice(6).trim():r.startsWith("data:")&&n.push(r.slice(5).trimStart());return{eventName:e,data:n.length?n.join(`
-`):null}}import Ue from"tweetnacl";import{Connection as An,PublicKey as Oe}from"@solana/web3.js";import{bytesToHex as bn}from"@noble/hashes/utils";import{fetchSessionAccount as Sn,isSessionLive as wn}from"@dexterai/vault/session";import{readVaultFull as Tn}from"@dexterai/vault/reader";import{buildRegisterSessionKeyInstruction as dn,buildRevokeSessionKeyInstruction as fn,deriveSwigWalletAddress as gr}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as gn}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as vt,SECP256R1_PROGRAM_ID as yn,INSTRUCTIONS_SYSVAR_ID as hn}from"@dexterai/vault/constants";var Rt="solana:mainnet";async function xn(t){let e=t.facilitatorUrl??Ie,n=t.programId??vt,r=new Oe(t.vaultPda),s=new Oe(t.params.counterparty),o=Ae(t.perUnitCapAtomic);if(o<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let a=Ae(t.params.maxAmountAtomic),i=Ae(t.params.maxRevolvingCapacityAtomic),c=En(t.sessionSecretKey),u=new Oe(t.params.sessionPubkey).toBytes();if(!Kt(c.publicKey,u))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new Oe(c.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let p=Ue.randomBytes(32),d=Ue.sign.detached(p,c.secretKey);if(!Ue.sign.detached.verify(p,d,u))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let f=St({programId:n,vaultPda:r,sessionPubkey:c.publicKey,maxAmount:a,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:s,nonce:t.params.nonce,maxRevolvingCapacity:i}),T=typeof t.connection=="string"?new An(t.connection,"confirmed"):t.connection,l=await Sn(T,r,s,n);if(!l||l.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!wn(l))throw new Error(l.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${l.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${l.session.expiresAt})`);if(!Kt(l.session.sessionPubkey,c.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new Oe(l.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(l.session.maxAmount!==a||l.session.expiresAt!==t.params.expiresAtUnix||l.session.nonce!==t.params.nonce||l.session.maxRevolvingCapacity!==i)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${l.session.maxAmount} expiresAt=${l.session.expiresAt} nonce=${l.session.nonce} revolving=${l.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);let R=l.session.spent>l.session.crystallizedCumulative?l.session.spent:l.session.crystallizedCumulative;if(R>=a)throw new Error(`tab_exhausted: on-chain frontier ${R} has consumed the session cap ${a} \u2014 no voucher can strictly exceed it; open a new grant`);let x=t.sellerUrl??t.params.counterparty,g=BigInt(Math.floor(Math.random()*4294967295)),y=ke({vaultPda:r,sellerUrl:x,nonce:g}),b=bn(y),C=t.swigAddress;if(!C){let U=await Tn(T,r);if(!U.exists||!U.swigAddress)throw new Error(`tab_vault_unreadable: vault ${r.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);C=U.swigAddress}await rt(e,C,a,Rt,t.params.counterparty);let D={channelId:b,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},K=Tt({publicKey:c.publicKey,privateKey:c.secretKey},D,f),$={network:Rt,swigAddress:C,vaultPda:r.toBase58(),authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(U,B)=>xt(U,B,y),signOpenTab:async U=>U.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")}};return new Ne({vault:$,network:Rt,seller:x,counterparty:t.params.counterparty,session:K,channelIdHex:b,channelIdBytes:y,perUnitCapAtomic:o,totalCapAtomic:a,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:R,closeMode:"settle-only"})}function En(t){if(t.length===64)return Ue.sign.keyPair.fromSecretKey(t);if(t.length===32)return Ue.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function Kt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}import{PublicKey as _n}from"@solana/web3.js";var Lt=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],vn=new Map(Lt.map(t=>[t.caip2.toLowerCase(),t])),Rn=new Map(Lt.map(t=>[t.bare.toLowerCase(),t]));function De(t){if(!t)return null;let e=t.toLowerCase(),n=vn.get(e)||Rn.get(e);return n?{caip2:n.caip2,bare:n.bare,family:n.family}:null}function Pt(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),n=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(n,"base64").toString("utf8"))}function Pn(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,s=De(String(r.network??""));s&&e.push({scheme:String(r.scheme??"exact"),network:s,amount:String(r.amount??r.maxAmountRequired??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}async function st(t){let e=t.headers.get("payment-required");if(!e)return null;let n;try{n=Pt(e)}catch{return null}let r=Array.isArray(n.accepts)?n.accepts:[];return r.length===0?null:{x402Version:2,options:Pn(r),resourceUrl:n.resource&&typeof n.resource=="object"?String(n.resource.url??""):void 0}}async function Be(t,e={},n=fetch){let r={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(r.body=e.body);let s;try{s=await n(t,r)}catch(i){return{kind:"error",detail:`probe failed: ${i?.message??String(i)}`}}if(s.status!==402)return s.ok?{kind:"free",response:s}:{kind:"error",detail:`probe returned HTTP ${s.status}`};let o=await st(s);if(!o)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let a=o.options.find(i=>i.scheme==="tab"&&i.network.family==="svm");if(!a)return{kind:"no_tab",schemesOffered:o.options.map(i=>i.scheme)};try{new _n(a.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${a.payTo}"`}}return{kind:"offer",offer:{payTo:a.payTo,amountAtomic:a.amount,asset:a.asset,networkCaip2:a.network.caip2,resourceUrl:o.resourceUrl}}}var Me="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",ot="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",at="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",te=Me,$e=ot,Ke=at,ne="eip155:8453",we="eip155:84532",Te="eip155:42161",xe="eip155:137",Ee="eip155:10",ve="eip155:43114",Re="eip155:56",re="eip155:480",se="eip155:143",oe="eip155:4663",ae="eip155:1187947933",ie="eip155:324705682",Pe="eip155:1",ce=ne,it=we,Le=Te,Ve=xe,We=Ee,He=ve,Fe=Re,qe=re,je=se,Je=oe,Ge=ae,ze=ie,Xe=Pe,Ye="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",Vt="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",Wt="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",_t="0x55d398326f99059fF775485246999027B3197955",ct="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",Ct="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",lt={[Re]:ct,[ne]:Wt,[we]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[Te]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[xe]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Ee]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[ve]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[re]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[se]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[oe]:Ct,[ae]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[ie]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Pe]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},ut={[_t]:{symbol:"USDT",decimals:18},[ct]:{symbol:"USDC",decimals:18}};var mt={[re]:{name:"USDC",version:"2"},[se]:{name:"USDC",version:"2"},[oe]:{name:"Global Dollar",version:"1"},[ae]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[ie]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},G="0x000000000022D473030F116dDEE9F6B43aC78BA3",Qe="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",Ze={[Re]:56,[ne]:8453,[we]:84532,[Te]:42161,[xe]:137,[Ee]:10,[ve]:43114,[re]:480,[se]:143,[oe]:4663,[ae]:1187947933,[ie]:324705682,[Pe]:1},le={[Me]:"https://api.dexter.cash/api/solana/rpc",[ot]:"https://api.devnet.solana.com",[at]:"https://api.testnet.solana.com"},O={[Re]:"https://api.dexter.cash/api/evm/bsc/rpc",[ne]:"https://api.dexter.cash/api/base/rpc",[we]:"https://sepolia.base.org",[Te]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[xe]:"https://api.dexter.cash/api/evm/polygon/rpc",[Ee]:"https://api.dexter.cash/api/evm/optimism/rpc",[ve]:"https://api.dexter.cash/api/evm/avalanche/rpc",[re]:"https://worldchain-mainnet.g.alchemy.com/public",[se]:"https://rpc.monad.xyz",[oe]:"https://rpc.mainnet.chain.robinhood.com",[ae]:"https://skale-base.skalenodes.com/v1/base",[ie]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Pe]:"https://eth.llamarpc.com"};var I=class t extends Error{code;details;constructor(e,n,r){super(n),this.name="X402Error",this.code=e,this.details=r,Object.setPrototypeOf(this,t.prototype)}};import{PublicKey as ue,Connection as kt,TransactionMessage as Cn,VersionedTransaction as kn,ComputeBudgetProgram as Ht}from"@solana/web3.js";import{getAssociatedTokenAddress as It,getAccount as In,createTransferCheckedInstruction as Nn,getMint as On,TOKEN_PROGRAM_ID as Ft,TOKEN_2022_PROGRAM_ID as pt}from"@solana/spl-token";var Un=12e3,Dn=1;function me(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var dt=class{name="Solana";networks=[te,$e,Ke];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:le[e]?le[e]:e==="solana"?le[te]:e==="solana-devnet"?le[$e]:e==="solana-testnet"?le[Ke]:le[te]}getAddress(e){return me(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return me(e)?e.publicKey!==null:!1}async getBalance(e,n,r){if(!me(n)||!n.publicKey)return 0;let s=r||this.getDefaultRpcUrl(e.network),o=new kt(s,"confirmed"),a=new ue(n.publicKey.toBase58()),i=new ue(e.asset);try{let u=(await o.getAccountInfo(i,"confirmed"))?.owner.toBase58()===pt.toBase58()?pt:Ft,p=await It(i,a,!1,u),d=await In(o,p,void 0,u),f=e.extra?.decimals??6;return Number(d.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,n,r){if(!me(n))throw new Error("Invalid Solana wallet");if(!n.publicKey)throw new Error("Wallet not connected");let s=r||this.getDefaultRpcUrl(e.network),o=new kt(s,"confirmed"),a=new ue(n.publicKey.toBase58()),{payTo:i,asset:c,extra:u}=e,p=e.amount??e.maxAmountRequired;if(!p)throw new Error("Missing amount in payment requirements");if(!u?.feePayer)throw new Error("Missing feePayer in payment requirements");let d=new ue(u.feePayer),f=new ue(c),T=new ue(i);this.log("Building transaction:",{from:a.toBase58(),to:i,amount:p,asset:c,feePayer:u.feePayer});let l=[];l.push(Ht.setComputeUnitLimit({units:Un})),l.push(Ht.setComputeUnitPrice({microLamports:Dn}));let R=await o.getAccountInfo(f,"confirmed");if(!R)throw new Error(`Token mint ${c} not found`);let x=R.owner.toBase58()===pt.toBase58()?pt:Ft,g=await On(o,f,void 0,x);typeof u?.decimals=="number"&&g.decimals!==u.decimals&&this.log(`Decimals mismatch: requirements say ${u.decimals}, mint says ${g.decimals}`);let y=await It(f,a,!1,x),b=await It(f,T,!0,x);if(!await o.getAccountInfo(y,"confirmed"))throw new Error(`No token account found for ${c}. Please ensure you have USDC in your wallet.`);if(!await o.getAccountInfo(b,"confirmed"))throw new Error(`Seller token account not found. The seller (${i}) must have a USDC account.`);let K=BigInt(p);l.push(Nn(y,f,b,a,K,g.decimals,[],x));let{blockhash:$}=await o.getLatestBlockhash("confirmed"),U=new Cn({payerKey:d,recentBlockhash:$,instructions:l}).compileToV0Message(),B=new kn(U),h=await n.signTransaction(B);return this.log("Transaction signed successfully"),{serialized:Buffer.from(h.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:y.toBase58(),destinationAta:b.toBase58(),asset:c,amount:p,blockhash:$}}}async confirmSettlement(e,n){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let r=new kt(n,"confirmed"),s=new ue(e.destinationAta),o=await r.getSignaturesForAddress(s,{limit:25});if(o.length===0)return{settled:!1};let a=BigInt(e.amount);for(let i of o){if(i.err)continue;let c=await r.getTransaction(i.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),p=c.meta.preTokenBalances??[],d=c.meta.postTokenBalances??[];for(let f of d){if(f.mint!==e.asset)continue;let T=u[f.accountIndex];if(!T||!T.equals(s))continue;let l=p.find(g=>g.accountIndex===f.accountIndex),R=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-R===a)return{settled:!0,txSignature:i.signature}}}return{settled:!1}}};function z(t){return new dt(t)}var Bn={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},qt=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function pe(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var ft=class{name="EVM";networks=[Fe,ce,it,Xe,Le,Ve,We,He,qe,je,Je,Ge,ze];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:O[e]?O[e]:e==="base"?O[ce]:e==="bsc"?O[Fe]:e==="ethereum"?O[Xe]:e==="arbitrum"?O[Le]:e==="polygon"?O[Ve]:e==="optimism"?O[We]:e==="avalanche"?O[He]:e==="world"?O[qe]:e==="monad"?O[je]:e==="robinhood"?O[Je]:e==="skale-base"?O[Ge]:e==="skale-base-sepolia"?O[ze]:O[ce]}getAddress(e){return pe(e)?e.address:null}isConnected(e){return pe(e)?!!e.address:!1}getChainId(e){if(Ze[e])return Ze[e];if(e.startsWith("eip155:")){let n=e.split(":")[1];return parseInt(n,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,n,r){if(!pe(n)||!n.address)return 0;let s=r||this.getDefaultRpcUrl(e.network);try{let o=this.encodeBalanceOf(n.address),a=await fetch(s,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:o},"latest"]})});if(!a.ok)throw new Error(`RPC request failed: ${a.status}`);let i=await a.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")return 0;let c=BigInt(i.result),u=e.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(o){throw o}}encodeBalanceOf(e){let n="0x70a08231",r=e.slice(2).toLowerCase().padStart(64,"0");return n+r}async confirmSettlement(e,n){if(e.kind==="eip3009"){let r="0xe94a0102",s=e.from.slice(2).toLowerCase().padStart(64,"0"),o=e.nonce.slice(2).toLowerCase().padStart(64,"0"),a=r+s+o,i=await this.ethCall(n,e.asset,a);return{settled:BigInt(i)!==0n}}if(e.kind==="permit2"){let r="0x4fe02b44",s=BigInt(e.nonce),o=s>>8n,a=s&0xffn,i=e.from.slice(2).toLowerCase().padStart(64,"0"),c=o.toString(16).padStart(64,"0"),u=r+i+c,p=await this.ethCall(n,G,u);return{settled:(BigInt(p)>>a&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,n,r){let s=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:r},"latest"]})});if(!s.ok)throw new Error(`RPC request failed: ${s.status}`);let o=await s.json();if(o.error)throw new Error(`RPC error: ${JSON.stringify(o.error)}`);if(!o.result||o.result==="0x")throw new Error("RPC returned an empty result");return o.result}async buildTransaction(e,n,r){if(!pe(n))throw new Error("Invalid EVM wallet");if(!n.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,n,r);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,n,r);let{payTo:s,asset:o,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:n.address,to:s,amount:i,asset:o,network:e.network});let c=this.getChainId(e.network),u=mt[`eip155:${c}`],p={name:a?.name??u?.name??"USD Coin",version:a?.version??u?.version??"2",chainId:BigInt(c),verifyingContract:o},d={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},f=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(f);let T="0x"+[...f].map(b=>b.toString(16).padStart(2,"0")).join(""),l=Math.floor(Date.now()/1e3),R={from:n.address,to:s,value:i,validAfter:String(l-600),validBefore:String(l+(e.maxTimeoutSeconds||60)),nonce:T},x={from:n.address,to:s,value:BigInt(i),validAfter:BigInt(l-600),validBefore:BigInt(l+(e.maxTimeoutSeconds||60)),nonce:T};if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let g=await n.signTypedData({domain:p,types:d,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:R,signature:g}),signature:g,settlementProbe:{kind:"eip3009",from:n.address,nonce:T,asset:o,chainId:c}}}async buildApprovalTransaction(e,n,r){let{payTo:s,asset:o,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");let c=a?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:n.address,to:s,amount:i,asset:o,network:e.network,facilitatorContract:c});let u=r||this.getDefaultRpcUrl(e.network),p=a?.fee??"0",d=BigInt(i)+BigInt(p),f=await this.readAllowance(u,o,n.address,c);if(f<d){if(!n.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let B=this.calculateApprovalAmount(i,p,a?.approvalStrategy);this.log(`Approving ${B} for ${c} (current allowance: ${f})`);let h=await n.sendTransaction({to:o,data:this.encodeApprove(c,B),value:0n});this.log(`Approval tx sent: ${h}`),await this.waitForReceipt(u,h),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let T=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(T);let l=[...T].reduce((B,h)=>B*256n+BigInt(h),0n).toString(),R=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(R);let x="0x"+[...R].map(B=>B.toString(16).padStart(2,"0")).join(""),y=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),b=a?.eip712Domain,C=b?{name:b.name,version:b.version,chainId:BigInt(b.chainId),verifyingContract:b.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},D=a?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},K={from:n.address,to:s,token:o,amount:BigInt(i),fee:BigInt(p),nonce:BigInt(l),deadline:BigInt(y),paymentId:x},$=await n.signTypedData({domain:C,types:D,primaryType:"Payment",message:K});this.log("EIP-712 Payment signature obtained");let U={from:n.address,to:s,token:o,amount:i,fee:p,nonce:l,deadline:y,paymentId:x,signature:$};return{serialized:JSON.stringify(U),signature:$}}async buildPermit2Transaction(e,n,r){let{payTo:s,asset:o}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:n.address,to:s,amount:a,asset:o,network:e.network});let i=r||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(i,o,n.address,G),u;if(c<BigInt(a)){let C=this.encodeApprove(G,qt);if(n.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let D=this.getChainId(e.network),K=await this.readGasPrice(i),$=await this.readNonce(i,n.address),U=await n.signTransaction({to:o,data:C,chainId:D,gas:50000n,gasPrice:K,nonce:$});u={erc20ApprovalGasSponsoring:{info:{from:n.address,asset:o,spender:G,amount:qt.toString(),signedTransaction:U,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(n.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let D=await n.sendTransaction({to:o,data:C,value:0n});this.log(`Permit2 approval tx sent: ${D}`),await this.waitForReceipt(i,D),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let p=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(p);let d=[...p].reduce((C,D)=>C*256n+BigInt(D),0n),f=Math.floor(Date.now()/1e3),T=f-600,l=f+(e.maxTimeoutSeconds||300),R=this.getChainId(e.network),x={name:"Permit2",chainId:BigInt(R),verifyingContract:G},g={permitted:{token:o,amount:BigInt(a)},spender:Qe,nonce:d,deadline:BigInt(l),witness:{to:s,validAfter:BigInt(T)}},y=await n.signTypedData({domain:x,types:Bn,primaryType:"PermitWitnessTransferFrom",message:g});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let b={signature:y,permit2Authorization:{from:n.address,permitted:{token:o,amount:a},spender:Qe,nonce:d.toString(),deadline:String(l),witness:{to:s,validAfter:String(T)}}};return{serialized:JSON.stringify(b),signature:y,extensions:u,settlementProbe:{kind:"permit2",from:n.address,nonce:d.toString(),chainId:R}}}async readAllowance(e,n,r,s){let o="0xdd62ed3e",a=r.slice(2).toLowerCase().padStart(64,"0"),i=s.slice(2).toLowerCase().padStart(64,"0"),c=o+a+i;try{let p=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:c},"latest"]})})).json();return p.error||!p.result||p.result==="0x"?0n:BigInt(p.result)}catch{return 0n}}encodeApprove(e,n){let r="0x095ea7b3",s=e.slice(2).toLowerCase().padStart(64,"0"),o=n.toString(16).padStart(64,"0");return r+s+o}async waitForReceipt(e,n,r=3e4){let s=Date.now();for(;Date.now()-s<r;){try{let a=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[n]})})).json();if(a.result){if(a.result.status==="0x0")throw new Error(`Approval transaction reverted: ${n}`);return}}catch(o){if(o instanceof Error&&o.message.includes("reverted"))throw o}await new Promise(o=>setTimeout(o,2e3))}throw new Error(`Approval transaction receipt timeout after ${r}ms: ${n}`)}async readGasPrice(e){try{let r=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return r.result?BigInt(r.result):50000000n}catch{return 50000000n}}async readNonce(e,n){try{let s=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[n,"latest"]})})).json();return s.result?parseInt(s.result,16):0}catch{return 0}}calculateApprovalAmount(e,n,r){let s=BigInt(e)+BigInt(n);if(!r||r.mode==="exact")return s;let o=BigInt(r.defaultMultiple??10),a=s*o;if(r.maxCapUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.maxCapUsd*Math.pow(10,i)));if(a>c)return c}if(r.exactAboveUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.exactAboveUsd*Math.pow(10,i)));if(BigInt(e)>c)return s}return a}inferDecimals(e){return e.length>12?18:6}};function _e(t){return new ft(t)}function Nt(t){if(t===Ye||t===Vt)return!0;let e=t.toLowerCase();for(let n of Object.values(lt))if(n.toLowerCase()===e)return!0;for(let n of Object.keys(ut))if(n.toLowerCase()===e)return!0;return!1}function Mn(t){return{[Me]:"Solana",[ot]:"Solana Devnet",[at]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[ne]:"Base",[we]:"Base Sepolia",[Pe]:"Ethereum",[Te]:"Arbitrum",[xe]:"Polygon",[Ee]:"Optimism",[ve]:"Avalanche",[Re]:"BSC",[re]:"World Chain",[se]:"Monad",[oe]:"Robinhood Chain",[ae]:"SKALE Base",[ie]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function jt(t,e){let n=Mn(t);return n===t?e:n}async function $n(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let n=t,r=new Headers(n.headers);e?.headers&&new Headers(e.headers).forEach((a,i)=>r.set(i,a));let s={method:e?.method??n.method,headers:r,signal:e?.signal??n.signal,redirect:e?.redirect??n.redirect,credentials:e?.credentials??n.credentials},o=(s.method??"GET").toUpperCase();return e&&"body"in e?s.body=e.body:o!=="GET"&&o!=="HEAD"&&n.body&&(s.body=await n.arrayBuffer()),[n.url,s]}var Kn=new WeakMap;function Jt(t){let{adapters:e=[z({verbose:t.verbose}),_e({verbose:t.verbose})],wallets:n,wallet:r,preferredNetwork:s,rpcUrls:o={},maxAmountAtomic:a,fetch:i=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:p,onPaymentDispatched:d,maxRetries:f=0,retryDelayMs:T=500}=t,l=c?console.log.bind(console,"[x402]"):()=>{};async function R(h,w){let E;for(let A=0;A<=f;A++)try{let v=await i(h,w);if(v.status>=502&&v.status<=504&&A<f){l(`Retry ${A+1}/${f}: server returned ${v.status}`),await new Promise(P=>setTimeout(P,T*Math.pow(2,A)));continue}return v}catch(v){E=v,A<f&&(l(`Retry ${A+1}/${f}: ${v instanceof Error?v.message:"network error"}`),await new Promise(P=>setTimeout(P,T*Math.pow(2,A))))}throw E}let x=new Map;function g(h){try{let w=new URL(h).host,E=x.get(w);if(E&&E.expiresAt>Date.now()/1e3+10)return E.jwt;E&&x.delete(w)}catch{}return null}function y(h,w){try{let E=new URL(h).host,A=w.split(".");if(A.length===3){let v=JSON.parse(atob(A[1].replace(/-/g,"+").replace(/_/g,"/"))),P=Math.floor(Date.now()/1e3),_=P+86400,L=Math.min(typeof v.exp=="number"?v.exp:P,_);x.set(E,{jwt:w,expiresAt:L}),l("Access pass cached for",E,"| expires:",new Date(L*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let b=n||{};r&&!b.solana&&me(r)&&(b.solana=r),r&&!b.evm&&pe(r)&&(b.evm=r);function C(h){let w=[];for(let E of h){let A=E.scheme??"exact";if(A!=="exact"&&A!=="exact-approval")continue;let v=e.find(_=>_.canHandle(E.network));if(!v)continue;let P;v.name==="Solana"?P=b.solana:v.name==="EVM"&&(P=b.evm),P&&v.isConnected(P)&&w.push({accept:E,adapter:v,wallet:P})}if(w.length===0)return null;if(s){let E=w.find(A=>A.accept.network===s);if(E)return E}return w[0]}function D(h,w){return jt(h,w)}function K(h,w){return o[h]||w.getDefaultRpcUrl(h)}async function $(h,w,E,A,v){let P="";if(u?.preferTier&&A.tiers){let m=A.tiers.find(S=>S.id===u.preferTier);if(m){if(u.maxSpend&&parseFloat(m.price)>parseFloat(u.maxSpend))throw new I("access_pass_exceeds_max_spend",`Access pass tier "${m.id}" costs $${m.price}, exceeds max spend $${u.maxSpend}`);P=`tier=${m.id}`}}else if(u?.preferDuration&&A.ratePerHour)P=`duration=${u.preferDuration}`;else if(A.tiers&&A.tiers.length>0){let m=A.tiers[0];if(u?.maxSpend&&parseFloat(m.price)>parseFloat(u.maxSpend))throw new I("access_pass_exceeds_max_spend",`Cheapest access pass costs $${m.price}, exceeds max spend $${u?.maxSpend}`);P=`tier=${m.id}`}let _=P?v.includes("?")?`${v}&${P}`:`${v}?${P}`:v;l("Purchasing access pass:",P||"default tier");let L=E.headers.get("PAYMENT-REQUIRED");if(!L)return null;let M;try{M=JSON.parse(atob(L))}catch{return null}let N=C(M.accepts);if(!N)return null;let{accept:k,adapter:W,wallet:de}=N;if(W.name==="Solana"&&!k.extra?.feePayer)return null;let F=k.extra?.decimals??(Nt(k.asset)?6:void 0);if(typeof F!="number")return null;let Ce=k.amount??k.maxAmountRequired;if(!Ce)return null;let q=K(k.network,W);try{let m=await W.getBalance(k,de,q),S=Number(Ce)/Math.pow(10,F);if(m<S){let At=D(k.network,W.name);throw new I("insufficient_balance",`Insufficient balance for access pass on ${At}. Have $${m.toFixed(4)}, need $${S.toFixed(4)}`)}}catch(m){if(m instanceof I)throw m}let j=await W.buildTransaction(k,de,q),fe;W.name==="EVM"?fe=JSON.parse(j.serialized):fe={transaction:j.serialized};let X=typeof h=="string"?h:h instanceof URL?h.href:h.url,ge=M.resource;if(typeof M.resource=="string")try{let m=new URL(M.resource,X);["http:","https:"].includes(m.protocol)&&(ge=m.toString())}catch{}else if(M.resource&&typeof M.resource=="object"&&"url"in M.resource){let m=M.resource;try{let S=new URL(m.url,X);["http:","https:"].includes(S.protocol)&&(ge={...m,url:S.toString()})}catch{}}let tt={x402Version:k.x402Version??2,resource:ge,accepted:k,payload:fe};j.extensions&&(tt.extensions=j.extensions);let J=btoa(JSON.stringify(tt)),Y=await i(_,{...w,method:"POST",headers:{...w?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":J}});if(!Y.ok)return l("Pass purchase failed:",Y.status),null;let V=Y.headers.get("ACCESS-PASS");return V&&(y(v,V),l("Access pass purchased and cached")),Y}async function U(h,w){let E=h;if(l("Making request:",E),u){let m=g(E);if(m){l("Using cached access pass");let S=await i(h,{...w,headers:{...w?.headers||{},Authorization:`Bearer ${m}`}});if(S.status!==401&&S.status!==402)return S;l("Cached pass rejected (status",S.status,"), purchasing new pass");try{x.delete(new URL(E).host)}catch{}}}let A=await R(h,w);if(A.status!==402)return A;l("Received 402 Payment Required");let v=A.headers.get("X-ACCESS-PASS-TIERS");if(u&&v){l("Server offers access passes, purchasing...");try{let m=JSON.parse(atob(v)),S=await $(h,w,A,m,E);if(S)return S}catch(m){l("Access pass purchase failed, falling back to per-request payment:",m)}}let P=A.headers.get("PAYMENT-REQUIRED");if(!P)throw new I("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let _;try{let m=atob(P);_=JSON.parse(m)}catch{throw new I("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}l("Payment requirements:",_);let L=A.headers.get("X-Quote-Hash");L&&l("Quote hash received:",L);let M=C(_.accepts);if(!M){let m=_.accepts.map(S=>S.network).join(", ");throw new I("no_matching_payment_option",`No connected wallet for any available network: ${m}`)}let{accept:N,adapter:k,wallet:W}=M;if(l(`Using ${k.name} for ${N.network}`),k.name==="Solana"&&!N.extra?.feePayer)throw new I("missing_fee_payer","Solana payment option missing feePayer in extra");let de=N.extra?.decimals??(Nt(N.asset)?6:void 0);if(typeof de!="number")throw new I("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let F=N.amount??N.maxAmountRequired;if(!F)throw new I("missing_amount","Payment option missing amount");if(a&&BigInt(F)>BigInt(a))throw new I("amount_exceeds_max",`Payment amount ${F} exceeds maximum ${a}`);let Ce=K(N.network,k);l("Checking balance...");try{let m=await k.getBalance(N,W,Ce),S=Number(F)/Math.pow(10,de);if(m<S){let At=D(N.network,k.name);throw new I("insufficient_balance",`Insufficient balance on ${At}. Have $${m.toFixed(4)}, need $${S.toFixed(4)}`)}l(`Balance OK: $${m.toFixed(4)} >= $${S.toFixed(4)}`)}catch(m){if(m instanceof I)throw m;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(p&&!await p(N))throw new I("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let q=await k.buildTransaction(N,W,Ce);l("Transaction signed");let j;k.name==="EVM"?j=JSON.parse(q.serialized):j={transaction:q.serialized};let fe=h,X=_.resource;if(typeof _.resource=="string")try{let m=new URL(_.resource,fe).toString();m!==_.resource&&l("Resolved relative resource URL:",_.resource,"\u2192",m),X=m}catch{X=_.resource}else if(_.resource&&typeof _.resource=="object"&&"url"in _.resource){let m=_.resource;try{let S=new URL(m.url,fe).toString();S!==m.url&&(l("Resolved relative resource URL:",m.url,"\u2192",S),X={...m,url:S})}catch{}}let ge={x402Version:N.x402Version??2,resource:X,accepted:N,payload:j};q.extensions&&(ge.extensions=q.extensions);let tt=btoa(JSON.stringify(ge));if(d)try{d(N,q.settlementProbe)}catch{}l("Retrying request with payment...");let J=await R(h,{...w,headers:{...w?.headers||{},"PAYMENT-SIGNATURE":tt,...L?{"X-Quote-Hash":L}:{}}});if(l("Retry response status:",J.status),J.status===402){let m="unknown";try{let S=await J.clone().json();m=String(S.error||S.message||JSON.stringify(S)),l("Rejection reason:",m)}catch{}throw new I("payment_rejected",`Payment was rejected by the server: ${m}`)}let Y=J.headers.get("PAYMENT-RESPONSE"),V;if(Y)try{V=JSON.parse(atob(Y))}catch{}return V??={},V.amountAtomic=F,V.assetDecimals=de,Kn.set(J,V),V.extensions&&l("Settlement extensions:",Object.keys(V.extensions).join(", ")),J}async function B(h,w){let[E,A]=await $n(h,w);return U(E,A)}return{fetch:B}}function H(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function et(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let n=e.toLowerCase(),r=n.includes("settle")||n.includes("facilitator"),s=e;try{let o=JSON.parse(e),a=[o.error,o.detail,o.message].filter(i=>typeof i=="string"&&i.length>0);a.length>0&&(s=a.join(" \u2014 "))}catch{}return s||(s=`HTTP ${t.status}`),{reason:r?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${s}`}}var gt="Payment authorization was sent, but the merchant did not respond within the timeout. ",yt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function ht(t,e,n){if(!t)return{confirmed:!1,detail:gt+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+yt};try{if(t.kind==="solana"){let a=z(),i=n??a.getDefaultRpcUrl(e.caip2);if(!a.confirmSettlement)return zt();let c=await a.confirmSettlement(t,i);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Gt()}let r=_e(),s=r.getDefaultRpcUrl(e.caip2);if(!r.confirmSettlement)return zt();let o=await r.confirmSettlement(t,s);return o.settled?{confirmed:!0,txSignature:o.txSignature}:Gt()}catch(r){return{confirmed:!1,detail:gt+`On-chain confirmation could not be completed (${H(r)}).`+yt}}}function Gt(){return{confirmed:!1,detail:gt+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+yt}}function zt(){return{confirmed:!1,detail:gt+"The chain adapter does not support on-chain confirmation."+yt}}var Ln=new Set(["exact","exact-approval"]);async function Vn(t,e,n,r){let s;try{s=await r.signNextVoucher(n.amount)}catch{return null}let o=new Headers(e.headers??void 0);o.set("X-Tab-Voucher",nt(s));let a={method:e.method??"GET",headers:o};e.signal&&(a.signal=e.signal),typeof e.body=="string"&&(a.body=e.body);let i;try{i=await fetch(t,a)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return i.status===402?(r.rollbackVoucher?.call(r,s),null):i.ok?{ok:!0,paid:!0,response:i,amountPaid:n.amount,network:n.network}:{ok:!1,...await et(i)}}var Xt={version:2,async parseChallenge(t){return st(t)},async pay(t,e,n,r,s){if(s.tab){let g=n.options.find(y=>y.scheme==="tab"&&y.network.family==="svm"&&y.payTo===s.tab.counterparty);if(g){let y=await Vn(t,e,g,s.tab);if(y)return y}}let o=n.options.filter(g=>Ln.has(g.scheme));if(o.length===0)return{ok:!1,reason:"no_payment_options",detail:`no generically payable scheme offered (got: ${n.options.map(g=>g.scheme).join(", ")})`};let a=o.find(g=>g.network.family==="evm"?!!r.evm:g.network.family==="svm"?!!r.solana:!1);if(!a)return{ok:!1,reason:"unsupported_network"};let i=s.timeoutMs??15e3,c=s.responseTimeoutMs??12e4,u=new AbortController,p=setTimeout(()=>u.abort(),i),d=!1,f,T=(g,y)=>{d=!0,f=y,clearTimeout(p),p=setTimeout(()=>u.abort(),c)},l=Jt({wallets:r,preferredNetwork:a.network.caip2,maxAmountAtomic:s.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:T}),R=e.signal?AbortSignal.any([e.signal,u.signal]):u.signal,x={method:e.method??"GET",headers:e.headers,signal:R};typeof e.body=="string"&&(x.body=e.body);try{let g=await l.fetch(t,x);if(clearTimeout(p),!g.ok)return{ok:!1,...await et(g)};let y,b=g.headers.get("PAYMENT-RESPONSE");if(b)try{let C=Pt(b);C&&typeof C.transaction=="string"&&(y=C.transaction)}catch{}return{ok:!0,paid:!0,response:g,amountPaid:a.amount,network:a.network,txSignature:y}}catch(g){clearTimeout(p);let y=g;if(y?.name==="AbortError"){if(!d)return{ok:!1,reason:"timeout"};let b=await ht(f,a.network,s.solanaRpcUrl);return b.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:a.amount,network:a.network,txSignature:b.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:b.detail}}return{ok:!1,reason:"error",detail:y?.message??String(g)}}}};import{getAddress as Wn}from"viem";var Hn={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function Fn(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,n=>n.toString(16).padStart(2,"0")).join("")}async function qn(t,e,n){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let r=Math.floor(Date.now()/1e3),s=String(r-600),o=String(r+(e.maxTimeoutSeconds??60)),a={from:t.address,to:e.payTo,value:e.amount,validAfter:s,validBefore:o,nonce:await Fn()},i=Ze[e.network.caip2];if(i===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,u=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:i,verifyingContract:Wn(e.asset)},types:Hn,primaryType:"TransferWithAuthorization",message:a});return{payment:{x402Version:1,scheme:e.scheme,network:n,payload:{signature:u,authorization:a}},settlementProbe:{kind:"eip3009",from:a.from,nonce:a.nonce,asset:e.asset,chainId:i}}}async function Ot(t,e,n){try{let r;for(let s of t.options){let o=s.network.family==="evm"&&!!e.evm||s.network.family==="svm"&&!!e.solana;if(s.scheme!=="exact"){o&&(r=s.scheme);continue}if(s.network.family==="evm"&&e.evm){let a=await e.evm;return await jn(s,a,n)}if(s.network.family==="svm"&&e.solana){let a=await e.solana;return await Jn(s,a,n)}}return r!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${r}'`}:{ok:!1,reason:"unsupported_network"}}catch(r){return{ok:!1,reason:"error",detail:H(r)}}}async function jn(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let r=t.extra??{},s=r.name,o=r.version;if(typeof s!="string"||s.length===0||typeof o!="string"||o.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let a=t.network.bare,{payment:i,settlementProbe:c}=await qn(e,t,a);return{ok:!0,headerValue:Buffer.from(JSON.stringify(i),"utf8").toString("base64"),option:t,settlementProbe:c}}async function Jn(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let r=t.extra??{};if(typeof r.feePayer!="string"||r.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let s=t.network.bare,o={x402Version:1,scheme:t.scheme,network:s,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:r},i=await z().buildTransaction(o,e,n.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:s,payload:{transaction:i.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:i.settlementProbe}}function Gn(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,s=De(String(r.network??""));s&&e.push({scheme:String(r.scheme??"exact"),network:s,amount:String(r.maxAmountRequired??r.amount??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}var Yt={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let n=Array.isArray(e.accepts)?e.accepts:[];if(n.length===0)return null;let r=Gn(n);return r.length===0?null:{x402Version:1,options:r}},async pay(t,e,n,r,s){let o,a=new AbortController,i=!1,c,u;try{let p=s.timeoutMs??15e3;o=setTimeout(()=>a.abort(),p);let d=await Ot(n,r,s);if(!d.ok)return{ok:!1,reason:d.reason,detail:d.detail};let f=d.headerValue,T=d.option;u=T,c=d.settlementProbe;let l=new Headers(e.headers??void 0);l.set("X-PAYMENT",f);let R=e.signal!=null?AbortSignal.any([e.signal,a.signal]):a.signal,x={method:e.method,headers:l,signal:R};typeof e.body=="string"&&(x.body=e.body),i=!0,clearTimeout(o);let g=s.responseTimeoutMs??12e4;o=setTimeout(()=>a.abort(),g);let y=await fetch(t,x);return y.ok?{ok:!0,paid:!0,response:y,amountPaid:T.amount,network:T.network,txSignature:zn(y)}:{ok:!1,...await et(y)}}catch(p){if(p instanceof Error&&p.name==="AbortError"){if(!i)return{ok:!1,reason:"timeout"};let d=await ht(c,u.network,s.solanaRpcUrl);return d.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:d.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:d.detail}}return{ok:!1,reason:"error",detail:H(p)}}finally{o!==void 0&&clearTimeout(o)}}};function zn(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let n=JSON.parse(Buffer.from(e,"base64").toString("utf8")),r=n.transaction??n.txHash??n.transactionHash;return typeof r=="string"?r:void 0}catch{return}}import*as Zt from"tweetnacl";import{Keypair as Rs,VersionedTransaction as Ps,Transaction as _s}from"@solana/web3.js";var Qt=Symbol.for("x402:keypair");function Ut(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let n=t.solana;if(n){let r=n[Qt];if(r&&r.secretKey&&r.publicKey)return{publicKey:r.publicKey,signMessage:async s=>Zt.sign.detached(s,r.secretKey)}}return null}var Xn=[Xt,Yt];async function Yn(t){let e=Ut(t);if(!e)return fetch;try{return(await import("@x402/extensions/sign-in-with-x")).wrapFetchWithSIWx(fetch,e)}catch(n){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${H(n)}`),fetch}}async function Dt(t,e,n,r){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let s;try{s=await(await Yn(n))(t,{...e})}catch(o){return{ok:!1,reason:"error",detail:H(o)}}if(s.status!==402)return{ok:!0,paid:!1,response:s};for(let o of Xn){let a=await o.parseChallenge(s.clone());if(a)return o.pay(t,e,a,n,r)}return{ok:!1,reason:"no_payment_options"}}async function Qn(t,e={},n){let r=await Be(t,e);if(r.kind==="free")return{result:{ok:!0,paid:!1,response:r.response},tab:null};if(r.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${r.schemesOffered.join(", ")})`},tab:null};if(r.kind==="error")return{result:{ok:!1,reason:"error",detail:r.detail},tab:null};let{offer:s}=r,o=BigInt(Z(n.perUnitCap));if(BigInt(s.amountAtomic)>o)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${s.amountAtomic} atomic; perUnitCap allows ${o}`},tab:null};let a=n.tabs?.get(s.payTo);return(!a||!a.state.isOpen)&&(a=await Et({vault:n.vault,network:"solana:mainnet",seller:s.payTo,perUnitCap:n.perUnitCap,totalCap:n.totalCap,sessionDuration:n.sessionDuration,facilitatorUrl:n.facilitatorUrl,onLiveSession:n.onLiveSession}),n.tabs?.set(s.payTo,a)),{result:await Dt(t,e,{},{tab:a}),tab:a}}function Zn(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:be(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function er(t,e={},n={}){let r=n.cache?.get(t);if(r)return{kind:"terms",terms:r};let s=await Be(t,e,n.fetchImpl??fetch);if(s.kind!=="offer")return s;if(s.offer.asset!==Ye)return{kind:"error",detail:`tab offer asset is not USDC ("${s.offer.asset}"); refusing to render a human price`};let o=Zn(s.offer);return n.cache?.set(t,o),{kind:"terms",terms:o}}export{Ie as DEFAULT_FACILITATOR_URL,vt as DEXTER_VAULT_PROGRAM_ID,hn as INSTRUCTIONS_SYSVAR_ID,bt as LiveSessionExistsError,yn as SECP256R1_PROGRAM_ID,he as SessionScopeExceededError,Q as TabClosedError,ye as UnsupportedNetworkError,rt as armTabOpen,be as atomicToHuman,dn as buildRegisterSessionKeyInstruction,fn as buildRevokeSessionKeyInstruction,gn as buildSecp256r1VerifyInstruction,tn as buildVoucherMessage,ke as deriveChannelId,nn as generateSessionKeypair,Z as humanToAtomic,Tt as makeSessionKey,Et as openTab,Ae as parseAtomic,Qn as payUrlWithTab,Be as resolveTabOffer,er as resolveTabTerms,ln as resumeTab,rn as scopeCapAtomic,St as sessionRegisterMessage,en as sessionRevokeMessage,xt as signVoucher,xn as tabFromGrant,wt as voucherPayloadMessage,nt as voucherToHeader};
+`):null}}import He from"tweetnacl";import{Connection as Cr,PublicKey as We}from"@solana/web3.js";import{bytesToHex as Vr}from"@noble/hashes/utils";import{deriveSessionPda as kr,fetchSessionAccount as Or,isSessionLive as Br}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Ur}from"@dexterai/vault/messages";import{readVaultFull as Dr}from"@dexterai/vault/reader";import{PublicKey as Z}from"@solana/web3.js";import{bytesToHex as Xt}from"@noble/hashes/utils";import{deriveGraphConfigPda as fr,deriveSwigVaultBindingPda as Jt}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as gr,DISCRIMINATORS as hr}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as yr}from"@dexterai/vault/instructions";import{decodeVaultFull as Ar}from"@dexterai/vault/reader";import{decodeSessionAccount as br,deriveSessionPda as Yt}from"@dexterai/vault/session";var vr=Uint8Array.from([56,67,4,209,238,143,0,129]),Sr=74,An=new Set([1,2]),wr=188,_r=new Z("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),xr=(()=>{let t=Buffer.alloc(32);return t.write("OTS_SESSION_REGISTER_V2","ascii"),t})(),zt=class extends Error{constructor(n,r){super(`native_tab_v2_solana_reservation_invalid:${n}`+(r?`:${r}`:""));this.code=n;this.name="SolanaFinalVoucherV2ReservationError"}code};function A(t,e){throw new zt(t,e)}function L(t,e){try{return new Z(t)}catch{return A(e)}}function vt(t,e){return t.length===e.length&&t.every((n,r)=>n===e[r])}async function Rr(t){let e=await t.connection.getTransaction(t.signature,{commitment:t.commitment,maxSupportedTransactionVersion:0});if(!e)return null;e.meta||A("transaction_meta_missing");let n=e.transaction.message,r=n.version===0?n.getAccountKeys({accountKeysFromLookups:e.meta.loadedAddresses??null}):n.getAccountKeys(),o=(s,a)=>{let i=r.get(s);return i||A(a),i};return{slot:e.slot,err:e.meta.err,signatures:[...e.transaction.signatures],accountKeys:Array.from({length:r.length},(s,a)=>({address:o(a,"transaction_account_key").toBase58(),signer:n.isAccountSigner(a),writable:n.isAccountWritable(a)})),instructions:n.compiledInstructions.map(s=>({programId:o(s.programIdIndex,"transaction_program_id").toBase58(),accounts:s.accountKeyIndexes.map(a=>o(a,"transaction_instruction_account").toBase58()),data:Uint8Array.from(s.data)}))}}function Tr(t,e,n,r){r.length!==Sr&&A("binding_length"),vt(r.subarray(0,8),vr)||A("binding_discriminator");let o=r.readUInt8(8),s=r.readUInt8(9);return An.has(o)||A("binding_version"),s!==e&&A("binding_bump"),{address:t.toBase58(),owner:n.toBase58(),version:o,bump:s,swig:new Z(r.subarray(10,42)).toBase58(),vault:new Z(r.subarray(42,74)).toBase58()}}async function Er(t){let e=L(t.input.programId,"program_id"),n=L(t.input.buyerSwigAddress,"buyer_swig"),r=L(t.input.vaultPda,"vault_pda"),o=L(t.input.seller,"seller"),[s,a]=Jt(n,e),[i]=Yt(r,o,e),c=await t.connection.getMultipleAccountsInfoAndContext([s,r,i],{commitment:t.receipt.commitment,minContextSlot:t.receipt.postStateSlot}),[l,m,f]=c.value;l||A("binding_missing"),m||A("vault_missing"),f||A("session_missing");let d,S;try{d=Ar(Buffer.from(m.data)),S=br(i,f.data)}catch(p){return A("post_state_decode",p instanceof Error?p.message:String(p))}let u=S.session;return{contextSlot:c.context.slot,binding:Tr(s,a,l.owner,Buffer.from(l.data)),vault:{owner:m.owner.toBase58(),exists:d.exists,version:d.version,swigAddress:d.swigAddress,dexterAuthority:d.dexterAuthority,pendingVoucherCount:d.pendingVoucherCount},session:{owner:f.owner.toBase58(),version:S.version,bump:S.bump,vault:S.vault,sessionPublicKey:Xt(u.sessionPubkey),maxAmount:u.maxAmount,expiresAt:u.expiresAt,seller:u.allowedCounterparty,nonce:u.nonce,spent:u.spent,currentOutstanding:u.currentOutstanding,maxRevolvingCapacity:u.maxRevolvingCapacity,crystallizedCumulative:u.crystallizedCumulative}}}function Pr(t){let e=Buffer.from(t.voucher.sessionRegistration);return e.length!==wr&&A("registration_length"),vt(e.subarray(0,32),xr)||A("registration_domain"),{programId:new Z(e.subarray(32,64)).toBase58(),vaultPda:new Z(e.subarray(64,96)).toBase58(),sessionPublicKey:Xt(e.subarray(96,128)),maxAmount:e.readBigUInt64LE(128),expiresAt:e.readBigInt64LE(136),seller:new Z(e.subarray(144,176)).toBase58(),nonce:e.readUInt32LE(176),maxRevolvingCapacity:e.readBigUInt64LE(180)}}function Ne(t,e,n){let r=t.accountKeys.filter(o=>o.address===e);return r.length!==1&&A(`${n}_account_key`),r[0]}function Ir(t,e,n){(!Number.isSafeInteger(n.slot)||n.slot<=0)&&A("transaction_slot"),n.slot!==e.confirmationSlot&&A("transaction_confirmation_slot"),n.err!==null&&A("transaction_failed"),n.signatures[0]!==e.transaction&&A("transaction_signature"),n.instructions.length!==2&&A("transaction_instruction_count");let r=L(t.programId,"program_id"),o=L(t.buyerSwigAddress,"buyer_swig"),s=L(t.vaultPda,"vault_pda"),a=L(t.seller,"seller"),i=L(t.sessionPda,"session_pda"),[c]=Yt(s,a,r),l=Jt(o,r)[0],m=yr(o),f=fr(r)[0];i.equals(c)||A("session_pda_derivation");let d=Buffer.from(hr.settle_voucher),S=n.instructions.filter(E=>{if(E.programId!==t.programId)return!1;let N=E.data;return N.length>=d.length&&vt(N.subarray(0,d.length),d)});S.length!==1&&A("settle_voucher_instruction_count");let u=S[0];n.instructions[0]!==u&&A("settle_voucher_instruction_order");let p=Buffer.from(u.data);p.length!==49&&A("settle_voucher_instruction_length"),p.readBigUInt64LE(8).toString()!==t.reservationAmountAtomic&&A("settle_voucher_amount"),p.readUInt8(16)!==1&&A("settle_voucher_increment"),new Z(p.subarray(17,49)).equals(a)||A("settle_voucher_seller"),u.accounts.length<8&&A("settle_voucher_accounts"),[s.toBase58(),null,i.toBase58(),null,o.toBase58(),m.toBase58(),l.toBase58(),f.toBase58()].forEach((E,N)=>{E!==null&&u.accounts[N]!==E&&A(`settle_voucher_account_${N}`)});let y=u.accounts[1];y||A("dexter_authority");let b=Ne(n,u.accounts[0],"vault"),_=Ne(n,y,"dexter_authority"),V=Ne(n,u.accounts[2],"session");(!b.writable||b.signer)&&A("vault_privileges"),_.signer||A("dexter_authority_signature"),(!V.writable||V.signer)&&A("session_privileges");for(let E=3;E<Math.min(u.accounts.length,8);E+=1)Ne(n,u.accounts[E],`account_${E}`).signer&&A(`settle_voucher_account_${E}_signer`);for(let E=8;E<u.accounts.length;E+=1){let N=Ne(n,u.accounts[E],`sibling_${E-8}`);(!N.writable||N.signer)&&A("settle_voucher_sibling_privileges")}let C=n.instructions[1];C.programId!==_r.toBase58()&&A("reservation_memo_program"),(C.accounts.length!==1||C.accounts[0]!==y)&&A("reservation_memo_authority"),Ne(n,y,"reservation_memo_authority").signer||A("reservation_memo_authority_signature");let M=new TextEncoder().encode(jt(t));return vt(C.data,M)||A("reservation_memo_digest"),y}function Nr(t,e,n,r){let o=L(t.programId,"program_id"),s=L(t.buyerSwigAddress,"buyer_swig"),a=L(t.vaultPda,"vault_pda"),i=L(t.seller,"seller"),[c,l]=Jt(s,o),[m,f]=Yt(a,i,o);(!Number.isSafeInteger(r.contextSlot)||r.contextSlot<e.postStateSlot||r.contextSlot<e.confirmationSlot)&&A("post_state_slot"),(r.binding.address!==c.toBase58()||r.binding.owner!==t.programId||r.binding.bump!==l||!An.has(r.binding.version)||r.binding.swig!==t.buyerSwigAddress||r.binding.vault!==t.vaultPda)&&A("binding_identity"),(r.vault.owner!==t.programId||!r.vault.exists||r.vault.version!==7||r.vault.swigAddress!==t.buyerSwigAddress||r.vault.dexterAuthority!==n)&&A("vault_post_state"),(t.sessionPda!==m.toBase58()||r.session.owner!==t.programId||r.session.version!==1||r.session.bump!==f||r.session.vault!==t.vaultPda||r.session.sessionPublicKey!==Xt(t.voucher.sessionPublicKey)||r.session.seller!==t.seller||r.session.nonce!==t.sessionNonce||r.session.currentOutstanding.toString()!==t.reservationAmountAtomic)&&A("session_post_state");let d=Pr(t);(d.programId!==t.programId||d.vaultPda!==t.vaultPda||d.sessionPublicKey!==r.session.sessionPublicKey||d.seller!==t.seller||d.nonce!==t.sessionNonce||d.maxAmount!==r.session.maxAmount||d.expiresAt!==BigInt(r.session.expiresAt)||d.maxRevolvingCapacity!==r.session.maxRevolvingCapacity)&&A("registration_post_state"),(r.session.spent>r.session.crystallizedCumulative?r.session.spent:r.session.crystallizedCumulative).toString()!==t.previousCumulativeAtomic&&A("session_frontier")}async function bn(t,e,n,r={}){try{oe(e,n)}catch(i){return A("provider_receipt",i instanceof Error?i.message:String(i))}e.network!=="solana:mainnet"&&A("network"),e.programId!==gr.toBase58()&&A("program_id");let o=await(r.readTransaction??Rr)({connection:t,signature:n.transaction,commitment:n.commitment});o||A("transaction_missing");let s=Ir(e,n,o),a=await(r.readPostState??Er)({connection:t,input:e,receipt:n});Nr(e,n,s,a)}var Zt="solana:mainnet";async function Mr(t){let e=t.facilitatorUrl??At,n=t.programId??Ee,r=new We(t.vaultPda),o=new We(t.params.counterparty),s=Re(t.perUnitCapAtomic);if(s<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let a=Re(t.params.maxAmountAtomic),i=Re(t.params.maxRevolvingCapacityAtomic),c=(t.params.nonce&2147483648)!==0;if(!c)throw new Y("tabFromGrant");if(c&&!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let l=Kr(t.sessionSecretKey),m=new We(t.params.sessionPubkey).toBytes();if(!vn(l.publicKey,m))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new We(l.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let f=He.randomBytes(32),d=He.sign.detached(f,l.secretKey);if(!He.sign.detached.verify(f,d,m))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let S=Fe({programId:n,vaultPda:r,sessionPubkey:l.publicKey,maxAmount:a,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:o,nonce:t.params.nonce,maxRevolvingCapacity:i}),u=typeof t.connection=="string"?new Cr(t.connection,"confirmed"):t.connection,p=await Or(u,r,o,n);if(!p||p.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Br(p))throw new Error(p.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${p.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${p.session.expiresAt})`);if(!vn(p.session.sessionPubkey,l.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new We(p.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(p.vault!==r.toBase58()||p.session.allowedCounterparty!==o.toBase58()||p.session.maxAmount!==a||p.session.expiresAt!==t.params.expiresAtUnix||p.session.nonce!==t.params.nonce||p.session.maxRevolvingCapacity!==i)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${p.session.maxAmount} expiresAt=${p.session.expiresAt} nonce=${p.session.nonce} revolving=${p.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&p.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${p.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let x=p.session.spent>p.session.crystallizedCumulative?p.session.spent:p.session.crystallizedCumulative;if(x>=a)throw new Error(`tab_exhausted: on-chain frontier ${x} has consumed the session cap ${a} \u2014 no voucher can strictly exceed it; open a new grant`);let y=t.sellerUrl??t.params.counterparty,b=BigInt(Math.floor(Math.random()*4294967295)),_=Le({vaultPda:r,sellerUrl:y,nonce:b}),V=Vr(_),C=t.swigAddress;if(!C){let h=await Dr(u,r);if(!h.exists||!h.swigAddress)throw new Error(`tab_vault_unreadable: vault ${r.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);C=h.swigAddress}let F={channelId:V,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},M=Ft({publicKey:l.publicKey,privateKey:l.secretKey},F,S),[E]=kr(r,o,n),N={network:Zt,swigAddress:C,vaultPda:r.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(h,v)=>{if(!c)return Lt(h,v,_);let w=$t({programId:n.toBase58(),vaultPda:r.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),sessionNonce:t.params.nonce,channelId:v.channelId,cumulativeAmountAtomic:v.cumulativeAmount,sequenceOrdinal:v.sequenceNumber,sessionPrivateKey:h.privateKey,sessionPublicKey:h.publicKey,sessionRegistration:h.registration});return{payload:{channelId:w.channelId,cumulativeAmount:w.cumulativeAmount,sequenceNumber:w.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(w.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(w.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(w.sessionRegistration,"hex"))}},signOpenTab:async h=>h.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(h,v)=>bn(u,h,v):void 0};return new qe({vault:N,network:Zt,seller:y,counterparty:t.params.counterparty,session:M,channelIdHex:V,channelIdBytes:_,perUnitCapAtomic:s,totalCapAtomic:a,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:x,initialSequenceOrdinal:c&&p.session.lastLockedSequence!==0?Ur(p.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:h,incrementAtomic:v,previousCumulativeAtomic:w})=>{let R=$e(h),T={network:Zt,programId:n.toBase58(),buyerSwigAddress:C,vaultPda:r.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),channelId:V,sessionNonce:t.params.nonce,reservationAmountAtomic:v,previousCumulativeAtomic:w,...R,voucher:h},I=await t.reserveFinalVoucherV2(T);oe(T,I),await N.verifyFinalVoucherV2Reservation(T,I)}:void 0,closeMode:"settle-only"})}function Kr(t){if(t.length===64)return He.sign.keyPair.fromSecretKey(t);if(t.length===32)return He.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function vn(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}import{PublicKey as qr}from"@solana/web3.js";var Sn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],Fr=new Map(Sn.map(t=>[t.caip2.toLowerCase(),t])),Lr=new Map(Sn.map(t=>[t.bare.toLowerCase(),t]));function je(t){if(!t)return null;let e=t.toLowerCase(),n=Fr.get(e)||Lr.get(e);return n?{caip2:n.caip2,bare:n.bare,family:n.family}:null}function Qt(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),n=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(n,"base64").toString("utf8"))}function $r(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,o=je(String(r.network??""));o&&e.push({scheme:String(r.scheme??"exact"),network:o,amount:String(r.amount??r.maxAmountRequired??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}async function St(t){let e=t.headers.get("payment-required");if(!e)return null;let n;try{n=Qt(e)}catch{return null}let r=Array.isArray(n.accepts)?n.accepts:[];return r.length===0?null:{x402Version:2,options:$r(r),resourceUrl:n.resource&&typeof n.resource=="object"?String(n.resource.url??""):void 0}}async function Ge(t,e={},n=fetch){let r={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(r.body=e.body);let o;try{o=await n(t,r)}catch(i){return{kind:"error",detail:`probe failed: ${i?.message??String(i)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let s=await St(o);if(!s)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let a=s.options.find(i=>i.scheme==="tab"&&i.network.family==="svm");if(!a)return{kind:"no_tab",schemesOffered:s.options.map(i=>i.scheme)};try{new qr(a.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${a.payTo}"`}}return{kind:"offer",offer:{payTo:a.payTo,amountAtomic:a.amount,asset:a.asset,networkCaip2:a.network.caip2,...typeof a.extra?.voucherHeader=="string"?{voucherHeader:a.extra.voucherHeader}:{},...typeof a.extra?.registrationEncoding=="string"?{registrationEncoding:a.extra.registrationEncoding}:{},...typeof a.extra?.termsVersion=="string"?{termsVersion:a.extra.termsVersion}:{},...typeof a.extra?.acceptanceRule=="string"?{acceptanceRule:a.extra.acceptanceRule}:{},resourceUrl:s.resourceUrl}}}var Wr="dexter-tab-hosted-pay-before-delivery/v1",Hr="pay_before_delivery_seller_2xx",jr="x-tab-voucher",Gr="base64(188-byte sessionRegisterMessage)";var ze="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",wt="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",_t="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",ce=ze,Xe=wt,Je=_t,ue="eip155:8453",Ce="eip155:84532",Ve="eip155:42161",ke="eip155:137",Oe="eip155:10",Be="eip155:43114",Ue="eip155:56",le="eip155:480",me="eip155:143",de="eip155:4663",pe="eip155:1187947933",fe="eip155:324705682",De="eip155:1",ge=ue,xt=Ce,Ye=Ve,Ze=ke,Qe=Oe,et=Be,tt=Ue,nt=le,rt=me,ot=de,st=pe,at=fe,it=De,ct="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",wn="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",_n="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",en="0x55d398326f99059fF775485246999027B3197955",Rt="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",tn="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Tt={[Ue]:Rt,[ue]:_n,[Ce]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[Ve]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[ke]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Oe]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[Be]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[le]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[me]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[de]:tn,[pe]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[fe]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[De]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},Et={[en]:{symbol:"USDT",decimals:18},[Rt]:{symbol:"USDC",decimals:18}};var Pt={[le]:{name:"USDC",version:"2"},[me]:{name:"USDC",version:"2"},[de]:{name:"Global Dollar",version:"1"},[pe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[fe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},Q="0x000000000022D473030F116dDEE9F6B43aC78BA3",ut="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",lt={[Ue]:56,[ue]:8453,[Ce]:84532,[Ve]:42161,[ke]:137,[Oe]:10,[Be]:43114,[le]:480,[me]:143,[de]:4663,[pe]:1187947933,[fe]:324705682,[De]:1},he={[ze]:"https://api.dexter.cash/api/solana/rpc",[wt]:"https://api.devnet.solana.com",[_t]:"https://api.testnet.solana.com"},D={[Ue]:"https://api.dexter.cash/api/evm/bsc/rpc",[ue]:"https://api.dexter.cash/api/base/rpc",[Ce]:"https://sepolia.base.org",[Ve]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[ke]:"https://api.dexter.cash/api/evm/polygon/rpc",[Oe]:"https://api.dexter.cash/api/evm/optimism/rpc",[Be]:"https://api.dexter.cash/api/evm/avalanche/rpc",[le]:"https://worldchain-mainnet.g.alchemy.com/public",[me]:"https://rpc.monad.xyz",[de]:"https://rpc.mainnet.chain.robinhood.com",[pe]:"https://skale-base.skalenodes.com/v1/base",[fe]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[De]:"https://eth.llamarpc.com"};var B=class t extends Error{code;details;constructor(e,n,r){super(n),this.name="X402Error",this.code=e,this.details=r,Object.setPrototypeOf(this,t.prototype)}};import{PublicKey as ye,Connection as nn,TransactionMessage as zr,VersionedTransaction as Xr,ComputeBudgetProgram as xn}from"@solana/web3.js";import{getAssociatedTokenAddress as rn,getAccount as Jr,createTransferCheckedInstruction as Yr,getMint as Zr,TOKEN_PROGRAM_ID as Rn,TOKEN_2022_PROGRAM_ID as It}from"@solana/spl-token";var Qr=12e3,eo=1;function Ae(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var Nt=class{name="Solana";networks=[ce,Xe,Je];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:he[e]?he[e]:e==="solana"?he[ce]:e==="solana-devnet"?he[Xe]:e==="solana-testnet"?he[Je]:he[ce]}getAddress(e){return Ae(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return Ae(e)?e.publicKey!==null:!1}async getBalance(e,n,r){if(!Ae(n)||!n.publicKey)return 0;let o=r||this.getDefaultRpcUrl(e.network),s=new nn(o,"confirmed"),a=new ye(n.publicKey.toBase58()),i=new ye(e.asset);try{let l=(await s.getAccountInfo(i,"confirmed"))?.owner.toBase58()===It.toBase58()?It:Rn,m=await rn(i,a,!1,l),f=await Jr(s,m,void 0,l),d=e.extra?.decimals??6;return Number(f.amount)/Math.pow(10,d)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,n,r){if(!Ae(n))throw new Error("Invalid Solana wallet");if(!n.publicKey)throw new Error("Wallet not connected");let o=r||this.getDefaultRpcUrl(e.network),s=new nn(o,"confirmed"),a=new ye(n.publicKey.toBase58()),{payTo:i,asset:c,extra:l}=e,m=e.amount??e.maxAmountRequired;if(!m)throw new Error("Missing amount in payment requirements");if(!l?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new ye(l.feePayer),d=new ye(c),S=new ye(i);this.log("Building transaction:",{from:a.toBase58(),to:i,amount:m,asset:c,feePayer:l.feePayer});let u=[];u.push(xn.setComputeUnitLimit({units:Qr})),u.push(xn.setComputeUnitPrice({microLamports:eo}));let p=await s.getAccountInfo(d,"confirmed");if(!p)throw new Error(`Token mint ${c} not found`);let x=p.owner.toBase58()===It.toBase58()?It:Rn,y=await Zr(s,d,void 0,x);typeof l?.decimals=="number"&&y.decimals!==l.decimals&&this.log(`Decimals mismatch: requirements say ${l.decimals}, mint says ${y.decimals}`);let b=await rn(d,a,!1,x),_=await rn(d,S,!0,x);if(!await s.getAccountInfo(b,"confirmed"))throw new Error(`No token account found for ${c}. Please ensure you have USDC in your wallet.`);if(!await s.getAccountInfo(_,"confirmed"))throw new Error(`Seller token account not found. The seller (${i}) must have a USDC account.`);let F=BigInt(m);u.push(Yr(b,d,_,a,F,y.decimals,[],x));let{blockhash:M}=await s.getLatestBlockhash("confirmed"),E=new zr({payerKey:f,recentBlockhash:M,instructions:u}).compileToV0Message(),N=new Xr(E),h=await n.signTransaction(N);return this.log("Transaction signed successfully"),{serialized:Buffer.from(h.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:b.toBase58(),destinationAta:_.toBase58(),asset:c,amount:m,blockhash:M}}}async confirmSettlement(e,n){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let r=new nn(n,"confirmed"),o=new ye(e.destinationAta),s=await r.getSignaturesForAddress(o,{limit:25});if(s.length===0)return{settled:!1};let a=BigInt(e.amount);for(let i of s){if(i.err)continue;let c=await r.getTransaction(i.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let l=c.transaction.message.getAccountKeys().keySegments().flat(),m=c.meta.preTokenBalances??[],f=c.meta.postTokenBalances??[];for(let d of f){if(d.mint!==e.asset)continue;let S=l[d.accountIndex];if(!S||!S.equals(o))continue;let u=m.find(y=>y.accountIndex===d.accountIndex),p=BigInt(u?.uiTokenAmount.amount??"0");if(BigInt(d.uiTokenAmount.amount??"0")-p===a)return{settled:!0,txSignature:i.signature}}}return{settled:!1}}};function ee(t){return new Nt(t)}var to={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},Tn=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function be(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var Ct=class{name="EVM";networks=[tt,ge,xt,it,Ye,Ze,Qe,et,nt,rt,ot,st,at];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:D[e]?D[e]:e==="base"?D[ge]:e==="bsc"?D[tt]:e==="ethereum"?D[it]:e==="arbitrum"?D[Ye]:e==="polygon"?D[Ze]:e==="optimism"?D[Qe]:e==="avalanche"?D[et]:e==="world"?D[nt]:e==="monad"?D[rt]:e==="robinhood"?D[ot]:e==="skale-base"?D[st]:e==="skale-base-sepolia"?D[at]:D[ge]}getAddress(e){return be(e)?e.address:null}isConnected(e){return be(e)?!!e.address:!1}getChainId(e){if(lt[e])return lt[e];if(e.startsWith("eip155:")){let n=e.split(":")[1];return parseInt(n,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,n,r){if(!be(n)||!n.address)return 0;let o=r||this.getDefaultRpcUrl(e.network);try{let s=this.encodeBalanceOf(n.address),a=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:s},"latest"]})});if(!a.ok)throw new Error(`RPC request failed: ${a.status}`);let i=await a.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")return 0;let c=BigInt(i.result),l=e.extra?.decimals??6;return Number(c)/Math.pow(10,l)}catch(s){throw s}}encodeBalanceOf(e){let n="0x70a08231",r=e.slice(2).toLowerCase().padStart(64,"0");return n+r}async confirmSettlement(e,n){if(e.kind==="eip3009"){let r="0xe94a0102",o=e.from.slice(2).toLowerCase().padStart(64,"0"),s=e.nonce.slice(2).toLowerCase().padStart(64,"0"),a=r+o+s,i=await this.ethCall(n,e.asset,a);return{settled:BigInt(i)!==0n}}if(e.kind==="permit2"){let r="0x4fe02b44",o=BigInt(e.nonce),s=o>>8n,a=o&0xffn,i=e.from.slice(2).toLowerCase().padStart(64,"0"),c=s.toString(16).padStart(64,"0"),l=r+i+c,m=await this.ethCall(n,Q,l);return{settled:(BigInt(m)>>a&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,n,r){let o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:r},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let s=await o.json();if(s.error)throw new Error(`RPC error: ${JSON.stringify(s.error)}`);if(!s.result||s.result==="0x")throw new Error("RPC returned an empty result");return s.result}async buildTransaction(e,n,r){if(!be(n))throw new Error("Invalid EVM wallet");if(!n.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,n,r);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,n,r);let{payTo:o,asset:s,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:n.address,to:o,amount:i,asset:s,network:e.network});let c=this.getChainId(e.network),l=Pt[`eip155:${c}`],m={name:a?.name??l?.name??"USD Coin",version:a?.version??l?.version??"2",chainId:BigInt(c),verifyingContract:s},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let S="0x"+[...d].map(_=>_.toString(16).padStart(2,"0")).join(""),u=Math.floor(Date.now()/1e3),p={from:n.address,to:o,value:i,validAfter:String(u-600),validBefore:String(u+(e.maxTimeoutSeconds||60)),nonce:S},x={from:n.address,to:o,value:BigInt(i),validAfter:BigInt(u-600),validBefore:BigInt(u+(e.maxTimeoutSeconds||60)),nonce:S};if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let y=await n.signTypedData({domain:m,types:f,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:p,signature:y}),signature:y,settlementProbe:{kind:"eip3009",from:n.address,nonce:S,asset:s,chainId:c}}}async buildApprovalTransaction(e,n,r){let{payTo:o,asset:s,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");let c=a?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:n.address,to:o,amount:i,asset:s,network:e.network,facilitatorContract:c});let l=r||this.getDefaultRpcUrl(e.network),m=a?.fee??"0",f=BigInt(i)+BigInt(m),d=await this.readAllowance(l,s,n.address,c);if(d<f){if(!n.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let N=this.calculateApprovalAmount(i,m,a?.approvalStrategy);this.log(`Approving ${N} for ${c} (current allowance: ${d})`);let h=await n.sendTransaction({to:s,data:this.encodeApprove(c,N),value:0n});this.log(`Approval tx sent: ${h}`),await this.waitForReceipt(l,h),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let S=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(S);let u=[...S].reduce((N,h)=>N*256n+BigInt(h),0n).toString(),p=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(p);let x="0x"+[...p].map(N=>N.toString(16).padStart(2,"0")).join(""),b=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),_=a?.eip712Domain,V=_?{name:_.name,version:_.version,chainId:BigInt(_.chainId),verifyingContract:_.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},C=a?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},F={from:n.address,to:o,token:s,amount:BigInt(i),fee:BigInt(m),nonce:BigInt(u),deadline:BigInt(b),paymentId:x},M=await n.signTypedData({domain:V,types:C,primaryType:"Payment",message:F});this.log("EIP-712 Payment signature obtained");let E={from:n.address,to:o,token:s,amount:i,fee:m,nonce:u,deadline:b,paymentId:x,signature:M};return{serialized:JSON.stringify(E),signature:M}}async buildPermit2Transaction(e,n,r){let{payTo:o,asset:s}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:n.address,to:o,amount:a,asset:s,network:e.network});let i=r||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(i,s,n.address,Q),l;if(c<BigInt(a)){let V=this.encodeApprove(Q,Tn);if(n.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let C=this.getChainId(e.network),F=await this.readGasPrice(i),M=await this.readNonce(i,n.address),E=await n.signTransaction({to:s,data:V,chainId:C,gas:50000n,gasPrice:F,nonce:M});l={erc20ApprovalGasSponsoring:{info:{from:n.address,asset:s,spender:Q,amount:Tn.toString(),signedTransaction:E,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(n.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let C=await n.sendTransaction({to:s,data:V,value:0n});this.log(`Permit2 approval tx sent: ${C}`),await this.waitForReceipt(i,C),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let m=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(m);let f=[...m].reduce((V,C)=>V*256n+BigInt(C),0n),d=Math.floor(Date.now()/1e3),S=d-600,u=d+(e.maxTimeoutSeconds||300),p=this.getChainId(e.network),x={name:"Permit2",chainId:BigInt(p),verifyingContract:Q},y={permitted:{token:s,amount:BigInt(a)},spender:ut,nonce:f,deadline:BigInt(u),witness:{to:o,validAfter:BigInt(S)}},b=await n.signTypedData({domain:x,types:to,primaryType:"PermitWitnessTransferFrom",message:y});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let _={signature:b,permit2Authorization:{from:n.address,permitted:{token:s,amount:a},spender:ut,nonce:f.toString(),deadline:String(u),witness:{to:o,validAfter:String(S)}}};return{serialized:JSON.stringify(_),signature:b,extensions:l,settlementProbe:{kind:"permit2",from:n.address,nonce:f.toString(),chainId:p}}}async readAllowance(e,n,r,o){let s="0xdd62ed3e",a=r.slice(2).toLowerCase().padStart(64,"0"),i=o.slice(2).toLowerCase().padStart(64,"0"),c=s+a+i;try{let m=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:c},"latest"]})})).json();return m.error||!m.result||m.result==="0x"?0n:BigInt(m.result)}catch{return 0n}}encodeApprove(e,n){let r="0x095ea7b3",o=e.slice(2).toLowerCase().padStart(64,"0"),s=n.toString(16).padStart(64,"0");return r+o+s}async waitForReceipt(e,n,r=3e4){let o=Date.now();for(;Date.now()-o<r;){try{let a=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[n]})})).json();if(a.result){if(a.result.status==="0x0")throw new Error(`Approval transaction reverted: ${n}`);return}}catch(s){if(s instanceof Error&&s.message.includes("reverted"))throw s}await new Promise(s=>setTimeout(s,2e3))}throw new Error(`Approval transaction receipt timeout after ${r}ms: ${n}`)}async readGasPrice(e){try{let r=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return r.result?BigInt(r.result):50000000n}catch{return 50000000n}}async readNonce(e,n){try{let o=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[n,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(e,n,r){let o=BigInt(e)+BigInt(n);if(!r||r.mode==="exact")return o;let s=BigInt(r.defaultMultiple??10),a=o*s;if(r.maxCapUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.maxCapUsd*Math.pow(10,i)));if(a>c)return c}if(r.exactAboveUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.exactAboveUsd*Math.pow(10,i)));if(BigInt(e)>c)return o}return a}inferDecimals(e){return e.length>12?18:6}};function Me(t){return new Ct(t)}function on(t){if(t===ct||t===wn)return!0;let e=t.toLowerCase();for(let n of Object.values(Tt))if(n.toLowerCase()===e)return!0;for(let n of Object.keys(Et))if(n.toLowerCase()===e)return!0;return!1}function no(t){return{[ze]:"Solana",[wt]:"Solana Devnet",[_t]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[ue]:"Base",[Ce]:"Base Sepolia",[De]:"Ethereum",[Ve]:"Arbitrum",[ke]:"Polygon",[Oe]:"Optimism",[Be]:"Avalanche",[Ue]:"BSC",[le]:"World Chain",[me]:"Monad",[de]:"Robinhood Chain",[pe]:"SKALE Base",[fe]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function En(t,e){let n=no(t);return n===t?e:n}async function ro(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let n=t,r=new Headers(n.headers);e?.headers&&new Headers(e.headers).forEach((a,i)=>r.set(i,a));let o={method:e?.method??n.method,headers:r,signal:e?.signal??n.signal,redirect:e?.redirect??n.redirect,credentials:e?.credentials??n.credentials},s=(o.method??"GET").toUpperCase();return e&&"body"in e?o.body=e.body:s!=="GET"&&s!=="HEAD"&&n.body&&(o.body=await n.arrayBuffer()),[n.url,o]}var oo=new WeakMap;function Pn(t){let{adapters:e=[ee({verbose:t.verbose}),Me({verbose:t.verbose})],wallets:n,wallet:r,preferredNetwork:o,rpcUrls:s={},maxAmountAtomic:a,fetch:i=globalThis.fetch,verbose:c=!1,accessPass:l,onPaymentRequired:m,onPaymentDispatched:f,maxRetries:d=0,retryDelayMs:S=500}=t,u=c?console.log.bind(console,"[x402]"):()=>{};async function p(h,v){let w;for(let R=0;R<=d;R++)try{let T=await i(h,v);if(T.status>=502&&T.status<=504&&R<d){u(`Retry ${R+1}/${d}: server returned ${T.status}`),await new Promise(I=>setTimeout(I,S*Math.pow(2,R)));continue}return T}catch(T){w=T,R<d&&(u(`Retry ${R+1}/${d}: ${T instanceof Error?T.message:"network error"}`),await new Promise(I=>setTimeout(I,S*Math.pow(2,R))))}throw w}let x=new Map;function y(h){try{let v=new URL(h).host,w=x.get(v);if(w&&w.expiresAt>Date.now()/1e3+10)return w.jwt;w&&x.delete(v)}catch{}return null}function b(h,v){try{let w=new URL(h).host,R=v.split(".");if(R.length===3){let T=JSON.parse(atob(R[1].replace(/-/g,"+").replace(/_/g,"/"))),I=Math.floor(Date.now()/1e3),k=I+86400,q=Math.min(typeof T.exp=="number"?T.exp:I,k);x.set(w,{jwt:v,expiresAt:q}),u("Access pass cached for",w,"| expires:",new Date(q*1e3).toISOString())}}catch{u("Failed to cache access pass")}}let _=n||{};r&&!_.solana&&Ae(r)&&(_.solana=r),r&&!_.evm&&be(r)&&(_.evm=r);function V(h){let v=[];for(let w of h){let R=w.scheme??"exact";if(R!=="exact"&&R!=="exact-approval")continue;let T=e.find(k=>k.canHandle(w.network));if(!T)continue;let I;T.name==="Solana"?I=_.solana:T.name==="EVM"&&(I=_.evm),I&&T.isConnected(I)&&v.push({accept:w,adapter:T,wallet:I})}if(v.length===0)return null;if(o){let w=v.find(R=>R.accept.network===o);if(w)return w}return v[0]}function C(h,v){return En(h,v)}function F(h,v){return s[h]||v.getDefaultRpcUrl(h)}async function M(h,v,w,R,T){let I="";if(l?.preferTier&&R.tiers){let g=R.tiers.find(P=>P.id===l.preferTier);if(g){if(l.maxSpend&&parseFloat(g.price)>parseFloat(l.maxSpend))throw new B("access_pass_exceeds_max_spend",`Access pass tier "${g.id}" costs $${g.price}, exceeds max spend $${l.maxSpend}`);I=`tier=${g.id}`}}else if(l?.preferDuration&&R.ratePerHour)I=`duration=${l.preferDuration}`;else if(R.tiers&&R.tiers.length>0){let g=R.tiers[0];if(l?.maxSpend&&parseFloat(g.price)>parseFloat(l.maxSpend))throw new B("access_pass_exceeds_max_spend",`Cheapest access pass costs $${g.price}, exceeds max spend $${l?.maxSpend}`);I=`tier=${g.id}`}let k=I?T.includes("?")?`${T}&${I}`:`${T}?${I}`:T;u("Purchasing access pass:",I||"default tier");let q=w.headers.get("PAYMENT-REQUIRED");if(!q)return null;let $;try{$=JSON.parse(atob(q))}catch{return null}let U=V($.accepts);if(!U)return null;let{accept:O,adapter:H,wallet:ve}=U;if(H.name==="Solana"&&!O.extra?.feePayer)return null;let G=O.extra?.decimals??(on(O.asset)?6:void 0);if(typeof G!="number")return null;let Ke=O.amount??O.maxAmountRequired;if(!Ke)return null;let z=F(O.network,H);try{let g=await H.getBalance(O,ve,z),P=Number(Ke)/Math.pow(10,G);if(g<P){let Bt=C(O.network,H.name);throw new B("insufficient_balance",`Insufficient balance for access pass on ${Bt}. Have $${g.toFixed(4)}, need $${P.toFixed(4)}`)}}catch(g){if(g instanceof B)throw g}let X=await H.buildTransaction(O,ve,z),Se;H.name==="EVM"?Se=JSON.parse(X.serialized):Se={transaction:X.serialized};let te=typeof h=="string"?h:h instanceof URL?h.href:h.url,we=$.resource;if(typeof $.resource=="string")try{let g=new URL($.resource,te);["http:","https:"].includes(g.protocol)&&(we=g.toString())}catch{}else if($.resource&&typeof $.resource=="object"&&"url"in $.resource){let g=$.resource;try{let P=new URL(g.url,te);["http:","https:"].includes(P.protocol)&&(we={...g,url:P.toString()})}catch{}}let dt={x402Version:O.x402Version??2,resource:we,accepted:O,payload:Se};X.extensions&&(dt.extensions=X.extensions);let J=btoa(JSON.stringify(dt)),ne=await i(k,{...v,method:"POST",headers:{...v?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":J}});if(!ne.ok)return u("Pass purchase failed:",ne.status),null;let W=ne.headers.get("ACCESS-PASS");return W&&(b(T,W),u("Access pass purchased and cached")),ne}async function E(h,v){let w=h;if(u("Making request:",w),l){let g=y(w);if(g){u("Using cached access pass");let P=await i(h,{...v,headers:{...v?.headers||{},Authorization:`Bearer ${g}`}});if(P.status!==401&&P.status!==402)return P;u("Cached pass rejected (status",P.status,"), purchasing new pass");try{x.delete(new URL(w).host)}catch{}}}let R=await p(h,v);if(R.status!==402)return R;u("Received 402 Payment Required");let T=R.headers.get("X-ACCESS-PASS-TIERS");if(l&&T){u("Server offers access passes, purchasing...");try{let g=JSON.parse(atob(T)),P=await M(h,v,R,g,w);if(P)return P}catch(g){u("Access pass purchase failed, falling back to per-request payment:",g)}}let I=R.headers.get("PAYMENT-REQUIRED");if(!I)throw new B("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let g=atob(I);k=JSON.parse(g)}catch{throw new B("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}u("Payment requirements:",k);let q=R.headers.get("X-Quote-Hash");q&&u("Quote hash received:",q);let $=V(k.accepts);if(!$){let g=k.accepts.map(P=>P.network).join(", ");throw new B("no_matching_payment_option",`No connected wallet for any available network: ${g}`)}let{accept:U,adapter:O,wallet:H}=$;if(u(`Using ${O.name} for ${U.network}`),O.name==="Solana"&&!U.extra?.feePayer)throw new B("missing_fee_payer","Solana payment option missing feePayer in extra");let ve=U.extra?.decimals??(on(U.asset)?6:void 0);if(typeof ve!="number")throw new B("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let G=U.amount??U.maxAmountRequired;if(!G)throw new B("missing_amount","Payment option missing amount");if(a&&BigInt(G)>BigInt(a))throw new B("amount_exceeds_max",`Payment amount ${G} exceeds maximum ${a}`);let Ke=F(U.network,O);u("Checking balance...");try{let g=await O.getBalance(U,H,Ke),P=Number(G)/Math.pow(10,ve);if(g<P){let Bt=C(U.network,O.name);throw new B("insufficient_balance",`Insufficient balance on ${Bt}. Have $${g.toFixed(4)}, need $${P.toFixed(4)}`)}u(`Balance OK: $${g.toFixed(4)} >= $${P.toFixed(4)}`)}catch(g){if(g instanceof B)throw g;u("Balance check failed (RPC error), proceeding with transaction attempt")}if(m&&!await m(U))throw new B("payment_rejected","Payment rejected by onPaymentRequired callback");u("Building transaction...");let z=await O.buildTransaction(U,H,Ke);u("Transaction signed");let X;O.name==="EVM"?X=JSON.parse(z.serialized):X={transaction:z.serialized};let Se=h,te=k.resource;if(typeof k.resource=="string")try{let g=new URL(k.resource,Se).toString();g!==k.resource&&u("Resolved relative resource URL:",k.resource,"\u2192",g),te=g}catch{te=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let g=k.resource;try{let P=new URL(g.url,Se).toString();P!==g.url&&(u("Resolved relative resource URL:",g.url,"\u2192",P),te={...g,url:P})}catch{}}let we={x402Version:U.x402Version??2,resource:te,accepted:U,payload:X};z.extensions&&(we.extensions=z.extensions);let dt=btoa(JSON.stringify(we));if(f)try{f(U,z.settlementProbe)}catch{}u("Retrying request with payment...");let J=await p(h,{...v,headers:{...v?.headers||{},"PAYMENT-SIGNATURE":dt,...q?{"X-Quote-Hash":q}:{}}});if(u("Retry response status:",J.status),J.status===402){let g="unknown";try{let P=await J.clone().json();g=String(P.error||P.message||JSON.stringify(P)),u("Rejection reason:",g)}catch{}throw new B("payment_rejected",`Payment was rejected by the server: ${g}`)}let ne=J.headers.get("PAYMENT-RESPONSE"),W;if(ne)try{W=JSON.parse(atob(ne))}catch{}return W??={},W.amountAtomic=G,W.assetDecimals=ve,oo.set(J,W),W.extensions&&u("Settlement extensions:",Object.keys(W.extensions).join(", ")),J}async function N(h,v){let[w,R]=await ro(h,v);return E(w,R)}return{fetch:N}}function j(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function mt(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let n=e.toLowerCase(),r=n.includes("settle")||n.includes("facilitator"),o=e;try{let s=JSON.parse(e),a=[s.error,s.detail,s.message].filter(i=>typeof i=="string"&&i.length>0);a.length>0&&(o=a.join(" \u2014 "))}catch{}return o||(o=`HTTP ${t.status}`),{reason:r?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${o}`}}var Vt="Payment authorization was sent, but the merchant did not respond within the timeout. ",kt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Ot(t,e,n){if(!t)return{confirmed:!1,detail:Vt+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+kt};try{if(t.kind==="solana"){let a=ee(),i=n??a.getDefaultRpcUrl(e.caip2);if(!a.confirmSettlement)return Nn();let c=await a.confirmSettlement(t,i);return c.settled?{confirmed:!0,txSignature:c.txSignature}:In()}let r=Me(),o=r.getDefaultRpcUrl(e.caip2);if(!r.confirmSettlement)return Nn();let s=await r.confirmSettlement(t,o);return s.settled?{confirmed:!0,txSignature:s.txSignature}:In()}catch(r){return{confirmed:!1,detail:Vt+`On-chain confirmation could not be completed (${j(r)}).`+kt}}}function In(){return{confirmed:!1,detail:Vt+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+kt}}function Nn(){return{confirmed:!1,detail:Vt+"The chain adapter does not support on-chain confirmation."+kt}}var so=new Set(["exact","exact-approval"]);async function ao(t,e,n,r){let o;try{o=await r.signNextVoucher(n.amount)}catch(c){return r.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let s=new Headers(e.headers??void 0);s.set("X-Tab-Voucher",bt(o));let a={method:e.method??"GET",headers:s};e.signal&&(a.signal=e.signal),typeof e.body=="string"&&(a.body=e.body);let i;try{i=await fetch(t,a)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return i.status===402?r.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:r.rollbackVoucher?.call(r,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:i.ok?{ok:!0,paid:!0,response:i,amountPaid:n.amount,network:n.network}:{ok:!1,...await mt(i)}}var Cn={version:2,async parseChallenge(t){return St(t)},async pay(t,e,n,r,o){if(o.tab){let y=n.options.find(b=>b.scheme==="tab"&&b.network.family==="svm"&&b.payTo===o.tab.counterparty);if(y){let b=await ao(t,e,y,o.tab);if(b)return b}}let s=n.options.filter(y=>so.has(y.scheme));if(s.length===0)return{ok:!1,reason:"no_payment_options",detail:`no generically payable scheme offered (got: ${n.options.map(y=>y.scheme).join(", ")})`};let a=s.find(y=>y.network.family==="evm"?!!r.evm:y.network.family==="svm"?!!r.solana:!1);if(!a)return{ok:!1,reason:"unsupported_network"};let i=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,l=new AbortController,m=setTimeout(()=>l.abort(),i),f=!1,d,S=(y,b)=>{f=!0,d=b,clearTimeout(m),m=setTimeout(()=>l.abort(),c)},u=Pn({wallets:r,preferredNetwork:a.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:S}),p=e.signal?AbortSignal.any([e.signal,l.signal]):l.signal,x={method:e.method??"GET",headers:e.headers,signal:p};typeof e.body=="string"&&(x.body=e.body);try{let y=await u.fetch(t,x);if(clearTimeout(m),!y.ok)return{ok:!1,...await mt(y)};let b,_=y.headers.get("PAYMENT-RESPONSE");if(_)try{let V=Qt(_);V&&typeof V.transaction=="string"&&(b=V.transaction)}catch{}return{ok:!0,paid:!0,response:y,amountPaid:a.amount,network:a.network,txSignature:b}}catch(y){clearTimeout(m);let b=y;if(b?.name==="AbortError"){if(!f)return{ok:!1,reason:"timeout"};let _=await Ot(d,a.network,o.solanaRpcUrl);return _.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:a.amount,network:a.network,txSignature:_.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:_.detail}}return{ok:!1,reason:"error",detail:b?.message??String(y)}}}};import{getAddress as io}from"viem";var co={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function uo(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,n=>n.toString(16).padStart(2,"0")).join("")}async function lo(t,e,n){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let r=Math.floor(Date.now()/1e3),o=String(r-600),s=String(r+(e.maxTimeoutSeconds??60)),a={from:t.address,to:e.payTo,value:e.amount,validAfter:o,validBefore:s,nonce:await uo()},i=lt[e.network.caip2];if(i===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,l=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:i,verifyingContract:io(e.asset)},types:co,primaryType:"TransferWithAuthorization",message:a});return{payment:{x402Version:1,scheme:e.scheme,network:n,payload:{signature:l,authorization:a}},settlementProbe:{kind:"eip3009",from:a.from,nonce:a.nonce,asset:e.asset,chainId:i}}}async function sn(t,e,n){try{let r;for(let o of t.options){let s=o.network.family==="evm"&&!!e.evm||o.network.family==="svm"&&!!e.solana;if(o.scheme!=="exact"){s&&(r=o.scheme);continue}if(o.network.family==="evm"&&e.evm){let a=await e.evm;return await mo(o,a,n)}if(o.network.family==="svm"&&e.solana){let a=await e.solana;return await po(o,a,n)}}return r!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${r}'`}:{ok:!1,reason:"unsupported_network"}}catch(r){return{ok:!1,reason:"error",detail:j(r)}}}async function mo(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let r=t.extra??{},o=r.name,s=r.version;if(typeof o!="string"||o.length===0||typeof s!="string"||s.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let a=t.network.bare,{payment:i,settlementProbe:c}=await lo(e,t,a);return{ok:!0,headerValue:Buffer.from(JSON.stringify(i),"utf8").toString("base64"),option:t,settlementProbe:c}}async function po(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let r=t.extra??{};if(typeof r.feePayer!="string"||r.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=t.network.bare,s={x402Version:1,scheme:t.scheme,network:o,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:r},i=await ee().buildTransaction(s,e,n.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:o,payload:{transaction:i.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:i.settlementProbe}}function fo(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,o=je(String(r.network??""));o&&e.push({scheme:String(r.scheme??"exact"),network:o,amount:String(r.maxAmountRequired??r.amount??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}var Vn={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let n=Array.isArray(e.accepts)?e.accepts:[];if(n.length===0)return null;let r=fo(n);return r.length===0?null:{x402Version:1,options:r}},async pay(t,e,n,r,o){let s,a=new AbortController,i=!1,c,l;try{let m=o.timeoutMs??15e3;s=setTimeout(()=>a.abort(),m);let f=await sn(n,r,o);if(!f.ok)return{ok:!1,reason:f.reason,detail:f.detail};let d=f.headerValue,S=f.option;l=S,c=f.settlementProbe;let u=new Headers(e.headers??void 0);u.set("X-PAYMENT",d);let p=e.signal!=null?AbortSignal.any([e.signal,a.signal]):a.signal,x={method:e.method,headers:u,signal:p};typeof e.body=="string"&&(x.body=e.body),i=!0,clearTimeout(s);let y=o.responseTimeoutMs??12e4;s=setTimeout(()=>a.abort(),y);let b=await fetch(t,x);return b.ok?{ok:!0,paid:!0,response:b,amountPaid:S.amount,network:S.network,txSignature:go(b)}:{ok:!1,...await mt(b)}}catch(m){if(m instanceof Error&&m.name==="AbortError"){if(!i)return{ok:!1,reason:"timeout"};let f=await Ot(c,l.network,o.solanaRpcUrl);return f.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:l.amount,network:l.network,txSignature:f.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:f.detail}}return{ok:!1,reason:"error",detail:j(m)}}finally{s!==void 0&&clearTimeout(s)}}};function go(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let n=JSON.parse(Buffer.from(e,"base64").toString("utf8")),r=n.transaction??n.txHash??n.transactionHash;return typeof r=="string"?r:void 0}catch{return}}import*as On from"tweetnacl";import{Keypair as ya,VersionedTransaction as Aa,Transaction as ba}from"@solana/web3.js";var kn=Symbol.for("x402:keypair");function an(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let n=t.solana;if(n){let r=n[kn];if(r&&r.secretKey&&r.publicKey)return{publicKey:r.publicKey,signMessage:async o=>On.sign.detached(o,r.secretKey)}}return null}var ho=[Cn,Vn];async function yo(t){let e=an(t);if(!e)return fetch;try{return(await import("@x402/extensions/sign-in-with-x")).wrapFetchWithSIWx(fetch,e)}catch(n){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${j(n)}`),fetch}}async function cn(t,e,n,r){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o;try{o=await(await yo(n))(t,{...e})}catch(s){return{ok:!1,reason:"error",detail:j(s)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let s of ho){let a=await s.parseChallenge(o.clone());if(a)return s.pay(t,e,a,n,r)}return{ok:!1,reason:"no_payment_options"}}async function Ao(t,e={},n){let r=await Ge(t,e);if(r.kind==="free")return{result:{ok:!0,paid:!1,response:r.response},tab:null};if(r.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${r.schemesOffered.join(", ")})`},tab:null};if(r.kind==="error")return{result:{ok:!1,reason:"error",detail:r.detail},tab:null};let{offer:o}=r,s=BigInt(ae(n.perUnitCap));if(BigInt(o.amountAtomic)>s)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${s}`},tab:null};let a=n.tabs?.get(o.payTo);return(!a||!a.state.isOpen)&&(a=await Gt({vault:n.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:n.perUnitCap,totalCap:n.totalCap,sessionDuration:n.sessionDuration,facilitatorUrl:n.facilitatorUrl,onLiveSession:n.onLiveSession,reserveFinalVoucherV2:n.reserveFinalVoucherV2}),n.tabs?.set(o.payTo,a)),{result:await cn(t,e,{},{tab:a}),tab:a}}function bo(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:Pe(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function vo(t,e={},n={}){let r=n.cache?.get(t);if(r)return{kind:"terms",terms:r};let o=await Ge(t,e,n.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==ct)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let s=bo(o.offer);return n.cache?.set(t,s),{kind:"terms",terms:s}}export{At as DEFAULT_FACILITATOR_URL,Ee as DEXTER_VAULT_PROGRAM_ID,Ht as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,dn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,qt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,Hr as HOSTED_TAB_ACCEPTANCE_RULE,Gr as HOSTED_TAB_REGISTRATION_ENCODING,Wr as HOSTED_TAB_TERMS_VERSION,jr as HOSTED_TAB_VOUCHER_HEADER,Y as HistoricalV1MigrationRequiredError,or as INSTRUCTIONS_SYSVAR_ID,Ut as LiveSessionExistsError,rr as SECP256R1_PROGRAM_ID,xe as SessionScopeExceededError,re as TabClosedError,_e as UnsupportedNetworkError,ur as armTabOpen,oe as assertFinalVoucherV2ReservationReceipt,Pe as atomicToHuman,er as buildRegisterSessionKeyInstruction,tr as buildRevokeSessionKeyInstruction,nr as buildSecp256r1VerifyInstruction,Ln as buildVoucherMessage,ht as canonicalFinalVoucherV2ReservationNetwork,Le as deriveChannelId,yt as finalVoucherV2Digest,gn as finalVoucherV2ReservationBindingDigest,fn as finalVoucherV2ReservationBindingDigestFromIdentity,$e as finalVoucherV2ReservationIdentity,jt as finalVoucherV2ReservationMemo,Kn as finalVoucherV2Sequence,Gn as generateSessionKeypair,ae as humanToAtomic,Ft as makeSessionKey,Gt as openTab,Re as parseAtomic,Ao as payUrlWithTab,Ge as resolveTabOffer,vo as resolveTabTerms,lr as resumeTab,Yn as scopeCapAtomic,Fe as sessionRegisterMessage,Bn as sessionReplaceV1Message,Un as sessionRevokeMessage,Mn as sessionVoucherV2AuthorizationNonce,Dn as sessionVoucherV2Nonce,$t as signContextBoundFinalVoucherV2,Lt as signVoucher,Mr as tabFromGrant,Dt as voucherPayloadMessage,bt as voucherToHeader,Fn as voucherV2SequenceOrdinal};