npm - @dexterai/x402 - Versions diffs - 6.0.1 → 6.0.3 - Mend

@dexterai/x402 6.0.1 → 6.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/tab/index.js CHANGED Viewed

@@ -1,6 +1,6 @@
-var xe=class extends Error{constructor(r){super(`Network ${r} is not yet supported by @dexterai/x402/tab`);this.network=r;this.name="UnsupportedNetworkError"}network},Y=class extends Error{constructor(r){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${r}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=r;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},Re=class extends Error{constructor(r,n){super(`Session scope exceeded: ${r}${n?` (${n})`:""}`);this.reason=r;this.name="SessionScopeExceededError"}reason},re=class extends Error{constructor(r){super(`Tab ${r} is already closed`);this.channelId=r;this.name="TabClosedError"}channelId},Dt=class extends Error{constructor(r){super(`a LIVE session already exists for counterparty ${r.allowedCounterparty} (session ${r.sessionPubkeyHex.slice(0,16)}\u2026, expires ${r.expiresAtUnix}; on-chain spent=${r.spentAtomic}, crystallized=${r.crystallizedCumulativeAtomic}, frontier=${r.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=r;this.name="LiveSessionExistsError"}details};import{PublicKey as se}from"@solana/web3.js";import{bytesToHex as ae}from"@noble/hashes/utils";import ht from"tweetnacl";import{PublicKey as gt}from"@solana/web3.js";import{contextBoundVoucherV2Message as jn,finalVoucherV2Sequence as zn,sessionRegisterMessage as Gn,sessionVoucherV2AuthorizationNonce as Xn}from"@dexterai/vault/messages";import{deriveSessionPda as Jn}from"@dexterai/vault/session";import{sessionRegisterMessage as $e,sessionReplaceV1Message as Kn,sessionRevokeMessage as Fn,sessionVoucherV2Nonce as Ln,sessionVoucherV2AuthorizationNonce as $n,finalVoucherV2Sequence as qn,voucherV2SequenceOrdinal as Wn,voucherPayloadMessage as Mt,buildVoucherMessage as Hn}from"@dexterai/vault/messages";import{sha256 as nr}from"@noble/hashes/sha256";function Yn(){let e=ht.sign.keyPair();return{publicKey:e.publicKey,privateKey:e.secretKey}}function Lt(e,t,r){return{publicKey:e.publicKey,privateKey:e.privateKey,scope:t,registration:r}}function $t(e,t,r){if(r.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${r.length}`);if(e.registration.length===188&&new DataView(e.registration.buffer,e.registration.byteOffset,e.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let n=BigInt(t.cumulativeAmount),o=BigInt(e.scope.maxAmountAtomic);if(n>o)throw new Error(`voucher cumulative ${n} exceeds session cap ${o}`);let i=Math.floor(Date.now()/1e3);if(i>=e.scope.expiresAtUnix)throw new Error(`session expired at ${e.scope.expiresAtUnix}, now ${i}`);let s=Mt({channelId:r,cumulativeAmount:n,sequenceNumber:t.sequenceNumber}),a=ht.sign.detached(s,e.privateKey);return{payload:t,sessionPublicKey:e.publicKey,sessionRegistration:e.registration,sessionSignature:a}}var Zn=/^[0-9a-f]{64}$/,Qn=(1n<<64n)-1n;function Kt(e){return Buffer.from(e).toString("hex")}function er(e){return Uint8Array.from(Buffer.from(e,"hex"))}function Ft(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n+=1)r|=(e[n]??0)^(t[n]??0);return r===0}function qt(e){if(!Zn.test(e.channelId)||e.sessionPublicKey.length!==32||e.sessionPrivateKey.length!==64||e.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(e.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let t=BigInt(e.cumulativeAmountAtomic);if(t>Qn)throw new Error("native_tab_v2_cumulative_amount_invalid");let r=new gt(e.programId),n=new gt(e.vaultPda),o=new gt(e.sessionPda),i=new gt(e.seller),[s]=Jn(n,i,r);if(!o.equals(s))throw new Error("native_tab_v2_session_pda_mismatch");let a=e.sessionRegistration,c=new DataView(a.buffer,a.byteOffset,a.byteLength),u=c.getBigUint64(128,!0),m=c.getBigInt64(136,!0),p=c.getBigUint64(180,!0),f=e.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(f)||f<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Ft(a,Gn({programId:r,vaultPda:n,sessionPubkey:e.sessionPublicKey,maxAmount:u,expiresAt:m,allowedCounterparty:i,nonce:e.sessionNonce,maxRevolvingCapacity:p})))throw new Error("native_tab_v2_registration_identity_mismatch");if(u===0n||p===0n||p>u||m<=BigInt(f)||m>0x7fffffffffffffffn-604800n||t>u)throw new Error("native_tab_v2_registration_semantics_invalid");Xn(e.sessionNonce);let l=ht.sign.keyPair.fromSeed(e.sessionPrivateKey.subarray(0,32)),d=!1;try{d=Ft(l.publicKey,e.sessionPublicKey)&&Ft(e.sessionPrivateKey.subarray(32,64),e.sessionPublicKey)}finally{l.secretKey.fill(0)}if(!d)throw new Error("native_tab_v2_session_key_mismatch");let R=zn(e.sequenceOrdinal),x=jn({programId:r,vaultPda:n,sessionPda:o,seller:i,sessionNonce:e.sessionNonce,channelId:er(e.channelId),cumulativeAmount:t,sequenceNumber:R}),g=ht.sign.detached(x,e.sessionPrivateKey);return{channelId:e.channelId,cumulativeAmount:e.cumulativeAmountAtomic,sequenceNumber:R,sessionPublicKey:Kt(e.sessionPublicKey),sessionSignature:Kt(g),sessionRegistration:Kt(a)}}function tr(e){return Te(e.maxAmountAtomic)}function Te(e){if(!/^\d+$/.test(e))throw new Error(`atomic amount must be a non-negative integer string, got "${e}"`);return BigInt(e)}function qe(e){let t=new Uint8Array(8);new DataView(t.buffer).setBigUint64(0,e.nonce,!0);let r=new TextEncoder().encode(e.sellerUrl),n=nr.create();return n.update(e.vaultPda.toBytes()),n.update(r),n.update(t),n.digest()}import{sha256 as dn}from"@noble/hashes/sha256";import{bytesToHex as Ee}from"@noble/hashes/utils";var ln=/^[0-9a-f]{64}$/,mn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,rr=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,Wt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",jt="dexter-native-tab-v2-reservation/v1",pn=`${jt}:`;function Ht(e){if(e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number"){if(!Number.isFinite(e))throw new Error("canonical_non_finite_number");return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map(Ht);if(typeof e=="object")return Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Ht(r)]));throw new Error("canonical_value_unsupported")}function fn(e){return JSON.stringify(Ht(e))}function At(e){if(e==="solana:mainnet"||e===Wt)return Wt;throw new Error("native_tab_v2_reservation_network_unsupported")}function bt(e){return Ee(dn(new TextEncoder().encode(fn({channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:Ee(e.sessionPublicKey),sessionSignature:Ee(e.sessionSignature),sessionRegistration:Ee(e.sessionRegistration)}))))}function We(e){let t=bt(e);return{voucherDigest:t,idempotencyKey:`native-tab-v2:${t}`}}function gn(e){return Ee(dn(new TextEncoder().encode(fn({contract:jt,network:At(e.network),programId:e.programId,buyerSwigAddress:e.buyerSwigAddress,vaultPda:e.vaultPda,sessionPda:e.sessionPda,seller:e.seller,channelId:e.channelId,sessionNonce:e.sessionNonce,reservationAmountAtomic:e.reservationAmountAtomic,previousCumulativeAtomic:e.previousCumulativeAtomic,voucherDigest:e.voucherDigest,cumulativeAmountAtomic:e.cumulativeAmountAtomic,sequenceNumber:e.sequenceNumber}))))}function hn(e){let t=bt(e.voucher);return gn({network:e.network,programId:e.programId,buyerSwigAddress:e.buyerSwigAddress,vaultPda:e.vaultPda,sessionPda:e.sessionPda,seller:e.seller,channelId:e.channelId,sessionNonce:e.sessionNonce,reservationAmountAtomic:e.reservationAmountAtomic,previousCumulativeAtomic:e.previousCumulativeAtomic,voucherDigest:t,cumulativeAmountAtomic:e.voucher.payload.cumulativeAmount,sequenceNumber:e.voucher.payload.sequenceNumber})}function zt(e){return`${pn}${hn(e)}`}function M(e){throw new Error(`native_tab_v2_reservation_receipt_invalid:${e}`)}function yt(e,t){(!Number.isSafeInteger(e)||e<0)&&M(t)}function oe(e,t){(!t||typeof t!="object")&&M("missing");let r=bt(e.voucher);(!ln.test(e.voucherDigest)||e.voucherDigest!==r)&&M("input_voucher_digest"),e.idempotencyKey!==`native-tab-v2:${r}`&&M("input_idempotency_identity");let n=BigInt(e.voucher.payload.cumulativeAmount),o=BigInt(e.previousCumulativeAtomic),i=BigInt(e.reservationAmountAtomic);(n<=o||n-o!==i||i<=0n)&&M("input_reservation_delta"),(e.voucher.payload.channelId!==e.channelId||(e.voucher.payload.sequenceNumber&2147483648)===0||(e.sessionNonce&2147483648)===0||e.voucher.sessionPublicKey.length!==32||e.voucher.sessionSignature.length!==64||e.voucher.sessionRegistration.length!==188)&&M("input_voucher_identity"),t.contract!=="dexter-native-tab-open-receipt/v1"&&t.contract!=="dexter-native-tab-open-receipt/v2"&&M("contract"),ln.test(t.operationId)||M("operation_id"),mn.test(t.callerOperationId)||M("caller_operation_id"),rr.test(t.transaction)||M("transaction"),t.commitment!=="confirmed"&&t.commitment!=="finalized"&&M("commitment"),yt(t.confirmationSlot,"confirmation_slot"),yt(t.postStateSlot,"post_state_slot"),(t.confirmationSlot===0||t.postStateSlot<t.confirmationSlot)&&M("post_state_slot");let s,a;try{s=At(e.network),a=At(t.network)}catch{return M("network")}(a!==s||t.buyerSwigAddress!==e.buyerSwigAddress||t.vaultPda!==e.vaultPda||t.sessionPda!==e.sessionPda||t.seller!==e.seller||t.channelId!==e.channelId||t.sessionPublicKey!==Ee(e.voucher.sessionPublicKey)||t.voucherDigest!==r||t.cumulativeAmountAtomic!==e.voucher.payload.cumulativeAmount||t.sequenceNumber!==e.voucher.payload.sequenceNumber||!mn.test(t.providerReceiptId)||t.reservationAmountAtomic!==e.reservationAmountAtomic||t.currentOutstandingBeforeAtomic!=="0"||t.currentOutstandingAfterAtomic!==e.reservationAmountAtomic)&&M("economic_identity"),yt(t.pendingVoucherCountBefore,"pending_voucher_count_before"),yt(t.pendingVoucherCountAfter,"pending_voucher_count_after"),t.contract==="dexter-native-tab-open-receipt/v1"?t.callerOperationId!==e.idempotencyKey&&M("idempotency_key"):(t.rootOperationId!==e.idempotencyKey||!Number.isSafeInteger(t.generation)||Number(t.generation)<2||!t.predecessorCallerOperationId||!t.predecessorLifecycleOperationId||!t.predecessorReleaseDigest||!t.stableReservationId||!t.economicEffectDigest)&&M("successor_identity")}import{deriveSessionPda as ur}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as or,buildRevokeSessionKeyInstruction as sr,deriveSwigWalletAddress as Fo}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as ir}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Pe,SECP256R1_PROGRAM_ID as ar,INSTRUCTIONS_SYSVAR_ID as cr}from"@dexterai/vault/constants";var lr=3600,vt="https://x402.dexter.cash",yn=6;function ie(e,t=yn){if(!/^\d+(\.\d+)?$/.test(e))throw new Error(`amount must be a non-negative decimal string, got "${e}"`);let[r,n=""]=e.split(".");if(n.length>t)throw new Error(`amount "${e}" has more than ${t} decimals`);let o=n.padEnd(t,"0"),i=`${r}${o}`.replace(/^0+(?=\d)/,"");return i===""?"0":i}function Ie(e,t=yn){if(!/^\d+$/.test(e))throw new Error(`atomic must be a non-negative integer string, got "${e}"`);let r=e.padStart(t+1,"0"),n=r.slice(0,-t).replace(/^0+(?=\d)/,"")||"0",o=r.slice(-t).replace(/0+$/,"");return o?`${n}.${o}`:n}var He=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;lastSignedVoucherIncrementAtomic=null;previousSignedVoucher=null;previousSignedVoucherIncrementAtomic=null;constructor(t){if(this.internals=t,this.channelId=t.channelIdHex,this.network=t.network,this.counterparty=t.counterparty,this.initialCumulativeAtomic=t.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=t.initialSequenceOrdinal??0,this.isFinalV2=An(t.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!t.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let t=this.internals.totalCapAtomic-this.cumulativeAtomic,r=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Ie(this.cumulativeAtomic.toString()),remaining:Ie(t.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-r)}}async signNextVoucher(t){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(t)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(t){if(this.closed)throw new re(this.channelId);let r=BigInt(t);if(r<=0n)throw new Error(`voucher increment must be > 0, got ${t}`);if(r>this.internals.perUnitCapAtomic)throw new Re("cap_exceeded",`single voucher increment ${r} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let n=this.cumulativeAtomic+r;if(n>this.internals.totalCapAtomic)throw new Re("cap_exceeded",`cumulative ${n} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,i={channelId:this.channelId,cumulativeAmount:n.toString(),sequenceNumber:o},s=await this.internals.vault.signWithSession(this.internals.session,i);if(s.payload.channelId!==i.channelId||s.payload.cumulativeAmount!==i.cumulativeAmount||(this.isFinalV2?(s.payload.sequenceNumber&2147483647)!==o||(s.payload.sequenceNumber&2147483648)===0:s.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");let a;this.internals.beforeVoucherRelease&&(a=await this.internals.beforeVoucherRelease({voucher:s,incrementAtomic:r.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}));let c=a?{...s,reservationReceipt:a}:s;return this.previousSignedVoucher=this.lastSignedVoucher,this.previousSignedVoucherIncrementAtomic=this.lastSignedVoucherIncrementAtomic,this.lastSignedVoucher=c,this.lastSignedVoucherIncrementAtomic=r,this.sequenceNumber=o,this.cumulativeAtomic=n,c}beginOperation(t){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=t}endOperation(t){if(this.operationInFlight!==t)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(t){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(t)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(t){let r=this.lastSignedVoucher;if(!r||r.payload.sequenceNumber!==t.payload.sequenceNumber||r.payload.cumulativeAmount!==t.payload.cumulativeAmount)return!1;let n=this.previousSignedVoucher;if(n){let o=this.previousSignedVoucherIncrementAtomic;if(o===null)return!1;this.sequenceNumber=n.payload.sequenceNumber,this.cumulativeAtomic=BigInt(n.payload.cumulativeAmount),this.lastSignedVoucher=n,this.lastSignedVoucherIncrementAtomic=o}else if(r.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null,this.lastSignedVoucherIncrementAtomic=null;else return!1;return this.previousSignedVoucher=null,this.previousSignedVoucherIncrementAtomic=null,!0}async stream(t,r){if(this.closed)throw new re(this.channelId);let n=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(r?.headers);o.set("X-Tab-Voucher",St(n)),o.set("Accept","text/event-stream");let i=await fetch(t,{...r,headers:o});if(!i.ok){let s=await i.text().catch(()=>"");throw new Error(`tab.stream HTTP ${i.status}: ${s.slice(0,500)}`)}if(!i.body)throw new Error("tab.stream response has no body");return hr(i.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new re(this.channelId);let t={settleTx:""};if(this.lastSignedVoucher&&this.cumulativeAtomic>0n){let n=this.isFinalV2?this.lastSignedVoucherIncrementAtomic:this.cumulativeAtomic-this.initialCumulativeAtomic;if(n===null||n<=0n)throw new Error("tab_settle_attempted_amount_missing");t=await dr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network,n.toString())}let r=(this.internals.closeMode??"revoke")==="revoke";return r&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Ie(this.cumulativeAtomic.toString()),sessionRevoked:r,...t}}finally{this.endOperation("close")}}};function An(e){return e.registration.length!==188?!1:(new DataView(e.registration.buffer,e.registration.byteOffset,e.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function St(e,t){let r=t??e.reservationReceipt;if((e.payload.sequenceNumber&2147483648)!==0&&!r)throw new Error("native_tab_v2_reservation_receipt_required");return Buffer.from(JSON.stringify({payload:e.payload,sessionPublicKey:ae(e.sessionPublicKey),sessionRegistration:ae(e.sessionRegistration),sessionSignature:ae(e.sessionSignature),...r?{reservationReceipt:r}:{}}),"utf8").toString("base64")}function Ve(e){return typeof e!="string"||!/^\d+$/.test(e)?null:BigInt(e)}function mr(e){let t;try{t=JSON.parse(e)}catch{return!1}if(typeof t!="object"||t===null)return!1;let r="non_monotonic_cumulative";if(t.error!==r&&t.reason!==r)return!1;let n=Ve(t.attempted_cumulative),o=Ve(t.on_chain_spent),i=Ve(t.frontier);return n===null||o===null||i===null?!1:n>o&&n<=i}async function dr(e,t,r,n){let o=`${e.replace(/\/$/,"")}/tab/settle`,i={attemptedAmount:n,channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:ae(t.sessionPublicKey),sessionSignature:ae(t.sessionSignature),sessionRegistration:ae(t.sessionRegistration),network:r},s=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(i)}),a=await s.text();if(!s.ok){if(s.status===409&&mr(a))return{settleTx:""};throw new Error(`tab settle ${s.status}: ${a.slice(0,500)}`)}let c;try{c=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(c.reason==="covered_by_frontier"){let m=Ve(c.attemptedCumulative),p=Ve(c.onChainSpent),f=Ve(c.frontier);if(m!==null&&p!==null&&f!==null&&m>p&&m<=f)return{settleTx:""}}if(!c.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let u={settleTx:c.settleTx};return typeof c.grossAmount=="string"&&(u.grossAmount=c.grossAmount),typeof c.feeAmount=="string"&&(u.feeAmount=c.feeAmount),typeof c.netAmount=="string"&&(u.netAmount=c.netAmount),u}async function pr(e,t,r,n,o){throw new Y("armTabOpen")}async function Gt(e){if(e.network!==e.vault.network)throw new xe(`options.network (${e.network}) doesn't match vault.network (${e.vault.network})`);if(e.network!=="solana:mainnet")throw new xe(e.network);if(e.vault.sessionVoucherVersion!==1&&e.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(e.vault.sessionVoucherVersion===1)throw new Y("openTab");if(e.vault.sessionVoucherVersion===2&&(!e.reserveFinalVoucherV2||!e.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let t=BigInt(Math.floor(Math.random()*4294967295)),r=new se(e.vault.vaultPda),n=qe({vaultPda:r,sellerUrl:e.seller,nonce:BigInt(t)}),o=ae(n),i=BigInt(ie(e.perUnitCap)),s=BigInt(ie(e.totalCap));if(i<=0n)throw new Error("perUnitCap must be > 0");if(s<i)throw new Error("totalCap must be >= perUnitCap");if(e.revolvingCapacity!==void 0&&BigInt(ie(e.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let a=e.sessionDuration??lr,c=Math.floor(Date.now()/1e3)+a,u=gr(e.seller),m={channelId:o,maxAmountAtomic:s.toString(),revolvingCapacityAtomic:e.revolvingCapacity?ie(e.revolvingCapacity):s.toString(),expiresAtUnix:c,allowedCounterparty:u},p=await e.vault.authorizeSession(m,{onLiveSession:e.onLiveSession}),f=An(p);if(e.vault.sessionVoucherVersion!==(f?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let b;if(f){if(!e.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let l=p.registration,d=new DataView(l.buffer,l.byteOffset,l.byteLength),R=new se(l.subarray(32,64)),x=new se(l.subarray(64,96)),g=new se(l.subarray(144,176)),h=d.getUint32(176,!0),T=d.getBigUint64(180,!0),I=$e({programId:Pe,vaultPda:r,sessionPubkey:p.publicKey,maxAmount:s,expiresAt:BigInt(c),allowedCounterparty:new se(u),nonce:h,maxRevolvingCapacity:BigInt(m.revolvingCapacityAtomic)});if(!R.equals(Pe)||!x.equals(r)||!g.equals(new se(u))||T!==BigInt(m.revolvingCapacityAtomic)||!Buffer.from(l).equals(Buffer.from(I)))throw new Error("native_tab_v2_registration_identity_mismatch");let[$]=ur(x,g,R);b=async({voucher:K,incrementAtomic:E,previousCumulativeAtomic:N})=>{let y=We(K),v={network:e.network,programId:R.toBase58(),buyerSwigAddress:e.vault.swigAddress,vaultPda:x.toBase58(),sessionPda:$.toBase58(),seller:g.toBase58(),channelId:o,sessionNonce:h,reservationAmountAtomic:E,previousCumulativeAtomic:N,...y,voucher:K},S=await e.reserveFinalVoucherV2(v);return oe(v,S),await e.vault.verifyFinalVoucherV2Reservation(v,S),S}}return new He({vault:e.vault,network:e.network,seller:e.seller,counterparty:u,session:p,channelIdHex:o,channelIdBytes:n,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:c,facilitatorUrl:e.facilitatorUrl??vt,beforeVoucherRelease:b})}async function fr(e){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function gr(e){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(e))try{return new se(e),e}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${e}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*hr(e){let t=e.getReader(),r=new TextDecoder,n="";try{for(;;){let{done:o,value:i}=await t.read();if(o)break;n+=r.decode(i,{stream:!0});let s;for(;(s=n.indexOf(`
+var xe=class extends Error{constructor(r){super(`Network ${r} is not yet supported by @dexterai/x402/tab`);this.network=r;this.name="UnsupportedNetworkError"}network},Y=class extends Error{constructor(r){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${r}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=r;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},Re=class extends Error{constructor(r,n){super(`Session scope exceeded: ${r}${n?` (${n})`:""}`);this.reason=r;this.name="SessionScopeExceededError"}reason},re=class extends Error{constructor(r){super(`Tab ${r} is already closed`);this.channelId=r;this.name="TabClosedError"}channelId},Dt=class extends Error{constructor(r){super(`a LIVE session already exists for counterparty ${r.allowedCounterparty} (session ${r.sessionPubkeyHex.slice(0,16)}\u2026, expires ${r.expiresAtUnix}; on-chain spent=${r.spentAtomic}, crystallized=${r.crystallizedCumulativeAtomic}, frontier=${r.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=r;this.name="LiveSessionExistsError"}details};import{PublicKey as se}from"@solana/web3.js";import{bytesToHex as ae}from"@noble/hashes/utils";import ht from"tweetnacl";import{PublicKey as gt}from"@solana/web3.js";import{contextBoundVoucherV2Message as jn,finalVoucherV2Sequence as Gn,sessionRegisterMessage as zn,sessionVoucherV2AuthorizationNonce as Xn}from"@dexterai/vault/messages";import{deriveSessionPda as Jn}from"@dexterai/vault/session";import{sessionRegisterMessage as $e,sessionReplaceV1Message as Kn,sessionRevokeMessage as Fn,sessionVoucherV2Nonce as Ln,sessionVoucherV2AuthorizationNonce as $n,finalVoucherV2Sequence as qn,voucherV2SequenceOrdinal as Wn,voucherPayloadMessage as Mt,buildVoucherMessage as Hn}from"@dexterai/vault/messages";import{sha256 as nr}from"@noble/hashes/sha256";function Yn(){let t=ht.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Lt(t,e,r){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:r}}function $t(t,e,r){if(r.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${r.length}`);if(t.registration.length===188&&new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let n=BigInt(e.cumulativeAmount),o=BigInt(t.scope.maxAmountAtomic);if(n>o)throw new Error(`voucher cumulative ${n} exceeds session cap ${o}`);let i=Math.floor(Date.now()/1e3);if(i>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${i}`);let s=Mt({channelId:r,cumulativeAmount:n,sequenceNumber:e.sequenceNumber}),a=ht.sign.detached(s,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:a}}var Qn=/^[0-9a-f]{64}$/,Zn=(1n<<64n)-1n;function Kt(t){return Buffer.from(t).toString("hex")}function er(t){return Uint8Array.from(Buffer.from(t,"hex"))}function Ft(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n+=1)r|=(t[n]??0)^(e[n]??0);return r===0}function qt(t){if(!Qn.test(t.channelId)||t.sessionPublicKey.length!==32||t.sessionPrivateKey.length!==64||t.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(t.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let e=BigInt(t.cumulativeAmountAtomic);if(e>Zn)throw new Error("native_tab_v2_cumulative_amount_invalid");let r=new gt(t.programId),n=new gt(t.vaultPda),o=new gt(t.sessionPda),i=new gt(t.seller),[s]=Jn(n,i,r);if(!o.equals(s))throw new Error("native_tab_v2_session_pda_mismatch");let a=t.sessionRegistration,c=new DataView(a.buffer,a.byteOffset,a.byteLength),u=c.getBigUint64(128,!0),d=c.getBigInt64(136,!0),p=c.getBigUint64(180,!0),f=t.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(f)||f<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Ft(a,zn({programId:r,vaultPda:n,sessionPubkey:t.sessionPublicKey,maxAmount:u,expiresAt:d,allowedCounterparty:i,nonce:t.sessionNonce,maxRevolvingCapacity:p})))throw new Error("native_tab_v2_registration_identity_mismatch");if(u===0n||p===0n||p>u||d<=BigInt(f)||d>0x7fffffffffffffffn-604800n||e>u)throw new Error("native_tab_v2_registration_semantics_invalid");Xn(t.sessionNonce);let l=ht.sign.keyPair.fromSeed(t.sessionPrivateKey.subarray(0,32)),m=!1;try{m=Ft(l.publicKey,t.sessionPublicKey)&&Ft(t.sessionPrivateKey.subarray(32,64),t.sessionPublicKey)}finally{l.secretKey.fill(0)}if(!m)throw new Error("native_tab_v2_session_key_mismatch");let R=Gn(t.sequenceOrdinal),T=jn({programId:r,vaultPda:n,sessionPda:o,seller:i,sessionNonce:t.sessionNonce,channelId:er(t.channelId),cumulativeAmount:e,sequenceNumber:R}),g=ht.sign.detached(T,t.sessionPrivateKey);return{channelId:t.channelId,cumulativeAmount:t.cumulativeAmountAtomic,sequenceNumber:R,sessionPublicKey:Kt(t.sessionPublicKey),sessionSignature:Kt(g),sessionRegistration:Kt(a)}}function tr(t){return Te(t.maxAmountAtomic)}function Te(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function qe(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let r=new TextEncoder().encode(t.sellerUrl),n=nr.create();return n.update(t.vaultPda.toBytes()),n.update(r),n.update(e),n.digest()}import{sha256 as dn}from"@noble/hashes/sha256";import{bytesToHex as Ee}from"@noble/hashes/utils";var ln=/^[0-9a-f]{64}$/,mn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,rr=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,Wt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",jt="dexter-native-tab-v2-reservation/v1",pn=`${jt}:`;function Ht(t){if(t===null||typeof t=="string"||typeof t=="boolean")return t;if(typeof t=="number"){if(!Number.isFinite(t))throw new Error("canonical_non_finite_number");return t}if(typeof t=="bigint")return t.toString();if(Array.isArray(t))return t.map(Ht);if(typeof t=="object")return Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0).sort(([e],[r])=>e.localeCompare(r)).map(([e,r])=>[e,Ht(r)]));throw new Error("canonical_value_unsupported")}function fn(t){return JSON.stringify(Ht(t))}function At(t){if(t==="solana:mainnet"||t===Wt)return Wt;throw new Error("native_tab_v2_reservation_network_unsupported")}function bt(t){return Ee(dn(new TextEncoder().encode(fn({channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:Ee(t.sessionPublicKey),sessionSignature:Ee(t.sessionSignature),sessionRegistration:Ee(t.sessionRegistration)}))))}function We(t){let e=bt(t);return{voucherDigest:e,idempotencyKey:`native-tab-v2:${e}`}}function gn(t){return Ee(dn(new TextEncoder().encode(fn({contract:jt,network:At(t.network),programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:t.voucherDigest,cumulativeAmountAtomic:t.cumulativeAmountAtomic,sequenceNumber:t.sequenceNumber}))))}function hn(t){let e=bt(t.voucher);return gn({network:t.network,programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:e,cumulativeAmountAtomic:t.voucher.payload.cumulativeAmount,sequenceNumber:t.voucher.payload.sequenceNumber})}function Gt(t){return`${pn}${hn(t)}`}function M(t){throw new Error(`native_tab_v2_reservation_receipt_invalid:${t}`)}function yt(t,e){(!Number.isSafeInteger(t)||t<0)&&M(e)}function oe(t,e){(!e||typeof e!="object")&&M("missing");let r=bt(t.voucher);(!ln.test(t.voucherDigest)||t.voucherDigest!==r)&&M("input_voucher_digest"),t.idempotencyKey!==`native-tab-v2:${r}`&&M("input_idempotency_identity");let n=BigInt(t.voucher.payload.cumulativeAmount),o=BigInt(t.previousCumulativeAtomic),i=BigInt(t.reservationAmountAtomic);(n<=o||n-o!==i||i<=0n)&&M("input_reservation_delta"),(t.voucher.payload.channelId!==t.channelId||(t.voucher.payload.sequenceNumber&2147483648)===0||(t.sessionNonce&2147483648)===0||t.voucher.sessionPublicKey.length!==32||t.voucher.sessionSignature.length!==64||t.voucher.sessionRegistration.length!==188)&&M("input_voucher_identity"),e.contract!=="dexter-native-tab-open-receipt/v1"&&e.contract!=="dexter-native-tab-open-receipt/v2"&&M("contract"),ln.test(e.operationId)||M("operation_id"),mn.test(e.callerOperationId)||M("caller_operation_id"),rr.test(e.transaction)||M("transaction"),e.commitment!=="confirmed"&&e.commitment!=="finalized"&&M("commitment"),yt(e.confirmationSlot,"confirmation_slot"),yt(e.postStateSlot,"post_state_slot"),(e.confirmationSlot===0||e.postStateSlot<e.confirmationSlot)&&M("post_state_slot");let s,a;try{s=At(t.network),a=At(e.network)}catch{return M("network")}(a!==s||e.buyerSwigAddress!==t.buyerSwigAddress||e.vaultPda!==t.vaultPda||e.sessionPda!==t.sessionPda||e.seller!==t.seller||e.channelId!==t.channelId||e.sessionPublicKey!==Ee(t.voucher.sessionPublicKey)||e.voucherDigest!==r||e.cumulativeAmountAtomic!==t.voucher.payload.cumulativeAmount||e.sequenceNumber!==t.voucher.payload.sequenceNumber||!mn.test(e.providerReceiptId)||e.reservationAmountAtomic!==t.reservationAmountAtomic||e.currentOutstandingBeforeAtomic!=="0"||e.currentOutstandingAfterAtomic!==t.reservationAmountAtomic)&&M("economic_identity"),yt(e.pendingVoucherCountBefore,"pending_voucher_count_before"),yt(e.pendingVoucherCountAfter,"pending_voucher_count_after"),e.contract==="dexter-native-tab-open-receipt/v1"?e.callerOperationId!==t.idempotencyKey&&M("idempotency_key"):(e.rootOperationId!==t.idempotencyKey||!Number.isSafeInteger(e.generation)||Number(e.generation)<2||!e.predecessorCallerOperationId||!e.predecessorLifecycleOperationId||!e.predecessorReleaseDigest||!e.stableReservationId||!e.economicEffectDigest)&&M("successor_identity")}import{deriveSessionPda as ur}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as or,buildRevokeSessionKeyInstruction as sr,deriveSwigWalletAddress as Lo}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as ir}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Pe,SECP256R1_PROGRAM_ID as ar,INSTRUCTIONS_SYSVAR_ID as cr}from"@dexterai/vault/constants";var lr=3600,vt="https://x402.dexter.cash",yn=6;function ie(t,e=yn){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[r,n=""]=t.split(".");if(n.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let o=n.padEnd(e,"0"),i=`${r}${o}`.replace(/^0+(?=\d)/,"");return i===""?"0":i}function Ie(t,e=yn){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let r=t.padStart(e+1,"0"),n=r.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",o=r.slice(-e).replace(/0+$/,"");return o?`${n}.${o}`:n}var He=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;lastSignedVoucherIncrementAtomic=null;previousSignedVoucher=null;previousSignedVoucherIncrementAtomic=null;constructor(e){if(this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=e.initialSequenceOrdinal??0,this.isFinalV2=An(e.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!e.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,r=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Ie(this.cumulativeAtomic.toString()),remaining:Ie(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-r)}}async signNextVoucher(e){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(e)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(e){if(this.closed)throw new re(this.channelId);let r=BigInt(e);if(r<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(r>this.internals.perUnitCapAtomic)throw new Re("cap_exceeded",`single voucher increment ${r} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let n=this.cumulativeAtomic+r;if(n>this.internals.totalCapAtomic)throw new Re("cap_exceeded",`cumulative ${n} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,i={channelId:this.channelId,cumulativeAmount:n.toString(),sequenceNumber:o},s=await this.internals.vault.signWithSession(this.internals.session,i);if(s.payload.channelId!==i.channelId||s.payload.cumulativeAmount!==i.cumulativeAmount||(this.isFinalV2?(s.payload.sequenceNumber&2147483647)!==o||(s.payload.sequenceNumber&2147483648)===0:s.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");let a;this.internals.beforeVoucherRelease&&(a=await this.internals.beforeVoucherRelease({voucher:s,incrementAtomic:r.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}));let c=a?{...s,reservationReceipt:a}:s;return this.previousSignedVoucher=this.lastSignedVoucher,this.previousSignedVoucherIncrementAtomic=this.lastSignedVoucherIncrementAtomic,this.lastSignedVoucher=c,this.lastSignedVoucherIncrementAtomic=r,this.sequenceNumber=o,this.cumulativeAtomic=n,c}beginOperation(e){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=e}endOperation(e){if(this.operationInFlight!==e)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(e){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(e)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(e){let r=this.lastSignedVoucher;if(!r||r.payload.sequenceNumber!==e.payload.sequenceNumber||r.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let n=this.previousSignedVoucher;if(n){let o=this.previousSignedVoucherIncrementAtomic;if(o===null)return!1;this.sequenceNumber=n.payload.sequenceNumber,this.cumulativeAtomic=BigInt(n.payload.cumulativeAmount),this.lastSignedVoucher=n,this.lastSignedVoucherIncrementAtomic=o}else if(r.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null,this.lastSignedVoucherIncrementAtomic=null;else return!1;return this.previousSignedVoucher=null,this.previousSignedVoucherIncrementAtomic=null,!0}async stream(e,r){if(this.closed)throw new re(this.channelId);let n=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(r?.headers);o.set("X-Tab-Voucher",St(n)),o.set("Accept","text/event-stream");let i=await fetch(e,{...r,headers:o});if(!i.ok){let s=await i.text().catch(()=>"");throw new Error(`tab.stream HTTP ${i.status}: ${s.slice(0,500)}`)}if(!i.body)throw new Error("tab.stream response has no body");return hr(i.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new re(this.channelId);let e={settleTx:""};if(this.lastSignedVoucher&&this.cumulativeAtomic>0n){let n=this.isFinalV2?this.lastSignedVoucherIncrementAtomic:this.cumulativeAtomic-this.initialCumulativeAtomic;if(n===null||n<=0n)throw new Error("tab_settle_attempted_amount_missing");e=await dr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network,n.toString())}let r=(this.internals.closeMode??"revoke")==="revoke";return r&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Ie(this.cumulativeAtomic.toString()),sessionRevoked:r,...e}}finally{this.endOperation("close")}}};function An(t){return t.registration.length!==188?!1:(new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function St(t,e){let r=e??t.reservationReceipt;if((t.payload.sequenceNumber&2147483648)!==0&&!r)throw new Error("native_tab_v2_reservation_receipt_required");return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ae(t.sessionPublicKey),sessionRegistration:ae(t.sessionRegistration),sessionSignature:ae(t.sessionSignature),...r?{reservationReceipt:r}:{}}),"utf8").toString("base64")}function Ve(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function mr(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let r="non_monotonic_cumulative";if(e.error!==r&&e.reason!==r)return!1;let n=Ve(e.attempted_cumulative),o=Ve(e.on_chain_spent),i=Ve(e.frontier);return n===null||o===null||i===null?!1:n>o&&n<=i}async function dr(t,e,r,n){let o=`${t.replace(/\/$/,"")}/tab/settle`,i={attemptedAmount:n,channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ae(e.sessionPublicKey),sessionSignature:ae(e.sessionSignature),sessionRegistration:ae(e.sessionRegistration),network:r},s=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(i)}),a=await s.text();if(!s.ok){if(s.status===409&&mr(a))return{settleTx:""};throw new Error(`tab settle ${s.status}: ${a.slice(0,500)}`)}let c;try{c=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(c.reason==="covered_by_frontier"){let d=Ve(c.attemptedCumulative),p=Ve(c.onChainSpent),f=Ve(c.frontier);if(d!==null&&p!==null&&f!==null&&d>p&&d<=f)return{settleTx:""}}if(!c.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let u={settleTx:c.settleTx};return typeof c.grossAmount=="string"&&(u.grossAmount=c.grossAmount),typeof c.feeAmount=="string"&&(u.feeAmount=c.feeAmount),typeof c.netAmount=="string"&&(u.netAmount=c.netAmount),u}async function pr(t,e,r,n,o){throw new Y("armTabOpen")}async function zt(t){if(t.network!==t.vault.network)throw new xe(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new xe(t.network);if(t.vault.sessionVoucherVersion!==1&&t.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(t.vault.sessionVoucherVersion===1)throw new Y("openTab");if(t.vault.sessionVoucherVersion===2&&(!t.reserveFinalVoucherV2||!t.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let e=BigInt(Math.floor(Math.random()*4294967295)),r=new se(t.vault.vaultPda),n=qe({vaultPda:r,sellerUrl:t.seller,nonce:BigInt(e)}),o=ae(n),i=BigInt(ie(t.perUnitCap)),s=BigInt(ie(t.totalCap));if(i<=0n)throw new Error("perUnitCap must be > 0");if(s<i)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(ie(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let a=t.sessionDuration??lr,c=Math.floor(Date.now()/1e3)+a,u=gr(t.seller),d={channelId:o,maxAmountAtomic:s.toString(),revolvingCapacityAtomic:t.revolvingCapacity?ie(t.revolvingCapacity):s.toString(),expiresAtUnix:c,allowedCounterparty:u},p=await t.vault.authorizeSession(d,{onLiveSession:t.onLiveSession}),f=An(p);if(t.vault.sessionVoucherVersion!==(f?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let b;if(f){if(!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let l=p.registration,m=new DataView(l.buffer,l.byteOffset,l.byteLength),R=new se(l.subarray(32,64)),T=new se(l.subarray(64,96)),g=new se(l.subarray(144,176)),h=m.getUint32(176,!0),_=m.getBigUint64(180,!0),I=$e({programId:Pe,vaultPda:r,sessionPubkey:p.publicKey,maxAmount:s,expiresAt:BigInt(c),allowedCounterparty:new se(u),nonce:h,maxRevolvingCapacity:BigInt(d.revolvingCapacityAtomic)});if(!R.equals(Pe)||!T.equals(r)||!g.equals(new se(u))||_!==BigInt(d.revolvingCapacityAtomic)||!Buffer.from(l).equals(Buffer.from(I)))throw new Error("native_tab_v2_registration_identity_mismatch");let[$]=ur(T,g,R);b=async({voucher:K,incrementAtomic:E,previousCumulativeAtomic:N})=>{let y=We(K),v={network:t.network,programId:R.toBase58(),buyerSwigAddress:t.vault.swigAddress,vaultPda:T.toBase58(),sessionPda:$.toBase58(),seller:g.toBase58(),channelId:o,sessionNonce:h,reservationAmountAtomic:E,previousCumulativeAtomic:N,...y,voucher:K},S=await t.reserveFinalVoucherV2(v);return oe(v,S),await t.vault.verifyFinalVoucherV2Reservation(v,S),S}}return new He({vault:t.vault,network:t.network,seller:t.seller,counterparty:u,session:p,channelIdHex:o,channelIdBytes:n,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??vt,beforeVoucherRelease:b})}async function fr(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function gr(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new se(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*hr(t){let e=t.getReader(),r=new TextDecoder,n="";try{for(;;){let{done:o,value:i}=await e.read();if(o)break;n+=r.decode(i,{stream:!0});let s;for(;(s=n.indexOf(`
-`))!==-1;){let a=n.slice(0,s);n=n.slice(s+2);let c=yr(a);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(m,p)=>p==="n"?`
-`:"\\");yield new TextEncoder().encode(u)}}}}finally{t.releaseLock()}}function yr(e){let t=null,r=[];for(let n of e.split(`
-`))n.startsWith("event:")?t=n.slice(6).trim():n.startsWith("data:")&&r.push(n.slice(5).trimStart());return{eventName:t,data:r.length?r.join(`
-`):null}}import ze from"tweetnacl";import{Connection as Ur,PublicKey as je}from"@solana/web3.js";import{bytesToHex as Dr}from"@noble/hashes/utils";import{deriveSessionPda as Mr,fetchSessionAccount as Kr,isSessionLive as Fr}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Lr}from"@dexterai/vault/messages";import{readVaultFull as $r}from"@dexterai/vault/reader";import{PublicKey as Z}from"@solana/web3.js";import{bytesToHex as Jt}from"@noble/hashes/utils";import{deriveGraphConfigPda as Ar,deriveSwigVaultBindingPda as Yt}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as br,DISCRIMINATORS as vr,isSwigVaultBindingIdentityVersion as bn}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as Sr}from"@dexterai/vault/instructions";import{decodeVaultFull as wr}from"@dexterai/vault/reader";import{decodeSessionAccount as _r,deriveSessionPda as Zt}from"@dexterai/vault/session";var xr=Uint8Array.from([56,67,4,209,238,143,0,129]),Rr=74,Tr=188,Er=new Z("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),Pr=(()=>{let e=Buffer.alloc(32);return e.write("OTS_SESSION_REGISTER_V2","ascii"),e})(),Xt=class extends Error{constructor(r,n){super(`native_tab_v2_solana_reservation_invalid:${r}`+(n?`:${n}`:""));this.code=r;this.name="SolanaFinalVoucherV2ReservationError"}code};function A(e,t){throw new Xt(e,t)}function L(e,t){try{return new Z(e)}catch{return A(t)}}function wt(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function Ir(e){let r=(await e.connection.getSignatureStatuses([e.signature],{searchTransactionHistory:!0})).value[0]??null;if(!r)return null;r.confirmationStatus!=="confirmed"&&r.confirmationStatus!=="finalized"&&A("transaction_commitment"),r.err!==null&&A("transaction_failed");let n=await e.connection.getTransaction(e.signature,{commitment:e.commitment,maxSupportedTransactionVersion:0});if(!n)return null;n.meta||A("transaction_meta_missing"),n.slot!==r.slot&&A("transaction_status_slot");let o=n.transaction.message,i=o.version===0?o.getAccountKeys({accountKeysFromLookups:n.meta.loadedAddresses??null}):o.getAccountKeys(),s=(a,c)=>{let u=i.get(a);return u||A(c),u};return{slot:n.slot,confirmationStatus:r.confirmationStatus,err:n.meta.err,signatures:[...n.transaction.signatures],accountKeys:Array.from({length:i.length},(a,c)=>({address:s(c,"transaction_account_key").toBase58(),signer:o.isAccountSigner(c),writable:o.isAccountWritable(c)})),instructions:o.compiledInstructions.map(a=>({programId:s(a.programIdIndex,"transaction_program_id").toBase58(),accounts:a.accountKeyIndexes.map(c=>s(c,"transaction_instruction_account").toBase58()),data:Uint8Array.from(a.data)}))}}function Vr(e,t,r,n){n.length!==Rr&&A("binding_length"),wt(n.subarray(0,8),xr)||A("binding_discriminator");let o=n.readUInt8(8),i=n.readUInt8(9);return bn(o)||A("binding_version"),i!==t&&A("binding_bump"),{address:e.toBase58(),owner:r.toBase58(),version:o,bump:i,swig:new Z(n.subarray(10,42)).toBase58(),vault:new Z(n.subarray(42,74)).toBase58()}}async function Cr(e){let t=L(e.input.programId,"program_id"),r=L(e.input.buyerSwigAddress,"buyer_swig"),n=L(e.input.vaultPda,"vault_pda"),o=L(e.input.seller,"seller"),[i,s]=Yt(r,t),[a]=Zt(n,o,t),c=await e.connection.getMultipleAccountsInfoAndContext([i,n,a],{commitment:e.commitment,minContextSlot:e.minimumSlot}),[u,m,p]=c.value;u||A("binding_missing"),m||A("vault_missing"),p||A("session_missing");let f,b;try{f=wr(Buffer.from(m.data)),b=_r(a,p.data)}catch(d){return A("post_state_decode",d instanceof Error?d.message:String(d))}let l=b.session;return{contextSlot:c.context.slot,binding:Vr(i,s,u.owner,Buffer.from(u.data)),vault:{owner:m.owner.toBase58(),exists:f.exists,version:f.version,swigAddress:f.swigAddress,dexterAuthority:f.dexterAuthority,pendingVoucherCount:f.pendingVoucherCount},session:{owner:p.owner.toBase58(),version:b.version,bump:b.bump,vault:b.vault,sessionPublicKey:Jt(l.sessionPubkey),maxAmount:l.maxAmount,expiresAt:l.expiresAt,seller:l.allowedCounterparty,nonce:l.nonce,spent:l.spent,currentOutstanding:l.currentOutstanding,maxRevolvingCapacity:l.maxRevolvingCapacity,crystallizedCumulative:l.crystallizedCumulative}}}function Nr(e){let t=Buffer.from(e.voucher.sessionRegistration);return t.length!==Tr&&A("registration_length"),wt(t.subarray(0,32),Pr)||A("registration_domain"),{programId:new Z(t.subarray(32,64)).toBase58(),vaultPda:new Z(t.subarray(64,96)).toBase58(),sessionPublicKey:Jt(t.subarray(96,128)),maxAmount:t.readBigUInt64LE(128),expiresAt:t.readBigInt64LE(136),seller:new Z(t.subarray(144,176)).toBase58(),nonce:t.readUInt32LE(176),maxRevolvingCapacity:t.readBigUInt64LE(180)}}function Ce(e,t,r){let n=e.accountKeys.filter(o=>o.address===t);return n.length!==1&&A(`${r}_account_key`),n[0]}function kr(e,t,r){(!Number.isSafeInteger(r.slot)||r.slot<=0)&&A("transaction_slot"),r.slot!==t.confirmationSlot&&A("transaction_confirmation_slot"),r.err!==null&&A("transaction_failed"),r.signatures[0]!==t.transaction&&A("transaction_signature"),r.instructions.length!==2&&A("transaction_instruction_count");let n=L(e.programId,"program_id"),o=L(e.buyerSwigAddress,"buyer_swig"),i=L(e.vaultPda,"vault_pda"),s=L(e.seller,"seller"),a=L(e.sessionPda,"session_pda"),[c]=Zt(i,s,n),u=Yt(o,n)[0],m=Sr(o),p=Ar(n)[0];a.equals(c)||A("session_pda_derivation");let f=Buffer.from(vr.settle_voucher),b=r.instructions.filter(E=>{if(E.programId!==e.programId)return!1;let N=E.data;return N.length>=f.length&&wt(N.subarray(0,f.length),f)});b.length!==1&&A("settle_voucher_instruction_count");let l=b[0];r.instructions[0]!==l&&A("settle_voucher_instruction_order");let d=Buffer.from(l.data);d.length!==49&&A("settle_voucher_instruction_length"),d.readBigUInt64LE(8).toString()!==e.reservationAmountAtomic&&A("settle_voucher_amount"),d.readUInt8(16)!==1&&A("settle_voucher_increment"),new Z(d.subarray(17,49)).equals(s)||A("settle_voucher_seller"),l.accounts.length<8&&A("settle_voucher_accounts"),[i.toBase58(),null,a.toBase58(),null,o.toBase58(),m.toBase58(),u.toBase58(),p.toBase58()].forEach((E,N)=>{E!==null&&l.accounts[N]!==E&&A(`settle_voucher_account_${N}`)});let x=l.accounts[1];x||A("dexter_authority");let g=Ce(r,l.accounts[0],"vault"),h=Ce(r,x,"dexter_authority"),T=Ce(r,l.accounts[2],"session");(!g.writable||g.signer)&&A("vault_privileges"),h.signer||A("dexter_authority_signature"),(!T.writable||T.signer)&&A("session_privileges");for(let E=3;E<Math.min(l.accounts.length,8);E+=1)Ce(r,l.accounts[E],`account_${E}`).signer&&A(`settle_voucher_account_${E}_signer`);for(let E=8;E<l.accounts.length;E+=1){let N=Ce(r,l.accounts[E],`sibling_${E-8}`);(!N.writable||N.signer)&&A("settle_voucher_sibling_privileges")}let I=r.instructions[1];I.programId!==Er.toBase58()&&A("reservation_memo_program"),(I.accounts.length!==1||I.accounts[0]!==x)&&A("reservation_memo_authority"),Ce(r,x,"reservation_memo_authority").signer||A("reservation_memo_authority_signature");let K=new TextEncoder().encode(zt(e));return wt(I.data,K)||A("reservation_memo_digest"),x}function Or(e,t,r,n){let o=L(e.programId,"program_id"),i=L(e.buyerSwigAddress,"buyer_swig"),s=L(e.vaultPda,"vault_pda"),a=L(e.seller,"seller"),[c,u]=Yt(i,o),[m,p]=Zt(s,a,o);(!Number.isSafeInteger(n.contextSlot)||n.contextSlot<t)&&A("post_state_slot"),(n.binding.address!==c.toBase58()||n.binding.owner!==e.programId||n.binding.bump!==u||!bn(n.binding.version)||n.binding.swig!==e.buyerSwigAddress||n.binding.vault!==e.vaultPda)&&A("binding_identity"),(n.vault.owner!==e.programId||!n.vault.exists||n.vault.version!==7||n.vault.swigAddress!==e.buyerSwigAddress||n.vault.dexterAuthority!==r)&&A("vault_post_state"),(e.sessionPda!==m.toBase58()||n.session.owner!==e.programId||n.session.version!==1||n.session.bump!==p||n.session.vault!==e.vaultPda||n.session.sessionPublicKey!==Jt(e.voucher.sessionPublicKey)||n.session.seller!==e.seller||n.session.nonce!==e.sessionNonce||n.session.currentOutstanding.toString()!==e.reservationAmountAtomic)&&A("session_post_state");let f=Nr(e);(f.programId!==e.programId||f.vaultPda!==e.vaultPda||f.sessionPublicKey!==n.session.sessionPublicKey||f.seller!==e.seller||f.nonce!==e.sessionNonce||f.maxAmount!==n.session.maxAmount||f.expiresAt!==BigInt(n.session.expiresAt)||f.maxRevolvingCapacity!==n.session.maxRevolvingCapacity)&&A("registration_post_state");let b=n.session.spent>n.session.crystallizedCumulative?n.session.spent:n.session.crystallizedCumulative;return b.toString()!==e.previousCumulativeAtomic&&A("session_frontier"),{commitment:"confirmed",confirmationSlot:t,postStateSlot:n.contextSlot,sessionAccountVersion:n.session.version,wireVersion:2,frontierAtomic:b.toString(),spentAtomic:n.session.spent.toString(),currentOutstandingAtomic:n.session.currentOutstanding.toString(),crystallizedCumulativeAtomic:n.session.crystallizedCumulative.toString()}}async function Br(e,t,r,n={}){try{oe(t,r)}catch(a){return A("provider_receipt",a instanceof Error?a.message:String(a))}t.network!=="solana:mainnet"&&A("network"),t.programId!==br.toBase58()&&A("program_id");let o=await(n.readTransaction??Ir)({connection:e,signature:r.transaction,commitment:"confirmed"});o||A("transaction_missing"),o.confirmationStatus!=="confirmed"&&o.confirmationStatus!=="finalized"&&A("transaction_commitment");let i=kr(t,r,o),s=await(n.readPostState??Cr)({connection:e,input:t,minimumSlot:o.slot,commitment:"confirmed"});return{...Or(t,o.slot,i,s),commitment:o.confirmationStatus}}async function vn(e,t,r,n={}){await Br(e,t,r,n)}var Qt="solana:mainnet";async function qr(e){let t=e.facilitatorUrl??vt,r=e.programId??Pe,n=new je(e.vaultPda),o=new je(e.params.counterparty),i=Te(e.perUnitCapAtomic);if(i<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${e.perUnitCapAtomic}`);let s=Te(e.params.maxAmountAtomic),a=Te(e.params.maxRevolvingCapacityAtomic),c=(e.params.nonce&2147483648)!==0;if(!c)throw new Y("tabFromGrant");if(c&&!e.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let u=Wr(e.sessionSecretKey),m=new je(e.params.sessionPubkey).toBytes();if(!Sn(u.publicKey,m))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new je(u.publicKey).toBase58()} but params.sessionPubkey is ${e.params.sessionPubkey} \u2014 wrong key handed to this process`);let p=ze.randomBytes(32),f=ze.sign.detached(p,u.secretKey);if(!ze.sign.detached.verify(p,f,m))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let b=$e({programId:r,vaultPda:n,sessionPubkey:u.publicKey,maxAmount:s,expiresAt:BigInt(e.params.expiresAtUnix),allowedCounterparty:o,nonce:e.params.nonce,maxRevolvingCapacity:a}),l=typeof e.connection=="string"?new Ur(e.connection,"confirmed"):e.connection,d=await Kr(l,n,o,r);if(!d||d.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Fr(d))throw new Error(d.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${d.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${d.session.expiresAt})`);if(!Sn(d.session.sessionPubkey,u.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new je(d.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(d.vault!==n.toBase58()||d.session.allowedCounterparty!==o.toBase58()||d.session.maxAmount!==s||d.session.expiresAt!==e.params.expiresAtUnix||d.session.nonce!==e.params.nonce||d.session.maxRevolvingCapacity!==a)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${d.session.maxAmount} expiresAt=${d.session.expiresAt} nonce=${d.session.nonce} revolving=${d.session.maxRevolvingCapacity}; params: ${e.params.maxAmountAtomic}/${e.params.expiresAtUnix}/${e.params.nonce}/${e.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&d.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${d.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let R=d.session.spent>d.session.crystallizedCumulative?d.session.spent:d.session.crystallizedCumulative;if(R>=s)throw new Error(`tab_exhausted: on-chain frontier ${R} has consumed the session cap ${s} \u2014 no voucher can strictly exceed it; open a new grant`);let x=e.sellerUrl??e.params.counterparty,g=BigInt(Math.floor(Math.random()*4294967295)),h=qe({vaultPda:n,sellerUrl:x,nonce:g}),T=Dr(h),I=e.swigAddress;if(!I){let y=await $r(l,n);if(!y.exists||!y.swigAddress)throw new Error(`tab_vault_unreadable: vault ${n.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);I=y.swigAddress}let $={channelId:T,maxAmountAtomic:e.params.maxAmountAtomic,revolvingCapacityAtomic:e.params.maxRevolvingCapacityAtomic,expiresAtUnix:e.params.expiresAtUnix,allowedCounterparty:e.params.counterparty},K=Lt({publicKey:u.publicKey,privateKey:u.secretKey},$,b),[E]=Mr(n,o,r),N={network:Qt,swigAddress:I,vaultPda:n.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(y,v)=>{if(!c)return $t(y,v,h);let S=qt({programId:r.toBase58(),vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),sessionNonce:e.params.nonce,channelId:v.channelId,cumulativeAmountAtomic:v.cumulativeAmount,sequenceOrdinal:v.sequenceNumber,sessionPrivateKey:y.privateKey,sessionPublicKey:y.publicKey,sessionRegistration:y.registration});return{payload:{channelId:S.channelId,cumulativeAmount:S.cumulativeAmount,sequenceNumber:S.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(S.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(S.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(S.sessionRegistration,"hex"))}},signOpenTab:async y=>y.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(y,v)=>vn(l,y,v):void 0};return new He({vault:N,network:Qt,seller:x,counterparty:e.params.counterparty,session:K,channelIdHex:T,channelIdBytes:h,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:e.params.expiresAtUnix,facilitatorUrl:t,initialCumulativeAtomic:R,initialSequenceOrdinal:c&&d.session.lastLockedSequence!==0?Lr(d.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:y,incrementAtomic:v,previousCumulativeAtomic:S})=>{let _=We(y),C={network:Qt,programId:r.toBase58(),buyerSwigAddress:I,vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),channelId:T,sessionNonce:e.params.nonce,reservationAmountAtomic:v,previousCumulativeAtomic:S,..._,voucher:y},V=await e.reserveFinalVoucherV2(C);return oe(C,V),await N.verifyFinalVoucherV2Reservation(C,V),V}:void 0,closeMode:"settle-only"})}function Wr(e){if(e.length===64)return ze.sign.keyPair.fromSecretKey(e);if(e.length===32)return ze.sign.keyPair.fromSeed(e);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${e.length} bytes`)}function Sn(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}import{PublicKey as Gr}from"@solana/web3.js";var wn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],Hr=new Map(wn.map(e=>[e.caip2.toLowerCase(),e])),jr=new Map(wn.map(e=>[e.bare.toLowerCase(),e]));function ce(e){if(!e)return null;let t=e.toLowerCase(),r=Hr.get(t)||jr.get(t);return r?{caip2:r.caip2,bare:r.bare,family:r.family}:null}function en(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=t+"=".repeat((4-(t.length%4||4))%4);return JSON.parse(Buffer.from(r,"base64").toString("utf8"))}function zr(e){let t=[];for(let r of e){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&t.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.amount??n.maxAmountRequired??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return t}async function _t(e){let t=e.headers.get("payment-required");if(!t)return null;let r;try{r=en(t)}catch{return null}let n=Array.isArray(r.accepts)?r.accepts:[];return n.length===0?null:{x402Version:2,options:zr(n),extensions:r.extensions&&typeof r.extensions=="object"&&!Array.isArray(r.extensions)?r.extensions:void 0,resourceUrl:r.resource&&typeof r.resource=="object"?String(r.resource.url??""):void 0}}async function Ge(e,t={},r=fetch){let n={method:t.method??"GET",headers:t.headers};typeof t.body=="string"&&(n.body=t.body);let o;try{o=await r(e,n)}catch(a){return{kind:"error",detail:`probe failed: ${a?.message??String(a)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let i=await _t(o);if(!i)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let s=i.options.find(a=>a.scheme==="tab"&&a.network.family==="svm");if(!s)return{kind:"no_tab",schemesOffered:i.options.map(a=>a.scheme)};try{new Gr(s.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${s.payTo}"`}}return{kind:"offer",offer:{payTo:s.payTo,amountAtomic:s.amount,asset:s.asset,networkCaip2:s.network.caip2,...typeof s.extra?.voucherHeader=="string"?{voucherHeader:s.extra.voucherHeader}:{},...typeof s.extra?.registrationEncoding=="string"?{registrationEncoding:s.extra.registrationEncoding}:{},...typeof s.extra?.termsVersion=="string"?{termsVersion:s.extra.termsVersion}:{},...typeof s.extra?.acceptanceRule=="string"?{acceptanceRule:s.extra.acceptanceRule}:{},resourceUrl:i.resourceUrl}}}var Xr="dexter-tab-hosted-pay-before-delivery/v1",Jr="pay_before_delivery_seller_2xx",Yr="x-tab-voucher",Zr="base64(188-byte sessionRegisterMessage)";var Xe="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",xt="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",Rt="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",ue=Xe,Je=xt,Ye=Rt,le="eip155:8453",Ne="eip155:84532",ke="eip155:42161",Oe="eip155:137",Be="eip155:10",Ue="eip155:43114",De="eip155:56",me="eip155:480",de="eip155:143",pe="eip155:4663",fe="eip155:1187947933",ge="eip155:324705682",Me="eip155:1",he=le,Tt=Ne,Ze=ke,Qe=Oe,et=Be,tt=Ue,nt=De,rt=me,ot=de,st=pe,it=fe,at=ge,ct=Me,ut="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",_n="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",xn="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",tn="0x55d398326f99059fF775485246999027B3197955",Et="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",nn="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Pt={[De]:Et,[le]:xn,[Ne]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[ke]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[Oe]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Be]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[Ue]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[me]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[de]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[pe]:nn,[fe]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[ge]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Me]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},It={[tn]:{symbol:"USDT",decimals:18},[Et]:{symbol:"USDC",decimals:18}};var Vt={[me]:{name:"USDC",version:"2"},[de]:{name:"USDC",version:"2"},[pe]:{name:"Global Dollar",version:"1"},[fe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[ge]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},Q="0x000000000022D473030F116dDEE9F6B43aC78BA3",lt="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",mt={[De]:56,[le]:8453,[Ne]:84532,[ke]:42161,[Oe]:137,[Be]:10,[Ue]:43114,[me]:480,[de]:143,[pe]:4663,[fe]:1187947933,[ge]:324705682,[Me]:1},ye={[Xe]:"https://api.dexter.cash/api/solana/rpc",[xt]:"https://api.devnet.solana.com",[Rt]:"https://api.testnet.solana.com"},D={[De]:"https://api.dexter.cash/api/evm/bsc/rpc",[le]:"https://api.dexter.cash/api/base/rpc",[Ne]:"https://sepolia.base.org",[ke]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[Oe]:"https://api.dexter.cash/api/evm/polygon/rpc",[Be]:"https://api.dexter.cash/api/evm/optimism/rpc",[Ue]:"https://api.dexter.cash/api/evm/avalanche/rpc",[me]:"https://worldchain-mainnet.g.alchemy.com/public",[de]:"https://rpc.monad.xyz",[pe]:"https://rpc.mainnet.chain.robinhood.com",[fe]:"https://skale-base.skalenodes.com/v1/base",[ge]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Me]:"https://eth.llamarpc.com"};var O=class e extends Error{code;details;constructor(t,r,n){super(r),this.name="X402Error",this.code=t,this.details=n,Object.setPrototypeOf(this,e.prototype)}};function j(e,t){let r=e.scheme??"exact";if(r!=="exact"&&!(t==="evm"&&r==="exact-approval"))return`Unsupported payment scheme: ${r}`;let n=e.extra?.paymentFlow;if(n!==void 0&&n!=="authorization")return`Unsupported payment flow: ${String(n)}`;let o=e.extra?.assetTransferMethod;if(o!==void 0&&(typeof o!="string"||!(r==="exact-approval"?[]:t==="evm"?["eip3009","permit2"]:["default"]).includes(o)))return`Unsupported payment asset transfer method: ${String(o)}`}function dt(e){let t=e?.["payment-identifier"];if(!t||typeof t!="object"||Array.isArray(t))return!1;let r=t.info;return!!r&&typeof r=="object"&&!Array.isArray(r)&&r.required===!0}import{PublicKey as Ae,Connection as rn,TransactionMessage as Qr,VersionedTransaction as eo,ComputeBudgetProgram as Rn}from"@solana/web3.js";import{getAssociatedTokenAddress as on,getAccount as to,createTransferCheckedInstruction as no,getMint as ro,TOKEN_PROGRAM_ID as Tn,TOKEN_2022_PROGRAM_ID as Ct}from"@solana/spl-token";var oo=12e3,so=1;function be(e){if(!e||typeof e!="object")return!1;let t=e;return"publicKey"in t&&"signTransaction"in t&&typeof t.signTransaction=="function"}var Nt=class{name="Solana";networks=[ue,Je,Ye];config;log;constructor(t={}){this.config=t,this.log=t.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(t){return!!(this.networks.includes(t)||t==="solana"||t==="solana-devnet"||t==="solana-testnet"||t.startsWith("solana:"))}getDefaultRpcUrl(t){return this.config.rpcUrls?.[t]?this.config.rpcUrls[t]:ye[t]?ye[t]:t==="solana"?ye[ue]:t==="solana-devnet"?ye[Je]:t==="solana-testnet"?ye[Ye]:ye[ue]}getAddress(t){return be(t)?t.publicKey?.toBase58()??null:null}isConnected(t){return be(t)?t.publicKey!==null:!1}async getBalance(t,r,n){if(!be(r)||!r.publicKey)return 0;let o=n||this.getDefaultRpcUrl(t.network),i=new rn(o,"confirmed"),s=new Ae(r.publicKey.toBase58()),a=new Ae(t.asset);try{let u=(await i.getAccountInfo(a,"confirmed"))?.owner.toBase58()===Ct.toBase58()?Ct:Tn,m=await on(a,s,!1,u),p=await to(i,m,void 0,u),f=t.extra?.decimals??6;return Number(p.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(t,r,n){let o=j(t,"svm");if(o)throw new Error(o);if(!be(r))throw new Error("Invalid Solana wallet");if(!r.publicKey)throw new Error("Wallet not connected");let i=n||this.getDefaultRpcUrl(t.network),s=new rn(i,"confirmed"),a=new Ae(r.publicKey.toBase58()),{payTo:c,asset:u,extra:m}=t,p=t.amount??t.maxAmountRequired;if(!p)throw new Error("Missing amount in payment requirements");if(!m?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new Ae(m.feePayer),b=new Ae(u),l=new Ae(c);this.log("Building transaction:",{from:a.toBase58(),to:c,amount:p,asset:u,feePayer:m.feePayer});let d=[];d.push(Rn.setComputeUnitLimit({units:oo})),d.push(Rn.setComputeUnitPrice({microLamports:so}));let R=await s.getAccountInfo(b,"confirmed");if(!R)throw new Error(`Token mint ${u} not found`);let x=R.owner.toBase58()===Ct.toBase58()?Ct:Tn,g=await ro(s,b,void 0,x);typeof m?.decimals=="number"&&g.decimals!==m.decimals&&this.log(`Decimals mismatch: requirements say ${m.decimals}, mint says ${g.decimals}`);let h=await on(b,a,!1,x),T=await on(b,l,!0,x);if(!await s.getAccountInfo(h,"confirmed"))throw new Error(`No token account found for ${u}. Please ensure you have USDC in your wallet.`);if(!await s.getAccountInfo(T,"confirmed"))throw new Error(`Seller token account not found. The seller (${c}) must have a USDC account.`);let K=BigInt(p);d.push(no(h,b,T,a,K,g.decimals,[],x));let{blockhash:E}=await s.getLatestBlockhash("confirmed"),N=new Qr({payerKey:f,recentBlockhash:E,instructions:d}).compileToV0Message(),y=new eo(N),v=await r.signTransaction(y);return this.log("Transaction signed successfully"),{serialized:Buffer.from(v.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:h.toBase58(),destinationAta:T.toBase58(),asset:u,amount:p,blockhash:E}}}async confirmSettlement(t,r){if(t.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${t.kind}"`);let n=new rn(r,"confirmed"),o=new Ae(t.destinationAta),i=await n.getSignaturesForAddress(o,{limit:25});if(i.length===0)return{settled:!1};let s=BigInt(t.amount);for(let a of i){if(a.err)continue;let c=await n.getTransaction(a.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),m=c.meta.preTokenBalances??[],p=c.meta.postTokenBalances??[];for(let f of p){if(f.mint!==t.asset)continue;let b=u[f.accountIndex];if(!b||!b.equals(o))continue;let l=m.find(x=>x.accountIndex===f.accountIndex),d=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-d===s)return{settled:!0,txSignature:a.signature}}}return{settled:!1}}};function ee(e){return new Nt(e)}var io={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},En=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function ve(e){if(!e||typeof e!="object")return!1;let t=e;return"address"in t&&typeof t.address=="string"&&t.address.startsWith("0x")}var kt=class{name="EVM";networks=[nt,he,Tt,ct,Ze,Qe,et,tt,rt,ot,st,it,at];config;log;constructor(t={}){this.config=t,this.log=t.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(t){return!!(this.networks.includes(t)||t==="base"||t==="bsc"||t==="ethereum"||t==="arbitrum"||t==="polygon"||t==="optimism"||t==="avalanche"||t==="world"||t==="monad"||t==="robinhood"||t==="skale-base"||t==="skale-base-sepolia"||t.startsWith("eip155:"))}getDefaultRpcUrl(t){return this.config.rpcUrls?.[t]?this.config.rpcUrls[t]:D[t]?D[t]:t==="base"?D[he]:t==="bsc"?D[nt]:t==="ethereum"?D[ct]:t==="arbitrum"?D[Ze]:t==="polygon"?D[Qe]:t==="optimism"?D[et]:t==="avalanche"?D[tt]:t==="world"?D[rt]:t==="monad"?D[ot]:t==="robinhood"?D[st]:t==="skale-base"?D[it]:t==="skale-base-sepolia"?D[at]:D[he]}getAddress(t){return ve(t)?t.address:null}isConnected(t){return ve(t)?!!t.address:!1}getChainId(t){if(mt[t])return mt[t];if(t.startsWith("eip155:")){let r=t.split(":")[1];return parseInt(r,10)}return t==="base"?8453:t==="bsc"?56:t==="ethereum"?1:t==="arbitrum"?42161:t==="polygon"?137:t==="optimism"?10:t==="avalanche"?43114:t==="world"?480:t==="monad"?143:t==="robinhood"?4663:t==="skale-base"?1187947933:t==="skale-base-sepolia"?324705682:8453}async getBalance(t,r,n){if(!ve(r)||!r.address)return 0;let o=n||this.getDefaultRpcUrl(t.network);try{let i=this.encodeBalanceOf(r.address),s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:t.asset,data:i},"latest"]})});if(!s.ok)throw new Error(`RPC request failed: ${s.status}`);let a=await s.json();if(a.error)throw new Error(`RPC error: ${JSON.stringify(a.error)}`);if(!a.result||a.result==="0x")return 0;let c=BigInt(a.result),u=t.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(i){throw i}}encodeBalanceOf(t){let r="0x70a08231",n=t.slice(2).toLowerCase().padStart(64,"0");return r+n}async confirmSettlement(t,r){if(t.kind==="eip3009"){let n="0xe94a0102",o=t.from.slice(2).toLowerCase().padStart(64,"0"),i=t.nonce.slice(2).toLowerCase().padStart(64,"0"),s=n+o+i,a=await this.ethCall(r,t.asset,s);return{settled:BigInt(a)!==0n}}if(t.kind==="permit2"){let n="0x4fe02b44",o=BigInt(t.nonce),i=o>>8n,s=o&0xffn,a=t.from.slice(2).toLowerCase().padStart(64,"0"),c=i.toString(16).padStart(64,"0"),u=n+a+c,m=await this.ethCall(r,Q,u);return{settled:(BigInt(m)>>s&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${t.kind}"`)}async ethCall(t,r,n){let o=await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:n},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let i=await o.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")throw new Error("RPC returned an empty result");return i.result}async buildTransaction(t,r,n){let o=j(t,"evm");if(o)throw new Error(o);if(!ve(r))throw new Error("Invalid EVM wallet");if(!r.address)throw new Error("Wallet not connected");if(t.scheme==="exact-approval")return this.buildApprovalTransaction(t,r,n);if(t.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(t,r,n);let{payTo:i,asset:s,extra:a}=t,c=t.amount??t.maxAmountRequired;if(!c)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:r.address,to:i,amount:c,asset:s,network:t.network});let u=this.getChainId(t.network),m=Vt[`eip155:${u}`],p={name:a?.name??m?.name??"USD Coin",version:a?.version??m?.version??"2",chainId:BigInt(u),verifyingContract:s},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},b=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l="0x"+[...b].map(T=>T.toString(16).padStart(2,"0")).join(""),d=Math.floor(Date.now()/1e3),R={from:r.address,to:i,value:c,validAfter:String(d-600),validBefore:String(d+(t.maxTimeoutSeconds||60)),nonce:l},x={from:r.address,to:i,value:BigInt(c),validAfter:BigInt(d-600),validBefore:BigInt(d+(t.maxTimeoutSeconds||60)),nonce:l};if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let g=await r.signTypedData({domain:p,types:f,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:R,signature:g}),signature:g,settlementProbe:{kind:"eip3009",from:r.address,nonce:l,asset:s,chainId:u}}}async buildApprovalTransaction(t,r,n){let{payTo:o,asset:i,extra:s}=t,a=t.amount??t.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");let c=s?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:r.address,to:o,amount:a,asset:i,network:t.network,facilitatorContract:c});let u=n||this.getDefaultRpcUrl(t.network),m=s?.fee??"0",p=BigInt(a)+BigInt(m),f=await this.readAllowance(u,i,r.address,c);if(f<p){if(!r.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let N=this.calculateApprovalAmount(a,m,s?.approvalStrategy);this.log(`Approving ${N} for ${c} (current allowance: ${f})`);let y=await r.sendTransaction({to:i,data:this.encodeApprove(c,N),value:0n});this.log(`Approval tx sent: ${y}`),await this.waitForReceipt(u,y),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let b=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l=[...b].reduce((N,y)=>N*256n+BigInt(y),0n).toString(),d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let R="0x"+[...d].map(N=>N.toString(16).padStart(2,"0")).join(""),g=Math.floor(Date.now()/1e3)+(t.maxTimeoutSeconds||300),h=s?.eip712Domain,T=h?{name:h.name,version:h.version,chainId:BigInt(h.chainId),verifyingContract:h.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(t.network)),verifyingContract:c},I=s?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},$={from:r.address,to:o,token:i,amount:BigInt(a),fee:BigInt(m),nonce:BigInt(l),deadline:BigInt(g),paymentId:R},K=await r.signTypedData({domain:T,types:I,primaryType:"Payment",message:$});this.log("EIP-712 Payment signature obtained");let E={from:r.address,to:o,token:i,amount:a,fee:m,nonce:l,deadline:g,paymentId:R,signature:K};return{serialized:JSON.stringify(E),signature:K}}async buildPermit2Transaction(t,r,n){let{payTo:o,asset:i}=t,s=t.amount??t.maxAmountRequired;if(!s)throw new Error("Missing amount in payment requirements");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:r.address,to:o,amount:s,asset:i,network:t.network});let a=n||this.getDefaultRpcUrl(t.network),c=await this.readAllowance(a,i,r.address,Q),u;if(c<BigInt(s)){let T=this.encodeApprove(Q,En);if(r.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let I=this.getChainId(t.network),$=await this.readGasPrice(a),K=await this.readNonce(a,r.address),E=await r.signTransaction({to:i,data:T,chainId:I,gas:50000n,gasPrice:$,nonce:K});u={erc20ApprovalGasSponsoring:{info:{from:r.address,asset:i,spender:Q,amount:En.toString(),signedTransaction:E,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(r.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let I=await r.sendTransaction({to:i,data:T,value:0n});this.log(`Permit2 approval tx sent: ${I}`),await this.waitForReceipt(a,I),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let m=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(m);let p=[...m].reduce((T,I)=>T*256n+BigInt(I),0n),f=Math.floor(Date.now()/1e3),b=f-600,l=f+(t.maxTimeoutSeconds||300),d=this.getChainId(t.network),R={name:"Permit2",chainId:BigInt(d),verifyingContract:Q},x={permitted:{token:i,amount:BigInt(s)},spender:lt,nonce:p,deadline:BigInt(l),witness:{to:o,validAfter:BigInt(b)}},g=await r.signTypedData({domain:R,types:io,primaryType:"PermitWitnessTransferFrom",message:x});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let h={signature:g,permit2Authorization:{from:r.address,permitted:{token:i,amount:s},spender:lt,nonce:p.toString(),deadline:String(l),witness:{to:o,validAfter:String(b)}}};return{serialized:JSON.stringify(h),signature:g,extensions:u,settlementProbe:{kind:"permit2",from:r.address,nonce:p.toString(),chainId:d}}}async readAllowance(t,r,n,o){let i="0xdd62ed3e",s=n.slice(2).toLowerCase().padStart(64,"0"),a=o.slice(2).toLowerCase().padStart(64,"0"),c=i+s+a;try{let m=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:c},"latest"]})})).json();return m.error||!m.result||m.result==="0x"?0n:BigInt(m.result)}catch{return 0n}}encodeApprove(t,r){let n="0x095ea7b3",o=t.slice(2).toLowerCase().padStart(64,"0"),i=r.toString(16).padStart(64,"0");return n+o+i}async waitForReceipt(t,r,n=3e4){let o=Date.now();for(;Date.now()-o<n;){try{let s=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[r]})})).json();if(s.result){if(s.result.status==="0x0")throw new Error(`Approval transaction reverted: ${r}`);return}}catch(i){if(i instanceof Error&&i.message.includes("reverted"))throw i}await new Promise(i=>setTimeout(i,2e3))}throw new Error(`Approval transaction receipt timeout after ${n}ms: ${r}`)}async readGasPrice(t){try{let n=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return n.result?BigInt(n.result):50000000n}catch{return 50000000n}}async readNonce(t,r){try{let o=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[r,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(t,r,n){let o=BigInt(t)+BigInt(r);if(!n||n.mode==="exact")return o;let i=BigInt(n.defaultMultiple??10),s=o*i;if(n.maxCapUsd){let a=this.inferDecimals(t),c=BigInt(Math.floor(n.maxCapUsd*Math.pow(10,a)));if(s>c)return c}if(n.exactAboveUsd){let a=this.inferDecimals(t),c=BigInt(Math.floor(n.exactAboveUsd*Math.pow(10,a)));if(BigInt(t)>c)return o}return s}inferDecimals(t){return t.length>12?18:6}};function Ke(e){return new kt(e)}function sn(e){if(e===ut||e===_n)return!0;let t=e.toLowerCase();for(let r of Object.values(Pt))if(r.toLowerCase()===t)return!0;for(let r of Object.keys(It))if(r.toLowerCase()===t)return!0;return!1}function ao(e){return{[Xe]:"Solana",[xt]:"Solana Devnet",[Rt]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[le]:"Base",[Ne]:"Base Sepolia",[Me]:"Ethereum",[ke]:"Arbitrum",[Oe]:"Polygon",[Be]:"Optimism",[Ue]:"Avalanche",[De]:"BSC",[me]:"World Chain",[de]:"Monad",[pe]:"Robinhood Chain",[fe]:"SKALE Base",[ge]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[e]||e}function Pn(e,t){let r=ao(e);return r===e?t:r}async function co(e,t){if(typeof e=="string")return[e,t];if(e instanceof URL)return[e.href,t];let r=e,n=new Headers(r.headers);t?.headers&&new Headers(t.headers).forEach((s,a)=>n.set(a,s));let o={method:t?.method??r.method,headers:n,signal:t?.signal??r.signal,redirect:t?.redirect??r.redirect,credentials:t?.credentials??r.credentials},i=(o.method??"GET").toUpperCase();return t&&"body"in t?o.body=t.body:i!=="GET"&&i!=="HEAD"&&r.body&&(o.body=await r.arrayBuffer()),[r.url,o]}var In=new WeakMap;function Vn(e){return In.get(e)}function uo(e,t){let r=e.headers.get("PAYMENT-RESPONSE"),n;if(r)try{let a=en(r);a&&typeof a=="object"&&!Array.isArray(a)&&(n={...a})}catch{}n??={},n.settlementStatus="unconfirmed";let o=n.network===t.network,i=[n.errorReason,n.errorCode,n.errorMessage].every(a=>a===void 0||typeof a=="string"),s=[n.errorReason,n.errorCode].filter(a=>typeof a=="string"&&a.length>0);return s.some(a=>/pending|unknown|unconfirmed|timeout|temporar/i.test(a))?n.settlementStatus="pending":n.success===!0&&o&&i&&s.length===0&&typeof n.transaction=="string"&&n.transaction.trim().length>0?n.settlementStatus="settled":n.success===!1&&(o||n.network===void 0)&&s.length>0&&(n.settlementStatus="failed"),n.attemptedAmountAtomic=t.amountAtomic,n.settlementStatus==="settled"?n.amountAtomic=t.amountAtomic:delete n.amountAtomic,n.assetDecimals=t.assetDecimals,In.set(e,n),n}function Cn(e){let{adapters:t=[ee({verbose:e.verbose}),Ke({verbose:e.verbose})],wallets:r,wallet:n,preferredNetwork:o,rpcUrls:i={},maxAmountAtomic:s,fetch:a=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:m,onPaymentDispatched:p,maxRetries:f=0,retryDelayMs:b=500}=e,l=c?console.log.bind(console,"[x402]"):()=>{};async function d(y,v){let S;for(let _=0;_<=f;_++)try{let C=await a(y,v);if(C.status>=502&&C.status<=504&&_<f){l(`Retry ${_+1}/${f}: server returned ${C.status}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,_)));continue}return C}catch(C){S=C,_<f&&(l(`Retry ${_+1}/${f}: ${C instanceof Error?C.message:"network error"}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,_))))}throw S}let R=new Map;function x(y){try{let v=new URL(y).host,S=R.get(v);if(S&&S.expiresAt>Date.now()/1e3+10)return S.jwt;S&&R.delete(v)}catch{}return null}function g(y,v){try{let S=new URL(y).host,_=v.split(".");if(_.length===3){let C=JSON.parse(atob(_[1].replace(/-/g,"+").replace(/_/g,"/"))),V=Math.floor(Date.now()/1e3),k=V+86400,q=Math.min(typeof C.exp=="number"?C.exp:V,k);R.set(S,{jwt:v,expiresAt:q}),l("Access pass cached for",S,"| expires:",new Date(q*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let h=r||{};n&&!h.solana&&be(n)&&(h.solana=n),n&&!h.evm&&ve(n)&&(h.evm=n);function T(y){let v=[];for(let S of y){let _=t.find(k=>k.canHandle(S.network));if(!_)continue;let C=_.name==="Solana"?"svm":"evm";if(j(S,C))continue;let V;_.name==="Solana"?V=h.solana:_.name==="EVM"&&(V=h.evm),V&&_.isConnected(V)&&v.push({accept:S,adapter:_,wallet:V})}if(v.length===0)return null;if(o){let S=v.find(_=>_.accept.network===o);if(S)return S}return v[0]}function I(y,v){return Pn(y,v)}function $(y,v){return i[y]||v.getDefaultRpcUrl(y)}async function K(y,v,S,_,C){let V="";if(u?.preferTier&&_.tiers){let w=_.tiers.find(H=>H.id===u.preferTier);if(w){if(u.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Access pass tier "${w.id}" costs $${w.price}, exceeds max spend $${u.maxSpend}`);V=`tier=${w.id}`}}else if(u?.preferDuration&&_.ratePerHour)V=`duration=${u.preferDuration}`;else if(_.tiers&&_.tiers.length>0){let w=_.tiers[0];if(u?.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Cheapest access pass costs $${w.price}, exceeds max spend $${u?.maxSpend}`);V=`tier=${w.id}`}let k=V?C.includes("?")?`${C}&${V}`:`${C}?${V}`:C;l("Purchasing access pass:",V||"default tier");let q=S.headers.get("PAYMENT-REQUIRED");if(!q)return null;let F;try{F=JSON.parse(atob(q))}catch{return null}let U=T(F.accepts);if(!U)return null;if(dt(F.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let{accept:B,adapter:W,wallet:Se}=U;if(W.name==="Solana"&&!B.extra?.feePayer)return null;let G=B.extra?.decimals??(sn(B.asset)?6:void 0);if(typeof G!="number")return null;let Fe=B.amount??B.maxAmountRequired;if(!Fe)return null;let X=$(B.network,W);try{let w=await W.getBalance(B,Se,X),H=Number(Fe)/Math.pow(10,G);if(w<H){let Mn=I(B.network,W.name);throw new O("insufficient_balance",`Insufficient balance for access pass on ${Mn}. Have $${w.toFixed(4)}, need $${H.toFixed(4)}`)}}catch(w){if(w instanceof O)throw w}let J=await W.buildTransaction(B,Se,X),we;W.name==="EVM"?we=JSON.parse(J.serialized):we={transaction:J.serialized};let te=typeof y=="string"?y:y instanceof URL?y.href:y.url,_e=F.resource;if(typeof F.resource=="string")try{let w=new URL(F.resource,te);["http:","https:"].includes(w.protocol)&&(_e=w.toString())}catch{}else if(F.resource&&typeof F.resource=="object"&&"url"in F.resource){let w=F.resource;try{let H=new URL(w.url,te);["http:","https:"].includes(H.protocol)&&(_e={...w,url:H.toString()})}catch{}}let ft={x402Version:B.x402Version??2,resource:_e,accepted:B,payload:we};J.extensions&&(ft.extensions=J.extensions);let Le=btoa(JSON.stringify(ft)),ne=await a(k,{...v,method:"POST",headers:{...v?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":Le}});if(!ne.ok)return l("Pass purchase failed:",ne.status),null;let P=ne.headers.get("ACCESS-PASS");return P&&(g(C,P),l("Access pass purchased and cached")),ne}async function E(y,v){let S=y;if(l("Making request:",S),u){let P=x(S);if(P){l("Using cached access pass");let w=await a(y,{...v,headers:{...v?.headers||{},Authorization:`Bearer ${P}`}});if(w.status!==401&&w.status!==402)return w;l("Cached pass rejected (status",w.status,"), purchasing new pass");try{R.delete(new URL(S).host)}catch{}}}let _=await d(y,v);if(_.status!==402)return _;l("Received 402 Payment Required");let C=_.headers.get("X-ACCESS-PASS-TIERS");if(u&&C){l("Server offers access passes, purchasing...");try{let P=JSON.parse(atob(C)),w=await K(y,v,_,P,S);if(w)return w}catch(P){l("Access pass purchase failed, falling back to per-request payment:",P)}}let V=_.headers.get("PAYMENT-REQUIRED");if(!V)throw new O("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let P=atob(V);k=JSON.parse(P)}catch{throw new O("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}if(l("Payment requirements:",k),dt(k.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let q=_.headers.get("X-Quote-Hash");q&&l("Quote hash received:",q);let F=T(k.accepts);if(!F){let P=k.accepts.map(w=>w.network).join(", ");throw new O("no_matching_payment_option",`No supported payment option with a connected wallet for: ${P}`)}let{accept:U,adapter:B,wallet:W}=F;if(l(`Using ${B.name} for ${U.network}`),B.name==="Solana"&&!U.extra?.feePayer)throw new O("missing_fee_payer","Solana payment option missing feePayer in extra");let Se=U.extra?.decimals??(sn(U.asset)?6:void 0);if(typeof Se!="number")throw new O("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let G=U.amount??U.maxAmountRequired;if(!G)throw new O("missing_amount","Payment option missing amount");if(s&&BigInt(G)>BigInt(s))throw new O("amount_exceeds_max",`Payment amount ${G} exceeds maximum ${s}`);let Fe=$(U.network,B);l("Checking balance...");try{let P=await B.getBalance(U,W,Fe),w=Number(G)/Math.pow(10,Se);if(P<w){let H=I(U.network,B.name);throw new O("insufficient_balance",`Insufficient balance on ${H}. Have $${P.toFixed(4)}, need $${w.toFixed(4)}`)}l(`Balance OK: $${P.toFixed(4)} >= $${w.toFixed(4)}`)}catch(P){if(P instanceof O)throw P;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(m&&!await m(U))throw new O("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let X=await B.buildTransaction(U,W,Fe);l("Transaction signed");let J;B.name==="EVM"?J=JSON.parse(X.serialized):J={transaction:X.serialized};let we=y,te=k.resource;if(typeof k.resource=="string")try{let P=new URL(k.resource,we).toString();P!==k.resource&&l("Resolved relative resource URL:",k.resource,"\u2192",P),te=P}catch{te=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let P=k.resource;try{let w=new URL(P.url,we).toString();w!==P.url&&(l("Resolved relative resource URL:",P.url,"\u2192",w),te={...P,url:w})}catch{}}let _e={x402Version:U.x402Version??2,resource:te,accepted:U,payload:J};X.extensions&&(_e.extensions=X.extensions);let ft=btoa(JSON.stringify(_e));if(p)try{p(U,X.settlementProbe)}catch{}l("Retrying request with payment...");let Le=await d(y,{...v,headers:{...v?.headers||{},"PAYMENT-SIGNATURE":ft,...q?{"X-Quote-Hash":q}:{}}});l("Retry response status:",Le.status);let ne=uo(Le,{network:U.network,amountAtomic:G,assetDecimals:Se});return ne.extensions&&l("Settlement extensions:",Object.keys(ne.extensions).join(", ")),Le}async function N(y,v){let[S,_]=await co(y,v);return E(S,_)}return{fetch:N}}function z(e){if(e instanceof Error){if(e.message&&e.message.length>0)return e.message;if(e.name&&e.name.length>0)return e.name}let t=String(e);return t.length>0?t:"unknown error"}async function pt(e){let t="";try{t=(await e.clone().text()).slice(0,600)}catch{}let r=t.toLowerCase(),n=r.includes("settle")||r.includes("facilitator"),o=t;try{let i=JSON.parse(t),s=[i.error,i.detail,i.message].filter(a=>typeof a=="string"&&a.length>0);s.length>0&&(o=s.join(" \u2014 "))}catch{}return o||(o=`HTTP ${e.status}`),{reason:n?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${e.status}: ${o}`}}var Ot="Payment authorization was sent, but the merchant did not respond within the timeout. ",Bt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Ut(e,t,r){if(!e)return{confirmed:!1,detail:Ot+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+Bt};try{if(e.kind==="solana"){let s=ee(),a=r??s.getDefaultRpcUrl(t.caip2);if(!s.confirmSettlement)return kn();let c=await s.confirmSettlement(e,a);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Nn()}let n=Ke(),o=n.getDefaultRpcUrl(t.caip2);if(!n.confirmSettlement)return kn();let i=await n.confirmSettlement(e,o);return i.settled?{confirmed:!0,txSignature:i.txSignature}:Nn()}catch(n){return{confirmed:!1,detail:Ot+`On-chain confirmation could not be completed (${z(n)}).`+Bt}}}function Nn(){return{confirmed:!1,detail:Ot+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+Bt}}function kn(){return{confirmed:!1,detail:Ot+"The chain adapter does not support on-chain confirmation."+Bt}}async function lo(e,t,r,n){let o;try{o=await n.signNextVoucher(r.amount)}catch(c){return n.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let i=new Headers(t.headers??void 0);i.set("X-Tab-Voucher",St(o));let s={method:t.method??"GET",headers:i};t.signal&&(s.signal=t.signal),typeof t.body=="string"&&(s.body=t.body);let a;try{a=await fetch(e,s)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return a.status===402?n.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:n.rollbackVoucher?.call(n,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:a.ok?{ok:!0,paid:!0,response:a,amountPaid:r.amount,network:r.network}:{ok:!1,...await pt(a)}}var On={version:2,async parseChallenge(e){return _t(e)},async pay(e,t,r,n,o){if(dt(r.extensions))return{ok:!1,reason:"no_payment_options",detail:"unsupported_required_payment_identifier"};if(o.tab){let g=r.options.find(h=>h.scheme==="tab"&&h.network.family==="svm"&&h.payTo===o.tab.counterparty);if(g){let h=await lo(e,t,g,o.tab);if(h)return h}}let i=r.options.filter(g=>!j(g,g.network.family));if(i.length===0)return{ok:!1,reason:"no_payment_options",detail:`no supported payment capability offered: ${r.options.map(g=>j(g,g.network.family)).join("; ")}`};let s=i.find(g=>g.network.family==="evm"?!!n.evm:g.network.family==="svm"?!!n.solana:!1);if(!s)return{ok:!1,reason:"unsupported_network"};let a=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,u=new AbortController,m=setTimeout(()=>u.abort(),a),p=!1,f,b,l=(g,h)=>{p=!0,b=g,f=h,clearTimeout(m),m=setTimeout(()=>u.abort(),c)},d=Cn({wallets:n,preferredNetwork:s.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:l}),R=t.signal?AbortSignal.any([t.signal,u.signal]):u.signal,x={method:t.method??"GET",headers:t.headers,signal:R};typeof t.body=="string"&&(x.body=t.body);try{let g=await d.fetch(e,x);if(clearTimeout(m),!p)return g.ok?{ok:!0,paid:!1,response:g}:{ok:!1,response:g,...await pt(g)};let h=Vn(g),T=typeof h?.transaction=="string"?h.transaction:void 0;if(h?.settlementStatus!=="settled"){let I=h?.settlementStatus==="failed";return{ok:!1,reason:I?"settlement_failed":"payment_unconfirmed",detail:`${I?"Merchant reports settlement failure":"Settlement is unconfirmed"}${h?.errorReason||h?.errorCode?` (${h.errorReason??h.errorCode})`:""}. Recover or reconcile this same payment; do not create a new authorization.`,response:g,txSignature:T,paymentReceipt:h}}return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b?.amount??b?.maxAmountRequired??s.amount,network:ce(b?.network??"")??s.network,txSignature:T,paymentReceipt:h}:{ok:!1,reason:"delivery_failed",detail:`Payment settled, but the merchant returned HTTP ${g.status}. Recover the result for this same payment; do not create a new authorization.`,response:g,txSignature:T,paymentReceipt:h}}catch(g){clearTimeout(m);let h=g;if(h?.name==="AbortError"){if(!p)return{ok:!1,reason:"timeout"};let T=await Ut(f,s.network,o.solanaRpcUrl);return T.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:s.amount,network:s.network,txSignature:T.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:T.detail}}return p?{ok:!1,reason:"payment_unconfirmed",detail:`${h?.message??String(g)}. Recover or reconcile this same payment; do not create a new authorization.`}:{ok:!1,reason:"error",detail:h?.message??String(g)}}}};import{getAddress as mo}from"viem";var po={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function fo(){let e=globalThis.crypto??(await import("crypto")).webcrypto,t=new Uint8Array(32);return e.getRandomValues(t),"0x"+Array.from(t,r=>r.toString(16).padStart(2,"0")).join("")}async function go(e,t,r){if(typeof e.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let n=Math.floor(Date.now()/1e3),o=String(n-600),i=String(n+(t.maxTimeoutSeconds??60)),s={from:e.address,to:t.payTo,value:t.amount,validAfter:o,validBefore:i,nonce:await fo()},a=mt[t.network.caip2];if(a===void 0)throw new Error(`unknown chain id for network ${t.network.caip2}`);let c=t.extra,u=await e.signTypedData({domain:{name:c.name,version:c.version,chainId:a,verifyingContract:mo(t.asset)},types:po,primaryType:"TransferWithAuthorization",message:s});return{payment:{x402Version:1,scheme:t.scheme,network:r,payload:{signature:u,authorization:s}},settlementProbe:{kind:"eip3009",from:s.from,nonce:s.nonce,asset:t.asset,chainId:a}}}async function an(e,t,r){try{let n;for(let o of e.options){let i=o.network.family==="evm"&&!!t.evm||o.network.family==="svm"&&!!t.solana;if(o.scheme!=="exact"){i&&(n=o.scheme);continue}if(o.network.family==="evm"&&t.evm){let s=await t.evm;return await ho(o,s,r)}if(o.network.family==="svm"&&t.solana){let s=await t.solana;return await yo(o,s,r)}}return n!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${n}'`}:{ok:!1,reason:"unsupported_network"}}catch(n){return{ok:!1,reason:"error",detail:z(n)}}}async function ho(e,t,r){if(r.maxAmountAtomic!==void 0&&BigInt(e.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let n=e.extra??{},o=n.name,i=n.version;if(typeof o!="string"||o.length===0||typeof i!="string"||i.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let s=e.network.bare,{payment:a,settlementProbe:c}=await go(t,e,s);return{ok:!0,headerValue:Buffer.from(JSON.stringify(a),"utf8").toString("base64"),option:e,settlementProbe:c}}async function yo(e,t,r){if(r.maxAmountAtomic!==void 0&&BigInt(e.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(e.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${e.scheme}'`};let n=e.extra??{};if(typeof n.feePayer!="string"||n.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=e.network.bare,i={x402Version:1,scheme:e.scheme,network:o,asset:e.asset,payTo:e.payTo,amount:e.amount,maxAmountRequired:e.amount,maxTimeoutSeconds:e.maxTimeoutSeconds??60,extra:n},a=await ee().buildTransaction(i,t,r.solanaRpcUrl),c={x402Version:1,scheme:e.scheme,network:o,payload:{transaction:a.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:e,settlementProbe:a.settlementProbe}}function Ao(e){let t=[];for(let r of e){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&t.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.maxAmountRequired??n.amount??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return t}var Bn={version:1,async parseChallenge(e){if(e.headers.get("payment-required"))return null;let t;try{t=await e.clone().json()}catch{return null}let r=Array.isArray(t.accepts)?t.accepts:[];if(r.length===0)return null;let n=Ao(r);return n.length===0?null:{x402Version:1,options:n}},async pay(e,t,r,n,o){let i,s=new AbortController,a=!1,c,u;try{let m=o.timeoutMs??15e3;i=setTimeout(()=>s.abort(),m);let p=await an(r,n,o);if(!p.ok)return{ok:!1,reason:p.reason,detail:p.detail};let f=p.headerValue,b=p.option;u=b,c=p.settlementProbe;let l=new Headers(t.headers??void 0);l.set("X-PAYMENT",f);let d=t.signal!=null?AbortSignal.any([t.signal,s.signal]):s.signal,R={method:t.method,headers:l,signal:d};typeof t.body=="string"&&(R.body=t.body),a=!0,clearTimeout(i);let x=o.responseTimeoutMs??12e4;i=setTimeout(()=>s.abort(),x);let g=await fetch(e,R);return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b.amount,network:b.network,txSignature:bo(g)}:{ok:!1,...await pt(g)}}catch(m){if(m instanceof Error&&m.name==="AbortError"){if(!a)return{ok:!1,reason:"timeout"};let p=await Ut(c,u.network,o.solanaRpcUrl);return p.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:p.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:p.detail}}return{ok:!1,reason:"error",detail:z(m)}}finally{i!==void 0&&clearTimeout(i)}}};function bo(e){let t=e.headers.get("x-payment-response")??e.headers.get("X-PAYMENT-RESPONSE");if(t)try{let r=JSON.parse(Buffer.from(t,"base64").toString("utf8")),n=r.transaction??r.txHash??r.transactionHash;return typeof n=="string"?n:void 0}catch{return}}import*as Dn from"tweetnacl";import{Keypair as Pi,VersionedTransaction as Ii,Transaction as Vi}from"@solana/web3.js";var Un=Symbol.for("x402:keypair");function cn(e){let t=e.evm;if(t&&typeof t.signMessage=="function"&&typeof t.address=="string")return{address:t.address,signMessage:t.signMessage};let r=e.solana;if(r){let n=r[Un];if(n&&n.secretKey&&n.publicKey)return{publicKey:n.publicKey,signMessage:async o=>Dn.sign.detached(o,n.secretKey)}}return null}var vo=[On,Bn];async function So(e){let t=cn(e);if(!t)return fetch;try{return(await import("@x402/extensions/sign-in-with-x")).wrapFetchWithSIWx(fetch,t)}catch(r){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${z(r)}`),fetch}}async function un(e,t,r,n){if(t.body!==void 0&&t.body!==null&&typeof t.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o;try{o=await(await So(r))(e,{...t})}catch(i){return{ok:!1,reason:"error",detail:z(i)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let i of vo){let s=await i.parseChallenge(o.clone());if(s)return i.pay(e,t,s,r,n)}return{ok:!1,reason:"no_payment_options"}}async function wo(e,t={},r){let n=await Ge(e,t);if(n.kind==="free")return{result:{ok:!0,paid:!1,response:n.response},tab:null};if(n.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${n.schemesOffered.join(", ")})`},tab:null};if(n.kind==="error")return{result:{ok:!1,reason:"error",detail:n.detail},tab:null};let{offer:o}=n,i=BigInt(ie(r.perUnitCap));if(BigInt(o.amountAtomic)>i)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${i}`},tab:null};let s=r.tabs?.get(o.payTo);return(!s||!s.state.isOpen)&&(s=await Gt({vault:r.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:r.perUnitCap,totalCap:r.totalCap,sessionDuration:r.sessionDuration,facilitatorUrl:r.facilitatorUrl,onLiveSession:r.onLiveSession,reserveFinalVoucherV2:r.reserveFinalVoucherV2}),r.tabs?.set(o.payTo,s)),{result:await un(e,t,{},{tab:s}),tab:s}}function _o(e){return{counterparty:e.payTo,perRequest:{atomic:e.amountAtomic,human:Ie(e.amountAtomic)},asset:e.asset,network:{caip2:e.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...e.resourceUrl!==void 0?{resourceUrl:e.resourceUrl}:{}}}async function xo(e,t={},r={}){let n=r.cache?.get(e);if(n)return{kind:"terms",terms:n};let o=await Ge(e,t,r.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==ut)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let i=_o(o.offer);return r.cache?.set(e,i),{kind:"terms",terms:i}}export{vt as DEFAULT_FACILITATOR_URL,Pe as DEXTER_VAULT_PROGRAM_ID,jt as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,pn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,Wt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,Jr as HOSTED_TAB_ACCEPTANCE_RULE,Zr as HOSTED_TAB_REGISTRATION_ENCODING,Xr as HOSTED_TAB_TERMS_VERSION,Yr as HOSTED_TAB_VOUCHER_HEADER,Y as HistoricalV1MigrationRequiredError,cr as INSTRUCTIONS_SYSVAR_ID,Dt as LiveSessionExistsError,ar as SECP256R1_PROGRAM_ID,Re as SessionScopeExceededError,re as TabClosedError,xe as UnsupportedNetworkError,pr as armTabOpen,oe as assertFinalVoucherV2ReservationReceipt,Ie as atomicToHuman,or as buildRegisterSessionKeyInstruction,sr as buildRevokeSessionKeyInstruction,ir as buildSecp256r1VerifyInstruction,Hn as buildVoucherMessage,At as canonicalFinalVoucherV2ReservationNetwork,qe as deriveChannelId,bt as finalVoucherV2Digest,hn as finalVoucherV2ReservationBindingDigest,gn as finalVoucherV2ReservationBindingDigestFromIdentity,We as finalVoucherV2ReservationIdentity,zt as finalVoucherV2ReservationMemo,qn as finalVoucherV2Sequence,Yn as generateSessionKeypair,ie as humanToAtomic,Lt as makeSessionKey,Gt as openTab,Te as parseAtomic,wo as payUrlWithTab,Ge as resolveTabOffer,xo as resolveTabTerms,fr as resumeTab,tr as scopeCapAtomic,$e as sessionRegisterMessage,Kn as sessionReplaceV1Message,Fn as sessionRevokeMessage,$n as sessionVoucherV2AuthorizationNonce,Ln as sessionVoucherV2Nonce,qt as signContextBoundFinalVoucherV2,$t as signVoucher,qr as tabFromGrant,Mt as voucherPayloadMessage,St as voucherToHeader,Wn as voucherV2SequenceOrdinal};
+`))!==-1;){let a=n.slice(0,s);n=n.slice(s+2);let c=yr(a);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(d,p)=>p==="n"?`
+`:"\\");yield new TextEncoder().encode(u)}}}}finally{e.releaseLock()}}function yr(t){let e=null,r=[];for(let n of t.split(`
+`))n.startsWith("event:")?e=n.slice(6).trim():n.startsWith("data:")&&r.push(n.slice(5).trimStart());return{eventName:e,data:r.length?r.join(`
+`):null}}import Ge from"tweetnacl";import{Connection as Ur,PublicKey as je}from"@solana/web3.js";import{bytesToHex as Dr}from"@noble/hashes/utils";import{deriveSessionPda as Mr,fetchSessionAccount as Kr,isSessionLive as Fr}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Lr}from"@dexterai/vault/messages";import{readVaultFull as $r}from"@dexterai/vault/reader";import{PublicKey as Q}from"@solana/web3.js";import{bytesToHex as Jt}from"@noble/hashes/utils";import{deriveGraphConfigPda as Ar,deriveSwigVaultBindingPda as Yt}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as br,DISCRIMINATORS as vr,isSwigVaultBindingIdentityVersion as bn}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as Sr}from"@dexterai/vault/instructions";import{decodeVaultFull as wr}from"@dexterai/vault/reader";import{decodeSessionAccount as _r,deriveSessionPda as Qt}from"@dexterai/vault/session";var xr=Uint8Array.from([56,67,4,209,238,143,0,129]),Rr=74,Tr=188,Er=new Q("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),Pr=(()=>{let t=Buffer.alloc(32);return t.write("OTS_SESSION_REGISTER_V2","ascii"),t})(),Xt=class extends Error{constructor(r,n){super(`native_tab_v2_solana_reservation_invalid:${r}`+(n?`:${n}`:""));this.code=r;this.name="SolanaFinalVoucherV2ReservationError"}code};function A(t,e){throw new Xt(t,e)}function L(t,e){try{return new Q(t)}catch{return A(e)}}function wt(t,e){return t.length===e.length&&t.every((r,n)=>r===e[n])}async function Ir(t){let r=(await t.connection.getSignatureStatuses([t.signature],{searchTransactionHistory:!0})).value[0]??null;if(!r)return null;r.confirmationStatus!=="confirmed"&&r.confirmationStatus!=="finalized"&&A("transaction_commitment"),r.err!==null&&A("transaction_failed");let n=await t.connection.getTransaction(t.signature,{commitment:t.commitment,maxSupportedTransactionVersion:0});if(!n)return null;n.meta||A("transaction_meta_missing"),n.slot!==r.slot&&A("transaction_status_slot");let o=n.transaction.message,i=o.version===0?o.getAccountKeys({accountKeysFromLookups:n.meta.loadedAddresses??null}):o.getAccountKeys(),s=(a,c)=>{let u=i.get(a);return u||A(c),u};return{slot:n.slot,confirmationStatus:r.confirmationStatus,err:n.meta.err,signatures:[...n.transaction.signatures],accountKeys:Array.from({length:i.length},(a,c)=>({address:s(c,"transaction_account_key").toBase58(),signer:o.isAccountSigner(c),writable:o.isAccountWritable(c)})),instructions:o.compiledInstructions.map(a=>({programId:s(a.programIdIndex,"transaction_program_id").toBase58(),accounts:a.accountKeyIndexes.map(c=>s(c,"transaction_instruction_account").toBase58()),data:Uint8Array.from(a.data)}))}}function Vr(t,e,r,n){n.length!==Rr&&A("binding_length"),wt(n.subarray(0,8),xr)||A("binding_discriminator");let o=n.readUInt8(8),i=n.readUInt8(9);return bn(o)||A("binding_version"),i!==e&&A("binding_bump"),{address:t.toBase58(),owner:r.toBase58(),version:o,bump:i,swig:new Q(n.subarray(10,42)).toBase58(),vault:new Q(n.subarray(42,74)).toBase58()}}async function Cr(t){let e=L(t.input.programId,"program_id"),r=L(t.input.buyerSwigAddress,"buyer_swig"),n=L(t.input.vaultPda,"vault_pda"),o=L(t.input.seller,"seller"),[i,s]=Yt(r,e),[a]=Qt(n,o,e),c=await t.connection.getMultipleAccountsInfoAndContext([i,n,a],{commitment:t.commitment,minContextSlot:t.minimumSlot}),[u,d,p]=c.value;u||A("binding_missing"),d||A("vault_missing"),p||A("session_missing");let f,b;try{f=wr(Buffer.from(d.data)),b=_r(a,p.data)}catch(m){return A("post_state_decode",m instanceof Error?m.message:String(m))}let l=b.session;return{contextSlot:c.context.slot,binding:Vr(i,s,u.owner,Buffer.from(u.data)),vault:{owner:d.owner.toBase58(),exists:f.exists,version:f.version,swigAddress:f.swigAddress,dexterAuthority:f.dexterAuthority,pendingVoucherCount:f.pendingVoucherCount},session:{owner:p.owner.toBase58(),version:b.version,bump:b.bump,vault:b.vault,sessionPublicKey:Jt(l.sessionPubkey),maxAmount:l.maxAmount,expiresAt:l.expiresAt,seller:l.allowedCounterparty,nonce:l.nonce,spent:l.spent,currentOutstanding:l.currentOutstanding,maxRevolvingCapacity:l.maxRevolvingCapacity,crystallizedCumulative:l.crystallizedCumulative}}}function Nr(t){let e=Buffer.from(t.voucher.sessionRegistration);return e.length!==Tr&&A("registration_length"),wt(e.subarray(0,32),Pr)||A("registration_domain"),{programId:new Q(e.subarray(32,64)).toBase58(),vaultPda:new Q(e.subarray(64,96)).toBase58(),sessionPublicKey:Jt(e.subarray(96,128)),maxAmount:e.readBigUInt64LE(128),expiresAt:e.readBigInt64LE(136),seller:new Q(e.subarray(144,176)).toBase58(),nonce:e.readUInt32LE(176),maxRevolvingCapacity:e.readBigUInt64LE(180)}}function Ce(t,e,r){let n=t.accountKeys.filter(o=>o.address===e);return n.length!==1&&A(`${r}_account_key`),n[0]}function kr(t,e,r){(!Number.isSafeInteger(r.slot)||r.slot<=0)&&A("transaction_slot"),r.slot!==e.confirmationSlot&&A("transaction_confirmation_slot"),r.err!==null&&A("transaction_failed"),r.signatures[0]!==e.transaction&&A("transaction_signature"),r.instructions.length!==2&&A("transaction_instruction_count");let n=L(t.programId,"program_id"),o=L(t.buyerSwigAddress,"buyer_swig"),i=L(t.vaultPda,"vault_pda"),s=L(t.seller,"seller"),a=L(t.sessionPda,"session_pda"),[c]=Qt(i,s,n),u=Yt(o,n)[0],d=Sr(o),p=Ar(n)[0];a.equals(c)||A("session_pda_derivation");let f=Buffer.from(vr.settle_voucher),b=r.instructions.filter(E=>{if(E.programId!==t.programId)return!1;let N=E.data;return N.length>=f.length&&wt(N.subarray(0,f.length),f)});b.length!==1&&A("settle_voucher_instruction_count");let l=b[0];r.instructions[0]!==l&&A("settle_voucher_instruction_order");let m=Buffer.from(l.data);m.length!==49&&A("settle_voucher_instruction_length"),m.readBigUInt64LE(8).toString()!==t.reservationAmountAtomic&&A("settle_voucher_amount"),m.readUInt8(16)!==1&&A("settle_voucher_increment"),new Q(m.subarray(17,49)).equals(s)||A("settle_voucher_seller"),l.accounts.length<8&&A("settle_voucher_accounts"),[i.toBase58(),null,a.toBase58(),null,o.toBase58(),d.toBase58(),u.toBase58(),p.toBase58()].forEach((E,N)=>{E!==null&&l.accounts[N]!==E&&A(`settle_voucher_account_${N}`)});let T=l.accounts[1];T||A("dexter_authority");let g=Ce(r,l.accounts[0],"vault"),h=Ce(r,T,"dexter_authority"),_=Ce(r,l.accounts[2],"session");(!g.writable||g.signer)&&A("vault_privileges"),h.signer||A("dexter_authority_signature"),(!_.writable||_.signer)&&A("session_privileges");for(let E=3;E<Math.min(l.accounts.length,8);E+=1)Ce(r,l.accounts[E],`account_${E}`).signer&&A(`settle_voucher_account_${E}_signer`);for(let E=8;E<l.accounts.length;E+=1){let N=Ce(r,l.accounts[E],`sibling_${E-8}`);(!N.writable||N.signer)&&A("settle_voucher_sibling_privileges")}let I=r.instructions[1];I.programId!==Er.toBase58()&&A("reservation_memo_program"),(I.accounts.length!==1||I.accounts[0]!==T)&&A("reservation_memo_authority"),Ce(r,T,"reservation_memo_authority").signer||A("reservation_memo_authority_signature");let K=new TextEncoder().encode(Gt(t));return wt(I.data,K)||A("reservation_memo_digest"),T}function Or(t,e,r,n){let o=L(t.programId,"program_id"),i=L(t.buyerSwigAddress,"buyer_swig"),s=L(t.vaultPda,"vault_pda"),a=L(t.seller,"seller"),[c,u]=Yt(i,o),[d,p]=Qt(s,a,o);(!Number.isSafeInteger(n.contextSlot)||n.contextSlot<e)&&A("post_state_slot"),(n.binding.address!==c.toBase58()||n.binding.owner!==t.programId||n.binding.bump!==u||!bn(n.binding.version)||n.binding.swig!==t.buyerSwigAddress||n.binding.vault!==t.vaultPda)&&A("binding_identity"),(n.vault.owner!==t.programId||!n.vault.exists||n.vault.version!==7||n.vault.swigAddress!==t.buyerSwigAddress||n.vault.dexterAuthority!==r)&&A("vault_post_state"),(t.sessionPda!==d.toBase58()||n.session.owner!==t.programId||n.session.version!==1||n.session.bump!==p||n.session.vault!==t.vaultPda||n.session.sessionPublicKey!==Jt(t.voucher.sessionPublicKey)||n.session.seller!==t.seller||n.session.nonce!==t.sessionNonce||n.session.currentOutstanding.toString()!==t.reservationAmountAtomic)&&A("session_post_state");let f=Nr(t);(f.programId!==t.programId||f.vaultPda!==t.vaultPda||f.sessionPublicKey!==n.session.sessionPublicKey||f.seller!==t.seller||f.nonce!==t.sessionNonce||f.maxAmount!==n.session.maxAmount||f.expiresAt!==BigInt(n.session.expiresAt)||f.maxRevolvingCapacity!==n.session.maxRevolvingCapacity)&&A("registration_post_state");let b=n.session.spent>n.session.crystallizedCumulative?n.session.spent:n.session.crystallizedCumulative;return b.toString()!==t.previousCumulativeAtomic&&A("session_frontier"),{commitment:"confirmed",confirmationSlot:e,postStateSlot:n.contextSlot,sessionAccountVersion:n.session.version,wireVersion:2,frontierAtomic:b.toString(),spentAtomic:n.session.spent.toString(),currentOutstandingAtomic:n.session.currentOutstanding.toString(),crystallizedCumulativeAtomic:n.session.crystallizedCumulative.toString()}}async function Br(t,e,r,n={}){try{oe(e,r)}catch(a){return A("provider_receipt",a instanceof Error?a.message:String(a))}e.network!=="solana:mainnet"&&A("network"),e.programId!==br.toBase58()&&A("program_id");let o=await(n.readTransaction??Ir)({connection:t,signature:r.transaction,commitment:"confirmed"});o||A("transaction_missing"),o.confirmationStatus!=="confirmed"&&o.confirmationStatus!=="finalized"&&A("transaction_commitment");let i=kr(e,r,o),s=await(n.readPostState??Cr)({connection:t,input:e,minimumSlot:o.slot,commitment:"confirmed"});return{...Or(e,o.slot,i,s),commitment:o.confirmationStatus}}async function vn(t,e,r,n={}){await Br(t,e,r,n)}var Zt="solana:mainnet";async function qr(t){let e=t.facilitatorUrl??vt,r=t.programId??Pe,n=new je(t.vaultPda),o=new je(t.params.counterparty),i=Te(t.perUnitCapAtomic);if(i<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let s=Te(t.params.maxAmountAtomic),a=Te(t.params.maxRevolvingCapacityAtomic),c=(t.params.nonce&2147483648)!==0;if(!c)throw new Y("tabFromGrant");if(c&&!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let u=Wr(t.sessionSecretKey),d=new je(t.params.sessionPubkey).toBytes();if(!Sn(u.publicKey,d))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new je(u.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let p=Ge.randomBytes(32),f=Ge.sign.detached(p,u.secretKey);if(!Ge.sign.detached.verify(p,f,d))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let b=$e({programId:r,vaultPda:n,sessionPubkey:u.publicKey,maxAmount:s,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:o,nonce:t.params.nonce,maxRevolvingCapacity:a}),l=typeof t.connection=="string"?new Ur(t.connection,"confirmed"):t.connection,m=await Kr(l,n,o,r);if(!m||m.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Fr(m))throw new Error(m.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${m.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${m.session.expiresAt})`);if(!Sn(m.session.sessionPubkey,u.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new je(m.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(m.vault!==n.toBase58()||m.session.allowedCounterparty!==o.toBase58()||m.session.maxAmount!==s||m.session.expiresAt!==t.params.expiresAtUnix||m.session.nonce!==t.params.nonce||m.session.maxRevolvingCapacity!==a)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${m.session.maxAmount} expiresAt=${m.session.expiresAt} nonce=${m.session.nonce} revolving=${m.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&m.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${m.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let R=m.session.spent>m.session.crystallizedCumulative?m.session.spent:m.session.crystallizedCumulative;if(R>=s)throw new Error(`tab_exhausted: on-chain frontier ${R} has consumed the session cap ${s} \u2014 no voucher can strictly exceed it; open a new grant`);let T=t.sellerUrl??t.params.counterparty,g=BigInt(Math.floor(Math.random()*4294967295)),h=qe({vaultPda:n,sellerUrl:T,nonce:g}),_=Dr(h),I=t.swigAddress;if(!I){let y=await $r(l,n);if(!y.exists||!y.swigAddress)throw new Error(`tab_vault_unreadable: vault ${n.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);I=y.swigAddress}let $={channelId:_,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},K=Lt({publicKey:u.publicKey,privateKey:u.secretKey},$,b),[E]=Mr(n,o,r),N={network:Zt,swigAddress:I,vaultPda:n.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(y,v)=>{if(!c)return $t(y,v,h);let S=qt({programId:r.toBase58(),vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),sessionNonce:t.params.nonce,channelId:v.channelId,cumulativeAmountAtomic:v.cumulativeAmount,sequenceOrdinal:v.sequenceNumber,sessionPrivateKey:y.privateKey,sessionPublicKey:y.publicKey,sessionRegistration:y.registration});return{payload:{channelId:S.channelId,cumulativeAmount:S.cumulativeAmount,sequenceNumber:S.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(S.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(S.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(S.sessionRegistration,"hex"))}},signOpenTab:async y=>y.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(y,v)=>vn(l,y,v):void 0};return new He({vault:N,network:Zt,seller:T,counterparty:t.params.counterparty,session:K,channelIdHex:_,channelIdBytes:h,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:R,initialSequenceOrdinal:c&&m.session.lastLockedSequence!==0?Lr(m.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:y,incrementAtomic:v,previousCumulativeAtomic:S})=>{let x=We(y),C={network:Zt,programId:r.toBase58(),buyerSwigAddress:I,vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),channelId:_,sessionNonce:t.params.nonce,reservationAmountAtomic:v,previousCumulativeAtomic:S,...x,voucher:y},V=await t.reserveFinalVoucherV2(C);return oe(C,V),await N.verifyFinalVoucherV2Reservation(C,V),V}:void 0,closeMode:"settle-only"})}function Wr(t){if(t.length===64)return Ge.sign.keyPair.fromSecretKey(t);if(t.length===32)return Ge.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function Sn(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n++)r|=t[n]^e[n];return r===0}import{PublicKey as zr}from"@solana/web3.js";var wn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],Hr=new Map(wn.map(t=>[t.caip2.toLowerCase(),t])),jr=new Map(wn.map(t=>[t.bare.toLowerCase(),t]));function ce(t){if(!t)return null;let e=t.toLowerCase(),r=Hr.get(e)||jr.get(e);return r?{caip2:r.caip2,bare:r.bare,family:r.family}:null}function en(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),r=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(r,"base64").toString("utf8"))}function Gr(t){let e=[];for(let r of t){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&e.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.amount??n.maxAmountRequired??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return e}async function _t(t){let e=t.headers.get("payment-required");if(!e)return null;let r;try{r=en(e)}catch{return null}let n=Array.isArray(r.accepts)?r.accepts:[];return n.length===0?null:{x402Version:2,options:Gr(n),extensions:r.extensions&&typeof r.extensions=="object"&&!Array.isArray(r.extensions)?r.extensions:void 0,resourceUrl:r.resource&&typeof r.resource=="object"?String(r.resource.url??""):void 0}}async function ze(t,e={},r=fetch){let n={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(n.body=e.body);let o;try{o=await r(t,n)}catch(a){return{kind:"error",detail:`probe failed: ${a?.message??String(a)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let i=await _t(o);if(!i)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let s=i.options.find(a=>a.scheme==="tab"&&a.network.family==="svm");if(!s)return{kind:"no_tab",schemesOffered:i.options.map(a=>a.scheme)};try{new zr(s.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${s.payTo}"`}}return{kind:"offer",offer:{payTo:s.payTo,amountAtomic:s.amount,asset:s.asset,networkCaip2:s.network.caip2,...typeof s.extra?.voucherHeader=="string"?{voucherHeader:s.extra.voucherHeader}:{},...typeof s.extra?.registrationEncoding=="string"?{registrationEncoding:s.extra.registrationEncoding}:{},...typeof s.extra?.termsVersion=="string"?{termsVersion:s.extra.termsVersion}:{},...typeof s.extra?.acceptanceRule=="string"?{acceptanceRule:s.extra.acceptanceRule}:{},resourceUrl:i.resourceUrl}}}var Xr="dexter-tab-hosted-pay-before-delivery/v1",Jr="pay_before_delivery_seller_2xx",Yr="x-tab-voucher",Qr="base64(188-byte sessionRegisterMessage)";var Xe="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",xt="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",Rt="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",ue=Xe,Je=xt,Ye=Rt,le="eip155:8453",Ne="eip155:84532",ke="eip155:42161",Oe="eip155:137",Be="eip155:10",Ue="eip155:43114",De="eip155:56",me="eip155:480",de="eip155:143",pe="eip155:4663",fe="eip155:1187947933",ge="eip155:324705682",Me="eip155:1",he=le,Tt=Ne,Qe=ke,Ze=Oe,et=Be,tt=Ue,nt=De,rt=me,ot=de,st=pe,it=fe,at=ge,ct=Me,ut="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",_n="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",xn="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",tn="0x55d398326f99059fF775485246999027B3197955",Et="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",nn="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Pt={[De]:Et,[le]:xn,[Ne]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[ke]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[Oe]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Be]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[Ue]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[me]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[de]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[pe]:nn,[fe]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[ge]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Me]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},It={[tn]:{symbol:"USDT",decimals:18},[Et]:{symbol:"USDC",decimals:18}};var Vt={[me]:{name:"USDC",version:"2"},[de]:{name:"USDC",version:"2"},[pe]:{name:"Global Dollar",version:"1"},[fe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[ge]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},Z="0x000000000022D473030F116dDEE9F6B43aC78BA3",lt="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",mt={[De]:56,[le]:8453,[Ne]:84532,[ke]:42161,[Oe]:137,[Be]:10,[Ue]:43114,[me]:480,[de]:143,[pe]:4663,[fe]:1187947933,[ge]:324705682,[Me]:1},ye={[Xe]:"https://api.dexter.cash/api/solana/rpc",[xt]:"https://api.devnet.solana.com",[Rt]:"https://api.testnet.solana.com"},D={[De]:"https://api.dexter.cash/api/evm/bsc/rpc",[le]:"https://api.dexter.cash/api/base/rpc",[Ne]:"https://sepolia.base.org",[ke]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[Oe]:"https://api.dexter.cash/api/evm/polygon/rpc",[Be]:"https://api.dexter.cash/api/evm/optimism/rpc",[Ue]:"https://api.dexter.cash/api/evm/avalanche/rpc",[me]:"https://worldchain-mainnet.g.alchemy.com/public",[de]:"https://rpc.monad.xyz",[pe]:"https://rpc.mainnet.chain.robinhood.com",[fe]:"https://skale-base.skalenodes.com/v1/base",[ge]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Me]:"https://eth.llamarpc.com"};var O=class t extends Error{code;details;constructor(e,r,n){super(r),this.name="X402Error",this.code=e,this.details=n,Object.setPrototypeOf(this,t.prototype)}};function j(t,e){let r=t.scheme??"exact";if(r!=="exact"&&!(e==="evm"&&r==="exact-approval"))return`Unsupported payment scheme: ${r}`;let n=t.extra?.paymentFlow;if(n!==void 0&&n!=="authorization")return`Unsupported payment flow: ${String(n)}`;let o=t.extra?.assetTransferMethod;if(o!==void 0&&(typeof o!="string"||!(r==="exact-approval"?[]:e==="evm"?["eip3009","permit2"]:["default"]).includes(o)))return`Unsupported payment asset transfer method: ${String(o)}`}function dt(t){let e=t?.["payment-identifier"];if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e.info;return!!r&&typeof r=="object"&&!Array.isArray(r)&&r.required===!0}import{PublicKey as Ae,Connection as rn,TransactionMessage as Zr,VersionedTransaction as eo,ComputeBudgetProgram as Rn}from"@solana/web3.js";import{getAssociatedTokenAddress as on,getAccount as to,createTransferCheckedInstruction as no,getMint as ro,TOKEN_PROGRAM_ID as Tn,TOKEN_2022_PROGRAM_ID as Ct}from"@solana/spl-token";var oo=12e3,so=1;function be(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var Nt=class{name="Solana";networks=[ue,Je,Ye];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:ye[e]?ye[e]:e==="solana"?ye[ue]:e==="solana-devnet"?ye[Je]:e==="solana-testnet"?ye[Ye]:ye[ue]}getAddress(e){return be(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return be(e)?e.publicKey!==null:!1}async getBalance(e,r,n){if(!be(r)||!r.publicKey)return 0;let o=n||this.getDefaultRpcUrl(e.network),i=new rn(o,"confirmed"),s=new Ae(r.publicKey.toBase58()),a=new Ae(e.asset);try{let u=(await i.getAccountInfo(a,"confirmed"))?.owner.toBase58()===Ct.toBase58()?Ct:Tn,d=await on(a,s,!1,u),p=await to(i,d,void 0,u),f=e.extra?.decimals??6;return Number(p.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,r,n){let o=j(e,"svm");if(o)throw new Error(o);if(!be(r))throw new Error("Invalid Solana wallet");if(!r.publicKey)throw new Error("Wallet not connected");let i=n||this.getDefaultRpcUrl(e.network),s=new rn(i,"confirmed"),a=new Ae(r.publicKey.toBase58()),{payTo:c,asset:u,extra:d}=e,p=e.amount??e.maxAmountRequired;if(!p)throw new Error("Missing amount in payment requirements");if(!d?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new Ae(d.feePayer),b=new Ae(u),l=new Ae(c);this.log("Building transaction:",{from:a.toBase58(),to:c,amount:p,asset:u,feePayer:d.feePayer});let m=[];m.push(Rn.setComputeUnitLimit({units:oo})),m.push(Rn.setComputeUnitPrice({microLamports:so}));let R=await s.getAccountInfo(b,"confirmed");if(!R)throw new Error(`Token mint ${u} not found`);let T=R.owner.toBase58()===Ct.toBase58()?Ct:Tn,g=await ro(s,b,void 0,T);typeof d?.decimals=="number"&&g.decimals!==d.decimals&&this.log(`Decimals mismatch: requirements say ${d.decimals}, mint says ${g.decimals}`);let h=await on(b,a,!1,T),_=await on(b,l,!0,T);if(!await s.getAccountInfo(h,"confirmed"))throw new Error(`No token account found for ${u}. Please ensure you have USDC in your wallet.`);if(!await s.getAccountInfo(_,"confirmed"))throw new Error(`Seller token account not found. The seller (${c}) must have a USDC account.`);let K=BigInt(p);m.push(no(h,b,_,a,K,g.decimals,[],T));let{blockhash:E}=await s.getLatestBlockhash("confirmed"),N=new Zr({payerKey:f,recentBlockhash:E,instructions:m}).compileToV0Message(),y=new eo(N),v=await r.signTransaction(y);return this.log("Transaction signed successfully"),{serialized:Buffer.from(v.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:h.toBase58(),destinationAta:_.toBase58(),asset:u,amount:p,blockhash:E}}}async confirmSettlement(e,r){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let n=new rn(r,"confirmed"),o=new Ae(e.destinationAta),i=await n.getSignaturesForAddress(o,{limit:25});if(i.length===0)return{settled:!1};let s=BigInt(e.amount);for(let a of i){if(a.err)continue;let c=await n.getTransaction(a.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),d=c.meta.preTokenBalances??[],p=c.meta.postTokenBalances??[];for(let f of p){if(f.mint!==e.asset)continue;let b=u[f.accountIndex];if(!b||!b.equals(o))continue;let l=d.find(T=>T.accountIndex===f.accountIndex),m=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-m===s)return{settled:!0,txSignature:a.signature}}}return{settled:!1}}};function ee(t){return new Nt(t)}var io={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},En=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function ve(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var kt=class{name="EVM";networks=[nt,he,Tt,ct,Qe,Ze,et,tt,rt,ot,st,it,at];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:D[e]?D[e]:e==="base"?D[he]:e==="bsc"?D[nt]:e==="ethereum"?D[ct]:e==="arbitrum"?D[Qe]:e==="polygon"?D[Ze]:e==="optimism"?D[et]:e==="avalanche"?D[tt]:e==="world"?D[rt]:e==="monad"?D[ot]:e==="robinhood"?D[st]:e==="skale-base"?D[it]:e==="skale-base-sepolia"?D[at]:D[he]}getAddress(e){return ve(e)?e.address:null}isConnected(e){return ve(e)?!!e.address:!1}getChainId(e){if(mt[e])return mt[e];if(e.startsWith("eip155:")){let r=e.split(":")[1];return parseInt(r,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,r,n){if(!ve(r)||!r.address)return 0;let o=n||this.getDefaultRpcUrl(e.network);try{let i=this.encodeBalanceOf(r.address),s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:i},"latest"]})});if(!s.ok)throw new Error(`RPC request failed: ${s.status}`);let a=await s.json();if(a.error)throw new Error(`RPC error: ${JSON.stringify(a.error)}`);if(!a.result||a.result==="0x")return 0;let c=BigInt(a.result),u=e.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(i){throw i}}encodeBalanceOf(e){let r="0x70a08231",n=e.slice(2).toLowerCase().padStart(64,"0");return r+n}async confirmSettlement(e,r){if(e.kind==="eip3009"){let n="0xe94a0102",o=e.from.slice(2).toLowerCase().padStart(64,"0"),i=e.nonce.slice(2).toLowerCase().padStart(64,"0"),s=n+o+i,a=await this.ethCall(r,e.asset,s);return{settled:BigInt(a)!==0n}}if(e.kind==="permit2"){let n="0x4fe02b44",o=BigInt(e.nonce),i=o>>8n,s=o&0xffn,a=e.from.slice(2).toLowerCase().padStart(64,"0"),c=i.toString(16).padStart(64,"0"),u=n+a+c,d=await this.ethCall(r,Z,u);return{settled:(BigInt(d)>>s&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,r,n){let o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:n},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let i=await o.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")throw new Error("RPC returned an empty result");return i.result}async buildTransaction(e,r,n){let o=j(e,"evm");if(o)throw new Error(o);if(!ve(r))throw new Error("Invalid EVM wallet");if(!r.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,r,n);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,r,n);let{payTo:i,asset:s,extra:a}=e,c=e.amount??e.maxAmountRequired;if(!c)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:r.address,to:i,amount:c,asset:s,network:e.network});let u=this.getChainId(e.network),d=Vt[`eip155:${u}`],p={name:a?.name??d?.name??"USD Coin",version:a?.version??d?.version??"2",chainId:BigInt(u),verifyingContract:s},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},b=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l="0x"+[...b].map(_=>_.toString(16).padStart(2,"0")).join(""),m=Math.floor(Date.now()/1e3),R={from:r.address,to:i,value:c,validAfter:String(m-600),validBefore:String(m+(e.maxTimeoutSeconds||60)),nonce:l},T={from:r.address,to:i,value:BigInt(c),validAfter:BigInt(m-600),validBefore:BigInt(m+(e.maxTimeoutSeconds||60)),nonce:l};if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let g=await r.signTypedData({domain:p,types:f,primaryType:"TransferWithAuthorization",message:T});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:R,signature:g}),signature:g,settlementProbe:{kind:"eip3009",from:r.address,nonce:l,asset:s,chainId:u}}}async buildApprovalTransaction(e,r,n){let{payTo:o,asset:i,extra:s}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");let c=s?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:r.address,to:o,amount:a,asset:i,network:e.network,facilitatorContract:c});let u=n||this.getDefaultRpcUrl(e.network),d=s?.fee??"0",p=BigInt(a)+BigInt(d),f=await this.readAllowance(u,i,r.address,c);if(f<p){if(!r.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let N=this.calculateApprovalAmount(a,d,s?.approvalStrategy);this.log(`Approving ${N} for ${c} (current allowance: ${f})`);let y=await r.sendTransaction({to:i,data:this.encodeApprove(c,N),value:0n});this.log(`Approval tx sent: ${y}`),await this.waitForReceipt(u,y),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let b=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l=[...b].reduce((N,y)=>N*256n+BigInt(y),0n).toString(),m=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(m);let R="0x"+[...m].map(N=>N.toString(16).padStart(2,"0")).join(""),g=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),h=s?.eip712Domain,_=h?{name:h.name,version:h.version,chainId:BigInt(h.chainId),verifyingContract:h.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},I=s?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},$={from:r.address,to:o,token:i,amount:BigInt(a),fee:BigInt(d),nonce:BigInt(l),deadline:BigInt(g),paymentId:R},K=await r.signTypedData({domain:_,types:I,primaryType:"Payment",message:$});this.log("EIP-712 Payment signature obtained");let E={from:r.address,to:o,token:i,amount:a,fee:d,nonce:l,deadline:g,paymentId:R,signature:K};return{serialized:JSON.stringify(E),signature:K}}async buildPermit2Transaction(e,r,n){let{payTo:o,asset:i}=e,s=e.amount??e.maxAmountRequired;if(!s)throw new Error("Missing amount in payment requirements");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:r.address,to:o,amount:s,asset:i,network:e.network});let a=n||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(a,i,r.address,Z),u;if(c<BigInt(s)){let _=this.encodeApprove(Z,En);if(r.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let I=this.getChainId(e.network),$=await this.readGasPrice(a),K=await this.readNonce(a,r.address),E=await r.signTransaction({to:i,data:_,chainId:I,gas:50000n,gasPrice:$,nonce:K});u={erc20ApprovalGasSponsoring:{info:{from:r.address,asset:i,spender:Z,amount:En.toString(),signedTransaction:E,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(r.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let I=await r.sendTransaction({to:i,data:_,value:0n});this.log(`Permit2 approval tx sent: ${I}`),await this.waitForReceipt(a,I),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let p=[...d].reduce((_,I)=>_*256n+BigInt(I),0n),f=Math.floor(Date.now()/1e3),b=f-600,l=f+(e.maxTimeoutSeconds||300),m=this.getChainId(e.network),R={name:"Permit2",chainId:BigInt(m),verifyingContract:Z},T={permitted:{token:i,amount:BigInt(s)},spender:lt,nonce:p,deadline:BigInt(l),witness:{to:o,validAfter:BigInt(b)}},g=await r.signTypedData({domain:R,types:io,primaryType:"PermitWitnessTransferFrom",message:T});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let h={signature:g,permit2Authorization:{from:r.address,permitted:{token:i,amount:s},spender:lt,nonce:p.toString(),deadline:String(l),witness:{to:o,validAfter:String(b)}}};return{serialized:JSON.stringify(h),signature:g,extensions:u,settlementProbe:{kind:"permit2",from:r.address,nonce:p.toString(),chainId:m}}}async readAllowance(e,r,n,o){let i="0xdd62ed3e",s=n.slice(2).toLowerCase().padStart(64,"0"),a=o.slice(2).toLowerCase().padStart(64,"0"),c=i+s+a;try{let d=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:c},"latest"]})})).json();return d.error||!d.result||d.result==="0x"?0n:BigInt(d.result)}catch{return 0n}}encodeApprove(e,r){let n="0x095ea7b3",o=e.slice(2).toLowerCase().padStart(64,"0"),i=r.toString(16).padStart(64,"0");return n+o+i}async waitForReceipt(e,r,n=3e4){let o=Date.now();for(;Date.now()-o<n;){try{let s=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[r]})})).json();if(s.result){if(s.result.status==="0x0")throw new Error(`Approval transaction reverted: ${r}`);return}}catch(i){if(i instanceof Error&&i.message.includes("reverted"))throw i}await new Promise(i=>setTimeout(i,2e3))}throw new Error(`Approval transaction receipt timeout after ${n}ms: ${r}`)}async readGasPrice(e){try{let n=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return n.result?BigInt(n.result):50000000n}catch{return 50000000n}}async readNonce(e,r){try{let o=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[r,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(e,r,n){let o=BigInt(e)+BigInt(r);if(!n||n.mode==="exact")return o;let i=BigInt(n.defaultMultiple??10),s=o*i;if(n.maxCapUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(n.maxCapUsd*Math.pow(10,a)));if(s>c)return c}if(n.exactAboveUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(n.exactAboveUsd*Math.pow(10,a)));if(BigInt(e)>c)return o}return s}inferDecimals(e){return e.length>12?18:6}};function Ke(t){return new kt(t)}function sn(t){if(t===ut||t===_n)return!0;let e=t.toLowerCase();for(let r of Object.values(Pt))if(r.toLowerCase()===e)return!0;for(let r of Object.keys(It))if(r.toLowerCase()===e)return!0;return!1}function ao(t){return{[Xe]:"Solana",[xt]:"Solana Devnet",[Rt]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[le]:"Base",[Ne]:"Base Sepolia",[Me]:"Ethereum",[ke]:"Arbitrum",[Oe]:"Polygon",[Be]:"Optimism",[Ue]:"Avalanche",[De]:"BSC",[me]:"World Chain",[de]:"Monad",[pe]:"Robinhood Chain",[fe]:"SKALE Base",[ge]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function Pn(t,e){let r=ao(t);return r===t?e:r}async function co(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let r=t,n=new Headers(r.headers);e?.headers&&new Headers(e.headers).forEach((s,a)=>n.set(a,s));let o={method:e?.method??r.method,headers:n,signal:e?.signal??r.signal,redirect:e?.redirect??r.redirect,credentials:e?.credentials??r.credentials},i=(o.method??"GET").toUpperCase();return e&&"body"in e?o.body=e.body:i!=="GET"&&i!=="HEAD"&&r.body&&(o.body=await r.arrayBuffer()),[r.url,o]}var In=new WeakMap;function Vn(t){return In.get(t)}function uo(t,e){let r=t.headers.get("PAYMENT-RESPONSE"),n;if(r)try{let a=en(r);a&&typeof a=="object"&&!Array.isArray(a)&&(n={...a})}catch{}n??={},n.settlementStatus="unconfirmed";let o=n.network===e.network,i=[n.errorReason,n.errorCode,n.errorMessage].every(a=>a===void 0||typeof a=="string"),s=[n.errorReason,n.errorCode].filter(a=>typeof a=="string"&&a.length>0);return s.some(a=>/pending|unknown|unconfirmed|timeout|temporar/i.test(a))?n.settlementStatus="pending":n.success===!0&&o&&i&&s.length===0&&typeof n.transaction=="string"&&n.transaction.trim().length>0?n.settlementStatus="settled":n.success===!1&&(o||n.network===void 0)&&s.length>0&&(n.settlementStatus="failed"),n.attemptedAmountAtomic=e.amountAtomic,n.settlementStatus==="settled"?n.amountAtomic=e.amountAtomic:delete n.amountAtomic,n.assetDecimals=e.assetDecimals,In.set(t,n),n}function Cn(t){let{adapters:e=[ee({verbose:t.verbose}),Ke({verbose:t.verbose})],wallets:r,wallet:n,preferredNetwork:o,rpcUrls:i={},maxAmountAtomic:s,fetch:a=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:d,onPaymentDispatched:p,maxRetries:f=0,retryDelayMs:b=500}=t,l=c?console.log.bind(console,"[x402]"):()=>{};async function m(y,v){let S;for(let x=0;x<=f;x++)try{let C=await a(y,v);if(C.status>=502&&C.status<=504&&x<f){l(`Retry ${x+1}/${f}: server returned ${C.status}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,x)));continue}return C}catch(C){S=C,x<f&&(l(`Retry ${x+1}/${f}: ${C instanceof Error?C.message:"network error"}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,x))))}throw S}let R=new Map;function T(y){try{let v=new URL(y).host,S=R.get(v);if(S&&S.expiresAt>Date.now()/1e3+10)return S.jwt;S&&R.delete(v)}catch{}return null}function g(y,v){try{let S=new URL(y).host,x=v.split(".");if(x.length===3){let C=JSON.parse(atob(x[1].replace(/-/g,"+").replace(/_/g,"/"))),V=Math.floor(Date.now()/1e3),k=V+86400,q=Math.min(typeof C.exp=="number"?C.exp:V,k);R.set(S,{jwt:v,expiresAt:q}),l("Access pass cached for",S,"| expires:",new Date(q*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let h=r||{};n&&!h.solana&&be(n)&&(h.solana=n),n&&!h.evm&&ve(n)&&(h.evm=n);function _(y){let v=[];for(let S of y){let x=e.find(k=>k.canHandle(S.network));if(!x)continue;let C=x.name==="Solana"?"svm":"evm";if(j(S,C))continue;let V;x.name==="Solana"?V=h.solana:x.name==="EVM"&&(V=h.evm),V&&x.isConnected(V)&&v.push({accept:S,adapter:x,wallet:V})}if(v.length===0)return null;if(o){let S=v.find(x=>x.accept.network===o);if(S)return S}return v[0]}function I(y,v){return Pn(y,v)}function $(y,v){return i[y]||v.getDefaultRpcUrl(y)}async function K(y,v,S,x,C){let V="";if(u?.preferTier&&x.tiers){let w=x.tiers.find(H=>H.id===u.preferTier);if(w){if(u.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Access pass tier "${w.id}" costs $${w.price}, exceeds max spend $${u.maxSpend}`);V=`tier=${w.id}`}}else if(u?.preferDuration&&x.ratePerHour)V=`duration=${u.preferDuration}`;else if(x.tiers&&x.tiers.length>0){let w=x.tiers[0];if(u?.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Cheapest access pass costs $${w.price}, exceeds max spend $${u?.maxSpend}`);V=`tier=${w.id}`}let k=V?C.includes("?")?`${C}&${V}`:`${C}?${V}`:C;l("Purchasing access pass:",V||"default tier");let q=S.headers.get("PAYMENT-REQUIRED");if(!q)return null;let F;try{F=JSON.parse(atob(q))}catch{return null}let U=_(F.accepts);if(!U)return null;if(dt(F.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let{accept:B,adapter:W,wallet:Se}=U;if(W.name==="Solana"&&!B.extra?.feePayer)return null;let z=B.extra?.decimals??(sn(B.asset)?6:void 0);if(typeof z!="number")return null;let Fe=B.amount??B.maxAmountRequired;if(!Fe)return null;let X=$(B.network,W);try{let w=await W.getBalance(B,Se,X),H=Number(Fe)/Math.pow(10,z);if(w<H){let Mn=I(B.network,W.name);throw new O("insufficient_balance",`Insufficient balance for access pass on ${Mn}. Have $${w.toFixed(4)}, need $${H.toFixed(4)}`)}}catch(w){if(w instanceof O)throw w}let J=await W.buildTransaction(B,Se,X),we;W.name==="EVM"?we=JSON.parse(J.serialized):we={transaction:J.serialized};let te=typeof y=="string"?y:y instanceof URL?y.href:y.url,_e=F.resource;if(typeof F.resource=="string")try{let w=new URL(F.resource,te);["http:","https:"].includes(w.protocol)&&(_e=w.toString())}catch{}else if(F.resource&&typeof F.resource=="object"&&"url"in F.resource){let w=F.resource;try{let H=new URL(w.url,te);["http:","https:"].includes(H.protocol)&&(_e={...w,url:H.toString()})}catch{}}let ft={x402Version:B.x402Version??2,resource:_e,accepted:B,payload:we};J.extensions&&(ft.extensions=J.extensions);let Le=btoa(JSON.stringify(ft)),ne=await a(k,{...v,method:"POST",headers:{...v?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":Le}});if(!ne.ok)return l("Pass purchase failed:",ne.status),null;let P=ne.headers.get("ACCESS-PASS");return P&&(g(C,P),l("Access pass purchased and cached")),ne}async function E(y,v){let S=y;if(l("Making request:",S),u){let P=T(S);if(P){l("Using cached access pass");let w=await a(y,{...v,headers:{...v?.headers||{},Authorization:`Bearer ${P}`}});if(w.status!==401&&w.status!==402)return w;l("Cached pass rejected (status",w.status,"), purchasing new pass");try{R.delete(new URL(S).host)}catch{}}}let x=await m(y,v);if(x.status!==402)return x;l("Received 402 Payment Required");let C=x.headers.get("X-ACCESS-PASS-TIERS");if(u&&C){l("Server offers access passes, purchasing...");try{let P=JSON.parse(atob(C)),w=await K(y,v,x,P,S);if(w)return w}catch(P){l("Access pass purchase failed, falling back to per-request payment:",P)}}let V=x.headers.get("PAYMENT-REQUIRED");if(!V)throw new O("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let P=atob(V);k=JSON.parse(P)}catch{throw new O("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}if(l("Payment requirements:",k),dt(k.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let q=x.headers.get("X-Quote-Hash");q&&l("Quote hash received:",q);let F=_(k.accepts);if(!F){let P=k.accepts.map(w=>w.network).join(", ");throw new O("no_matching_payment_option",`No supported payment option with a connected wallet for: ${P}`)}let{accept:U,adapter:B,wallet:W}=F;if(l(`Using ${B.name} for ${U.network}`),B.name==="Solana"&&!U.extra?.feePayer)throw new O("missing_fee_payer","Solana payment option missing feePayer in extra");let Se=U.extra?.decimals??(sn(U.asset)?6:void 0);if(typeof Se!="number")throw new O("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let z=U.amount??U.maxAmountRequired;if(!z)throw new O("missing_amount","Payment option missing amount");if(s&&BigInt(z)>BigInt(s))throw new O("amount_exceeds_max",`Payment amount ${z} exceeds maximum ${s}`);let Fe=$(U.network,B);l("Checking balance...");try{let P=await B.getBalance(U,W,Fe),w=Number(z)/Math.pow(10,Se);if(P<w){let H=I(U.network,B.name);throw new O("insufficient_balance",`Insufficient balance on ${H}. Have $${P.toFixed(4)}, need $${w.toFixed(4)}`)}l(`Balance OK: $${P.toFixed(4)} >= $${w.toFixed(4)}`)}catch(P){if(P instanceof O)throw P;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(d&&!await d(U))throw new O("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let X=await B.buildTransaction(U,W,Fe);l("Transaction signed");let J;B.name==="EVM"?J=JSON.parse(X.serialized):J={transaction:X.serialized};let we=y,te=k.resource;if(typeof k.resource=="string")try{let P=new URL(k.resource,we).toString();P!==k.resource&&l("Resolved relative resource URL:",k.resource,"\u2192",P),te=P}catch{te=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let P=k.resource;try{let w=new URL(P.url,we).toString();w!==P.url&&(l("Resolved relative resource URL:",P.url,"\u2192",w),te={...P,url:w})}catch{}}let _e={x402Version:U.x402Version??2,resource:te,accepted:U,payload:J};X.extensions&&(_e.extensions=X.extensions);let ft=btoa(JSON.stringify(_e));if(p)try{p(U,X.settlementProbe)}catch{}l("Retrying request with payment...");let Le=await m(y,{...v,headers:{...v?.headers||{},"PAYMENT-SIGNATURE":ft,...q?{"X-Quote-Hash":q}:{}}});l("Retry response status:",Le.status);let ne=uo(Le,{network:U.network,amountAtomic:z,assetDecimals:Se});return ne.extensions&&l("Settlement extensions:",Object.keys(ne.extensions).join(", ")),Le}async function N(y,v){let[S,x]=await co(y,v);return E(S,x)}return{fetch:N}}function G(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function pt(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let r=e.toLowerCase(),n=r.includes("settle")||r.includes("facilitator"),o=e;try{let i=JSON.parse(e),s=[i.error,i.detail,i.message].filter(a=>typeof a=="string"&&a.length>0);s.length>0&&(o=s.join(" \u2014 "))}catch{}return o||(o=`HTTP ${t.status}`),{reason:n?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${o}`}}var Ot="Payment authorization was sent, but the merchant did not respond within the timeout. ",Bt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Ut(t,e,r){if(!t)return{confirmed:!1,detail:Ot+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+Bt};try{if(t.kind==="solana"){let s=ee(),a=r??s.getDefaultRpcUrl(e.caip2);if(!s.confirmSettlement)return kn();let c=await s.confirmSettlement(t,a);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Nn()}let n=Ke(),o=n.getDefaultRpcUrl(e.caip2);if(!n.confirmSettlement)return kn();let i=await n.confirmSettlement(t,o);return i.settled?{confirmed:!0,txSignature:i.txSignature}:Nn()}catch(n){return{confirmed:!1,detail:Ot+`On-chain confirmation could not be completed (${G(n)}).`+Bt}}}function Nn(){return{confirmed:!1,detail:Ot+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+Bt}}function kn(){return{confirmed:!1,detail:Ot+"The chain adapter does not support on-chain confirmation."+Bt}}async function lo(t,e,r,n){let o;try{o=await n.signNextVoucher(r.amount)}catch(c){return n.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let i=new Headers(e.headers??void 0);i.set("X-Tab-Voucher",St(o));let s={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method??"GET",headers:i};e.signal&&(s.signal=e.signal),typeof e.body=="string"&&(s.body=e.body);let a;try{a=await fetch(t,s)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return a.status===402?n.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:n.rollbackVoucher?.call(n,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:a.ok?{ok:!0,paid:!0,response:a,amountPaid:r.amount,network:r.network}:{ok:!1,...await pt(a)}}var On={version:2,async parseChallenge(t){return _t(t)},async pay(t,e,r,n,o){if(dt(r.extensions))return{ok:!1,reason:"no_payment_options",detail:"unsupported_required_payment_identifier"};if(o.tab){let g=r.options.find(h=>h.scheme==="tab"&&h.network.family==="svm"&&h.payTo===o.tab.counterparty);if(g){let h=await lo(t,e,g,o.tab);if(h)return h}}let i=r.options.filter(g=>!j(g,g.network.family));if(i.length===0)return{ok:!1,reason:"no_payment_options",detail:`no supported payment capability offered: ${r.options.map(g=>j(g,g.network.family)).join("; ")}`};let s=i.find(g=>g.network.family==="evm"?!!n.evm:g.network.family==="svm"?!!n.solana:!1);if(!s)return{ok:!1,reason:"unsupported_network"};let a=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,u=new AbortController,d=setTimeout(()=>u.abort(),a),p=!1,f,b,l=(g,h)=>{p=!0,b=g,f=h,clearTimeout(d),d=setTimeout(()=>u.abort(),c)},m=Cn({wallets:n,preferredNetwork:s.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:l}),R=e.signal?AbortSignal.any([e.signal,u.signal]):u.signal,T={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method??"GET",headers:e.headers,signal:R};typeof e.body=="string"&&(T.body=e.body);try{let g=await m.fetch(t,T);if(clearTimeout(d),!p)return g.ok?{ok:!0,paid:!1,response:g}:{ok:!1,response:g,...await pt(g)};let h=Vn(g),_=typeof h?.transaction=="string"?h.transaction:void 0;if(h?.settlementStatus!=="settled"){let I=h?.settlementStatus==="failed";return{ok:!1,reason:I?"settlement_failed":"payment_unconfirmed",detail:`${I?"Merchant reports settlement failure":"Settlement is unconfirmed"}${h?.errorReason||h?.errorCode?` (${h.errorReason??h.errorCode})`:""}. Recover or reconcile this same payment; do not create a new authorization.`,response:g,txSignature:_,paymentReceipt:h}}return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b?.amount??b?.maxAmountRequired??s.amount,network:ce(b?.network??"")??s.network,txSignature:_,paymentReceipt:h}:{ok:!1,reason:"delivery_failed",detail:`Payment settled, but the merchant returned HTTP ${g.status}. Recover the result for this same payment; do not create a new authorization.`,response:g,txSignature:_,paymentReceipt:h}}catch(g){clearTimeout(d);let h=g;if(h?.name==="AbortError"){if(!p)return{ok:!1,reason:"timeout"};let _=await Ut(f,s.network,o.solanaRpcUrl);return _.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:s.amount,network:s.network,txSignature:_.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:_.detail}}return p?{ok:!1,reason:"payment_unconfirmed",detail:`${h?.message??String(g)}. Recover or reconcile this same payment; do not create a new authorization.`}:{ok:!1,reason:"error",detail:h?.message??String(g)}}}};import{getAddress as mo}from"viem";var po={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function fo(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,r=>r.toString(16).padStart(2,"0")).join("")}async function go(t,e,r){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let n=Math.floor(Date.now()/1e3),o=String(n-600),i=String(n+(e.maxTimeoutSeconds??60)),s={from:t.address,to:e.payTo,value:e.amount,validAfter:o,validBefore:i,nonce:await fo()},a=mt[e.network.caip2];if(a===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,u=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:a,verifyingContract:mo(e.asset)},types:po,primaryType:"TransferWithAuthorization",message:s});return{payment:{x402Version:1,scheme:e.scheme,network:r,payload:{signature:u,authorization:s}},settlementProbe:{kind:"eip3009",from:s.from,nonce:s.nonce,asset:e.asset,chainId:a}}}async function an(t,e,r){try{let n;for(let o of t.options){let i=o.network.family==="evm"&&!!e.evm||o.network.family==="svm"&&!!e.solana;if(o.scheme!=="exact"){i&&(n=o.scheme);continue}if(o.network.family==="evm"&&e.evm){let s=await e.evm;return await ho(o,s,r)}if(o.network.family==="svm"&&e.solana){let s=await e.solana;return await yo(o,s,r)}}return n!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${n}'`}:{ok:!1,reason:"unsupported_network"}}catch(n){return{ok:!1,reason:"error",detail:G(n)}}}async function ho(t,e,r){if(r.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let n=t.extra??{},o=n.name,i=n.version;if(typeof o!="string"||o.length===0||typeof i!="string"||i.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let s=t.network.bare,{payment:a,settlementProbe:c}=await go(e,t,s);return{ok:!0,headerValue:Buffer.from(JSON.stringify(a),"utf8").toString("base64"),option:t,settlementProbe:c}}async function yo(t,e,r){if(r.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let n=t.extra??{};if(typeof n.feePayer!="string"||n.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=t.network.bare,i={x402Version:1,scheme:t.scheme,network:o,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:n},a=await ee().buildTransaction(i,e,r.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:o,payload:{transaction:a.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:a.settlementProbe}}function Ao(t){let e=[];for(let r of t){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&e.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.maxAmountRequired??n.amount??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return e}var Bn={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let r=Array.isArray(e.accepts)?e.accepts:[];if(r.length===0)return null;let n=Ao(r);return n.length===0?null:{x402Version:1,options:n}},async pay(t,e,r,n,o){let i,s=new AbortController,a=!1,c,u;try{let d=o.timeoutMs??15e3;i=setTimeout(()=>s.abort(),d);let p=await an(r,n,o);if(!p.ok)return{ok:!1,reason:p.reason,detail:p.detail};let f=p.headerValue,b=p.option;u=b,c=p.settlementProbe;let l=new Headers(e.headers??void 0);l.set("X-PAYMENT",f);let m=e.signal!=null?AbortSignal.any([e.signal,s.signal]):s.signal,R={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method,headers:l,signal:m};typeof e.body=="string"&&(R.body=e.body),a=!0,clearTimeout(i);let T=o.responseTimeoutMs??12e4;i=setTimeout(()=>s.abort(),T);let g=await fetch(t,R);return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b.amount,network:b.network,txSignature:bo(g)}:{ok:!1,...await pt(g)}}catch(d){if(d instanceof Error&&d.name==="AbortError"){if(!a)return{ok:!1,reason:"timeout"};let p=await Ut(c,u.network,o.solanaRpcUrl);return p.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:p.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:p.detail}}return{ok:!1,reason:"error",detail:G(d)}}finally{i!==void 0&&clearTimeout(i)}}};function bo(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let r=JSON.parse(Buffer.from(e,"base64").toString("utf8")),n=r.transaction??r.txHash??r.transactionHash;return typeof n=="string"?n:void 0}catch{return}}import*as Dn from"tweetnacl";import{Keypair as Ii,VersionedTransaction as Vi,Transaction as Ci}from"@solana/web3.js";var Un=Symbol.for("x402:keypair");function cn(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let r=t.solana;if(r){let n=r[Un];if(n&&n.secretKey&&n.publicKey)return{publicKey:n.publicKey,signMessage:async o=>Dn.sign.detached(o,n.secretKey)}}return null}import{decodePaymentRequiredHeader as vo}from"@x402/core/http";var So=[On,Bn];async function wo(t){let e=async(o,i)=>({response:await fetch(o,i),paymentUrl:o,paymentInit:i}),r=cn(t);if(!r)return e;let n;try{n=await import("@x402/extensions/sign-in-with-x")}catch(o){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${G(o)}`),e}return async(o,i)=>{let s=new Request(o,i),a=s.clone(),c=await fetch(s),u={response:c,paymentUrl:o,paymentInit:i};if(c.status!==402)return u;let d=c.headers.get("PAYMENT-REQUIRED");if(!d)return u;let p=vo(d),f=p.extensions?.[n.SIGN_IN_WITH_X];if(!f?.supportedChains)return u;if(a.headers.has(n.SIGN_IN_WITH_X))throw new Error("SIWX authentication already attempted");let b=p.accepts?.[0]?.network,l=f.supportedChains.find(_=>_.chainId===b);if(!l)return u;let m=c.url||s.url;if(c.redirected&&!["GET","HEAD"].includes(s.method))throw new Error("SIWX cannot safely replay a redirected non-GET/HEAD request; use the final resource URL");let R={...f.info,chainId:l.chainId,type:l.type};if(n.assertSIWxChallengeBoundToOrigin(R,m),c.redirected||new URL(m).origin!==new URL(s.url).origin)for(let _ of["authorization","cookie","cookie2","proxy-authorization","host"])a.headers.delete(_);let T=new Headers(a.headers),g={response:c,paymentUrl:m,paymentInit:{...i,headers:Object.fromEntries(T),redirect:"error"}};try{let _=await n.createSIWxPayload(R,r,m);a.headers.set(n.SIGN_IN_WITH_X,n.encodeSIWxHeader(_))}catch{return g}let h=new Request(new Request(m,a),{redirect:"error"});return{...g,response:await fetch(h)}}}async function un(t,e,r,n){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o,i=t,s=e;try{let c=await(await wo(r))(t,{...e});o=c.response,i=c.paymentUrl,s=c.paymentInit}catch(a){return{ok:!1,reason:"error",detail:G(a)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let a of So){let c=await a.parseChallenge(o.clone());if(c)return a.pay(i,s,c,r,n)}return{ok:!1,reason:"no_payment_options"}}async function _o(t,e={},r){let n=await ze(t,e);if(n.kind==="free")return{result:{ok:!0,paid:!1,response:n.response},tab:null};if(n.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${n.schemesOffered.join(", ")})`},tab:null};if(n.kind==="error")return{result:{ok:!1,reason:"error",detail:n.detail},tab:null};let{offer:o}=n,i=BigInt(ie(r.perUnitCap));if(BigInt(o.amountAtomic)>i)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${i}`},tab:null};let s=r.tabs?.get(o.payTo);return(!s||!s.state.isOpen)&&(s=await zt({vault:r.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:r.perUnitCap,totalCap:r.totalCap,sessionDuration:r.sessionDuration,facilitatorUrl:r.facilitatorUrl,onLiveSession:r.onLiveSession,reserveFinalVoucherV2:r.reserveFinalVoucherV2}),r.tabs?.set(o.payTo,s)),{result:await un(t,e,{},{tab:s}),tab:s}}function xo(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:Ie(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function Ro(t,e={},r={}){let n=r.cache?.get(t);if(n)return{kind:"terms",terms:n};let o=await ze(t,e,r.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==ut)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let i=xo(o.offer);return r.cache?.set(t,i),{kind:"terms",terms:i}}export{vt as DEFAULT_FACILITATOR_URL,Pe as DEXTER_VAULT_PROGRAM_ID,jt as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,pn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,Wt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,Jr as HOSTED_TAB_ACCEPTANCE_RULE,Qr as HOSTED_TAB_REGISTRATION_ENCODING,Xr as HOSTED_TAB_TERMS_VERSION,Yr as HOSTED_TAB_VOUCHER_HEADER,Y as HistoricalV1MigrationRequiredError,cr as INSTRUCTIONS_SYSVAR_ID,Dt as LiveSessionExistsError,ar as SECP256R1_PROGRAM_ID,Re as SessionScopeExceededError,re as TabClosedError,xe as UnsupportedNetworkError,pr as armTabOpen,oe as assertFinalVoucherV2ReservationReceipt,Ie as atomicToHuman,or as buildRegisterSessionKeyInstruction,sr as buildRevokeSessionKeyInstruction,ir as buildSecp256r1VerifyInstruction,Hn as buildVoucherMessage,At as canonicalFinalVoucherV2ReservationNetwork,qe as deriveChannelId,bt as finalVoucherV2Digest,hn as finalVoucherV2ReservationBindingDigest,gn as finalVoucherV2ReservationBindingDigestFromIdentity,We as finalVoucherV2ReservationIdentity,Gt as finalVoucherV2ReservationMemo,qn as finalVoucherV2Sequence,Yn as generateSessionKeypair,ie as humanToAtomic,Lt as makeSessionKey,zt as openTab,Te as parseAtomic,_o as payUrlWithTab,ze as resolveTabOffer,Ro as resolveTabTerms,fr as resumeTab,tr as scopeCapAtomic,$e as sessionRegisterMessage,Kn as sessionReplaceV1Message,Fn as sessionRevokeMessage,$n as sessionVoucherV2AuthorizationNonce,Ln as sessionVoucherV2Nonce,qt as signContextBoundFinalVoucherV2,$t as signVoucher,qr as tabFromGrant,Mt as voucherPayloadMessage,St as voucherToHeader,Wn as voucherV2SequenceOrdinal};

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/x402",
-  "version": "6.0.1",
+  "version": "6.0.3",
   "description": "Full-stack x402 SDK - add paid API monetization to any endpoint. Express middleware, React hooks, Access Pass, dynamic pricing. Solana, Base, Polygon, Arbitrum, Optimism, Avalanche, World Chain, Monad, Robinhood Chain, SKALE.",
   "author": "Dexter",
   "license": "MIT",
@@ -84,7 +84,7 @@
   },
   "dependencies": {
     "@dexterai/x402-ads-types": "^0.2.0",
-    "@dexterai/x402-core": "^1.4.0",
+    "@dexterai/x402-core": "^1.5.2",
     "@noble/curves": "^1.9.7",
     "@noble/hashes": "^1.8.0",
     "@solana/spl-token": "^0.4.9",