@dexterai/x402 5.4.2 → 6.0.0-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/README.md +19 -4
  2. package/REFERENCE.md +81 -8
  3. package/dist/adapters/index.d.cts +3 -3
  4. package/dist/adapters/index.d.ts +3 -3
  5. package/dist/batch-settlement/index.d.cts +3 -3
  6. package/dist/batch-settlement/index.d.ts +3 -3
  7. package/dist/batch-settlement/seller/index.d.cts +4 -4
  8. package/dist/batch-settlement/seller/index.d.ts +4 -4
  9. package/dist/client/index.cjs +1 -1
  10. package/dist/client/index.d.cts +6 -6
  11. package/dist/client/index.d.ts +6 -6
  12. package/dist/client/index.js +1 -1
  13. package/dist/{constants-Icc4CXNG.d.cts → constants-BLvApMMl.d.cts} +1 -1
  14. package/dist/{constants-Icc4CXNG.d.ts → constants-BLvApMMl.d.ts} +1 -1
  15. package/dist/react/index.cjs +1 -1
  16. package/dist/react/index.d.cts +4 -4
  17. package/dist/react/index.d.ts +4 -4
  18. package/dist/react/index.js +1 -1
  19. package/dist/server/index.cjs +1 -1
  20. package/dist/server/index.d.cts +5 -5
  21. package/dist/server/index.d.ts +5 -5
  22. package/dist/server/index.js +1 -1
  23. package/dist/{sessions-BG2OYLBi.d.cts → sessions-rPdO1CgK.d.cts} +35 -3
  24. package/dist/{sessions-BG2OYLBi.d.ts → sessions-rPdO1CgK.d.ts} +35 -3
  25. package/dist/tab/adapters/solana/index.cjs +1 -1
  26. package/dist/tab/adapters/solana/index.d.cts +181 -26
  27. package/dist/tab/adapters/solana/index.d.ts +181 -26
  28. package/dist/tab/adapters/solana/index.js +1 -1
  29. package/dist/tab/index.cjs +5 -5
  30. package/dist/tab/index.d.cts +126 -21
  31. package/dist/tab/index.d.ts +126 -21
  32. package/dist/tab/index.js +4 -4
  33. package/dist/tab/seller/index.cjs +4 -4
  34. package/dist/tab/seller/index.d.cts +34 -26
  35. package/dist/tab/seller/index.d.ts +34 -26
  36. package/dist/tab/seller/index.js +4 -4
  37. package/dist/{types-BdS_uvNs.d.cts → types-BbvuPNXl.d.cts} +2 -2
  38. package/dist/{types-xQu1U4xk.d.cts → types-BvQpNtFw.d.cts} +9 -1
  39. package/dist/{types-xQu1U4xk.d.ts → types-BvQpNtFw.d.ts} +9 -1
  40. package/dist/{types-DY8xKheW.d.ts → types-CkcNYx1Q.d.ts} +2 -2
  41. package/dist/{types-Co5YYhVB.d.ts → types-CwLPKV8T.d.ts} +3 -3
  42. package/dist/{types-CZHPdVkg.d.cts → types-DnhCOjDx.d.cts} +3 -3
  43. package/dist/{types-_wdHzVG-.d.ts → types-DwVhPqOZ.d.ts} +2 -2
  44. package/dist/{types-WMqs5xII.d.cts → types-JpkrtFbZ.d.cts} +2 -2
  45. package/dist/{types-CSuISjXA.d.cts → types-OHNNM1J2.d.cts} +122 -7
  46. package/dist/{types-CSuISjXA.d.ts → types-OHNNM1J2.d.ts} +122 -7
  47. package/dist/utils/index.d.cts +1 -1
  48. package/dist/utils/index.d.ts +1 -1
  49. package/dist/{x402-client-BQKDeNxq.d.cts → x402-client-B8zdDeat.d.cts} +2 -2
  50. package/dist/{x402-client-BQKDeNxq.d.ts → x402-client-B8zdDeat.d.ts} +2 -2
  51. package/package.json +7 -6
package/dist/tab/index.js CHANGED
@@ -1,6 +1,6 @@
1
- var ye=class extends Error{constructor(n){super(`Network ${n} is not yet supported by @dexterai/x402/tab`);this.network=n;this.name="UnsupportedNetworkError"}},he=class extends Error{constructor(n,r){super(`Session scope exceeded: ${n}${r?` (${r})`:""}`);this.reason=n;this.name="SessionScopeExceededError"}},Q=class extends Error{constructor(n){super(`Tab ${n} is already closed`);this.channelId=n;this.name="TabClosedError"}},bt=class extends Error{constructor(n){super(`a LIVE session already exists for counterparty ${n.allowedCounterparty} (session ${n.sessionPubkeyHex.slice(0,16)}\u2026, expires ${n.expiresAtUnix}; on-chain spent=${n.spentAtomic}, crystallized=${n.crystallizedCumulativeAtomic}, frontier=${n.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=n;this.name="LiveSessionExistsError"}};import{PublicKey as Mt}from"@solana/web3.js";import{bytesToHex as ee}from"@noble/hashes/utils";import Bt from"tweetnacl";import{sessionRegisterMessage as St,sessionRevokeMessage as en,voucherPayloadMessage as wt,buildVoucherMessage as tn}from"@dexterai/vault/messages";import{sha256 as sn}from"@noble/hashes/sha256";function nn(){let t=Bt.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Tt(t,e,n){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:n}}function xt(t,e,n){if(n.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${n.length}`);let r=BigInt(e.cumulativeAmount),s=BigInt(t.scope.maxAmountAtomic);if(r>s)throw new Error(`voucher cumulative ${r} exceeds session cap ${s}`);let o=Math.floor(Date.now()/1e3);if(o>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${o}`);let a=wt({channelId:n,cumulativeAmount:r,sequenceNumber:e.sequenceNumber}),i=Bt.sign.detached(a,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:i}}function rn(t){return Ae(t.maxAmountAtomic)}function Ae(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function ke(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let n=new TextEncoder().encode(t.sellerUrl),r=sn.create();return r.update(t.vaultPda.toBytes()),r.update(n),r.update(e),r.digest()}var on=3600,Ie="https://x402.dexter.cash",$t=6;function Z(t,e=$t){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[n,r=""]=t.split(".");if(r.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let s=r.padEnd(e,"0"),o=`${n}${s}`.replace(/^0+(?=\d)/,"");return o===""?"0":o}function be(t,e=$t){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let n=t.padStart(e+1,"0"),r=n.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",s=n.slice(-e).replace(/0+$/,"");return s?`${r}.${s}`:r}var Ne=class{channelId;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber=0;closed=!1;lastSignedVoucher=null;previousSignedVoucher=null;constructor(e){this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,n=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:be(this.cumulativeAtomic.toString()),remaining:be(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-n)}}async signNextVoucher(e){if(this.closed)throw new Q(this.channelId);let n=BigInt(e);if(n<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(n>this.internals.perUnitCapAtomic)throw new he("cap_exceeded",`single voucher increment ${n} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let r=this.cumulativeAtomic+n;if(r>this.internals.totalCapAtomic)throw new he("cap_exceeded",`cumulative ${r} would exceed totalCap ${this.internals.totalCapAtomic}`);let s=this.sequenceNumber+1,o={channelId:this.channelId,cumulativeAmount:r.toString(),sequenceNumber:s},a=await this.internals.vault.signWithSession(this.internals.session,o);return this.previousSignedVoucher=this.lastSignedVoucher,this.lastSignedVoucher=a,this.sequenceNumber=s,this.cumulativeAtomic=r,a}rollbackVoucher(e){let n=this.lastSignedVoucher;if(!n||n.payload.sequenceNumber!==e.payload.sequenceNumber||n.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let r=this.previousSignedVoucher;if(r)this.sequenceNumber=r.payload.sequenceNumber,this.cumulativeAtomic=BigInt(r.payload.cumulativeAmount),this.lastSignedVoucher=r;else if(n.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null;else return!1;return this.previousSignedVoucher=null,!0}async stream(e,n){if(this.closed)throw new Q(this.channelId);let r=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),s=new Headers(n?.headers);s.set("X-Tab-Voucher",nt(r)),s.set("Accept","text/event-stream");let o=await fetch(e,{...n,headers:s});if(!o.ok){let a=await o.text().catch(()=>"");throw new Error(`tab.stream HTTP ${o.status}: ${a.slice(0,500)}`)}if(!o.body)throw new Error("tab.stream response has no body");return mn(o.body)}async close(){if(this.closed)throw new Q(this.channelId);let e={settleTx:""};this.lastSignedVoucher&&this.cumulativeAtomic>0n&&(e=await cn(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network));let n=(this.internals.closeMode??"revoke")==="revoke";return n&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:be(this.cumulativeAtomic.toString()),sessionRevoked:n,...e}}};function nt(t){return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ee(t.sessionPublicKey),sessionRegistration:ee(t.sessionRegistration),sessionSignature:ee(t.sessionSignature)}),"utf8").toString("base64")}function Se(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function an(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let n="non_monotonic_cumulative";if(e.error!==n&&e.reason!==n)return!1;let r=Se(e.attempted_cumulative),s=Se(e.on_chain_spent),o=Se(e.frontier);return r===null||s===null||o===null?!1:r>s&&r<=o}async function cn(t,e,n){let r=`${t.replace(/\/$/,"")}/tab/settle`,s={channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ee(e.sessionPublicKey),sessionSignature:ee(e.sessionSignature),sessionRegistration:ee(e.sessionRegistration),network:n},o=await fetch(r,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(s)}),a=await o.text();if(!o.ok){if(o.status===409&&an(a))return{settleTx:""};throw new Error(`tab settle ${o.status}: ${a.slice(0,500)}`)}let i;try{i=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(i.reason==="covered_by_frontier"){let u=Se(i.attemptedCumulative),p=Se(i.onChainSpent),d=Se(i.frontier);if(u!==null&&p!==null&&d!==null&&u>p&&u<=d)return{settleTx:""}}if(!i.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let c={settleTx:i.settleTx};return typeof i.grossAmount=="string"&&(c.grossAmount=i.grossAmount),typeof i.feeAmount=="string"&&(c.feeAmount=i.feeAmount),typeof i.netAmount=="string"&&(c.netAmount=i.netAmount),c}async function rt(t,e,n,r,s){let o=`${t.replace(/\/$/,"")}/tab/open`,a=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({buyer_swig_address:e,seller:s,max_amount_atomic:n.toString(),network:r})}),i=await a.json().catch(()=>({}));if(!a.ok||!i.success||!i.armed)throw new Error(`tab_open_unprotected: ${i.error??`http_${a.status}`}`);return{armed:!0,signature:i.signature??""}}async function Et(t){if(t.network!==t.vault.network)throw new ye(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new ye(t.network);let e=BigInt(Math.floor(Math.random()*4294967295)),n=new Mt(t.vault.vaultPda),r=ke({vaultPda:n,sellerUrl:t.seller,nonce:BigInt(e)}),s=ee(r),o=BigInt(Z(t.perUnitCap)),a=BigInt(Z(t.totalCap));if(o<=0n)throw new Error("perUnitCap must be > 0");if(a<o)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(Z(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let i=t.sessionDuration??on,c=Math.floor(Date.now()/1e3)+i,u=un(t.seller),p={channelId:s,maxAmountAtomic:a.toString(),revolvingCapacityAtomic:t.revolvingCapacity?Z(t.revolvingCapacity):a.toString(),expiresAtUnix:c,allowedCounterparty:u},d=await t.vault.authorizeSession(p,{onLiveSession:t.onLiveSession});return await rt(t.facilitatorUrl??Ie,t.vault.swigAddress,a,t.network,u),new Ne({vault:t.vault,network:t.network,seller:t.seller,counterparty:u,session:d,channelIdHex:s,channelIdBytes:r,perUnitCapAtomic:o,totalCapAtomic:a,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??Ie})}async function ln(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function un(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new Mt(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*mn(t){let e=t.getReader(),n=new TextDecoder,r="";try{for(;;){let{done:s,value:o}=await e.read();if(s)break;r+=n.decode(o,{stream:!0});let a;for(;(a=r.indexOf(`
1
+ var _e=class extends Error{constructor(n){super(`Network ${n} is not yet supported by @dexterai/x402/tab`);this.network=n;this.name="UnsupportedNetworkError"}network},Y=class extends Error{constructor(n){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${n}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=n;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},xe=class extends Error{constructor(n,r){super(`Session scope exceeded: ${n}${r?` (${r})`:""}`);this.reason=n;this.name="SessionScopeExceededError"}reason},re=class extends Error{constructor(n){super(`Tab ${n} is already closed`);this.channelId=n;this.name="TabClosedError"}channelId},Ut=class extends Error{constructor(n){super(`a LIVE session already exists for counterparty ${n.allowedCounterparty} (session ${n.sessionPubkeyHex.slice(0,16)}\u2026, expires ${n.expiresAtUnix}; on-chain spent=${n.spentAtomic}, crystallized=${n.crystallizedCumulativeAtomic}, frontier=${n.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=n;this.name="LiveSessionExistsError"}details};import{PublicKey as se}from"@solana/web3.js";import{bytesToHex as ae}from"@noble/hashes/utils";import ft from"tweetnacl";import{PublicKey as pt}from"@solana/web3.js";import{contextBoundVoucherV2Message as $n,finalVoucherV2Sequence as qn,sessionRegisterMessage as Wn,sessionVoucherV2AuthorizationNonce as Hn}from"@dexterai/vault/messages";import{deriveSessionPda as jn}from"@dexterai/vault/session";import{sessionRegisterMessage as Fe,sessionReplaceV1Message as Bn,sessionRevokeMessage as Un,sessionVoucherV2Nonce as Dn,sessionVoucherV2AuthorizationNonce as Mn,finalVoucherV2Sequence as Kn,voucherV2SequenceOrdinal as Fn,voucherPayloadMessage as Dt,buildVoucherMessage as Ln}from"@dexterai/vault/messages";import{sha256 as Zn}from"@noble/hashes/sha256";function Gn(){let t=ft.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Ft(t,e,n){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:n}}function Lt(t,e,n){if(n.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${n.length}`);if(t.registration.length===188&&new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let r=BigInt(e.cumulativeAmount),o=BigInt(t.scope.maxAmountAtomic);if(r>o)throw new Error(`voucher cumulative ${r} exceeds session cap ${o}`);let s=Math.floor(Date.now()/1e3);if(s>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${s}`);let i=Dt({channelId:n,cumulativeAmount:r,sequenceNumber:e.sequenceNumber}),a=ft.sign.detached(i,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:a}}var zn=/^[0-9a-f]{64}$/,Xn=(1n<<64n)-1n;function Mt(t){return Buffer.from(t).toString("hex")}function Jn(t){return Uint8Array.from(Buffer.from(t,"hex"))}function Kt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r+=1)n|=(t[r]??0)^(e[r]??0);return n===0}function $t(t){if(!zn.test(t.channelId)||t.sessionPublicKey.length!==32||t.sessionPrivateKey.length!==64||t.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(t.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let e=BigInt(t.cumulativeAmountAtomic);if(e>Xn)throw new Error("native_tab_v2_cumulative_amount_invalid");let n=new pt(t.programId),r=new pt(t.vaultPda),o=new pt(t.sessionPda),s=new pt(t.seller),[i]=jn(r,s,n);if(!o.equals(i))throw new Error("native_tab_v2_session_pda_mismatch");let a=t.sessionRegistration,c=new DataView(a.buffer,a.byteOffset,a.byteLength),u=c.getBigUint64(128,!0),d=c.getBigInt64(136,!0),f=c.getBigUint64(180,!0),m=t.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(m)||m<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Kt(a,Wn({programId:n,vaultPda:r,sessionPubkey:t.sessionPublicKey,maxAmount:u,expiresAt:d,allowedCounterparty:s,nonce:t.sessionNonce,maxRevolvingCapacity:f})))throw new Error("native_tab_v2_registration_identity_mismatch");if(u===0n||f===0n||f>u||d<=BigInt(m)||d>0x7fffffffffffffffn-604800n||e>u)throw new Error("native_tab_v2_registration_semantics_invalid");Hn(t.sessionNonce);let l=ft.sign.keyPair.fromSeed(t.sessionPrivateKey.subarray(0,32)),p=!1;try{p=Kt(l.publicKey,t.sessionPublicKey)&&Kt(t.sessionPrivateKey.subarray(32,64),t.sessionPublicKey)}finally{l.secretKey.fill(0)}if(!p)throw new Error("native_tab_v2_session_key_mismatch");let x=qn(t.sequenceOrdinal),y=$n({programId:n,vaultPda:r,sessionPda:o,seller:s,sessionNonce:t.sessionNonce,channelId:Jn(t.channelId),cumulativeAmount:e,sequenceNumber:x}),b=ft.sign.detached(y,t.sessionPrivateKey);return{channelId:t.channelId,cumulativeAmount:t.cumulativeAmountAtomic,sequenceNumber:x,sessionPublicKey:Mt(t.sessionPublicKey),sessionSignature:Mt(b),sessionRegistration:Mt(a)}}function Yn(t){return Re(t.maxAmountAtomic)}function Re(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function Le(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let n=new TextEncoder().encode(t.sellerUrl),r=Zn.create();return r.update(t.vaultPda.toBytes()),r.update(n),r.update(e),r.digest()}import{sha256 as mn}from"@noble/hashes/sha256";import{bytesToHex as Te}from"@noble/hashes/utils";var un=/^[0-9a-f]{64}$/,ln=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,Qn=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,qt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",Ht="dexter-native-tab-v2-reservation/v1",dn=`${Ht}:`;function Wt(t){if(t===null||typeof t=="string"||typeof t=="boolean")return t;if(typeof t=="number"){if(!Number.isFinite(t))throw new Error("canonical_non_finite_number");return t}if(typeof t=="bigint")return t.toString();if(Array.isArray(t))return t.map(Wt);if(typeof t=="object")return Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0).sort(([e],[n])=>e.localeCompare(n)).map(([e,n])=>[e,Wt(n)]));throw new Error("canonical_value_unsupported")}function pn(t){return JSON.stringify(Wt(t))}function ht(t){if(t==="solana:mainnet"||t===qt)return qt;throw new Error("native_tab_v2_reservation_network_unsupported")}function yt(t){return Te(mn(new TextEncoder().encode(pn({channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:Te(t.sessionPublicKey),sessionSignature:Te(t.sessionSignature),sessionRegistration:Te(t.sessionRegistration)}))))}function $e(t){let e=yt(t);return{voucherDigest:e,idempotencyKey:`native-tab-v2:${e}`}}function fn(t){return Te(mn(new TextEncoder().encode(pn({contract:Ht,network:ht(t.network),programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:t.voucherDigest,cumulativeAmountAtomic:t.cumulativeAmountAtomic,sequenceNumber:t.sequenceNumber}))))}function gn(t){let e=yt(t.voucher);return fn({network:t.network,programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:e,cumulativeAmountAtomic:t.voucher.payload.cumulativeAmount,sequenceNumber:t.voucher.payload.sequenceNumber})}function jt(t){return`${dn}${gn(t)}`}function K(t){throw new Error(`native_tab_v2_reservation_receipt_invalid:${t}`)}function gt(t,e){(!Number.isSafeInteger(t)||t<0)&&K(e)}function oe(t,e){(!e||typeof e!="object")&&K("missing");let n=yt(t.voucher);(!un.test(t.voucherDigest)||t.voucherDigest!==n)&&K("input_voucher_digest"),t.idempotencyKey!==`native-tab-v2:${n}`&&K("input_idempotency_identity");let r=BigInt(t.voucher.payload.cumulativeAmount),o=BigInt(t.previousCumulativeAtomic),s=BigInt(t.reservationAmountAtomic);(r<=o||r-o!==s||s<=0n)&&K("input_reservation_delta"),(t.voucher.payload.channelId!==t.channelId||(t.voucher.payload.sequenceNumber&2147483648)===0||(t.sessionNonce&2147483648)===0||t.voucher.sessionPublicKey.length!==32||t.voucher.sessionSignature.length!==64||t.voucher.sessionRegistration.length!==188)&&K("input_voucher_identity"),e.contract!=="dexter-native-tab-open-receipt/v1"&&e.contract!=="dexter-native-tab-open-receipt/v2"&&K("contract"),un.test(e.operationId)||K("operation_id"),ln.test(e.callerOperationId)||K("caller_operation_id"),Qn.test(e.transaction)||K("transaction"),e.commitment!=="finalized"&&K("commitment"),gt(e.confirmationSlot,"confirmation_slot"),gt(e.postStateSlot,"post_state_slot"),(e.confirmationSlot===0||e.postStateSlot<e.confirmationSlot)&&K("post_state_slot");let i,a;try{i=ht(t.network),a=ht(e.network)}catch{return K("network")}(a!==i||e.buyerSwigAddress!==t.buyerSwigAddress||e.vaultPda!==t.vaultPda||e.sessionPda!==t.sessionPda||e.seller!==t.seller||e.channelId!==t.channelId||e.sessionPublicKey!==Te(t.voucher.sessionPublicKey)||e.voucherDigest!==n||e.cumulativeAmountAtomic!==t.voucher.payload.cumulativeAmount||e.sequenceNumber!==t.voucher.payload.sequenceNumber||!ln.test(e.providerReceiptId)||e.reservationAmountAtomic!==t.reservationAmountAtomic||e.currentOutstandingBeforeAtomic!=="0"||e.currentOutstandingAfterAtomic!==t.reservationAmountAtomic)&&K("economic_identity"),gt(e.pendingVoucherCountBefore,"pending_voucher_count_before"),gt(e.pendingVoucherCountAfter,"pending_voucher_count_after"),e.contract==="dexter-native-tab-open-receipt/v1"?e.callerOperationId!==t.idempotencyKey&&K("idempotency_key"):(e.rootOperationId!==t.idempotencyKey||!Number.isSafeInteger(e.generation)||Number(e.generation)<2||!e.predecessorCallerOperationId||!e.predecessorLifecycleOperationId||!e.predecessorReleaseDigest||!e.stableReservationId||!e.economicEffectDigest)&&K("successor_identity")}import{deriveSessionPda as sr}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as er,buildRevokeSessionKeyInstruction as tr,deriveSwigWalletAddress as Uo}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as nr}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Ee,SECP256R1_PROGRAM_ID as rr,INSTRUCTIONS_SYSVAR_ID as or}from"@dexterai/vault/constants";var ir=3600,At="https://x402.dexter.cash",hn=6;function ie(t,e=hn){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[n,r=""]=t.split(".");if(r.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let o=r.padEnd(e,"0"),s=`${n}${o}`.replace(/^0+(?=\d)/,"");return s===""?"0":s}function Pe(t,e=hn){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let n=t.padStart(e+1,"0"),r=n.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",o=n.slice(-e).replace(/0+$/,"");return o?`${r}.${o}`:r}var qe=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;lastSignedVoucherIncrementAtomic=null;previousSignedVoucher=null;previousSignedVoucherIncrementAtomic=null;constructor(e){if(this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=e.initialSequenceOrdinal??0,this.isFinalV2=yn(e.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!e.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,n=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Pe(this.cumulativeAtomic.toString()),remaining:Pe(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-n)}}async signNextVoucher(e){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(e)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(e){if(this.closed)throw new re(this.channelId);let n=BigInt(e);if(n<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(n>this.internals.perUnitCapAtomic)throw new xe("cap_exceeded",`single voucher increment ${n} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let r=this.cumulativeAtomic+n;if(r>this.internals.totalCapAtomic)throw new xe("cap_exceeded",`cumulative ${r} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,s={channelId:this.channelId,cumulativeAmount:r.toString(),sequenceNumber:o},i=await this.internals.vault.signWithSession(this.internals.session,s);if(i.payload.channelId!==s.channelId||i.payload.cumulativeAmount!==s.cumulativeAmount||(this.isFinalV2?(i.payload.sequenceNumber&2147483647)!==o||(i.payload.sequenceNumber&2147483648)===0:i.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");let a;this.internals.beforeVoucherRelease&&(a=await this.internals.beforeVoucherRelease({voucher:i,incrementAtomic:n.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}));let c=a?{...i,reservationReceipt:a}:i;return this.previousSignedVoucher=this.lastSignedVoucher,this.previousSignedVoucherIncrementAtomic=this.lastSignedVoucherIncrementAtomic,this.lastSignedVoucher=c,this.lastSignedVoucherIncrementAtomic=n,this.sequenceNumber=o,this.cumulativeAtomic=r,c}beginOperation(e){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=e}endOperation(e){if(this.operationInFlight!==e)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(e){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(e)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(e){let n=this.lastSignedVoucher;if(!n||n.payload.sequenceNumber!==e.payload.sequenceNumber||n.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let r=this.previousSignedVoucher;if(r){let o=this.previousSignedVoucherIncrementAtomic;if(o===null)return!1;this.sequenceNumber=r.payload.sequenceNumber,this.cumulativeAtomic=BigInt(r.payload.cumulativeAmount),this.lastSignedVoucher=r,this.lastSignedVoucherIncrementAtomic=o}else if(n.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null,this.lastSignedVoucherIncrementAtomic=null;else return!1;return this.previousSignedVoucher=null,this.previousSignedVoucherIncrementAtomic=null,!0}async stream(e,n){if(this.closed)throw new re(this.channelId);let r=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(n?.headers);o.set("X-Tab-Voucher",bt(r)),o.set("Accept","text/event-stream");let s=await fetch(e,{...n,headers:o});if(!s.ok){let i=await s.text().catch(()=>"");throw new Error(`tab.stream HTTP ${s.status}: ${i.slice(0,500)}`)}if(!s.body)throw new Error("tab.stream response has no body");return dr(s.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new re(this.channelId);let e={settleTx:""};if(this.lastSignedVoucher&&this.cumulativeAtomic>0n){let r=this.isFinalV2?this.lastSignedVoucherIncrementAtomic:this.cumulativeAtomic-this.initialCumulativeAtomic;if(r===null||r<=0n)throw new Error("tab_settle_attempted_amount_missing");e=await cr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network,r.toString())}let n=(this.internals.closeMode??"revoke")==="revoke";return n&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Pe(this.cumulativeAtomic.toString()),sessionRevoked:n,...e}}finally{this.endOperation("close")}}};function yn(t){return t.registration.length!==188?!1:(new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function bt(t,e){let n=e??t.reservationReceipt;if((t.payload.sequenceNumber&2147483648)!==0&&!n)throw new Error("native_tab_v2_reservation_receipt_required");return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ae(t.sessionPublicKey),sessionRegistration:ae(t.sessionRegistration),sessionSignature:ae(t.sessionSignature),...n?{reservationReceipt:n}:{}}),"utf8").toString("base64")}function Ie(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function ar(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let n="non_monotonic_cumulative";if(e.error!==n&&e.reason!==n)return!1;let r=Ie(e.attempted_cumulative),o=Ie(e.on_chain_spent),s=Ie(e.frontier);return r===null||o===null||s===null?!1:r>o&&r<=s}async function cr(t,e,n,r){let o=`${t.replace(/\/$/,"")}/tab/settle`,s={attemptedAmount:r,channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ae(e.sessionPublicKey),sessionSignature:ae(e.sessionSignature),sessionRegistration:ae(e.sessionRegistration),network:n},i=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(s)}),a=await i.text();if(!i.ok){if(i.status===409&&ar(a))return{settleTx:""};throw new Error(`tab settle ${i.status}: ${a.slice(0,500)}`)}let c;try{c=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(c.reason==="covered_by_frontier"){let d=Ie(c.attemptedCumulative),f=Ie(c.onChainSpent),m=Ie(c.frontier);if(d!==null&&f!==null&&m!==null&&d>f&&d<=m)return{settleTx:""}}if(!c.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let u={settleTx:c.settleTx};return typeof c.grossAmount=="string"&&(u.grossAmount=c.grossAmount),typeof c.feeAmount=="string"&&(u.feeAmount=c.feeAmount),typeof c.netAmount=="string"&&(u.netAmount=c.netAmount),u}async function ur(t,e,n,r,o){throw new Y("armTabOpen")}async function Gt(t){if(t.network!==t.vault.network)throw new _e(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new _e(t.network);if(t.vault.sessionVoucherVersion!==1&&t.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(t.vault.sessionVoucherVersion===1)throw new Y("openTab");if(t.vault.sessionVoucherVersion===2&&(!t.reserveFinalVoucherV2||!t.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let e=BigInt(Math.floor(Math.random()*4294967295)),n=new se(t.vault.vaultPda),r=Le({vaultPda:n,sellerUrl:t.seller,nonce:BigInt(e)}),o=ae(r),s=BigInt(ie(t.perUnitCap)),i=BigInt(ie(t.totalCap));if(s<=0n)throw new Error("perUnitCap must be > 0");if(i<s)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(ie(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let a=t.sessionDuration??ir,c=Math.floor(Date.now()/1e3)+a,u=mr(t.seller),d={channelId:o,maxAmountAtomic:i.toString(),revolvingCapacityAtomic:t.revolvingCapacity?ie(t.revolvingCapacity):i.toString(),expiresAtUnix:c,allowedCounterparty:u},f=await t.vault.authorizeSession(d,{onLiveSession:t.onLiveSession}),m=yn(f);if(t.vault.sessionVoucherVersion!==(m?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let S;if(m){if(!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let l=f.registration,p=new DataView(l.buffer,l.byteOffset,l.byteLength),x=new se(l.subarray(32,64)),y=new se(l.subarray(64,96)),b=new se(l.subarray(144,176)),_=p.getUint32(176,!0),C=p.getBigUint64(180,!0),N=Fe({programId:Ee,vaultPda:n,sessionPubkey:f.publicKey,maxAmount:i,expiresAt:BigInt(c),allowedCounterparty:new se(u),nonce:_,maxRevolvingCapacity:BigInt(d.revolvingCapacityAtomic)});if(!x.equals(Ee)||!y.equals(n)||!b.equals(new se(u))||C!==BigInt(d.revolvingCapacityAtomic)||!Buffer.from(l).equals(Buffer.from(N)))throw new Error("native_tab_v2_registration_identity_mismatch");let[F]=sr(y,b,x);S=async({voucher:M,incrementAtomic:E,previousCumulativeAtomic:V})=>{let h=$e(M),v={network:t.network,programId:x.toBase58(),buyerSwigAddress:t.vault.swigAddress,vaultPda:y.toBase58(),sessionPda:F.toBase58(),seller:b.toBase58(),channelId:o,sessionNonce:_,reservationAmountAtomic:E,previousCumulativeAtomic:V,...h,voucher:M},w=await t.reserveFinalVoucherV2(v);return oe(v,w),await t.vault.verifyFinalVoucherV2Reservation(v,w),w}}return new qe({vault:t.vault,network:t.network,seller:t.seller,counterparty:u,session:f,channelIdHex:o,channelIdBytes:r,perUnitCapAtomic:s,totalCapAtomic:i,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??At,beforeVoucherRelease:S})}async function lr(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function mr(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new se(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*dr(t){let e=t.getReader(),n=new TextDecoder,r="";try{for(;;){let{done:o,value:s}=await e.read();if(o)break;r+=n.decode(s,{stream:!0});let i;for(;(i=r.indexOf(`
2
2
 
3
- `))!==-1;){let i=r.slice(0,a);r=r.slice(a+2);let c=pn(i);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(p,d)=>d==="n"?`
4
- `:"\\");yield new TextEncoder().encode(u)}}}}finally{e.releaseLock()}}function pn(t){let e=null,n=[];for(let r of t.split(`
3
+ `))!==-1;){let a=r.slice(0,i);r=r.slice(i+2);let c=pr(a);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(d,f)=>f==="n"?`
4
+ `:"\\");yield new TextEncoder().encode(u)}}}}finally{e.releaseLock()}}function pr(t){let e=null,n=[];for(let r of t.split(`
5
5
  `))r.startsWith("event:")?e=r.slice(6).trim():r.startsWith("data:")&&n.push(r.slice(5).trimStart());return{eventName:e,data:n.length?n.join(`
6
- `):null}}import Ue from"tweetnacl";import{Connection as An,PublicKey as Oe}from"@solana/web3.js";import{bytesToHex as bn}from"@noble/hashes/utils";import{fetchSessionAccount as Sn,isSessionLive as wn}from"@dexterai/vault/session";import{readVaultFull as Tn}from"@dexterai/vault/reader";import{buildRegisterSessionKeyInstruction as dn,buildRevokeSessionKeyInstruction as fn,deriveSwigWalletAddress as gr}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as gn}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as vt,SECP256R1_PROGRAM_ID as yn,INSTRUCTIONS_SYSVAR_ID as hn}from"@dexterai/vault/constants";var Rt="solana:mainnet";async function xn(t){let e=t.facilitatorUrl??Ie,n=t.programId??vt,r=new Oe(t.vaultPda),s=new Oe(t.params.counterparty),o=Ae(t.perUnitCapAtomic);if(o<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let a=Ae(t.params.maxAmountAtomic),i=Ae(t.params.maxRevolvingCapacityAtomic),c=En(t.sessionSecretKey),u=new Oe(t.params.sessionPubkey).toBytes();if(!Kt(c.publicKey,u))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new Oe(c.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let p=Ue.randomBytes(32),d=Ue.sign.detached(p,c.secretKey);if(!Ue.sign.detached.verify(p,d,u))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let f=St({programId:n,vaultPda:r,sessionPubkey:c.publicKey,maxAmount:a,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:s,nonce:t.params.nonce,maxRevolvingCapacity:i}),T=typeof t.connection=="string"?new An(t.connection,"confirmed"):t.connection,l=await Sn(T,r,s,n);if(!l||l.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!wn(l))throw new Error(l.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${l.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${l.session.expiresAt})`);if(!Kt(l.session.sessionPubkey,c.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new Oe(l.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(l.session.maxAmount!==a||l.session.expiresAt!==t.params.expiresAtUnix||l.session.nonce!==t.params.nonce||l.session.maxRevolvingCapacity!==i)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${l.session.maxAmount} expiresAt=${l.session.expiresAt} nonce=${l.session.nonce} revolving=${l.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);let R=l.session.spent>l.session.crystallizedCumulative?l.session.spent:l.session.crystallizedCumulative;if(R>=a)throw new Error(`tab_exhausted: on-chain frontier ${R} has consumed the session cap ${a} \u2014 no voucher can strictly exceed it; open a new grant`);let x=t.sellerUrl??t.params.counterparty,g=BigInt(Math.floor(Math.random()*4294967295)),y=ke({vaultPda:r,sellerUrl:x,nonce:g}),b=bn(y),C=t.swigAddress;if(!C){let U=await Tn(T,r);if(!U.exists||!U.swigAddress)throw new Error(`tab_vault_unreadable: vault ${r.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);C=U.swigAddress}await rt(e,C,a,Rt,t.params.counterparty);let D={channelId:b,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},K=Tt({publicKey:c.publicKey,privateKey:c.secretKey},D,f),$={network:Rt,swigAddress:C,vaultPda:r.toBase58(),authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(U,B)=>xt(U,B,y),signOpenTab:async U=>U.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")}};return new Ne({vault:$,network:Rt,seller:x,counterparty:t.params.counterparty,session:K,channelIdHex:b,channelIdBytes:y,perUnitCapAtomic:o,totalCapAtomic:a,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:R,closeMode:"settle-only"})}function En(t){if(t.length===64)return Ue.sign.keyPair.fromSecretKey(t);if(t.length===32)return Ue.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function Kt(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}import{PublicKey as _n}from"@solana/web3.js";var Lt=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],vn=new Map(Lt.map(t=>[t.caip2.toLowerCase(),t])),Rn=new Map(Lt.map(t=>[t.bare.toLowerCase(),t]));function De(t){if(!t)return null;let e=t.toLowerCase(),n=vn.get(e)||Rn.get(e);return n?{caip2:n.caip2,bare:n.bare,family:n.family}:null}function Pt(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),n=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(n,"base64").toString("utf8"))}function Pn(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,s=De(String(r.network??""));s&&e.push({scheme:String(r.scheme??"exact"),network:s,amount:String(r.amount??r.maxAmountRequired??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}async function st(t){let e=t.headers.get("payment-required");if(!e)return null;let n;try{n=Pt(e)}catch{return null}let r=Array.isArray(n.accepts)?n.accepts:[];return r.length===0?null:{x402Version:2,options:Pn(r),resourceUrl:n.resource&&typeof n.resource=="object"?String(n.resource.url??""):void 0}}async function Be(t,e={},n=fetch){let r={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(r.body=e.body);let s;try{s=await n(t,r)}catch(i){return{kind:"error",detail:`probe failed: ${i?.message??String(i)}`}}if(s.status!==402)return s.ok?{kind:"free",response:s}:{kind:"error",detail:`probe returned HTTP ${s.status}`};let o=await st(s);if(!o)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let a=o.options.find(i=>i.scheme==="tab"&&i.network.family==="svm");if(!a)return{kind:"no_tab",schemesOffered:o.options.map(i=>i.scheme)};try{new _n(a.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${a.payTo}"`}}return{kind:"offer",offer:{payTo:a.payTo,amountAtomic:a.amount,asset:a.asset,networkCaip2:a.network.caip2,resourceUrl:o.resourceUrl}}}var Me="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",ot="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",at="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",te=Me,$e=ot,Ke=at,ne="eip155:8453",we="eip155:84532",Te="eip155:42161",xe="eip155:137",Ee="eip155:10",ve="eip155:43114",Re="eip155:56",re="eip155:480",se="eip155:143",oe="eip155:4663",ae="eip155:1187947933",ie="eip155:324705682",Pe="eip155:1",ce=ne,it=we,Le=Te,Ve=xe,We=Ee,He=ve,Fe=Re,qe=re,je=se,Je=oe,Ge=ae,ze=ie,Xe=Pe,Ye="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",Vt="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",Wt="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",_t="0x55d398326f99059fF775485246999027B3197955",ct="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",Ct="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",lt={[Re]:ct,[ne]:Wt,[we]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[Te]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[xe]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Ee]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[ve]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[re]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[se]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[oe]:Ct,[ae]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[ie]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Pe]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},ut={[_t]:{symbol:"USDT",decimals:18},[ct]:{symbol:"USDC",decimals:18}};var mt={[re]:{name:"USDC",version:"2"},[se]:{name:"USDC",version:"2"},[oe]:{name:"Global Dollar",version:"1"},[ae]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[ie]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},G="0x000000000022D473030F116dDEE9F6B43aC78BA3",Qe="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",Ze={[Re]:56,[ne]:8453,[we]:84532,[Te]:42161,[xe]:137,[Ee]:10,[ve]:43114,[re]:480,[se]:143,[oe]:4663,[ae]:1187947933,[ie]:324705682,[Pe]:1},le={[Me]:"https://api.dexter.cash/api/solana/rpc",[ot]:"https://api.devnet.solana.com",[at]:"https://api.testnet.solana.com"},O={[Re]:"https://api.dexter.cash/api/evm/bsc/rpc",[ne]:"https://api.dexter.cash/api/base/rpc",[we]:"https://sepolia.base.org",[Te]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[xe]:"https://api.dexter.cash/api/evm/polygon/rpc",[Ee]:"https://api.dexter.cash/api/evm/optimism/rpc",[ve]:"https://api.dexter.cash/api/evm/avalanche/rpc",[re]:"https://worldchain-mainnet.g.alchemy.com/public",[se]:"https://rpc.monad.xyz",[oe]:"https://rpc.mainnet.chain.robinhood.com",[ae]:"https://skale-base.skalenodes.com/v1/base",[ie]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Pe]:"https://eth.llamarpc.com"};var I=class t extends Error{code;details;constructor(e,n,r){super(n),this.name="X402Error",this.code=e,this.details=r,Object.setPrototypeOf(this,t.prototype)}};import{PublicKey as ue,Connection as kt,TransactionMessage as Cn,VersionedTransaction as kn,ComputeBudgetProgram as Ht}from"@solana/web3.js";import{getAssociatedTokenAddress as It,getAccount as In,createTransferCheckedInstruction as Nn,getMint as On,TOKEN_PROGRAM_ID as Ft,TOKEN_2022_PROGRAM_ID as pt}from"@solana/spl-token";var Un=12e3,Dn=1;function me(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var dt=class{name="Solana";networks=[te,$e,Ke];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:le[e]?le[e]:e==="solana"?le[te]:e==="solana-devnet"?le[$e]:e==="solana-testnet"?le[Ke]:le[te]}getAddress(e){return me(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return me(e)?e.publicKey!==null:!1}async getBalance(e,n,r){if(!me(n)||!n.publicKey)return 0;let s=r||this.getDefaultRpcUrl(e.network),o=new kt(s,"confirmed"),a=new ue(n.publicKey.toBase58()),i=new ue(e.asset);try{let u=(await o.getAccountInfo(i,"confirmed"))?.owner.toBase58()===pt.toBase58()?pt:Ft,p=await It(i,a,!1,u),d=await In(o,p,void 0,u),f=e.extra?.decimals??6;return Number(d.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,n,r){if(!me(n))throw new Error("Invalid Solana wallet");if(!n.publicKey)throw new Error("Wallet not connected");let s=r||this.getDefaultRpcUrl(e.network),o=new kt(s,"confirmed"),a=new ue(n.publicKey.toBase58()),{payTo:i,asset:c,extra:u}=e,p=e.amount??e.maxAmountRequired;if(!p)throw new Error("Missing amount in payment requirements");if(!u?.feePayer)throw new Error("Missing feePayer in payment requirements");let d=new ue(u.feePayer),f=new ue(c),T=new ue(i);this.log("Building transaction:",{from:a.toBase58(),to:i,amount:p,asset:c,feePayer:u.feePayer});let l=[];l.push(Ht.setComputeUnitLimit({units:Un})),l.push(Ht.setComputeUnitPrice({microLamports:Dn}));let R=await o.getAccountInfo(f,"confirmed");if(!R)throw new Error(`Token mint ${c} not found`);let x=R.owner.toBase58()===pt.toBase58()?pt:Ft,g=await On(o,f,void 0,x);typeof u?.decimals=="number"&&g.decimals!==u.decimals&&this.log(`Decimals mismatch: requirements say ${u.decimals}, mint says ${g.decimals}`);let y=await It(f,a,!1,x),b=await It(f,T,!0,x);if(!await o.getAccountInfo(y,"confirmed"))throw new Error(`No token account found for ${c}. Please ensure you have USDC in your wallet.`);if(!await o.getAccountInfo(b,"confirmed"))throw new Error(`Seller token account not found. The seller (${i}) must have a USDC account.`);let K=BigInt(p);l.push(Nn(y,f,b,a,K,g.decimals,[],x));let{blockhash:$}=await o.getLatestBlockhash("confirmed"),U=new Cn({payerKey:d,recentBlockhash:$,instructions:l}).compileToV0Message(),B=new kn(U),h=await n.signTransaction(B);return this.log("Transaction signed successfully"),{serialized:Buffer.from(h.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:y.toBase58(),destinationAta:b.toBase58(),asset:c,amount:p,blockhash:$}}}async confirmSettlement(e,n){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let r=new kt(n,"confirmed"),s=new ue(e.destinationAta),o=await r.getSignaturesForAddress(s,{limit:25});if(o.length===0)return{settled:!1};let a=BigInt(e.amount);for(let i of o){if(i.err)continue;let c=await r.getTransaction(i.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),p=c.meta.preTokenBalances??[],d=c.meta.postTokenBalances??[];for(let f of d){if(f.mint!==e.asset)continue;let T=u[f.accountIndex];if(!T||!T.equals(s))continue;let l=p.find(g=>g.accountIndex===f.accountIndex),R=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-R===a)return{settled:!0,txSignature:i.signature}}}return{settled:!1}}};function z(t){return new dt(t)}var Bn={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},qt=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function pe(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var ft=class{name="EVM";networks=[Fe,ce,it,Xe,Le,Ve,We,He,qe,je,Je,Ge,ze];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:O[e]?O[e]:e==="base"?O[ce]:e==="bsc"?O[Fe]:e==="ethereum"?O[Xe]:e==="arbitrum"?O[Le]:e==="polygon"?O[Ve]:e==="optimism"?O[We]:e==="avalanche"?O[He]:e==="world"?O[qe]:e==="monad"?O[je]:e==="robinhood"?O[Je]:e==="skale-base"?O[Ge]:e==="skale-base-sepolia"?O[ze]:O[ce]}getAddress(e){return pe(e)?e.address:null}isConnected(e){return pe(e)?!!e.address:!1}getChainId(e){if(Ze[e])return Ze[e];if(e.startsWith("eip155:")){let n=e.split(":")[1];return parseInt(n,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,n,r){if(!pe(n)||!n.address)return 0;let s=r||this.getDefaultRpcUrl(e.network);try{let o=this.encodeBalanceOf(n.address),a=await fetch(s,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:o},"latest"]})});if(!a.ok)throw new Error(`RPC request failed: ${a.status}`);let i=await a.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")return 0;let c=BigInt(i.result),u=e.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(o){throw o}}encodeBalanceOf(e){let n="0x70a08231",r=e.slice(2).toLowerCase().padStart(64,"0");return n+r}async confirmSettlement(e,n){if(e.kind==="eip3009"){let r="0xe94a0102",s=e.from.slice(2).toLowerCase().padStart(64,"0"),o=e.nonce.slice(2).toLowerCase().padStart(64,"0"),a=r+s+o,i=await this.ethCall(n,e.asset,a);return{settled:BigInt(i)!==0n}}if(e.kind==="permit2"){let r="0x4fe02b44",s=BigInt(e.nonce),o=s>>8n,a=s&0xffn,i=e.from.slice(2).toLowerCase().padStart(64,"0"),c=o.toString(16).padStart(64,"0"),u=r+i+c,p=await this.ethCall(n,G,u);return{settled:(BigInt(p)>>a&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,n,r){let s=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:r},"latest"]})});if(!s.ok)throw new Error(`RPC request failed: ${s.status}`);let o=await s.json();if(o.error)throw new Error(`RPC error: ${JSON.stringify(o.error)}`);if(!o.result||o.result==="0x")throw new Error("RPC returned an empty result");return o.result}async buildTransaction(e,n,r){if(!pe(n))throw new Error("Invalid EVM wallet");if(!n.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,n,r);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,n,r);let{payTo:s,asset:o,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:n.address,to:s,amount:i,asset:o,network:e.network});let c=this.getChainId(e.network),u=mt[`eip155:${c}`],p={name:a?.name??u?.name??"USD Coin",version:a?.version??u?.version??"2",chainId:BigInt(c),verifyingContract:o},d={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},f=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(f);let T="0x"+[...f].map(b=>b.toString(16).padStart(2,"0")).join(""),l=Math.floor(Date.now()/1e3),R={from:n.address,to:s,value:i,validAfter:String(l-600),validBefore:String(l+(e.maxTimeoutSeconds||60)),nonce:T},x={from:n.address,to:s,value:BigInt(i),validAfter:BigInt(l-600),validBefore:BigInt(l+(e.maxTimeoutSeconds||60)),nonce:T};if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let g=await n.signTypedData({domain:p,types:d,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:R,signature:g}),signature:g,settlementProbe:{kind:"eip3009",from:n.address,nonce:T,asset:o,chainId:c}}}async buildApprovalTransaction(e,n,r){let{payTo:s,asset:o,extra:a}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");let c=a?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:n.address,to:s,amount:i,asset:o,network:e.network,facilitatorContract:c});let u=r||this.getDefaultRpcUrl(e.network),p=a?.fee??"0",d=BigInt(i)+BigInt(p),f=await this.readAllowance(u,o,n.address,c);if(f<d){if(!n.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let B=this.calculateApprovalAmount(i,p,a?.approvalStrategy);this.log(`Approving ${B} for ${c} (current allowance: ${f})`);let h=await n.sendTransaction({to:o,data:this.encodeApprove(c,B),value:0n});this.log(`Approval tx sent: ${h}`),await this.waitForReceipt(u,h),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let T=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(T);let l=[...T].reduce((B,h)=>B*256n+BigInt(h),0n).toString(),R=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(R);let x="0x"+[...R].map(B=>B.toString(16).padStart(2,"0")).join(""),y=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),b=a?.eip712Domain,C=b?{name:b.name,version:b.version,chainId:BigInt(b.chainId),verifyingContract:b.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},D=a?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},K={from:n.address,to:s,token:o,amount:BigInt(i),fee:BigInt(p),nonce:BigInt(l),deadline:BigInt(y),paymentId:x},$=await n.signTypedData({domain:C,types:D,primaryType:"Payment",message:K});this.log("EIP-712 Payment signature obtained");let U={from:n.address,to:s,token:o,amount:i,fee:p,nonce:l,deadline:y,paymentId:x,signature:$};return{serialized:JSON.stringify(U),signature:$}}async buildPermit2Transaction(e,n,r){let{payTo:s,asset:o}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:n.address,to:s,amount:a,asset:o,network:e.network});let i=r||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(i,o,n.address,G),u;if(c<BigInt(a)){let C=this.encodeApprove(G,qt);if(n.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let D=this.getChainId(e.network),K=await this.readGasPrice(i),$=await this.readNonce(i,n.address),U=await n.signTransaction({to:o,data:C,chainId:D,gas:50000n,gasPrice:K,nonce:$});u={erc20ApprovalGasSponsoring:{info:{from:n.address,asset:o,spender:G,amount:qt.toString(),signedTransaction:U,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(n.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let D=await n.sendTransaction({to:o,data:C,value:0n});this.log(`Permit2 approval tx sent: ${D}`),await this.waitForReceipt(i,D),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let p=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(p);let d=[...p].reduce((C,D)=>C*256n+BigInt(D),0n),f=Math.floor(Date.now()/1e3),T=f-600,l=f+(e.maxTimeoutSeconds||300),R=this.getChainId(e.network),x={name:"Permit2",chainId:BigInt(R),verifyingContract:G},g={permitted:{token:o,amount:BigInt(a)},spender:Qe,nonce:d,deadline:BigInt(l),witness:{to:s,validAfter:BigInt(T)}},y=await n.signTypedData({domain:x,types:Bn,primaryType:"PermitWitnessTransferFrom",message:g});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let b={signature:y,permit2Authorization:{from:n.address,permitted:{token:o,amount:a},spender:Qe,nonce:d.toString(),deadline:String(l),witness:{to:s,validAfter:String(T)}}};return{serialized:JSON.stringify(b),signature:y,extensions:u,settlementProbe:{kind:"permit2",from:n.address,nonce:d.toString(),chainId:R}}}async readAllowance(e,n,r,s){let o="0xdd62ed3e",a=r.slice(2).toLowerCase().padStart(64,"0"),i=s.slice(2).toLowerCase().padStart(64,"0"),c=o+a+i;try{let p=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:c},"latest"]})})).json();return p.error||!p.result||p.result==="0x"?0n:BigInt(p.result)}catch{return 0n}}encodeApprove(e,n){let r="0x095ea7b3",s=e.slice(2).toLowerCase().padStart(64,"0"),o=n.toString(16).padStart(64,"0");return r+s+o}async waitForReceipt(e,n,r=3e4){let s=Date.now();for(;Date.now()-s<r;){try{let a=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[n]})})).json();if(a.result){if(a.result.status==="0x0")throw new Error(`Approval transaction reverted: ${n}`);return}}catch(o){if(o instanceof Error&&o.message.includes("reverted"))throw o}await new Promise(o=>setTimeout(o,2e3))}throw new Error(`Approval transaction receipt timeout after ${r}ms: ${n}`)}async readGasPrice(e){try{let r=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return r.result?BigInt(r.result):50000000n}catch{return 50000000n}}async readNonce(e,n){try{let s=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[n,"latest"]})})).json();return s.result?parseInt(s.result,16):0}catch{return 0}}calculateApprovalAmount(e,n,r){let s=BigInt(e)+BigInt(n);if(!r||r.mode==="exact")return s;let o=BigInt(r.defaultMultiple??10),a=s*o;if(r.maxCapUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.maxCapUsd*Math.pow(10,i)));if(a>c)return c}if(r.exactAboveUsd){let i=this.inferDecimals(e),c=BigInt(Math.floor(r.exactAboveUsd*Math.pow(10,i)));if(BigInt(e)>c)return s}return a}inferDecimals(e){return e.length>12?18:6}};function _e(t){return new ft(t)}function Nt(t){if(t===Ye||t===Vt)return!0;let e=t.toLowerCase();for(let n of Object.values(lt))if(n.toLowerCase()===e)return!0;for(let n of Object.keys(ut))if(n.toLowerCase()===e)return!0;return!1}function Mn(t){return{[Me]:"Solana",[ot]:"Solana Devnet",[at]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[ne]:"Base",[we]:"Base Sepolia",[Pe]:"Ethereum",[Te]:"Arbitrum",[xe]:"Polygon",[Ee]:"Optimism",[ve]:"Avalanche",[Re]:"BSC",[re]:"World Chain",[se]:"Monad",[oe]:"Robinhood Chain",[ae]:"SKALE Base",[ie]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function jt(t,e){let n=Mn(t);return n===t?e:n}async function $n(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let n=t,r=new Headers(n.headers);e?.headers&&new Headers(e.headers).forEach((a,i)=>r.set(i,a));let s={method:e?.method??n.method,headers:r,signal:e?.signal??n.signal,redirect:e?.redirect??n.redirect,credentials:e?.credentials??n.credentials},o=(s.method??"GET").toUpperCase();return e&&"body"in e?s.body=e.body:o!=="GET"&&o!=="HEAD"&&n.body&&(s.body=await n.arrayBuffer()),[n.url,s]}var Kn=new WeakMap;function Jt(t){let{adapters:e=[z({verbose:t.verbose}),_e({verbose:t.verbose})],wallets:n,wallet:r,preferredNetwork:s,rpcUrls:o={},maxAmountAtomic:a,fetch:i=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:p,onPaymentDispatched:d,maxRetries:f=0,retryDelayMs:T=500}=t,l=c?console.log.bind(console,"[x402]"):()=>{};async function R(h,w){let E;for(let A=0;A<=f;A++)try{let v=await i(h,w);if(v.status>=502&&v.status<=504&&A<f){l(`Retry ${A+1}/${f}: server returned ${v.status}`),await new Promise(P=>setTimeout(P,T*Math.pow(2,A)));continue}return v}catch(v){E=v,A<f&&(l(`Retry ${A+1}/${f}: ${v instanceof Error?v.message:"network error"}`),await new Promise(P=>setTimeout(P,T*Math.pow(2,A))))}throw E}let x=new Map;function g(h){try{let w=new URL(h).host,E=x.get(w);if(E&&E.expiresAt>Date.now()/1e3+10)return E.jwt;E&&x.delete(w)}catch{}return null}function y(h,w){try{let E=new URL(h).host,A=w.split(".");if(A.length===3){let v=JSON.parse(atob(A[1].replace(/-/g,"+").replace(/_/g,"/"))),P=Math.floor(Date.now()/1e3),_=P+86400,L=Math.min(typeof v.exp=="number"?v.exp:P,_);x.set(E,{jwt:w,expiresAt:L}),l("Access pass cached for",E,"| expires:",new Date(L*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let b=n||{};r&&!b.solana&&me(r)&&(b.solana=r),r&&!b.evm&&pe(r)&&(b.evm=r);function C(h){let w=[];for(let E of h){let A=E.scheme??"exact";if(A!=="exact"&&A!=="exact-approval")continue;let v=e.find(_=>_.canHandle(E.network));if(!v)continue;let P;v.name==="Solana"?P=b.solana:v.name==="EVM"&&(P=b.evm),P&&v.isConnected(P)&&w.push({accept:E,adapter:v,wallet:P})}if(w.length===0)return null;if(s){let E=w.find(A=>A.accept.network===s);if(E)return E}return w[0]}function D(h,w){return jt(h,w)}function K(h,w){return o[h]||w.getDefaultRpcUrl(h)}async function $(h,w,E,A,v){let P="";if(u?.preferTier&&A.tiers){let m=A.tiers.find(S=>S.id===u.preferTier);if(m){if(u.maxSpend&&parseFloat(m.price)>parseFloat(u.maxSpend))throw new I("access_pass_exceeds_max_spend",`Access pass tier "${m.id}" costs $${m.price}, exceeds max spend $${u.maxSpend}`);P=`tier=${m.id}`}}else if(u?.preferDuration&&A.ratePerHour)P=`duration=${u.preferDuration}`;else if(A.tiers&&A.tiers.length>0){let m=A.tiers[0];if(u?.maxSpend&&parseFloat(m.price)>parseFloat(u.maxSpend))throw new I("access_pass_exceeds_max_spend",`Cheapest access pass costs $${m.price}, exceeds max spend $${u?.maxSpend}`);P=`tier=${m.id}`}let _=P?v.includes("?")?`${v}&${P}`:`${v}?${P}`:v;l("Purchasing access pass:",P||"default tier");let L=E.headers.get("PAYMENT-REQUIRED");if(!L)return null;let M;try{M=JSON.parse(atob(L))}catch{return null}let N=C(M.accepts);if(!N)return null;let{accept:k,adapter:W,wallet:de}=N;if(W.name==="Solana"&&!k.extra?.feePayer)return null;let F=k.extra?.decimals??(Nt(k.asset)?6:void 0);if(typeof F!="number")return null;let Ce=k.amount??k.maxAmountRequired;if(!Ce)return null;let q=K(k.network,W);try{let m=await W.getBalance(k,de,q),S=Number(Ce)/Math.pow(10,F);if(m<S){let At=D(k.network,W.name);throw new I("insufficient_balance",`Insufficient balance for access pass on ${At}. Have $${m.toFixed(4)}, need $${S.toFixed(4)}`)}}catch(m){if(m instanceof I)throw m}let j=await W.buildTransaction(k,de,q),fe;W.name==="EVM"?fe=JSON.parse(j.serialized):fe={transaction:j.serialized};let X=typeof h=="string"?h:h instanceof URL?h.href:h.url,ge=M.resource;if(typeof M.resource=="string")try{let m=new URL(M.resource,X);["http:","https:"].includes(m.protocol)&&(ge=m.toString())}catch{}else if(M.resource&&typeof M.resource=="object"&&"url"in M.resource){let m=M.resource;try{let S=new URL(m.url,X);["http:","https:"].includes(S.protocol)&&(ge={...m,url:S.toString()})}catch{}}let tt={x402Version:k.x402Version??2,resource:ge,accepted:k,payload:fe};j.extensions&&(tt.extensions=j.extensions);let J=btoa(JSON.stringify(tt)),Y=await i(_,{...w,method:"POST",headers:{...w?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":J}});if(!Y.ok)return l("Pass purchase failed:",Y.status),null;let V=Y.headers.get("ACCESS-PASS");return V&&(y(v,V),l("Access pass purchased and cached")),Y}async function U(h,w){let E=h;if(l("Making request:",E),u){let m=g(E);if(m){l("Using cached access pass");let S=await i(h,{...w,headers:{...w?.headers||{},Authorization:`Bearer ${m}`}});if(S.status!==401&&S.status!==402)return S;l("Cached pass rejected (status",S.status,"), purchasing new pass");try{x.delete(new URL(E).host)}catch{}}}let A=await R(h,w);if(A.status!==402)return A;l("Received 402 Payment Required");let v=A.headers.get("X-ACCESS-PASS-TIERS");if(u&&v){l("Server offers access passes, purchasing...");try{let m=JSON.parse(atob(v)),S=await $(h,w,A,m,E);if(S)return S}catch(m){l("Access pass purchase failed, falling back to per-request payment:",m)}}let P=A.headers.get("PAYMENT-REQUIRED");if(!P)throw new I("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let _;try{let m=atob(P);_=JSON.parse(m)}catch{throw new I("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}l("Payment requirements:",_);let L=A.headers.get("X-Quote-Hash");L&&l("Quote hash received:",L);let M=C(_.accepts);if(!M){let m=_.accepts.map(S=>S.network).join(", ");throw new I("no_matching_payment_option",`No connected wallet for any available network: ${m}`)}let{accept:N,adapter:k,wallet:W}=M;if(l(`Using ${k.name} for ${N.network}`),k.name==="Solana"&&!N.extra?.feePayer)throw new I("missing_fee_payer","Solana payment option missing feePayer in extra");let de=N.extra?.decimals??(Nt(N.asset)?6:void 0);if(typeof de!="number")throw new I("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let F=N.amount??N.maxAmountRequired;if(!F)throw new I("missing_amount","Payment option missing amount");if(a&&BigInt(F)>BigInt(a))throw new I("amount_exceeds_max",`Payment amount ${F} exceeds maximum ${a}`);let Ce=K(N.network,k);l("Checking balance...");try{let m=await k.getBalance(N,W,Ce),S=Number(F)/Math.pow(10,de);if(m<S){let At=D(N.network,k.name);throw new I("insufficient_balance",`Insufficient balance on ${At}. Have $${m.toFixed(4)}, need $${S.toFixed(4)}`)}l(`Balance OK: $${m.toFixed(4)} >= $${S.toFixed(4)}`)}catch(m){if(m instanceof I)throw m;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(p&&!await p(N))throw new I("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let q=await k.buildTransaction(N,W,Ce);l("Transaction signed");let j;k.name==="EVM"?j=JSON.parse(q.serialized):j={transaction:q.serialized};let fe=h,X=_.resource;if(typeof _.resource=="string")try{let m=new URL(_.resource,fe).toString();m!==_.resource&&l("Resolved relative resource URL:",_.resource,"\u2192",m),X=m}catch{X=_.resource}else if(_.resource&&typeof _.resource=="object"&&"url"in _.resource){let m=_.resource;try{let S=new URL(m.url,fe).toString();S!==m.url&&(l("Resolved relative resource URL:",m.url,"\u2192",S),X={...m,url:S})}catch{}}let ge={x402Version:N.x402Version??2,resource:X,accepted:N,payload:j};q.extensions&&(ge.extensions=q.extensions);let tt=btoa(JSON.stringify(ge));if(d)try{d(N,q.settlementProbe)}catch{}l("Retrying request with payment...");let J=await R(h,{...w,headers:{...w?.headers||{},"PAYMENT-SIGNATURE":tt,...L?{"X-Quote-Hash":L}:{}}});if(l("Retry response status:",J.status),J.status===402){let m="unknown";try{let S=await J.clone().json();m=String(S.error||S.message||JSON.stringify(S)),l("Rejection reason:",m)}catch{}throw new I("payment_rejected",`Payment was rejected by the server: ${m}`)}let Y=J.headers.get("PAYMENT-RESPONSE"),V;if(Y)try{V=JSON.parse(atob(Y))}catch{}return V??={},V.amountAtomic=F,V.assetDecimals=de,Kn.set(J,V),V.extensions&&l("Settlement extensions:",Object.keys(V.extensions).join(", ")),J}async function B(h,w){let[E,A]=await $n(h,w);return U(E,A)}return{fetch:B}}function H(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function et(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let n=e.toLowerCase(),r=n.includes("settle")||n.includes("facilitator"),s=e;try{let o=JSON.parse(e),a=[o.error,o.detail,o.message].filter(i=>typeof i=="string"&&i.length>0);a.length>0&&(s=a.join(" \u2014 "))}catch{}return s||(s=`HTTP ${t.status}`),{reason:r?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${s}`}}var gt="Payment authorization was sent, but the merchant did not respond within the timeout. ",yt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function ht(t,e,n){if(!t)return{confirmed:!1,detail:gt+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+yt};try{if(t.kind==="solana"){let a=z(),i=n??a.getDefaultRpcUrl(e.caip2);if(!a.confirmSettlement)return zt();let c=await a.confirmSettlement(t,i);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Gt()}let r=_e(),s=r.getDefaultRpcUrl(e.caip2);if(!r.confirmSettlement)return zt();let o=await r.confirmSettlement(t,s);return o.settled?{confirmed:!0,txSignature:o.txSignature}:Gt()}catch(r){return{confirmed:!1,detail:gt+`On-chain confirmation could not be completed (${H(r)}).`+yt}}}function Gt(){return{confirmed:!1,detail:gt+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+yt}}function zt(){return{confirmed:!1,detail:gt+"The chain adapter does not support on-chain confirmation."+yt}}var Ln=new Set(["exact","exact-approval"]);async function Vn(t,e,n,r){let s;try{s=await r.signNextVoucher(n.amount)}catch{return null}let o=new Headers(e.headers??void 0);o.set("X-Tab-Voucher",nt(s));let a={method:e.method??"GET",headers:o};e.signal&&(a.signal=e.signal),typeof e.body=="string"&&(a.body=e.body);let i;try{i=await fetch(t,a)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return i.status===402?(r.rollbackVoucher?.call(r,s),null):i.ok?{ok:!0,paid:!0,response:i,amountPaid:n.amount,network:n.network}:{ok:!1,...await et(i)}}var Xt={version:2,async parseChallenge(t){return st(t)},async pay(t,e,n,r,s){if(s.tab){let g=n.options.find(y=>y.scheme==="tab"&&y.network.family==="svm"&&y.payTo===s.tab.counterparty);if(g){let y=await Vn(t,e,g,s.tab);if(y)return y}}let o=n.options.filter(g=>Ln.has(g.scheme));if(o.length===0)return{ok:!1,reason:"no_payment_options",detail:`no generically payable scheme offered (got: ${n.options.map(g=>g.scheme).join(", ")})`};let a=o.find(g=>g.network.family==="evm"?!!r.evm:g.network.family==="svm"?!!r.solana:!1);if(!a)return{ok:!1,reason:"unsupported_network"};let i=s.timeoutMs??15e3,c=s.responseTimeoutMs??12e4,u=new AbortController,p=setTimeout(()=>u.abort(),i),d=!1,f,T=(g,y)=>{d=!0,f=y,clearTimeout(p),p=setTimeout(()=>u.abort(),c)},l=Jt({wallets:r,preferredNetwork:a.network.caip2,maxAmountAtomic:s.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:T}),R=e.signal?AbortSignal.any([e.signal,u.signal]):u.signal,x={method:e.method??"GET",headers:e.headers,signal:R};typeof e.body=="string"&&(x.body=e.body);try{let g=await l.fetch(t,x);if(clearTimeout(p),!g.ok)return{ok:!1,...await et(g)};let y,b=g.headers.get("PAYMENT-RESPONSE");if(b)try{let C=Pt(b);C&&typeof C.transaction=="string"&&(y=C.transaction)}catch{}return{ok:!0,paid:!0,response:g,amountPaid:a.amount,network:a.network,txSignature:y}}catch(g){clearTimeout(p);let y=g;if(y?.name==="AbortError"){if(!d)return{ok:!1,reason:"timeout"};let b=await ht(f,a.network,s.solanaRpcUrl);return b.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:a.amount,network:a.network,txSignature:b.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:b.detail}}return{ok:!1,reason:"error",detail:y?.message??String(g)}}}};import{getAddress as Wn}from"viem";var Hn={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function Fn(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,n=>n.toString(16).padStart(2,"0")).join("")}async function qn(t,e,n){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let r=Math.floor(Date.now()/1e3),s=String(r-600),o=String(r+(e.maxTimeoutSeconds??60)),a={from:t.address,to:e.payTo,value:e.amount,validAfter:s,validBefore:o,nonce:await Fn()},i=Ze[e.network.caip2];if(i===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,u=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:i,verifyingContract:Wn(e.asset)},types:Hn,primaryType:"TransferWithAuthorization",message:a});return{payment:{x402Version:1,scheme:e.scheme,network:n,payload:{signature:u,authorization:a}},settlementProbe:{kind:"eip3009",from:a.from,nonce:a.nonce,asset:e.asset,chainId:i}}}async function Ot(t,e,n){try{let r;for(let s of t.options){let o=s.network.family==="evm"&&!!e.evm||s.network.family==="svm"&&!!e.solana;if(s.scheme!=="exact"){o&&(r=s.scheme);continue}if(s.network.family==="evm"&&e.evm){let a=await e.evm;return await jn(s,a,n)}if(s.network.family==="svm"&&e.solana){let a=await e.solana;return await Jn(s,a,n)}}return r!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${r}'`}:{ok:!1,reason:"unsupported_network"}}catch(r){return{ok:!1,reason:"error",detail:H(r)}}}async function jn(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let r=t.extra??{},s=r.name,o=r.version;if(typeof s!="string"||s.length===0||typeof o!="string"||o.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let a=t.network.bare,{payment:i,settlementProbe:c}=await qn(e,t,a);return{ok:!0,headerValue:Buffer.from(JSON.stringify(i),"utf8").toString("base64"),option:t,settlementProbe:c}}async function Jn(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let r=t.extra??{};if(typeof r.feePayer!="string"||r.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let s=t.network.bare,o={x402Version:1,scheme:t.scheme,network:s,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:r},i=await z().buildTransaction(o,e,n.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:s,payload:{transaction:i.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:i.settlementProbe}}function Gn(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,s=De(String(r.network??""));s&&e.push({scheme:String(r.scheme??"exact"),network:s,amount:String(r.maxAmountRequired??r.amount??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}var Yt={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let n=Array.isArray(e.accepts)?e.accepts:[];if(n.length===0)return null;let r=Gn(n);return r.length===0?null:{x402Version:1,options:r}},async pay(t,e,n,r,s){let o,a=new AbortController,i=!1,c,u;try{let p=s.timeoutMs??15e3;o=setTimeout(()=>a.abort(),p);let d=await Ot(n,r,s);if(!d.ok)return{ok:!1,reason:d.reason,detail:d.detail};let f=d.headerValue,T=d.option;u=T,c=d.settlementProbe;let l=new Headers(e.headers??void 0);l.set("X-PAYMENT",f);let R=e.signal!=null?AbortSignal.any([e.signal,a.signal]):a.signal,x={method:e.method,headers:l,signal:R};typeof e.body=="string"&&(x.body=e.body),i=!0,clearTimeout(o);let g=s.responseTimeoutMs??12e4;o=setTimeout(()=>a.abort(),g);let y=await fetch(t,x);return y.ok?{ok:!0,paid:!0,response:y,amountPaid:T.amount,network:T.network,txSignature:zn(y)}:{ok:!1,...await et(y)}}catch(p){if(p instanceof Error&&p.name==="AbortError"){if(!i)return{ok:!1,reason:"timeout"};let d=await ht(c,u.network,s.solanaRpcUrl);return d.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:d.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:d.detail}}return{ok:!1,reason:"error",detail:H(p)}}finally{o!==void 0&&clearTimeout(o)}}};function zn(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let n=JSON.parse(Buffer.from(e,"base64").toString("utf8")),r=n.transaction??n.txHash??n.transactionHash;return typeof r=="string"?r:void 0}catch{return}}import*as Zt from"tweetnacl";import{Keypair as Rs,VersionedTransaction as Ps,Transaction as _s}from"@solana/web3.js";var Qt=Symbol.for("x402:keypair");function Ut(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let n=t.solana;if(n){let r=n[Qt];if(r&&r.secretKey&&r.publicKey)return{publicKey:r.publicKey,signMessage:async s=>Zt.sign.detached(s,r.secretKey)}}return null}var Xn=[Xt,Yt];async function Yn(t){let e=Ut(t);if(!e)return fetch;try{return(await import("@x402/extensions/sign-in-with-x")).wrapFetchWithSIWx(fetch,e)}catch(n){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${H(n)}`),fetch}}async function Dt(t,e,n,r){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let s;try{s=await(await Yn(n))(t,{...e})}catch(o){return{ok:!1,reason:"error",detail:H(o)}}if(s.status!==402)return{ok:!0,paid:!1,response:s};for(let o of Xn){let a=await o.parseChallenge(s.clone());if(a)return o.pay(t,e,a,n,r)}return{ok:!1,reason:"no_payment_options"}}async function Qn(t,e={},n){let r=await Be(t,e);if(r.kind==="free")return{result:{ok:!0,paid:!1,response:r.response},tab:null};if(r.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${r.schemesOffered.join(", ")})`},tab:null};if(r.kind==="error")return{result:{ok:!1,reason:"error",detail:r.detail},tab:null};let{offer:s}=r,o=BigInt(Z(n.perUnitCap));if(BigInt(s.amountAtomic)>o)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${s.amountAtomic} atomic; perUnitCap allows ${o}`},tab:null};let a=n.tabs?.get(s.payTo);return(!a||!a.state.isOpen)&&(a=await Et({vault:n.vault,network:"solana:mainnet",seller:s.payTo,perUnitCap:n.perUnitCap,totalCap:n.totalCap,sessionDuration:n.sessionDuration,facilitatorUrl:n.facilitatorUrl,onLiveSession:n.onLiveSession}),n.tabs?.set(s.payTo,a)),{result:await Dt(t,e,{},{tab:a}),tab:a}}function Zn(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:be(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function er(t,e={},n={}){let r=n.cache?.get(t);if(r)return{kind:"terms",terms:r};let s=await Be(t,e,n.fetchImpl??fetch);if(s.kind!=="offer")return s;if(s.offer.asset!==Ye)return{kind:"error",detail:`tab offer asset is not USDC ("${s.offer.asset}"); refusing to render a human price`};let o=Zn(s.offer);return n.cache?.set(t,o),{kind:"terms",terms:o}}export{Ie as DEFAULT_FACILITATOR_URL,vt as DEXTER_VAULT_PROGRAM_ID,hn as INSTRUCTIONS_SYSVAR_ID,bt as LiveSessionExistsError,yn as SECP256R1_PROGRAM_ID,he as SessionScopeExceededError,Q as TabClosedError,ye as UnsupportedNetworkError,rt as armTabOpen,be as atomicToHuman,dn as buildRegisterSessionKeyInstruction,fn as buildRevokeSessionKeyInstruction,gn as buildSecp256r1VerifyInstruction,tn as buildVoucherMessage,ke as deriveChannelId,nn as generateSessionKeypair,Z as humanToAtomic,Tt as makeSessionKey,Et as openTab,Ae as parseAtomic,Qn as payUrlWithTab,Be as resolveTabOffer,er as resolveTabTerms,ln as resumeTab,rn as scopeCapAtomic,St as sessionRegisterMessage,en as sessionRevokeMessage,xt as signVoucher,xn as tabFromGrant,wt as voucherPayloadMessage,nt as voucherToHeader};
6
+ `):null}}import He from"tweetnacl";import{Connection as Nr,PublicKey as We}from"@solana/web3.js";import{bytesToHex as Cr}from"@noble/hashes/utils";import{deriveSessionPda as kr,fetchSessionAccount as Or,isSessionLive as Br}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Ur}from"@dexterai/vault/messages";import{readVaultFull as Dr}from"@dexterai/vault/reader";import{PublicKey as Z}from"@solana/web3.js";import{bytesToHex as Xt}from"@noble/hashes/utils";import{deriveGraphConfigPda as fr,deriveSwigVaultBindingPda as Jt}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as gr,DISCRIMINATORS as hr}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as yr}from"@dexterai/vault/instructions";import{decodeVaultFull as Ar}from"@dexterai/vault/reader";import{decodeSessionAccount as br,deriveSessionPda as Yt}from"@dexterai/vault/session";var vr=Uint8Array.from([56,67,4,209,238,143,0,129]),Sr=74,An=new Set([1,2]),wr=188,_r=new Z("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),xr=(()=>{let t=Buffer.alloc(32);return t.write("OTS_SESSION_REGISTER_V2","ascii"),t})(),zt=class extends Error{constructor(n,r){super(`native_tab_v2_solana_reservation_invalid:${n}`+(r?`:${r}`:""));this.code=n;this.name="SolanaFinalVoucherV2ReservationError"}code};function A(t,e){throw new zt(t,e)}function L(t,e){try{return new Z(t)}catch{return A(e)}}function vt(t,e){return t.length===e.length&&t.every((n,r)=>n===e[r])}async function Rr(t){let e=await t.connection.getTransaction(t.signature,{commitment:t.commitment,maxSupportedTransactionVersion:0});if(!e)return null;e.meta||A("transaction_meta_missing");let n=e.transaction.message,r=n.version===0?n.getAccountKeys({accountKeysFromLookups:e.meta.loadedAddresses??null}):n.getAccountKeys(),o=(s,i)=>{let a=r.get(s);return a||A(i),a};return{slot:e.slot,err:e.meta.err,signatures:[...e.transaction.signatures],accountKeys:Array.from({length:r.length},(s,i)=>({address:o(i,"transaction_account_key").toBase58(),signer:n.isAccountSigner(i),writable:n.isAccountWritable(i)})),instructions:n.compiledInstructions.map(s=>({programId:o(s.programIdIndex,"transaction_program_id").toBase58(),accounts:s.accountKeyIndexes.map(i=>o(i,"transaction_instruction_account").toBase58()),data:Uint8Array.from(s.data)}))}}function Tr(t,e,n,r){r.length!==Sr&&A("binding_length"),vt(r.subarray(0,8),vr)||A("binding_discriminator");let o=r.readUInt8(8),s=r.readUInt8(9);return An.has(o)||A("binding_version"),s!==e&&A("binding_bump"),{address:t.toBase58(),owner:n.toBase58(),version:o,bump:s,swig:new Z(r.subarray(10,42)).toBase58(),vault:new Z(r.subarray(42,74)).toBase58()}}async function Er(t){let e=L(t.input.programId,"program_id"),n=L(t.input.buyerSwigAddress,"buyer_swig"),r=L(t.input.vaultPda,"vault_pda"),o=L(t.input.seller,"seller"),[s,i]=Jt(n,e),[a]=Yt(r,o,e),c=await t.connection.getMultipleAccountsInfoAndContext([s,r,a],{commitment:"finalized",minContextSlot:t.minimumSlot}),[u,d,f]=c.value;u||A("binding_missing"),d||A("vault_missing"),f||A("session_missing");let m,S;try{m=Ar(Buffer.from(d.data)),S=br(a,f.data)}catch(p){return A("post_state_decode",p instanceof Error?p.message:String(p))}let l=S.session;return{contextSlot:c.context.slot,binding:Tr(s,i,u.owner,Buffer.from(u.data)),vault:{owner:d.owner.toBase58(),exists:m.exists,version:m.version,swigAddress:m.swigAddress,dexterAuthority:m.dexterAuthority,pendingVoucherCount:m.pendingVoucherCount},session:{owner:f.owner.toBase58(),version:S.version,bump:S.bump,vault:S.vault,sessionPublicKey:Xt(l.sessionPubkey),maxAmount:l.maxAmount,expiresAt:l.expiresAt,seller:l.allowedCounterparty,nonce:l.nonce,spent:l.spent,currentOutstanding:l.currentOutstanding,maxRevolvingCapacity:l.maxRevolvingCapacity,crystallizedCumulative:l.crystallizedCumulative}}}function Pr(t){let e=Buffer.from(t.voucher.sessionRegistration);return e.length!==wr&&A("registration_length"),vt(e.subarray(0,32),xr)||A("registration_domain"),{programId:new Z(e.subarray(32,64)).toBase58(),vaultPda:new Z(e.subarray(64,96)).toBase58(),sessionPublicKey:Xt(e.subarray(96,128)),maxAmount:e.readBigUInt64LE(128),expiresAt:e.readBigInt64LE(136),seller:new Z(e.subarray(144,176)).toBase58(),nonce:e.readUInt32LE(176),maxRevolvingCapacity:e.readBigUInt64LE(180)}}function Ve(t,e,n){let r=t.accountKeys.filter(o=>o.address===e);return r.length!==1&&A(`${n}_account_key`),r[0]}function Ir(t,e,n){(!Number.isSafeInteger(n.slot)||n.slot<=0)&&A("transaction_slot"),n.slot!==e.confirmationSlot&&A("transaction_confirmation_slot"),n.err!==null&&A("transaction_failed"),n.signatures[0]!==e.transaction&&A("transaction_signature"),n.instructions.length!==2&&A("transaction_instruction_count");let r=L(t.programId,"program_id"),o=L(t.buyerSwigAddress,"buyer_swig"),s=L(t.vaultPda,"vault_pda"),i=L(t.seller,"seller"),a=L(t.sessionPda,"session_pda"),[c]=Yt(s,i,r),u=Jt(o,r)[0],d=yr(o),f=fr(r)[0];a.equals(c)||A("session_pda_derivation");let m=Buffer.from(hr.settle_voucher),S=n.instructions.filter(E=>{if(E.programId!==t.programId)return!1;let V=E.data;return V.length>=m.length&&vt(V.subarray(0,m.length),m)});S.length!==1&&A("settle_voucher_instruction_count");let l=S[0];n.instructions[0]!==l&&A("settle_voucher_instruction_order");let p=Buffer.from(l.data);p.length!==49&&A("settle_voucher_instruction_length"),p.readBigUInt64LE(8).toString()!==t.reservationAmountAtomic&&A("settle_voucher_amount"),p.readUInt8(16)!==1&&A("settle_voucher_increment"),new Z(p.subarray(17,49)).equals(i)||A("settle_voucher_seller"),l.accounts.length<8&&A("settle_voucher_accounts"),[s.toBase58(),null,a.toBase58(),null,o.toBase58(),d.toBase58(),u.toBase58(),f.toBase58()].forEach((E,V)=>{E!==null&&l.accounts[V]!==E&&A(`settle_voucher_account_${V}`)});let y=l.accounts[1];y||A("dexter_authority");let b=Ve(n,l.accounts[0],"vault"),_=Ve(n,y,"dexter_authority"),C=Ve(n,l.accounts[2],"session");(!b.writable||b.signer)&&A("vault_privileges"),_.signer||A("dexter_authority_signature"),(!C.writable||C.signer)&&A("session_privileges");for(let E=3;E<Math.min(l.accounts.length,8);E+=1)Ve(n,l.accounts[E],`account_${E}`).signer&&A(`settle_voucher_account_${E}_signer`);for(let E=8;E<l.accounts.length;E+=1){let V=Ve(n,l.accounts[E],`sibling_${E-8}`);(!V.writable||V.signer)&&A("settle_voucher_sibling_privileges")}let N=n.instructions[1];N.programId!==_r.toBase58()&&A("reservation_memo_program"),(N.accounts.length!==1||N.accounts[0]!==y)&&A("reservation_memo_authority"),Ve(n,y,"reservation_memo_authority").signer||A("reservation_memo_authority_signature");let M=new TextEncoder().encode(jt(t));return vt(N.data,M)||A("reservation_memo_digest"),y}function Vr(t,e,n,r){let o=L(t.programId,"program_id"),s=L(t.buyerSwigAddress,"buyer_swig"),i=L(t.vaultPda,"vault_pda"),a=L(t.seller,"seller"),[c,u]=Jt(s,o),[d,f]=Yt(i,a,o);(!Number.isSafeInteger(r.contextSlot)||r.contextSlot<e)&&A("post_state_slot"),(r.binding.address!==c.toBase58()||r.binding.owner!==t.programId||r.binding.bump!==u||!An.has(r.binding.version)||r.binding.swig!==t.buyerSwigAddress||r.binding.vault!==t.vaultPda)&&A("binding_identity"),(r.vault.owner!==t.programId||!r.vault.exists||r.vault.version!==7||r.vault.swigAddress!==t.buyerSwigAddress||r.vault.dexterAuthority!==n)&&A("vault_post_state"),(t.sessionPda!==d.toBase58()||r.session.owner!==t.programId||r.session.version!==1||r.session.bump!==f||r.session.vault!==t.vaultPda||r.session.sessionPublicKey!==Xt(t.voucher.sessionPublicKey)||r.session.seller!==t.seller||r.session.nonce!==t.sessionNonce||r.session.currentOutstanding.toString()!==t.reservationAmountAtomic)&&A("session_post_state");let m=Pr(t);(m.programId!==t.programId||m.vaultPda!==t.vaultPda||m.sessionPublicKey!==r.session.sessionPublicKey||m.seller!==t.seller||m.nonce!==t.sessionNonce||m.maxAmount!==r.session.maxAmount||m.expiresAt!==BigInt(r.session.expiresAt)||m.maxRevolvingCapacity!==r.session.maxRevolvingCapacity)&&A("registration_post_state"),(r.session.spent>r.session.crystallizedCumulative?r.session.spent:r.session.crystallizedCumulative).toString()!==t.previousCumulativeAtomic&&A("session_frontier")}async function bn(t,e,n,r={}){try{oe(e,n)}catch(a){return A("provider_receipt",a instanceof Error?a.message:String(a))}e.network!=="solana:mainnet"&&A("network"),e.programId!==gr.toBase58()&&A("program_id");let o=await(r.readTransaction??Rr)({connection:t,signature:n.transaction,commitment:n.commitment});o||A("transaction_missing");let s=Ir(e,n,o),i=await(r.readPostState??Er)({connection:t,input:e,minimumSlot:o.slot});Vr(e,o.slot,s,i)}var Zt="solana:mainnet";async function Mr(t){let e=t.facilitatorUrl??At,n=t.programId??Ee,r=new We(t.vaultPda),o=new We(t.params.counterparty),s=Re(t.perUnitCapAtomic);if(s<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let i=Re(t.params.maxAmountAtomic),a=Re(t.params.maxRevolvingCapacityAtomic),c=(t.params.nonce&2147483648)!==0;if(!c)throw new Y("tabFromGrant");if(c&&!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let u=Kr(t.sessionSecretKey),d=new We(t.params.sessionPubkey).toBytes();if(!vn(u.publicKey,d))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new We(u.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let f=He.randomBytes(32),m=He.sign.detached(f,u.secretKey);if(!He.sign.detached.verify(f,m,d))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let S=Fe({programId:n,vaultPda:r,sessionPubkey:u.publicKey,maxAmount:i,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:o,nonce:t.params.nonce,maxRevolvingCapacity:a}),l=typeof t.connection=="string"?new Nr(t.connection,"confirmed"):t.connection,p=await Or(l,r,o,n);if(!p||p.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Br(p))throw new Error(p.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${p.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${p.session.expiresAt})`);if(!vn(p.session.sessionPubkey,u.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new We(p.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(p.vault!==r.toBase58()||p.session.allowedCounterparty!==o.toBase58()||p.session.maxAmount!==i||p.session.expiresAt!==t.params.expiresAtUnix||p.session.nonce!==t.params.nonce||p.session.maxRevolvingCapacity!==a)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${p.session.maxAmount} expiresAt=${p.session.expiresAt} nonce=${p.session.nonce} revolving=${p.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&p.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${p.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let x=p.session.spent>p.session.crystallizedCumulative?p.session.spent:p.session.crystallizedCumulative;if(x>=i)throw new Error(`tab_exhausted: on-chain frontier ${x} has consumed the session cap ${i} \u2014 no voucher can strictly exceed it; open a new grant`);let y=t.sellerUrl??t.params.counterparty,b=BigInt(Math.floor(Math.random()*4294967295)),_=Le({vaultPda:r,sellerUrl:y,nonce:b}),C=Cr(_),N=t.swigAddress;if(!N){let h=await Dr(l,r);if(!h.exists||!h.swigAddress)throw new Error(`tab_vault_unreadable: vault ${r.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);N=h.swigAddress}let F={channelId:C,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},M=Ft({publicKey:u.publicKey,privateKey:u.secretKey},F,S),[E]=kr(r,o,n),V={network:Zt,swigAddress:N,vaultPda:r.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(h,v)=>{if(!c)return Lt(h,v,_);let w=$t({programId:n.toBase58(),vaultPda:r.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),sessionNonce:t.params.nonce,channelId:v.channelId,cumulativeAmountAtomic:v.cumulativeAmount,sequenceOrdinal:v.sequenceNumber,sessionPrivateKey:h.privateKey,sessionPublicKey:h.publicKey,sessionRegistration:h.registration});return{payload:{channelId:w.channelId,cumulativeAmount:w.cumulativeAmount,sequenceNumber:w.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(w.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(w.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(w.sessionRegistration,"hex"))}},signOpenTab:async h=>h.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(h,v)=>bn(l,h,v):void 0};return new qe({vault:V,network:Zt,seller:y,counterparty:t.params.counterparty,session:M,channelIdHex:C,channelIdBytes:_,perUnitCapAtomic:s,totalCapAtomic:i,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:x,initialSequenceOrdinal:c&&p.session.lastLockedSequence!==0?Ur(p.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:h,incrementAtomic:v,previousCumulativeAtomic:w})=>{let R=$e(h),T={network:Zt,programId:n.toBase58(),buyerSwigAddress:N,vaultPda:r.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),channelId:C,sessionNonce:t.params.nonce,reservationAmountAtomic:v,previousCumulativeAtomic:w,...R,voucher:h},I=await t.reserveFinalVoucherV2(T);return oe(T,I),await V.verifyFinalVoucherV2Reservation(T,I),I}:void 0,closeMode:"settle-only"})}function Kr(t){if(t.length===64)return He.sign.keyPair.fromSecretKey(t);if(t.length===32)return He.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function vn(t,e){if(t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}import{PublicKey as qr}from"@solana/web3.js";var Sn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],Fr=new Map(Sn.map(t=>[t.caip2.toLowerCase(),t])),Lr=new Map(Sn.map(t=>[t.bare.toLowerCase(),t]));function je(t){if(!t)return null;let e=t.toLowerCase(),n=Fr.get(e)||Lr.get(e);return n?{caip2:n.caip2,bare:n.bare,family:n.family}:null}function Qt(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),n=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(n,"base64").toString("utf8"))}function $r(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,o=je(String(r.network??""));o&&e.push({scheme:String(r.scheme??"exact"),network:o,amount:String(r.amount??r.maxAmountRequired??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}async function St(t){let e=t.headers.get("payment-required");if(!e)return null;let n;try{n=Qt(e)}catch{return null}let r=Array.isArray(n.accepts)?n.accepts:[];return r.length===0?null:{x402Version:2,options:$r(r),resourceUrl:n.resource&&typeof n.resource=="object"?String(n.resource.url??""):void 0}}async function Ge(t,e={},n=fetch){let r={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(r.body=e.body);let o;try{o=await n(t,r)}catch(a){return{kind:"error",detail:`probe failed: ${a?.message??String(a)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let s=await St(o);if(!s)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let i=s.options.find(a=>a.scheme==="tab"&&a.network.family==="svm");if(!i)return{kind:"no_tab",schemesOffered:s.options.map(a=>a.scheme)};try{new qr(i.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${i.payTo}"`}}return{kind:"offer",offer:{payTo:i.payTo,amountAtomic:i.amount,asset:i.asset,networkCaip2:i.network.caip2,...typeof i.extra?.voucherHeader=="string"?{voucherHeader:i.extra.voucherHeader}:{},...typeof i.extra?.registrationEncoding=="string"?{registrationEncoding:i.extra.registrationEncoding}:{},...typeof i.extra?.termsVersion=="string"?{termsVersion:i.extra.termsVersion}:{},...typeof i.extra?.acceptanceRule=="string"?{acceptanceRule:i.extra.acceptanceRule}:{},resourceUrl:s.resourceUrl}}}var Wr="dexter-tab-hosted-pay-before-delivery/v1",Hr="pay_before_delivery_seller_2xx",jr="x-tab-voucher",Gr="base64(188-byte sessionRegisterMessage)";var ze="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",wt="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",_t="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",ce=ze,Xe=wt,Je=_t,ue="eip155:8453",Ne="eip155:84532",Ce="eip155:42161",ke="eip155:137",Oe="eip155:10",Be="eip155:43114",Ue="eip155:56",le="eip155:480",me="eip155:143",de="eip155:4663",pe="eip155:1187947933",fe="eip155:324705682",De="eip155:1",ge=ue,xt=Ne,Ye=Ce,Ze=ke,Qe=Oe,et=Be,tt=Ue,nt=le,rt=me,ot=de,st=pe,it=fe,at=De,ct="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",wn="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",_n="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",en="0x55d398326f99059fF775485246999027B3197955",Rt="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",tn="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Tt={[Ue]:Rt,[ue]:_n,[Ne]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[Ce]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[ke]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Oe]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[Be]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[le]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[me]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[de]:tn,[pe]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[fe]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[De]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},Et={[en]:{symbol:"USDT",decimals:18},[Rt]:{symbol:"USDC",decimals:18}};var Pt={[le]:{name:"USDC",version:"2"},[me]:{name:"USDC",version:"2"},[de]:{name:"Global Dollar",version:"1"},[pe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[fe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},Q="0x000000000022D473030F116dDEE9F6B43aC78BA3",ut="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",lt={[Ue]:56,[ue]:8453,[Ne]:84532,[Ce]:42161,[ke]:137,[Oe]:10,[Be]:43114,[le]:480,[me]:143,[de]:4663,[pe]:1187947933,[fe]:324705682,[De]:1},he={[ze]:"https://api.dexter.cash/api/solana/rpc",[wt]:"https://api.devnet.solana.com",[_t]:"https://api.testnet.solana.com"},D={[Ue]:"https://api.dexter.cash/api/evm/bsc/rpc",[ue]:"https://api.dexter.cash/api/base/rpc",[Ne]:"https://sepolia.base.org",[Ce]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[ke]:"https://api.dexter.cash/api/evm/polygon/rpc",[Oe]:"https://api.dexter.cash/api/evm/optimism/rpc",[Be]:"https://api.dexter.cash/api/evm/avalanche/rpc",[le]:"https://worldchain-mainnet.g.alchemy.com/public",[me]:"https://rpc.monad.xyz",[de]:"https://rpc.mainnet.chain.robinhood.com",[pe]:"https://skale-base.skalenodes.com/v1/base",[fe]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[De]:"https://eth.llamarpc.com"};var B=class t extends Error{code;details;constructor(e,n,r){super(n),this.name="X402Error",this.code=e,this.details=r,Object.setPrototypeOf(this,t.prototype)}};import{PublicKey as ye,Connection as nn,TransactionMessage as zr,VersionedTransaction as Xr,ComputeBudgetProgram as xn}from"@solana/web3.js";import{getAssociatedTokenAddress as rn,getAccount as Jr,createTransferCheckedInstruction as Yr,getMint as Zr,TOKEN_PROGRAM_ID as Rn,TOKEN_2022_PROGRAM_ID as It}from"@solana/spl-token";var Qr=12e3,eo=1;function Ae(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var Vt=class{name="Solana";networks=[ce,Xe,Je];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:he[e]?he[e]:e==="solana"?he[ce]:e==="solana-devnet"?he[Xe]:e==="solana-testnet"?he[Je]:he[ce]}getAddress(e){return Ae(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return Ae(e)?e.publicKey!==null:!1}async getBalance(e,n,r){if(!Ae(n)||!n.publicKey)return 0;let o=r||this.getDefaultRpcUrl(e.network),s=new nn(o,"confirmed"),i=new ye(n.publicKey.toBase58()),a=new ye(e.asset);try{let u=(await s.getAccountInfo(a,"confirmed"))?.owner.toBase58()===It.toBase58()?It:Rn,d=await rn(a,i,!1,u),f=await Jr(s,d,void 0,u),m=e.extra?.decimals??6;return Number(f.amount)/Math.pow(10,m)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,n,r){if(!Ae(n))throw new Error("Invalid Solana wallet");if(!n.publicKey)throw new Error("Wallet not connected");let o=r||this.getDefaultRpcUrl(e.network),s=new nn(o,"confirmed"),i=new ye(n.publicKey.toBase58()),{payTo:a,asset:c,extra:u}=e,d=e.amount??e.maxAmountRequired;if(!d)throw new Error("Missing amount in payment requirements");if(!u?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new ye(u.feePayer),m=new ye(c),S=new ye(a);this.log("Building transaction:",{from:i.toBase58(),to:a,amount:d,asset:c,feePayer:u.feePayer});let l=[];l.push(xn.setComputeUnitLimit({units:Qr})),l.push(xn.setComputeUnitPrice({microLamports:eo}));let p=await s.getAccountInfo(m,"confirmed");if(!p)throw new Error(`Token mint ${c} not found`);let x=p.owner.toBase58()===It.toBase58()?It:Rn,y=await Zr(s,m,void 0,x);typeof u?.decimals=="number"&&y.decimals!==u.decimals&&this.log(`Decimals mismatch: requirements say ${u.decimals}, mint says ${y.decimals}`);let b=await rn(m,i,!1,x),_=await rn(m,S,!0,x);if(!await s.getAccountInfo(b,"confirmed"))throw new Error(`No token account found for ${c}. Please ensure you have USDC in your wallet.`);if(!await s.getAccountInfo(_,"confirmed"))throw new Error(`Seller token account not found. The seller (${a}) must have a USDC account.`);let F=BigInt(d);l.push(Yr(b,m,_,i,F,y.decimals,[],x));let{blockhash:M}=await s.getLatestBlockhash("confirmed"),E=new zr({payerKey:f,recentBlockhash:M,instructions:l}).compileToV0Message(),V=new Xr(E),h=await n.signTransaction(V);return this.log("Transaction signed successfully"),{serialized:Buffer.from(h.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:b.toBase58(),destinationAta:_.toBase58(),asset:c,amount:d,blockhash:M}}}async confirmSettlement(e,n){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let r=new nn(n,"confirmed"),o=new ye(e.destinationAta),s=await r.getSignaturesForAddress(o,{limit:25});if(s.length===0)return{settled:!1};let i=BigInt(e.amount);for(let a of s){if(a.err)continue;let c=await r.getTransaction(a.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),d=c.meta.preTokenBalances??[],f=c.meta.postTokenBalances??[];for(let m of f){if(m.mint!==e.asset)continue;let S=u[m.accountIndex];if(!S||!S.equals(o))continue;let l=d.find(y=>y.accountIndex===m.accountIndex),p=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(m.uiTokenAmount.amount??"0")-p===i)return{settled:!0,txSignature:a.signature}}}return{settled:!1}}};function ee(t){return new Vt(t)}var to={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},Tn=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function be(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var Nt=class{name="EVM";networks=[tt,ge,xt,at,Ye,Ze,Qe,et,nt,rt,ot,st,it];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:D[e]?D[e]:e==="base"?D[ge]:e==="bsc"?D[tt]:e==="ethereum"?D[at]:e==="arbitrum"?D[Ye]:e==="polygon"?D[Ze]:e==="optimism"?D[Qe]:e==="avalanche"?D[et]:e==="world"?D[nt]:e==="monad"?D[rt]:e==="robinhood"?D[ot]:e==="skale-base"?D[st]:e==="skale-base-sepolia"?D[it]:D[ge]}getAddress(e){return be(e)?e.address:null}isConnected(e){return be(e)?!!e.address:!1}getChainId(e){if(lt[e])return lt[e];if(e.startsWith("eip155:")){let n=e.split(":")[1];return parseInt(n,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,n,r){if(!be(n)||!n.address)return 0;let o=r||this.getDefaultRpcUrl(e.network);try{let s=this.encodeBalanceOf(n.address),i=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:s},"latest"]})});if(!i.ok)throw new Error(`RPC request failed: ${i.status}`);let a=await i.json();if(a.error)throw new Error(`RPC error: ${JSON.stringify(a.error)}`);if(!a.result||a.result==="0x")return 0;let c=BigInt(a.result),u=e.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(s){throw s}}encodeBalanceOf(e){let n="0x70a08231",r=e.slice(2).toLowerCase().padStart(64,"0");return n+r}async confirmSettlement(e,n){if(e.kind==="eip3009"){let r="0xe94a0102",o=e.from.slice(2).toLowerCase().padStart(64,"0"),s=e.nonce.slice(2).toLowerCase().padStart(64,"0"),i=r+o+s,a=await this.ethCall(n,e.asset,i);return{settled:BigInt(a)!==0n}}if(e.kind==="permit2"){let r="0x4fe02b44",o=BigInt(e.nonce),s=o>>8n,i=o&0xffn,a=e.from.slice(2).toLowerCase().padStart(64,"0"),c=s.toString(16).padStart(64,"0"),u=r+a+c,d=await this.ethCall(n,Q,u);return{settled:(BigInt(d)>>i&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,n,r){let o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:r},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let s=await o.json();if(s.error)throw new Error(`RPC error: ${JSON.stringify(s.error)}`);if(!s.result||s.result==="0x")throw new Error("RPC returned an empty result");return s.result}async buildTransaction(e,n,r){if(!be(n))throw new Error("Invalid EVM wallet");if(!n.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,n,r);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,n,r);let{payTo:o,asset:s,extra:i}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:n.address,to:o,amount:a,asset:s,network:e.network});let c=this.getChainId(e.network),u=Pt[`eip155:${c}`],d={name:i?.name??u?.name??"USD Coin",version:i?.version??u?.version??"2",chainId:BigInt(c),verifyingContract:s},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},m=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(m);let S="0x"+[...m].map(_=>_.toString(16).padStart(2,"0")).join(""),l=Math.floor(Date.now()/1e3),p={from:n.address,to:o,value:a,validAfter:String(l-600),validBefore:String(l+(e.maxTimeoutSeconds||60)),nonce:S},x={from:n.address,to:o,value:BigInt(a),validAfter:BigInt(l-600),validBefore:BigInt(l+(e.maxTimeoutSeconds||60)),nonce:S};if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let y=await n.signTypedData({domain:d,types:f,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:p,signature:y}),signature:y,settlementProbe:{kind:"eip3009",from:n.address,nonce:S,asset:s,chainId:c}}}async buildApprovalTransaction(e,n,r){let{payTo:o,asset:s,extra:i}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");let c=i?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:n.address,to:o,amount:a,asset:s,network:e.network,facilitatorContract:c});let u=r||this.getDefaultRpcUrl(e.network),d=i?.fee??"0",f=BigInt(a)+BigInt(d),m=await this.readAllowance(u,s,n.address,c);if(m<f){if(!n.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let V=this.calculateApprovalAmount(a,d,i?.approvalStrategy);this.log(`Approving ${V} for ${c} (current allowance: ${m})`);let h=await n.sendTransaction({to:s,data:this.encodeApprove(c,V),value:0n});this.log(`Approval tx sent: ${h}`),await this.waitForReceipt(u,h),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let S=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(S);let l=[...S].reduce((V,h)=>V*256n+BigInt(h),0n).toString(),p=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(p);let x="0x"+[...p].map(V=>V.toString(16).padStart(2,"0")).join(""),b=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),_=i?.eip712Domain,C=_?{name:_.name,version:_.version,chainId:BigInt(_.chainId),verifyingContract:_.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},N=i?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},F={from:n.address,to:o,token:s,amount:BigInt(a),fee:BigInt(d),nonce:BigInt(l),deadline:BigInt(b),paymentId:x},M=await n.signTypedData({domain:C,types:N,primaryType:"Payment",message:F});this.log("EIP-712 Payment signature obtained");let E={from:n.address,to:o,token:s,amount:a,fee:d,nonce:l,deadline:b,paymentId:x,signature:M};return{serialized:JSON.stringify(E),signature:M}}async buildPermit2Transaction(e,n,r){let{payTo:o,asset:s}=e,i=e.amount??e.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");if(!n.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:n.address,to:o,amount:i,asset:s,network:e.network});let a=r||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(a,s,n.address,Q),u;if(c<BigInt(i)){let C=this.encodeApprove(Q,Tn);if(n.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let N=this.getChainId(e.network),F=await this.readGasPrice(a),M=await this.readNonce(a,n.address),E=await n.signTransaction({to:s,data:C,chainId:N,gas:50000n,gasPrice:F,nonce:M});u={erc20ApprovalGasSponsoring:{info:{from:n.address,asset:s,spender:Q,amount:Tn.toString(),signedTransaction:E,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(n.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let N=await n.sendTransaction({to:s,data:C,value:0n});this.log(`Permit2 approval tx sent: ${N}`),await this.waitForReceipt(a,N),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let f=[...d].reduce((C,N)=>C*256n+BigInt(N),0n),m=Math.floor(Date.now()/1e3),S=m-600,l=m+(e.maxTimeoutSeconds||300),p=this.getChainId(e.network),x={name:"Permit2",chainId:BigInt(p),verifyingContract:Q},y={permitted:{token:s,amount:BigInt(i)},spender:ut,nonce:f,deadline:BigInt(l),witness:{to:o,validAfter:BigInt(S)}},b=await n.signTypedData({domain:x,types:to,primaryType:"PermitWitnessTransferFrom",message:y});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let _={signature:b,permit2Authorization:{from:n.address,permitted:{token:s,amount:i},spender:ut,nonce:f.toString(),deadline:String(l),witness:{to:o,validAfter:String(S)}}};return{serialized:JSON.stringify(_),signature:b,extensions:u,settlementProbe:{kind:"permit2",from:n.address,nonce:f.toString(),chainId:p}}}async readAllowance(e,n,r,o){let s="0xdd62ed3e",i=r.slice(2).toLowerCase().padStart(64,"0"),a=o.slice(2).toLowerCase().padStart(64,"0"),c=s+i+a;try{let d=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:n,data:c},"latest"]})})).json();return d.error||!d.result||d.result==="0x"?0n:BigInt(d.result)}catch{return 0n}}encodeApprove(e,n){let r="0x095ea7b3",o=e.slice(2).toLowerCase().padStart(64,"0"),s=n.toString(16).padStart(64,"0");return r+o+s}async waitForReceipt(e,n,r=3e4){let o=Date.now();for(;Date.now()-o<r;){try{let i=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[n]})})).json();if(i.result){if(i.result.status==="0x0")throw new Error(`Approval transaction reverted: ${n}`);return}}catch(s){if(s instanceof Error&&s.message.includes("reverted"))throw s}await new Promise(s=>setTimeout(s,2e3))}throw new Error(`Approval transaction receipt timeout after ${r}ms: ${n}`)}async readGasPrice(e){try{let r=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return r.result?BigInt(r.result):50000000n}catch{return 50000000n}}async readNonce(e,n){try{let o=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[n,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(e,n,r){let o=BigInt(e)+BigInt(n);if(!r||r.mode==="exact")return o;let s=BigInt(r.defaultMultiple??10),i=o*s;if(r.maxCapUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(r.maxCapUsd*Math.pow(10,a)));if(i>c)return c}if(r.exactAboveUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(r.exactAboveUsd*Math.pow(10,a)));if(BigInt(e)>c)return o}return i}inferDecimals(e){return e.length>12?18:6}};function Me(t){return new Nt(t)}function on(t){if(t===ct||t===wn)return!0;let e=t.toLowerCase();for(let n of Object.values(Tt))if(n.toLowerCase()===e)return!0;for(let n of Object.keys(Et))if(n.toLowerCase()===e)return!0;return!1}function no(t){return{[ze]:"Solana",[wt]:"Solana Devnet",[_t]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[ue]:"Base",[Ne]:"Base Sepolia",[De]:"Ethereum",[Ce]:"Arbitrum",[ke]:"Polygon",[Oe]:"Optimism",[Be]:"Avalanche",[Ue]:"BSC",[le]:"World Chain",[me]:"Monad",[de]:"Robinhood Chain",[pe]:"SKALE Base",[fe]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function En(t,e){let n=no(t);return n===t?e:n}async function ro(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let n=t,r=new Headers(n.headers);e?.headers&&new Headers(e.headers).forEach((i,a)=>r.set(a,i));let o={method:e?.method??n.method,headers:r,signal:e?.signal??n.signal,redirect:e?.redirect??n.redirect,credentials:e?.credentials??n.credentials},s=(o.method??"GET").toUpperCase();return e&&"body"in e?o.body=e.body:s!=="GET"&&s!=="HEAD"&&n.body&&(o.body=await n.arrayBuffer()),[n.url,o]}var oo=new WeakMap;function Pn(t){let{adapters:e=[ee({verbose:t.verbose}),Me({verbose:t.verbose})],wallets:n,wallet:r,preferredNetwork:o,rpcUrls:s={},maxAmountAtomic:i,fetch:a=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:d,onPaymentDispatched:f,maxRetries:m=0,retryDelayMs:S=500}=t,l=c?console.log.bind(console,"[x402]"):()=>{};async function p(h,v){let w;for(let R=0;R<=m;R++)try{let T=await a(h,v);if(T.status>=502&&T.status<=504&&R<m){l(`Retry ${R+1}/${m}: server returned ${T.status}`),await new Promise(I=>setTimeout(I,S*Math.pow(2,R)));continue}return T}catch(T){w=T,R<m&&(l(`Retry ${R+1}/${m}: ${T instanceof Error?T.message:"network error"}`),await new Promise(I=>setTimeout(I,S*Math.pow(2,R))))}throw w}let x=new Map;function y(h){try{let v=new URL(h).host,w=x.get(v);if(w&&w.expiresAt>Date.now()/1e3+10)return w.jwt;w&&x.delete(v)}catch{}return null}function b(h,v){try{let w=new URL(h).host,R=v.split(".");if(R.length===3){let T=JSON.parse(atob(R[1].replace(/-/g,"+").replace(/_/g,"/"))),I=Math.floor(Date.now()/1e3),k=I+86400,q=Math.min(typeof T.exp=="number"?T.exp:I,k);x.set(w,{jwt:v,expiresAt:q}),l("Access pass cached for",w,"| expires:",new Date(q*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let _=n||{};r&&!_.solana&&Ae(r)&&(_.solana=r),r&&!_.evm&&be(r)&&(_.evm=r);function C(h){let v=[];for(let w of h){let R=w.scheme??"exact";if(R!=="exact"&&R!=="exact-approval")continue;let T=e.find(k=>k.canHandle(w.network));if(!T)continue;let I;T.name==="Solana"?I=_.solana:T.name==="EVM"&&(I=_.evm),I&&T.isConnected(I)&&v.push({accept:w,adapter:T,wallet:I})}if(v.length===0)return null;if(o){let w=v.find(R=>R.accept.network===o);if(w)return w}return v[0]}function N(h,v){return En(h,v)}function F(h,v){return s[h]||v.getDefaultRpcUrl(h)}async function M(h,v,w,R,T){let I="";if(u?.preferTier&&R.tiers){let g=R.tiers.find(P=>P.id===u.preferTier);if(g){if(u.maxSpend&&parseFloat(g.price)>parseFloat(u.maxSpend))throw new B("access_pass_exceeds_max_spend",`Access pass tier "${g.id}" costs $${g.price}, exceeds max spend $${u.maxSpend}`);I=`tier=${g.id}`}}else if(u?.preferDuration&&R.ratePerHour)I=`duration=${u.preferDuration}`;else if(R.tiers&&R.tiers.length>0){let g=R.tiers[0];if(u?.maxSpend&&parseFloat(g.price)>parseFloat(u.maxSpend))throw new B("access_pass_exceeds_max_spend",`Cheapest access pass costs $${g.price}, exceeds max spend $${u?.maxSpend}`);I=`tier=${g.id}`}let k=I?T.includes("?")?`${T}&${I}`:`${T}?${I}`:T;l("Purchasing access pass:",I||"default tier");let q=w.headers.get("PAYMENT-REQUIRED");if(!q)return null;let $;try{$=JSON.parse(atob(q))}catch{return null}let U=C($.accepts);if(!U)return null;let{accept:O,adapter:H,wallet:ve}=U;if(H.name==="Solana"&&!O.extra?.feePayer)return null;let G=O.extra?.decimals??(on(O.asset)?6:void 0);if(typeof G!="number")return null;let Ke=O.amount??O.maxAmountRequired;if(!Ke)return null;let z=F(O.network,H);try{let g=await H.getBalance(O,ve,z),P=Number(Ke)/Math.pow(10,G);if(g<P){let Bt=N(O.network,H.name);throw new B("insufficient_balance",`Insufficient balance for access pass on ${Bt}. Have $${g.toFixed(4)}, need $${P.toFixed(4)}`)}}catch(g){if(g instanceof B)throw g}let X=await H.buildTransaction(O,ve,z),Se;H.name==="EVM"?Se=JSON.parse(X.serialized):Se={transaction:X.serialized};let te=typeof h=="string"?h:h instanceof URL?h.href:h.url,we=$.resource;if(typeof $.resource=="string")try{let g=new URL($.resource,te);["http:","https:"].includes(g.protocol)&&(we=g.toString())}catch{}else if($.resource&&typeof $.resource=="object"&&"url"in $.resource){let g=$.resource;try{let P=new URL(g.url,te);["http:","https:"].includes(P.protocol)&&(we={...g,url:P.toString()})}catch{}}let dt={x402Version:O.x402Version??2,resource:we,accepted:O,payload:Se};X.extensions&&(dt.extensions=X.extensions);let J=btoa(JSON.stringify(dt)),ne=await a(k,{...v,method:"POST",headers:{...v?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":J}});if(!ne.ok)return l("Pass purchase failed:",ne.status),null;let W=ne.headers.get("ACCESS-PASS");return W&&(b(T,W),l("Access pass purchased and cached")),ne}async function E(h,v){let w=h;if(l("Making request:",w),u){let g=y(w);if(g){l("Using cached access pass");let P=await a(h,{...v,headers:{...v?.headers||{},Authorization:`Bearer ${g}`}});if(P.status!==401&&P.status!==402)return P;l("Cached pass rejected (status",P.status,"), purchasing new pass");try{x.delete(new URL(w).host)}catch{}}}let R=await p(h,v);if(R.status!==402)return R;l("Received 402 Payment Required");let T=R.headers.get("X-ACCESS-PASS-TIERS");if(u&&T){l("Server offers access passes, purchasing...");try{let g=JSON.parse(atob(T)),P=await M(h,v,R,g,w);if(P)return P}catch(g){l("Access pass purchase failed, falling back to per-request payment:",g)}}let I=R.headers.get("PAYMENT-REQUIRED");if(!I)throw new B("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let g=atob(I);k=JSON.parse(g)}catch{throw new B("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}l("Payment requirements:",k);let q=R.headers.get("X-Quote-Hash");q&&l("Quote hash received:",q);let $=C(k.accepts);if(!$){let g=k.accepts.map(P=>P.network).join(", ");throw new B("no_matching_payment_option",`No connected wallet for any available network: ${g}`)}let{accept:U,adapter:O,wallet:H}=$;if(l(`Using ${O.name} for ${U.network}`),O.name==="Solana"&&!U.extra?.feePayer)throw new B("missing_fee_payer","Solana payment option missing feePayer in extra");let ve=U.extra?.decimals??(on(U.asset)?6:void 0);if(typeof ve!="number")throw new B("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let G=U.amount??U.maxAmountRequired;if(!G)throw new B("missing_amount","Payment option missing amount");if(i&&BigInt(G)>BigInt(i))throw new B("amount_exceeds_max",`Payment amount ${G} exceeds maximum ${i}`);let Ke=F(U.network,O);l("Checking balance...");try{let g=await O.getBalance(U,H,Ke),P=Number(G)/Math.pow(10,ve);if(g<P){let Bt=N(U.network,O.name);throw new B("insufficient_balance",`Insufficient balance on ${Bt}. Have $${g.toFixed(4)}, need $${P.toFixed(4)}`)}l(`Balance OK: $${g.toFixed(4)} >= $${P.toFixed(4)}`)}catch(g){if(g instanceof B)throw g;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(d&&!await d(U))throw new B("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let z=await O.buildTransaction(U,H,Ke);l("Transaction signed");let X;O.name==="EVM"?X=JSON.parse(z.serialized):X={transaction:z.serialized};let Se=h,te=k.resource;if(typeof k.resource=="string")try{let g=new URL(k.resource,Se).toString();g!==k.resource&&l("Resolved relative resource URL:",k.resource,"\u2192",g),te=g}catch{te=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let g=k.resource;try{let P=new URL(g.url,Se).toString();P!==g.url&&(l("Resolved relative resource URL:",g.url,"\u2192",P),te={...g,url:P})}catch{}}let we={x402Version:U.x402Version??2,resource:te,accepted:U,payload:X};z.extensions&&(we.extensions=z.extensions);let dt=btoa(JSON.stringify(we));if(f)try{f(U,z.settlementProbe)}catch{}l("Retrying request with payment...");let J=await p(h,{...v,headers:{...v?.headers||{},"PAYMENT-SIGNATURE":dt,...q?{"X-Quote-Hash":q}:{}}});if(l("Retry response status:",J.status),J.status===402){let g="unknown";try{let P=await J.clone().json();g=String(P.error||P.message||JSON.stringify(P)),l("Rejection reason:",g)}catch{}throw new B("payment_rejected",`Payment was rejected by the server: ${g}`)}let ne=J.headers.get("PAYMENT-RESPONSE"),W;if(ne)try{W=JSON.parse(atob(ne))}catch{}return W??={},W.amountAtomic=G,W.assetDecimals=ve,oo.set(J,W),W.extensions&&l("Settlement extensions:",Object.keys(W.extensions).join(", ")),J}async function V(h,v){let[w,R]=await ro(h,v);return E(w,R)}return{fetch:V}}function j(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function mt(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let n=e.toLowerCase(),r=n.includes("settle")||n.includes("facilitator"),o=e;try{let s=JSON.parse(e),i=[s.error,s.detail,s.message].filter(a=>typeof a=="string"&&a.length>0);i.length>0&&(o=i.join(" \u2014 "))}catch{}return o||(o=`HTTP ${t.status}`),{reason:r?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${o}`}}var Ct="Payment authorization was sent, but the merchant did not respond within the timeout. ",kt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Ot(t,e,n){if(!t)return{confirmed:!1,detail:Ct+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+kt};try{if(t.kind==="solana"){let i=ee(),a=n??i.getDefaultRpcUrl(e.caip2);if(!i.confirmSettlement)return Vn();let c=await i.confirmSettlement(t,a);return c.settled?{confirmed:!0,txSignature:c.txSignature}:In()}let r=Me(),o=r.getDefaultRpcUrl(e.caip2);if(!r.confirmSettlement)return Vn();let s=await r.confirmSettlement(t,o);return s.settled?{confirmed:!0,txSignature:s.txSignature}:In()}catch(r){return{confirmed:!1,detail:Ct+`On-chain confirmation could not be completed (${j(r)}).`+kt}}}function In(){return{confirmed:!1,detail:Ct+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+kt}}function Vn(){return{confirmed:!1,detail:Ct+"The chain adapter does not support on-chain confirmation."+kt}}var so=new Set(["exact","exact-approval"]);async function io(t,e,n,r){let o;try{o=await r.signNextVoucher(n.amount)}catch(c){return r.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let s=new Headers(e.headers??void 0);s.set("X-Tab-Voucher",bt(o));let i={method:e.method??"GET",headers:s};e.signal&&(i.signal=e.signal),typeof e.body=="string"&&(i.body=e.body);let a;try{a=await fetch(t,i)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return a.status===402?r.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:r.rollbackVoucher?.call(r,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:a.ok?{ok:!0,paid:!0,response:a,amountPaid:n.amount,network:n.network}:{ok:!1,...await mt(a)}}var Nn={version:2,async parseChallenge(t){return St(t)},async pay(t,e,n,r,o){if(o.tab){let y=n.options.find(b=>b.scheme==="tab"&&b.network.family==="svm"&&b.payTo===o.tab.counterparty);if(y){let b=await io(t,e,y,o.tab);if(b)return b}}let s=n.options.filter(y=>so.has(y.scheme));if(s.length===0)return{ok:!1,reason:"no_payment_options",detail:`no generically payable scheme offered (got: ${n.options.map(y=>y.scheme).join(", ")})`};let i=s.find(y=>y.network.family==="evm"?!!r.evm:y.network.family==="svm"?!!r.solana:!1);if(!i)return{ok:!1,reason:"unsupported_network"};let a=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,u=new AbortController,d=setTimeout(()=>u.abort(),a),f=!1,m,S=(y,b)=>{f=!0,m=b,clearTimeout(d),d=setTimeout(()=>u.abort(),c)},l=Pn({wallets:r,preferredNetwork:i.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:S}),p=e.signal?AbortSignal.any([e.signal,u.signal]):u.signal,x={method:e.method??"GET",headers:e.headers,signal:p};typeof e.body=="string"&&(x.body=e.body);try{let y=await l.fetch(t,x);if(clearTimeout(d),!y.ok)return{ok:!1,...await mt(y)};let b,_=y.headers.get("PAYMENT-RESPONSE");if(_)try{let C=Qt(_);C&&typeof C.transaction=="string"&&(b=C.transaction)}catch{}return{ok:!0,paid:!0,response:y,amountPaid:i.amount,network:i.network,txSignature:b}}catch(y){clearTimeout(d);let b=y;if(b?.name==="AbortError"){if(!f)return{ok:!1,reason:"timeout"};let _=await Ot(m,i.network,o.solanaRpcUrl);return _.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:i.amount,network:i.network,txSignature:_.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:_.detail}}return{ok:!1,reason:"error",detail:b?.message??String(y)}}}};import{getAddress as ao}from"viem";var co={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function uo(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,n=>n.toString(16).padStart(2,"0")).join("")}async function lo(t,e,n){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let r=Math.floor(Date.now()/1e3),o=String(r-600),s=String(r+(e.maxTimeoutSeconds??60)),i={from:t.address,to:e.payTo,value:e.amount,validAfter:o,validBefore:s,nonce:await uo()},a=lt[e.network.caip2];if(a===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,u=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:a,verifyingContract:ao(e.asset)},types:co,primaryType:"TransferWithAuthorization",message:i});return{payment:{x402Version:1,scheme:e.scheme,network:n,payload:{signature:u,authorization:i}},settlementProbe:{kind:"eip3009",from:i.from,nonce:i.nonce,asset:e.asset,chainId:a}}}async function sn(t,e,n){try{let r;for(let o of t.options){let s=o.network.family==="evm"&&!!e.evm||o.network.family==="svm"&&!!e.solana;if(o.scheme!=="exact"){s&&(r=o.scheme);continue}if(o.network.family==="evm"&&e.evm){let i=await e.evm;return await mo(o,i,n)}if(o.network.family==="svm"&&e.solana){let i=await e.solana;return await po(o,i,n)}}return r!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${r}'`}:{ok:!1,reason:"unsupported_network"}}catch(r){return{ok:!1,reason:"error",detail:j(r)}}}async function mo(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let r=t.extra??{},o=r.name,s=r.version;if(typeof o!="string"||o.length===0||typeof s!="string"||s.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let i=t.network.bare,{payment:a,settlementProbe:c}=await lo(e,t,i);return{ok:!0,headerValue:Buffer.from(JSON.stringify(a),"utf8").toString("base64"),option:t,settlementProbe:c}}async function po(t,e,n){if(n.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(n.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let r=t.extra??{};if(typeof r.feePayer!="string"||r.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=t.network.bare,s={x402Version:1,scheme:t.scheme,network:o,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:r},a=await ee().buildTransaction(s,e,n.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:o,payload:{transaction:a.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:a.settlementProbe}}function fo(t){let e=[];for(let n of t){if(!n||typeof n!="object")continue;let r=n,o=je(String(r.network??""));o&&e.push({scheme:String(r.scheme??"exact"),network:o,amount:String(r.maxAmountRequired??r.amount??"0"),asset:String(r.asset??""),payTo:String(r.payTo??""),maxTimeoutSeconds:typeof r.maxTimeoutSeconds=="number"?r.maxTimeoutSeconds:void 0,extra:r.extra&&typeof r.extra=="object"?r.extra:void 0})}return e}var Cn={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let n=Array.isArray(e.accepts)?e.accepts:[];if(n.length===0)return null;let r=fo(n);return r.length===0?null:{x402Version:1,options:r}},async pay(t,e,n,r,o){let s,i=new AbortController,a=!1,c,u;try{let d=o.timeoutMs??15e3;s=setTimeout(()=>i.abort(),d);let f=await sn(n,r,o);if(!f.ok)return{ok:!1,reason:f.reason,detail:f.detail};let m=f.headerValue,S=f.option;u=S,c=f.settlementProbe;let l=new Headers(e.headers??void 0);l.set("X-PAYMENT",m);let p=e.signal!=null?AbortSignal.any([e.signal,i.signal]):i.signal,x={method:e.method,headers:l,signal:p};typeof e.body=="string"&&(x.body=e.body),a=!0,clearTimeout(s);let y=o.responseTimeoutMs??12e4;s=setTimeout(()=>i.abort(),y);let b=await fetch(t,x);return b.ok?{ok:!0,paid:!0,response:b,amountPaid:S.amount,network:S.network,txSignature:go(b)}:{ok:!1,...await mt(b)}}catch(d){if(d instanceof Error&&d.name==="AbortError"){if(!a)return{ok:!1,reason:"timeout"};let f=await Ot(c,u.network,o.solanaRpcUrl);return f.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:f.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:f.detail}}return{ok:!1,reason:"error",detail:j(d)}}finally{s!==void 0&&clearTimeout(s)}}};function go(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let n=JSON.parse(Buffer.from(e,"base64").toString("utf8")),r=n.transaction??n.txHash??n.transactionHash;return typeof r=="string"?r:void 0}catch{return}}import*as On from"tweetnacl";import{Keypair as yi,VersionedTransaction as Ai,Transaction as bi}from"@solana/web3.js";var kn=Symbol.for("x402:keypair");function an(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let n=t.solana;if(n){let r=n[kn];if(r&&r.secretKey&&r.publicKey)return{publicKey:r.publicKey,signMessage:async o=>On.sign.detached(o,r.secretKey)}}return null}var ho=[Nn,Cn];async function yo(t){let e=an(t);if(!e)return fetch;try{return(await import("@x402/extensions/sign-in-with-x")).wrapFetchWithSIWx(fetch,e)}catch(n){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${j(n)}`),fetch}}async function cn(t,e,n,r){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o;try{o=await(await yo(n))(t,{...e})}catch(s){return{ok:!1,reason:"error",detail:j(s)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let s of ho){let i=await s.parseChallenge(o.clone());if(i)return s.pay(t,e,i,n,r)}return{ok:!1,reason:"no_payment_options"}}async function Ao(t,e={},n){let r=await Ge(t,e);if(r.kind==="free")return{result:{ok:!0,paid:!1,response:r.response},tab:null};if(r.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${r.schemesOffered.join(", ")})`},tab:null};if(r.kind==="error")return{result:{ok:!1,reason:"error",detail:r.detail},tab:null};let{offer:o}=r,s=BigInt(ie(n.perUnitCap));if(BigInt(o.amountAtomic)>s)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${s}`},tab:null};let i=n.tabs?.get(o.payTo);return(!i||!i.state.isOpen)&&(i=await Gt({vault:n.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:n.perUnitCap,totalCap:n.totalCap,sessionDuration:n.sessionDuration,facilitatorUrl:n.facilitatorUrl,onLiveSession:n.onLiveSession,reserveFinalVoucherV2:n.reserveFinalVoucherV2}),n.tabs?.set(o.payTo,i)),{result:await cn(t,e,{},{tab:i}),tab:i}}function bo(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:Pe(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function vo(t,e={},n={}){let r=n.cache?.get(t);if(r)return{kind:"terms",terms:r};let o=await Ge(t,e,n.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==ct)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let s=bo(o.offer);return n.cache?.set(t,s),{kind:"terms",terms:s}}export{At as DEFAULT_FACILITATOR_URL,Ee as DEXTER_VAULT_PROGRAM_ID,Ht as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,dn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,qt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,Hr as HOSTED_TAB_ACCEPTANCE_RULE,Gr as HOSTED_TAB_REGISTRATION_ENCODING,Wr as HOSTED_TAB_TERMS_VERSION,jr as HOSTED_TAB_VOUCHER_HEADER,Y as HistoricalV1MigrationRequiredError,or as INSTRUCTIONS_SYSVAR_ID,Ut as LiveSessionExistsError,rr as SECP256R1_PROGRAM_ID,xe as SessionScopeExceededError,re as TabClosedError,_e as UnsupportedNetworkError,ur as armTabOpen,oe as assertFinalVoucherV2ReservationReceipt,Pe as atomicToHuman,er as buildRegisterSessionKeyInstruction,tr as buildRevokeSessionKeyInstruction,nr as buildSecp256r1VerifyInstruction,Ln as buildVoucherMessage,ht as canonicalFinalVoucherV2ReservationNetwork,Le as deriveChannelId,yt as finalVoucherV2Digest,gn as finalVoucherV2ReservationBindingDigest,fn as finalVoucherV2ReservationBindingDigestFromIdentity,$e as finalVoucherV2ReservationIdentity,jt as finalVoucherV2ReservationMemo,Kn as finalVoucherV2Sequence,Gn as generateSessionKeypair,ie as humanToAtomic,Ft as makeSessionKey,Gt as openTab,Re as parseAtomic,Ao as payUrlWithTab,Ge as resolveTabOffer,vo as resolveTabTerms,lr as resumeTab,Yn as scopeCapAtomic,Fe as sessionRegisterMessage,Bn as sessionReplaceV1Message,Un as sessionRevokeMessage,Mn as sessionVoucherV2AuthorizationNonce,Dn as sessionVoucherV2Nonce,$t as signContextBoundFinalVoucherV2,Lt as signVoucher,Mr as tabFromGrant,Dt as voucherPayloadMessage,bt as voucherToHeader,Fn as voucherV2SequenceOrdinal};