@dexterai/x402 6.0.3 → 6.0.4

package/dist/tab/index.js

@@ -1,6 +1,6 @@
-var xe=class extends Error{constructor(r){super(`Network ${r} is not yet supported by @dexterai/x402/tab`);this.network=r;this.name="UnsupportedNetworkError"}network},Y=class extends Error{constructor(r){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${r}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=r;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},Re=class extends Error{constructor(r,n){super(`Session scope exceeded: ${r}${n?` (${n})`:""}`);this.reason=r;this.name="SessionScopeExceededError"}reason},re=class extends Error{constructor(r){super(`Tab ${r} is already closed`);this.channelId=r;this.name="TabClosedError"}channelId},Dt=class extends Error{constructor(r){super(`a LIVE session already exists for counterparty ${r.allowedCounterparty} (session ${r.sessionPubkeyHex.slice(0,16)}\u2026, expires ${r.expiresAtUnix}; on-chain spent=${r.spentAtomic}, crystallized=${r.crystallizedCumulativeAtomic}, frontier=${r.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=r;this.name="LiveSessionExistsError"}details};import{PublicKey as se}from"@solana/web3.js";import{bytesToHex as ae}from"@noble/hashes/utils";import ht from"tweetnacl";import{PublicKey as gt}from"@solana/web3.js";import{contextBoundVoucherV2Message as jn,finalVoucherV2Sequence as Gn,sessionRegisterMessage as zn,sessionVoucherV2AuthorizationNonce as Xn}from"@dexterai/vault/messages";import{deriveSessionPda as Jn}from"@dexterai/vault/session";import{sessionRegisterMessage as $e,sessionReplaceV1Message as Kn,sessionRevokeMessage as Fn,sessionVoucherV2Nonce as Ln,sessionVoucherV2AuthorizationNonce as $n,finalVoucherV2Sequence as qn,voucherV2SequenceOrdinal as Wn,voucherPayloadMessage as Mt,buildVoucherMessage as Hn}from"@dexterai/vault/messages";import{sha256 as nr}from"@noble/hashes/sha256";function Yn(){let t=ht.sign.keyPair();return{publicKey:t.publicKey,privateKey:t.secretKey}}function Lt(t,e,r){return{publicKey:t.publicKey,privateKey:t.privateKey,scope:e,registration:r}}function $t(t,e,r){if(r.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${r.length}`);if(t.registration.length===188&&new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let n=BigInt(e.cumulativeAmount),o=BigInt(t.scope.maxAmountAtomic);if(n>o)throw new Error(`voucher cumulative ${n} exceeds session cap ${o}`);let i=Math.floor(Date.now()/1e3);if(i>=t.scope.expiresAtUnix)throw new Error(`session expired at ${t.scope.expiresAtUnix}, now ${i}`);let s=Mt({channelId:r,cumulativeAmount:n,sequenceNumber:e.sequenceNumber}),a=ht.sign.detached(s,t.privateKey);return{payload:e,sessionPublicKey:t.publicKey,sessionRegistration:t.registration,sessionSignature:a}}var Qn=/^[0-9a-f]{64}$/,Zn=(1n<<64n)-1n;function Kt(t){return Buffer.from(t).toString("hex")}function er(t){return Uint8Array.from(Buffer.from(t,"hex"))}function Ft(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n+=1)r|=(t[n]??0)^(e[n]??0);return r===0}function qt(t){if(!Qn.test(t.channelId)||t.sessionPublicKey.length!==32||t.sessionPrivateKey.length!==64||t.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(t.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let e=BigInt(t.cumulativeAmountAtomic);if(e>Zn)throw new Error("native_tab_v2_cumulative_amount_invalid");let r=new gt(t.programId),n=new gt(t.vaultPda),o=new gt(t.sessionPda),i=new gt(t.seller),[s]=Jn(n,i,r);if(!o.equals(s))throw new Error("native_tab_v2_session_pda_mismatch");let a=t.sessionRegistration,c=new DataView(a.buffer,a.byteOffset,a.byteLength),u=c.getBigUint64(128,!0),d=c.getBigInt64(136,!0),p=c.getBigUint64(180,!0),f=t.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(f)||f<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Ft(a,zn({programId:r,vaultPda:n,sessionPubkey:t.sessionPublicKey,maxAmount:u,expiresAt:d,allowedCounterparty:i,nonce:t.sessionNonce,maxRevolvingCapacity:p})))throw new Error("native_tab_v2_registration_identity_mismatch");if(u===0n||p===0n||p>u||d<=BigInt(f)||d>0x7fffffffffffffffn-604800n||e>u)throw new Error("native_tab_v2_registration_semantics_invalid");Xn(t.sessionNonce);let l=ht.sign.keyPair.fromSeed(t.sessionPrivateKey.subarray(0,32)),m=!1;try{m=Ft(l.publicKey,t.sessionPublicKey)&&Ft(t.sessionPrivateKey.subarray(32,64),t.sessionPublicKey)}finally{l.secretKey.fill(0)}if(!m)throw new Error("native_tab_v2_session_key_mismatch");let R=Gn(t.sequenceOrdinal),T=jn({programId:r,vaultPda:n,sessionPda:o,seller:i,sessionNonce:t.sessionNonce,channelId:er(t.channelId),cumulativeAmount:e,sequenceNumber:R}),g=ht.sign.detached(T,t.sessionPrivateKey);return{channelId:t.channelId,cumulativeAmount:t.cumulativeAmountAtomic,sequenceNumber:R,sessionPublicKey:Kt(t.sessionPublicKey),sessionSignature:Kt(g),sessionRegistration:Kt(a)}}function tr(t){return Te(t.maxAmountAtomic)}function Te(t){if(!/^\d+$/.test(t))throw new Error(`atomic amount must be a non-negative integer string, got "${t}"`);return BigInt(t)}function qe(t){let e=new Uint8Array(8);new DataView(e.buffer).setBigUint64(0,t.nonce,!0);let r=new TextEncoder().encode(t.sellerUrl),n=nr.create();return n.update(t.vaultPda.toBytes()),n.update(r),n.update(e),n.digest()}import{sha256 as dn}from"@noble/hashes/sha256";import{bytesToHex as Ee}from"@noble/hashes/utils";var ln=/^[0-9a-f]{64}$/,mn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,rr=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,Wt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",jt="dexter-native-tab-v2-reservation/v1",pn=`${jt}:`;function Ht(t){if(t===null||typeof t=="string"||typeof t=="boolean")return t;if(typeof t=="number"){if(!Number.isFinite(t))throw new Error("canonical_non_finite_number");return t}if(typeof t=="bigint")return t.toString();if(Array.isArray(t))return t.map(Ht);if(typeof t=="object")return Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0).sort(([e],[r])=>e.localeCompare(r)).map(([e,r])=>[e,Ht(r)]));throw new Error("canonical_value_unsupported")}function fn(t){return JSON.stringify(Ht(t))}function At(t){if(t==="solana:mainnet"||t===Wt)return Wt;throw new Error("native_tab_v2_reservation_network_unsupported")}function bt(t){return Ee(dn(new TextEncoder().encode(fn({channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:Ee(t.sessionPublicKey),sessionSignature:Ee(t.sessionSignature),sessionRegistration:Ee(t.sessionRegistration)}))))}function We(t){let e=bt(t);return{voucherDigest:e,idempotencyKey:`native-tab-v2:${e}`}}function gn(t){return Ee(dn(new TextEncoder().encode(fn({contract:jt,network:At(t.network),programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:t.voucherDigest,cumulativeAmountAtomic:t.cumulativeAmountAtomic,sequenceNumber:t.sequenceNumber}))))}function hn(t){let e=bt(t.voucher);return gn({network:t.network,programId:t.programId,buyerSwigAddress:t.buyerSwigAddress,vaultPda:t.vaultPda,sessionPda:t.sessionPda,seller:t.seller,channelId:t.channelId,sessionNonce:t.sessionNonce,reservationAmountAtomic:t.reservationAmountAtomic,previousCumulativeAtomic:t.previousCumulativeAtomic,voucherDigest:e,cumulativeAmountAtomic:t.voucher.payload.cumulativeAmount,sequenceNumber:t.voucher.payload.sequenceNumber})}function Gt(t){return`${pn}${hn(t)}`}function M(t){throw new Error(`native_tab_v2_reservation_receipt_invalid:${t}`)}function yt(t,e){(!Number.isSafeInteger(t)||t<0)&&M(e)}function oe(t,e){(!e||typeof e!="object")&&M("missing");let r=bt(t.voucher);(!ln.test(t.voucherDigest)||t.voucherDigest!==r)&&M("input_voucher_digest"),t.idempotencyKey!==`native-tab-v2:${r}`&&M("input_idempotency_identity");let n=BigInt(t.voucher.payload.cumulativeAmount),o=BigInt(t.previousCumulativeAtomic),i=BigInt(t.reservationAmountAtomic);(n<=o||n-o!==i||i<=0n)&&M("input_reservation_delta"),(t.voucher.payload.channelId!==t.channelId||(t.voucher.payload.sequenceNumber&2147483648)===0||(t.sessionNonce&2147483648)===0||t.voucher.sessionPublicKey.length!==32||t.voucher.sessionSignature.length!==64||t.voucher.sessionRegistration.length!==188)&&M("input_voucher_identity"),e.contract!=="dexter-native-tab-open-receipt/v1"&&e.contract!=="dexter-native-tab-open-receipt/v2"&&M("contract"),ln.test(e.operationId)||M("operation_id"),mn.test(e.callerOperationId)||M("caller_operation_id"),rr.test(e.transaction)||M("transaction"),e.commitment!=="confirmed"&&e.commitment!=="finalized"&&M("commitment"),yt(e.confirmationSlot,"confirmation_slot"),yt(e.postStateSlot,"post_state_slot"),(e.confirmationSlot===0||e.postStateSlot<e.confirmationSlot)&&M("post_state_slot");let s,a;try{s=At(t.network),a=At(e.network)}catch{return M("network")}(a!==s||e.buyerSwigAddress!==t.buyerSwigAddress||e.vaultPda!==t.vaultPda||e.sessionPda!==t.sessionPda||e.seller!==t.seller||e.channelId!==t.channelId||e.sessionPublicKey!==Ee(t.voucher.sessionPublicKey)||e.voucherDigest!==r||e.cumulativeAmountAtomic!==t.voucher.payload.cumulativeAmount||e.sequenceNumber!==t.voucher.payload.sequenceNumber||!mn.test(e.providerReceiptId)||e.reservationAmountAtomic!==t.reservationAmountAtomic||e.currentOutstandingBeforeAtomic!=="0"||e.currentOutstandingAfterAtomic!==t.reservationAmountAtomic)&&M("economic_identity"),yt(e.pendingVoucherCountBefore,"pending_voucher_count_before"),yt(e.pendingVoucherCountAfter,"pending_voucher_count_after"),e.contract==="dexter-native-tab-open-receipt/v1"?e.callerOperationId!==t.idempotencyKey&&M("idempotency_key"):(e.rootOperationId!==t.idempotencyKey||!Number.isSafeInteger(e.generation)||Number(e.generation)<2||!e.predecessorCallerOperationId||!e.predecessorLifecycleOperationId||!e.predecessorReleaseDigest||!e.stableReservationId||!e.economicEffectDigest)&&M("successor_identity")}import{deriveSessionPda as ur}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as or,buildRevokeSessionKeyInstruction as sr,deriveSwigWalletAddress as Lo}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as ir}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Pe,SECP256R1_PROGRAM_ID as ar,INSTRUCTIONS_SYSVAR_ID as cr}from"@dexterai/vault/constants";var lr=3600,vt="https://x402.dexter.cash",yn=6;function ie(t,e=yn){if(!/^\d+(\.\d+)?$/.test(t))throw new Error(`amount must be a non-negative decimal string, got "${t}"`);let[r,n=""]=t.split(".");if(n.length>e)throw new Error(`amount "${t}" has more than ${e} decimals`);let o=n.padEnd(e,"0"),i=`${r}${o}`.replace(/^0+(?=\d)/,"");return i===""?"0":i}function Ie(t,e=yn){if(!/^\d+$/.test(t))throw new Error(`atomic must be a non-negative integer string, got "${t}"`);let r=t.padStart(e+1,"0"),n=r.slice(0,-e).replace(/^0+(?=\d)/,"")||"0",o=r.slice(-e).replace(/0+$/,"");return o?`${n}.${o}`:n}var He=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;lastSignedVoucherIncrementAtomic=null;previousSignedVoucher=null;previousSignedVoucherIncrementAtomic=null;constructor(e){if(this.internals=e,this.channelId=e.channelIdHex,this.network=e.network,this.counterparty=e.counterparty,this.initialCumulativeAtomic=e.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=e.initialSequenceOrdinal??0,this.isFinalV2=An(e.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!e.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let e=this.internals.totalCapAtomic-this.cumulativeAtomic,r=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Ie(this.cumulativeAtomic.toString()),remaining:Ie(e.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-r)}}async signNextVoucher(e){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(e)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(e){if(this.closed)throw new re(this.channelId);let r=BigInt(e);if(r<=0n)throw new Error(`voucher increment must be > 0, got ${e}`);if(r>this.internals.perUnitCapAtomic)throw new Re("cap_exceeded",`single voucher increment ${r} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let n=this.cumulativeAtomic+r;if(n>this.internals.totalCapAtomic)throw new Re("cap_exceeded",`cumulative ${n} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,i={channelId:this.channelId,cumulativeAmount:n.toString(),sequenceNumber:o},s=await this.internals.vault.signWithSession(this.internals.session,i);if(s.payload.channelId!==i.channelId||s.payload.cumulativeAmount!==i.cumulativeAmount||(this.isFinalV2?(s.payload.sequenceNumber&2147483647)!==o||(s.payload.sequenceNumber&2147483648)===0:s.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");let a;this.internals.beforeVoucherRelease&&(a=await this.internals.beforeVoucherRelease({voucher:s,incrementAtomic:r.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}));let c=a?{...s,reservationReceipt:a}:s;return this.previousSignedVoucher=this.lastSignedVoucher,this.previousSignedVoucherIncrementAtomic=this.lastSignedVoucherIncrementAtomic,this.lastSignedVoucher=c,this.lastSignedVoucherIncrementAtomic=r,this.sequenceNumber=o,this.cumulativeAtomic=n,c}beginOperation(e){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=e}endOperation(e){if(this.operationInFlight!==e)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(e){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(e)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(e){let r=this.lastSignedVoucher;if(!r||r.payload.sequenceNumber!==e.payload.sequenceNumber||r.payload.cumulativeAmount!==e.payload.cumulativeAmount)return!1;let n=this.previousSignedVoucher;if(n){let o=this.previousSignedVoucherIncrementAtomic;if(o===null)return!1;this.sequenceNumber=n.payload.sequenceNumber,this.cumulativeAtomic=BigInt(n.payload.cumulativeAmount),this.lastSignedVoucher=n,this.lastSignedVoucherIncrementAtomic=o}else if(r.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null,this.lastSignedVoucherIncrementAtomic=null;else return!1;return this.previousSignedVoucher=null,this.previousSignedVoucherIncrementAtomic=null,!0}async stream(e,r){if(this.closed)throw new re(this.channelId);let n=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(r?.headers);o.set("X-Tab-Voucher",St(n)),o.set("Accept","text/event-stream");let i=await fetch(e,{...r,headers:o});if(!i.ok){let s=await i.text().catch(()=>"");throw new Error(`tab.stream HTTP ${i.status}: ${s.slice(0,500)}`)}if(!i.body)throw new Error("tab.stream response has no body");return hr(i.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new re(this.channelId);let e={settleTx:""};if(this.lastSignedVoucher&&this.cumulativeAtomic>0n){let n=this.isFinalV2?this.lastSignedVoucherIncrementAtomic:this.cumulativeAtomic-this.initialCumulativeAtomic;if(n===null||n<=0n)throw new Error("tab_settle_attempted_amount_missing");e=await dr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network,n.toString())}let r=(this.internals.closeMode??"revoke")==="revoke";return r&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Ie(this.cumulativeAtomic.toString()),sessionRevoked:r,...e}}finally{this.endOperation("close")}}};function An(t){return t.registration.length!==188?!1:(new DataView(t.registration.buffer,t.registration.byteOffset,t.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function St(t,e){let r=e??t.reservationReceipt;if((t.payload.sequenceNumber&2147483648)!==0&&!r)throw new Error("native_tab_v2_reservation_receipt_required");return Buffer.from(JSON.stringify({payload:t.payload,sessionPublicKey:ae(t.sessionPublicKey),sessionRegistration:ae(t.sessionRegistration),sessionSignature:ae(t.sessionSignature),...r?{reservationReceipt:r}:{}}),"utf8").toString("base64")}function Ve(t){return typeof t!="string"||!/^\d+$/.test(t)?null:BigInt(t)}function mr(t){let e;try{e=JSON.parse(t)}catch{return!1}if(typeof e!="object"||e===null)return!1;let r="non_monotonic_cumulative";if(e.error!==r&&e.reason!==r)return!1;let n=Ve(e.attempted_cumulative),o=Ve(e.on_chain_spent),i=Ve(e.frontier);return n===null||o===null||i===null?!1:n>o&&n<=i}async function dr(t,e,r,n){let o=`${t.replace(/\/$/,"")}/tab/settle`,i={attemptedAmount:n,channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:ae(e.sessionPublicKey),sessionSignature:ae(e.sessionSignature),sessionRegistration:ae(e.sessionRegistration),network:r},s=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(i)}),a=await s.text();if(!s.ok){if(s.status===409&&mr(a))return{settleTx:""};throw new Error(`tab settle ${s.status}: ${a.slice(0,500)}`)}let c;try{c=JSON.parse(a)}catch{throw new Error(`tab settle returned non-JSON: ${a.slice(0,200)}`)}if(c.reason==="covered_by_frontier"){let d=Ve(c.attemptedCumulative),p=Ve(c.onChainSpent),f=Ve(c.frontier);if(d!==null&&p!==null&&f!==null&&d>p&&d<=f)return{settleTx:""}}if(!c.settleTx)throw new Error(`tab settle returned no settleTx: ${a.slice(0,200)}`);let u={settleTx:c.settleTx};return typeof c.grossAmount=="string"&&(u.grossAmount=c.grossAmount),typeof c.feeAmount=="string"&&(u.feeAmount=c.feeAmount),typeof c.netAmount=="string"&&(u.netAmount=c.netAmount),u}async function pr(t,e,r,n,o){throw new Y("armTabOpen")}async function zt(t){if(t.network!==t.vault.network)throw new xe(`options.network (${t.network}) doesn't match vault.network (${t.vault.network})`);if(t.network!=="solana:mainnet")throw new xe(t.network);if(t.vault.sessionVoucherVersion!==1&&t.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(t.vault.sessionVoucherVersion===1)throw new Y("openTab");if(t.vault.sessionVoucherVersion===2&&(!t.reserveFinalVoucherV2||!t.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let e=BigInt(Math.floor(Math.random()*4294967295)),r=new se(t.vault.vaultPda),n=qe({vaultPda:r,sellerUrl:t.seller,nonce:BigInt(e)}),o=ae(n),i=BigInt(ie(t.perUnitCap)),s=BigInt(ie(t.totalCap));if(i<=0n)throw new Error("perUnitCap must be > 0");if(s<i)throw new Error("totalCap must be >= perUnitCap");if(t.revolvingCapacity!==void 0&&BigInt(ie(t.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let a=t.sessionDuration??lr,c=Math.floor(Date.now()/1e3)+a,u=gr(t.seller),d={channelId:o,maxAmountAtomic:s.toString(),revolvingCapacityAtomic:t.revolvingCapacity?ie(t.revolvingCapacity):s.toString(),expiresAtUnix:c,allowedCounterparty:u},p=await t.vault.authorizeSession(d,{onLiveSession:t.onLiveSession}),f=An(p);if(t.vault.sessionVoucherVersion!==(f?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let b;if(f){if(!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let l=p.registration,m=new DataView(l.buffer,l.byteOffset,l.byteLength),R=new se(l.subarray(32,64)),T=new se(l.subarray(64,96)),g=new se(l.subarray(144,176)),h=m.getUint32(176,!0),_=m.getBigUint64(180,!0),I=$e({programId:Pe,vaultPda:r,sessionPubkey:p.publicKey,maxAmount:s,expiresAt:BigInt(c),allowedCounterparty:new se(u),nonce:h,maxRevolvingCapacity:BigInt(d.revolvingCapacityAtomic)});if(!R.equals(Pe)||!T.equals(r)||!g.equals(new se(u))||_!==BigInt(d.revolvingCapacityAtomic)||!Buffer.from(l).equals(Buffer.from(I)))throw new Error("native_tab_v2_registration_identity_mismatch");let[$]=ur(T,g,R);b=async({voucher:K,incrementAtomic:E,previousCumulativeAtomic:N})=>{let y=We(K),v={network:t.network,programId:R.toBase58(),buyerSwigAddress:t.vault.swigAddress,vaultPda:T.toBase58(),sessionPda:$.toBase58(),seller:g.toBase58(),channelId:o,sessionNonce:h,reservationAmountAtomic:E,previousCumulativeAtomic:N,...y,voucher:K},S=await t.reserveFinalVoucherV2(v);return oe(v,S),await t.vault.verifyFinalVoucherV2Reservation(v,S),S}}return new He({vault:t.vault,network:t.network,seller:t.seller,counterparty:u,session:p,channelIdHex:o,channelIdBytes:n,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:c,facilitatorUrl:t.facilitatorUrl??vt,beforeVoucherRelease:b})}async function fr(t){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function gr(t){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(t))try{return new se(t),t}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${t}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*hr(t){let e=t.getReader(),r=new TextDecoder,n="";try{for(;;){let{done:o,value:i}=await e.read();if(o)break;n+=r.decode(i,{stream:!0});let s;for(;(s=n.indexOf(`
+var Re=class extends Error{constructor(r){super(`Network ${r} is not yet supported by @dexterai/x402/tab`);this.network=r;this.name="UnsupportedNetworkError"}network},Q=class extends Error{constructor(r){super(`native_tab_v1_migration_required: @dexterai/x402 v6 cannot safely arm or reconstruct a buyer-side V1 tab through ${r}; settle or revoke the historical session through the deployment that originally opened it, then create a context-bound V2 session`);this.surface=r;this.name="HistoricalV1MigrationRequiredError"}surface;code="native_tab_v1_migration_required"},Te=class extends Error{constructor(r,n){super(`Session scope exceeded: ${r}${n?` (${n})`:""}`);this.reason=r;this.name="SessionScopeExceededError"}reason},oe=class extends Error{constructor(r){super(`Tab ${r} is already closed`);this.channelId=r;this.name="TabClosedError"}channelId},Lt=class extends Error{constructor(r){super(`a LIVE session already exists for counterparty ${r.allowedCounterparty} (session ${r.sessionPubkeyHex.slice(0,16)}\u2026, expires ${r.expiresAtUnix}; on-chain spent=${r.spentAtomic}, crystallized=${r.crystallizedCumulativeAtomic}, frontier=${r.frontierAtomic}). Replacing it voids any signed-but-unsettled vouchers beyond the frontier. Settle the old tab first (tab.close() or POST its last voucher to /tab/settle), or pass onLiveSession: 'replace' to atomically revoke-then-register over it.`);this.details=r;this.name="LiveSessionExistsError"}details};import{PublicKey as ie}from"@solana/web3.js";import{bytesToHex as ce}from"@noble/hashes/utils";import bt from"tweetnacl";import{PublicKey as At}from"@solana/web3.js";import{contextBoundVoucherV2Message as tr,finalVoucherV2Sequence as nr,sessionRegisterMessage as rr,sessionVoucherV2AuthorizationNonce as or}from"@dexterai/vault/messages";import{deriveSessionPda as sr}from"@dexterai/vault/session";import{sessionRegisterMessage as He,sessionReplaceV1Message as Gn,sessionRevokeMessage as Xn,sessionVoucherV2Nonce as Jn,sessionVoucherV2AuthorizationNonce as Yn,finalVoucherV2Sequence as Qn,voucherV2SequenceOrdinal as Zn,voucherPayloadMessage as $t,buildVoucherMessage as er}from"@dexterai/vault/messages";import{sha256 as mr}from"@noble/hashes/sha256";function ir(){let e=bt.sign.keyPair();return{publicKey:e.publicKey,privateKey:e.secretKey}}function Wt(e,t,r){return{publicKey:e.publicKey,privateKey:e.privateKey,scope:t,registration:r}}function jt(e,t,r){if(r.length!==32)throw new Error(`channelIdBytes must be 32 bytes, got ${r.length}`);if(e.registration.length===188&&new DataView(e.registration.buffer,e.registration.byteOffset,e.registration.byteLength).getUint32(176,!0)>=2147483648)throw new Error("context-bound V2 sessions require signContextBoundFinalVoucherV2 and a durable reservation");let n=BigInt(t.cumulativeAmount),o=BigInt(e.scope.maxAmountAtomic);if(n>o)throw new Error(`voucher cumulative ${n} exceeds session cap ${o}`);let a=Math.floor(Date.now()/1e3);if(a>=e.scope.expiresAtUnix)throw new Error(`session expired at ${e.scope.expiresAtUnix}, now ${a}`);let i=$t({channelId:r,cumulativeAmount:n,sequenceNumber:t.sequenceNumber}),s=bt.sign.detached(i,e.privateKey);return{payload:t,sessionPublicKey:e.publicKey,sessionRegistration:e.registration,sessionSignature:s}}var ar=/^[0-9a-f]{64}$/,cr=(1n<<64n)-1n;function qt(e){return Buffer.from(e).toString("hex")}function ur(e){return Uint8Array.from(Buffer.from(e,"hex"))}function Ht(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n+=1)r|=(e[n]??0)^(t[n]??0);return r===0}function zt(e){if(!ar.test(e.channelId)||e.sessionPublicKey.length!==32||e.sessionPrivateKey.length!==64||e.sessionRegistration.length!==188||!/^[1-9][0-9]*$/.test(e.cumulativeAmountAtomic))throw new Error("native_tab_v2_signing_input_invalid");let t=BigInt(e.cumulativeAmountAtomic);if(t>cr)throw new Error("native_tab_v2_cumulative_amount_invalid");let r=new At(e.programId),n=new At(e.vaultPda),o=new At(e.sessionPda),a=new At(e.seller),[i]=sr(n,a,r);if(!o.equals(i))throw new Error("native_tab_v2_session_pda_mismatch");let s=e.sessionRegistration,c=new DataView(s.buffer,s.byteOffset,s.byteLength),u=c.getBigUint64(128,!0),d=c.getBigInt64(136,!0),g=c.getBigUint64(180,!0),f=e.nowUnixSeconds??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(f)||f<0)throw new Error("native_tab_v2_signing_time_invalid");if(!Ht(s,rr({programId:r,vaultPda:n,sessionPubkey:e.sessionPublicKey,maxAmount:u,expiresAt:d,allowedCounterparty:a,nonce:e.sessionNonce,maxRevolvingCapacity:g})))throw new Error("native_tab_v2_registration_identity_mismatch");if(u===0n||g===0n||g>u||d<=BigInt(f)||d>0x7fffffffffffffffn-604800n||t>u)throw new Error("native_tab_v2_registration_semantics_invalid");or(e.sessionNonce);let m=bt.sign.keyPair.fromSeed(e.sessionPrivateKey.subarray(0,32)),l=!1;try{l=Ht(m.publicKey,e.sessionPublicKey)&&Ht(e.sessionPrivateKey.subarray(32,64),e.sessionPublicKey)}finally{m.secretKey.fill(0)}if(!l)throw new Error("native_tab_v2_session_key_mismatch");let v=nr(e.sequenceOrdinal),x=tr({programId:r,vaultPda:n,sessionPda:o,seller:a,sessionNonce:e.sessionNonce,channelId:ur(e.channelId),cumulativeAmount:t,sequenceNumber:v}),p=bt.sign.detached(x,e.sessionPrivateKey);return{channelId:e.channelId,cumulativeAmount:e.cumulativeAmountAtomic,sequenceNumber:v,sessionPublicKey:qt(e.sessionPublicKey),sessionSignature:qt(p),sessionRegistration:qt(s)}}function lr(e){return Ee(e.maxAmountAtomic)}function Ee(e){if(!/^\d+$/.test(e))throw new Error(`atomic amount must be a non-negative integer string, got "${e}"`);return BigInt(e)}function We(e){let t=new Uint8Array(8);new DataView(t.buffer).setBigUint64(0,e.nonce,!0);let r=new TextEncoder().encode(e.sellerUrl),n=mr.create();return n.update(e.vaultPda.toBytes()),n.update(r),n.update(t),n.digest()}import{sha256 as An}from"@noble/hashes/sha256";import{bytesToHex as Pe}from"@noble/hashes/utils";var hn=/^[0-9a-f]{64}$/,yn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,dr=/^[1-9A-HJ-NP-Za-km-z]{32,100}$/,Gt="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",Jt="dexter-native-tab-v2-reservation/v1",bn=`${Jt}:`;function Xt(e){if(e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number"){if(!Number.isFinite(e))throw new Error("canonical_non_finite_number");return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map(Xt);if(typeof e=="object")return Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).sort(([t],[r])=>t.localeCompare(r)).map(([t,r])=>[t,Xt(r)]));throw new Error("canonical_value_unsupported")}function vn(e){return JSON.stringify(Xt(e))}function St(e){if(e==="solana:mainnet"||e===Gt)return Gt;throw new Error("native_tab_v2_reservation_network_unsupported")}function wt(e){return Pe(An(new TextEncoder().encode(vn({channelId:e.payload.channelId,cumulativeAmount:e.payload.cumulativeAmount,sequenceNumber:e.payload.sequenceNumber,sessionPublicKey:Pe(e.sessionPublicKey),sessionSignature:Pe(e.sessionSignature),sessionRegistration:Pe(e.sessionRegistration)}))))}function je(e){let t=wt(e);return{voucherDigest:t,idempotencyKey:`native-tab-v2:${t}`}}function Sn(e){return Pe(An(new TextEncoder().encode(vn({contract:Jt,network:St(e.network),programId:e.programId,buyerSwigAddress:e.buyerSwigAddress,vaultPda:e.vaultPda,sessionPda:e.sessionPda,seller:e.seller,channelId:e.channelId,sessionNonce:e.sessionNonce,reservationAmountAtomic:e.reservationAmountAtomic,previousCumulativeAtomic:e.previousCumulativeAtomic,voucherDigest:e.voucherDigest,cumulativeAmountAtomic:e.cumulativeAmountAtomic,sequenceNumber:e.sequenceNumber}))))}function wn(e){let t=wt(e.voucher);return Sn({network:e.network,programId:e.programId,buyerSwigAddress:e.buyerSwigAddress,vaultPda:e.vaultPda,sessionPda:e.sessionPda,seller:e.seller,channelId:e.channelId,sessionNonce:e.sessionNonce,reservationAmountAtomic:e.reservationAmountAtomic,previousCumulativeAtomic:e.previousCumulativeAtomic,voucherDigest:t,cumulativeAmountAtomic:e.voucher.payload.cumulativeAmount,sequenceNumber:e.voucher.payload.sequenceNumber})}function Yt(e){return`${bn}${wn(e)}`}function K(e){throw new Error(`native_tab_v2_reservation_receipt_invalid:${e}`)}function vt(e,t){(!Number.isSafeInteger(e)||e<0)&&K(t)}function se(e,t){(!t||typeof t!="object")&&K("missing");let r=wt(e.voucher);(!hn.test(e.voucherDigest)||e.voucherDigest!==r)&&K("input_voucher_digest"),e.idempotencyKey!==`native-tab-v2:${r}`&&K("input_idempotency_identity");let n=BigInt(e.voucher.payload.cumulativeAmount),o=BigInt(e.previousCumulativeAtomic),a=BigInt(e.reservationAmountAtomic);(n<=o||n-o!==a||a<=0n)&&K("input_reservation_delta"),(e.voucher.payload.channelId!==e.channelId||(e.voucher.payload.sequenceNumber&2147483648)===0||(e.sessionNonce&2147483648)===0||e.voucher.sessionPublicKey.length!==32||e.voucher.sessionSignature.length!==64||e.voucher.sessionRegistration.length!==188)&&K("input_voucher_identity"),t.contract!=="dexter-native-tab-open-receipt/v1"&&t.contract!=="dexter-native-tab-open-receipt/v2"&&K("contract"),hn.test(t.operationId)||K("operation_id"),yn.test(t.callerOperationId)||K("caller_operation_id"),dr.test(t.transaction)||K("transaction"),t.commitment!=="confirmed"&&t.commitment!=="finalized"&&K("commitment"),vt(t.confirmationSlot,"confirmation_slot"),vt(t.postStateSlot,"post_state_slot"),(t.confirmationSlot===0||t.postStateSlot<t.confirmationSlot)&&K("post_state_slot");let i,s;try{i=St(e.network),s=St(t.network)}catch{return K("network")}(s!==i||t.buyerSwigAddress!==e.buyerSwigAddress||t.vaultPda!==e.vaultPda||t.sessionPda!==e.sessionPda||t.seller!==e.seller||t.channelId!==e.channelId||t.sessionPublicKey!==Pe(e.voucher.sessionPublicKey)||t.voucherDigest!==r||t.cumulativeAmountAtomic!==e.voucher.payload.cumulativeAmount||t.sequenceNumber!==e.voucher.payload.sequenceNumber||!yn.test(t.providerReceiptId)||t.reservationAmountAtomic!==e.reservationAmountAtomic||t.currentOutstandingBeforeAtomic!=="0"||t.currentOutstandingAfterAtomic!==e.reservationAmountAtomic)&&K("economic_identity"),vt(t.pendingVoucherCountBefore,"pending_voucher_count_before"),vt(t.pendingVoucherCountAfter,"pending_voucher_count_after"),t.contract==="dexter-native-tab-open-receipt/v1"?t.callerOperationId!==e.idempotencyKey&&K("idempotency_key"):(t.rootOperationId!==e.idempotencyKey||!Number.isSafeInteger(t.generation)||Number(t.generation)<2||!t.predecessorCallerOperationId||!t.predecessorLifecycleOperationId||!t.predecessorReleaseDigest||!t.stableReservationId||!t.economicEffectDigest)&&K("successor_identity")}import{deriveSessionPda as Ar}from"@dexterai/vault/session";import{buildRegisterSessionKeyInstruction as pr,buildRevokeSessionKeyInstruction as fr,deriveSwigWalletAddress as rs}from"@dexterai/vault/instructions";import{buildSecp256r1VerifyInstruction as gr}from"@dexterai/vault/precompile";import{DEXTER_VAULT_PROGRAM_ID as Ie,SECP256R1_PROGRAM_ID as hr,INSTRUCTIONS_SYSVAR_ID as yr}from"@dexterai/vault/constants";var br=3600,_t="https://x402.dexter.cash",_n=6;function ae(e,t=_n){if(!/^\d+(\.\d+)?$/.test(e))throw new Error(`amount must be a non-negative decimal string, got "${e}"`);let[r,n=""]=e.split(".");if(n.length>t)throw new Error(`amount "${e}" has more than ${t} decimals`);let o=n.padEnd(t,"0"),a=`${r}${o}`.replace(/^0+(?=\d)/,"");return a===""?"0":a}function Ve(e,t=_n){if(!/^\d+$/.test(e))throw new Error(`atomic must be a non-negative integer string, got "${e}"`);let r=e.padStart(t+1,"0"),n=r.slice(0,-t).replace(/^0+(?=\d)/,"")||"0",o=r.slice(-t).replace(/0+$/,"");return o?`${n}.${o}`:n}var ze=class{channelId;voucherVersion;network;counterparty;internals;initialCumulativeAtomic;cumulativeAtomic;sequenceNumber;isFinalV2;closed=!1;operationInFlight=null;lastSignedVoucher=null;lastSignedVoucherIncrementAtomic=null;previousSignedVoucher=null;previousSignedVoucherIncrementAtomic=null;constructor(t){if(this.internals=t,this.channelId=t.channelIdHex,this.network=t.network,this.counterparty=t.counterparty,this.initialCumulativeAtomic=t.initialCumulativeAtomic??0n,this.cumulativeAtomic=this.initialCumulativeAtomic,this.sequenceNumber=t.initialSequenceOrdinal??0,this.isFinalV2=xn(t.session),this.voucherVersion=this.isFinalV2?2:1,this.isFinalV2!==!!t.beforeVoucherRelease)throw new Error(this.isFinalV2?"native_tab_v2_reservation_fence_required":"native_tab_v1_must_not_use_v2_reservation_fence")}get state(){let t=this.internals.totalCapAtomic-this.cumulativeAtomic,r=Math.floor(Date.now()/1e3);return{isOpen:!this.closed,spent:Ve(this.cumulativeAtomic.toString()),remaining:Ve(t.toString()),expiresInSec:Math.max(0,this.internals.expiresAtUnix-r)}}async signNextVoucher(t){this.beginOperation("voucher");try{return await this.signNextVoucherExclusive(t)}finally{this.endOperation("voucher")}}async signNextVoucherExclusive(t){if(this.closed)throw new oe(this.channelId);let r=BigInt(t);if(r<=0n)throw new Error(`voucher increment must be > 0, got ${t}`);if(r>this.internals.perUnitCapAtomic)throw new Te("cap_exceeded",`single voucher increment ${r} exceeds perUnitCap ${this.internals.perUnitCapAtomic}`);let n=this.cumulativeAtomic+r;if(n>this.internals.totalCapAtomic)throw new Te("cap_exceeded",`cumulative ${n} would exceed totalCap ${this.internals.totalCapAtomic}`);let o=this.sequenceNumber+1,a={channelId:this.channelId,cumulativeAmount:n.toString(),sequenceNumber:o},i=await this.internals.vault.signWithSession(this.internals.session,a);if(i.payload.channelId!==a.channelId||i.payload.cumulativeAmount!==a.cumulativeAmount||(this.isFinalV2?(i.payload.sequenceNumber&2147483647)!==o||(i.payload.sequenceNumber&2147483648)===0:i.payload.sequenceNumber!==o))throw new Error("tab_signer_returned_unexpected_voucher");let s;this.internals.beforeVoucherRelease&&(s=await this.internals.beforeVoucherRelease({voucher:i,incrementAtomic:r.toString(),previousCumulativeAtomic:this.cumulativeAtomic.toString()}));let c=s?{...i,reservationReceipt:s}:i;return this.previousSignedVoucher=this.lastSignedVoucher,this.previousSignedVoucherIncrementAtomic=this.lastSignedVoucherIncrementAtomic,this.lastSignedVoucher=c,this.lastSignedVoucherIncrementAtomic=r,this.sequenceNumber=o,this.cumulativeAtomic=n,c}beginOperation(t){if(this.operationInFlight!==null)throw new Error(`tab_operation_in_flight: ${this.operationInFlight}`);this.operationInFlight=t}endOperation(t){if(this.operationInFlight!==t)throw new Error("tab_operation_gate_corrupted");this.operationInFlight=null}rollbackVoucher(t){if(this.isFinalV2||this.operationInFlight!==null)return!1;this.beginOperation("rollback");try{return this.rollbackVoucherExclusive(t)}finally{this.endOperation("rollback")}}rollbackVoucherExclusive(t){let r=this.lastSignedVoucher;if(!r||r.payload.sequenceNumber!==t.payload.sequenceNumber||r.payload.cumulativeAmount!==t.payload.cumulativeAmount)return!1;let n=this.previousSignedVoucher;if(n){let o=this.previousSignedVoucherIncrementAtomic;if(o===null)return!1;this.sequenceNumber=n.payload.sequenceNumber,this.cumulativeAtomic=BigInt(n.payload.cumulativeAmount),this.lastSignedVoucher=n,this.lastSignedVoucherIncrementAtomic=o}else if(r.payload.sequenceNumber===1)this.sequenceNumber=0,this.cumulativeAtomic=this.initialCumulativeAtomic,this.lastSignedVoucher=null,this.lastSignedVoucherIncrementAtomic=null;else return!1;return this.previousSignedVoucher=null,this.previousSignedVoucherIncrementAtomic=null,!0}async stream(t,r){if(this.closed)throw new oe(this.channelId);let n=await this.signNextVoucher(this.internals.perUnitCapAtomic.toString()),o=new Headers(r?.headers);o.set("X-Tab-Voucher",xt(n)),o.set("Accept","text/event-stream");let a=await fetch(t,{...r,headers:o});if(!a.ok){let i=await a.text().catch(()=>"");throw new Error(`tab.stream HTTP ${a.status}: ${i.slice(0,500)}`)}if(!a.body)throw new Error("tab.stream response has no body");return Rr(a.body)}async close(){this.beginOperation("close");try{if(this.closed)throw new oe(this.channelId);let t={settleTx:""};if(this.lastSignedVoucher&&this.cumulativeAtomic>0n){let n=this.isFinalV2?this.lastSignedVoucherIncrementAtomic:this.cumulativeAtomic-this.initialCumulativeAtomic;if(n===null||n<=0n)throw new Error("tab_settle_attempted_amount_missing");t=await Sr(this.internals.facilitatorUrl,this.lastSignedVoucher,this.internals.network,n.toString())}let r=(this.internals.closeMode??"revoke")==="revoke";return r&&await this.internals.vault.signCloseTab(this.internals.session,this.channelId,this.cumulativeAtomic.toString()),this.closed=!0,this.internals.session.privateKey.fill(0),{settledAmount:Ve(this.cumulativeAtomic.toString()),sessionRevoked:r,...t}}finally{this.endOperation("close")}}};function xn(e){return e.registration.length!==188?!1:(new DataView(e.registration.buffer,e.registration.byteOffset,e.registration.byteLength).getUint32(176,!0)&2147483648)!==0}function xt(e,t){let r=t??e.reservationReceipt;if((e.payload.sequenceNumber&2147483648)!==0&&!r)throw new Error("native_tab_v2_reservation_receipt_required");return Buffer.from(JSON.stringify({payload:e.payload,sessionPublicKey:ce(e.sessionPublicKey),sessionRegistration:ce(e.sessionRegistration),sessionSignature:ce(e.sessionSignature),...r?{reservationReceipt:r}:{}}),"utf8").toString("base64")}function Ce(e){return typeof e!="string"||!/^\d+$/.test(e)?null:BigInt(e)}function vr(e){let t;try{t=JSON.parse(e)}catch{return!1}if(typeof t!="object"||t===null)return!1;let r="non_monotonic_cumulative";if(t.error!==r&&t.reason!==r)return!1;let n=Ce(t.attempted_cumulative),o=Ce(t.on_chain_spent),a=Ce(t.frontier);return n===null||o===null||a===null?!1:n>o&&n<=a}async function Sr(e,t,r,n){let o=`${e.replace(/\/$/,"")}/tab/settle`,a={attemptedAmount:n,channelId:t.payload.channelId,cumulativeAmount:t.payload.cumulativeAmount,sequenceNumber:t.payload.sequenceNumber,sessionPublicKey:ce(t.sessionPublicKey),sessionSignature:ce(t.sessionSignature),sessionRegistration:ce(t.sessionRegistration),network:r},i=await fetch(o,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(a)}),s=await i.text();if(!i.ok){if(i.status===409&&vr(s))return{settleTx:""};throw new Error(`tab settle ${i.status}: ${s.slice(0,500)}`)}let c;try{c=JSON.parse(s)}catch{throw new Error(`tab settle returned non-JSON: ${s.slice(0,200)}`)}if(c.reason==="covered_by_frontier"){let d=Ce(c.attemptedCumulative),g=Ce(c.onChainSpent),f=Ce(c.frontier);if(d!==null&&g!==null&&f!==null&&d>g&&d<=f)return{settleTx:""}}if(!c.settleTx)throw new Error(`tab settle returned no settleTx: ${s.slice(0,200)}`);let u={settleTx:c.settleTx};return typeof c.grossAmount=="string"&&(u.grossAmount=c.grossAmount),typeof c.feeAmount=="string"&&(u.feeAmount=c.feeAmount),typeof c.netAmount=="string"&&(u.netAmount=c.netAmount),u}async function wr(e,t,r,n,o){throw new Q("armTabOpen")}async function Qt(e){if(e.network!==e.vault.network)throw new Re(`options.network (${e.network}) doesn't match vault.network (${e.vault.network})`);if(e.network!=="solana:mainnet")throw new Re(e.network);if(e.vault.sessionVoucherVersion!==1&&e.vault.sessionVoucherVersion!==2)throw new Error("native_tab_adapter_voucher_version_required");if(e.vault.sessionVoucherVersion===1)throw new Q("openTab");if(e.vault.sessionVoucherVersion===2&&(!e.reserveFinalVoucherV2||!e.vault.verifyFinalVoucherV2Reservation))throw new Error("native_tab_v2_reservation_fence_required");let t=BigInt(Math.floor(Math.random()*4294967295)),r=new ie(e.vault.vaultPda),n=We({vaultPda:r,sellerUrl:e.seller,nonce:BigInt(t)}),o=ce(n),a=BigInt(ae(e.perUnitCap)),i=BigInt(ae(e.totalCap));if(a<=0n)throw new Error("perUnitCap must be > 0");if(i<a)throw new Error("totalCap must be >= perUnitCap");if(e.revolvingCapacity!==void 0&&BigInt(ae(e.revolvingCapacity))<=0n)throw new Error("revolvingCapacity must be > 0");let s=e.sessionDuration??br,c=Math.floor(Date.now()/1e3)+s,u=xr(e.seller),d={channelId:o,maxAmountAtomic:i.toString(),revolvingCapacityAtomic:e.revolvingCapacity?ae(e.revolvingCapacity):i.toString(),expiresAtUnix:c,allowedCounterparty:u},g=await e.vault.authorizeSession(d,{onLiveSession:e.onLiveSession}),f=xn(g);if(e.vault.sessionVoucherVersion!==(f?2:1))throw new Error("native_tab_adapter_voucher_version_mismatch");let y;if(f){if(!e.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required");let m=g.registration,l=new DataView(m.buffer,m.byteOffset,m.byteLength),v=new ie(m.subarray(32,64)),x=new ie(m.subarray(64,96)),p=new ie(m.subarray(144,176)),h=l.getUint32(176,!0),_=l.getBigUint64(180,!0),S=He({programId:Ie,vaultPda:r,sessionPubkey:g.publicKey,maxAmount:i,expiresAt:BigInt(c),allowedCounterparty:new ie(u),nonce:h,maxRevolvingCapacity:BigInt(d.revolvingCapacityAtomic)});if(!v.equals(Ie)||!x.equals(r)||!p.equals(new ie(u))||_!==BigInt(d.revolvingCapacityAtomic)||!Buffer.from(m).equals(Buffer.from(S)))throw new Error("native_tab_v2_registration_identity_mismatch");let[q]=Ar(x,p,v);y=async({voucher:F,incrementAtomic:P,previousCumulativeAtomic:N})=>{let A=je(F),w={network:e.network,programId:v.toBase58(),buyerSwigAddress:e.vault.swigAddress,vaultPda:x.toBase58(),sessionPda:q.toBase58(),seller:p.toBase58(),channelId:o,sessionNonce:h,reservationAmountAtomic:P,previousCumulativeAtomic:N,...A,voucher:F},R=await e.reserveFinalVoucherV2(w);return se(w,R),await e.vault.verifyFinalVoucherV2Reservation(w,R),R}}return new ze({vault:e.vault,network:e.network,seller:e.seller,counterparty:u,session:g,channelIdHex:o,channelIdBytes:n,perUnitCapAtomic:a,totalCapAtomic:i,expiresAtUnix:c,facilitatorUrl:e.facilitatorUrl??_t,beforeVoucherRelease:y})}async function _r(e){throw new Error("resumeTab is Phase 3 work. Session keys are memory-only by design; recovery requires reading active_session on chain and re-authorizing. Tracked in dexter-vault roadmap.")}function xr(e){if(/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(e))try{return new ie(e),e}catch{}throw new Error(`seller must be a base58 Solana pubkey for Phase 2 (got "${e}"). URL-based counterparty resolution lands in Phase 3 (seller middleware).`)}async function*Rr(e){let t=e.getReader(),r=new TextDecoder,n="";try{for(;;){let{done:o,value:a}=await t.read();if(o)break;n+=r.decode(a,{stream:!0});let i;for(;(i=n.indexOf(`
 
-`))!==-1;){let a=n.slice(0,s);n=n.slice(s+2);let c=yr(a);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(d,p)=>p==="n"?`
-`:"\\");yield new TextEncoder().encode(u)}}}}finally{e.releaseLock()}}function yr(t){let e=null,r=[];for(let n of t.split(`
-`))n.startsWith("event:")?e=n.slice(6).trim():n.startsWith("data:")&&r.push(n.slice(5).trimStart());return{eventName:e,data:r.length?r.join(`
-`):null}}import Ge from"tweetnacl";import{Connection as Ur,PublicKey as je}from"@solana/web3.js";import{bytesToHex as Dr}from"@noble/hashes/utils";import{deriveSessionPda as Mr,fetchSessionAccount as Kr,isSessionLive as Fr}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Lr}from"@dexterai/vault/messages";import{readVaultFull as $r}from"@dexterai/vault/reader";import{PublicKey as Q}from"@solana/web3.js";import{bytesToHex as Jt}from"@noble/hashes/utils";import{deriveGraphConfigPda as Ar,deriveSwigVaultBindingPda as Yt}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as br,DISCRIMINATORS as vr,isSwigVaultBindingIdentityVersion as bn}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as Sr}from"@dexterai/vault/instructions";import{decodeVaultFull as wr}from"@dexterai/vault/reader";import{decodeSessionAccount as _r,deriveSessionPda as Qt}from"@dexterai/vault/session";var xr=Uint8Array.from([56,67,4,209,238,143,0,129]),Rr=74,Tr=188,Er=new Q("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),Pr=(()=>{let t=Buffer.alloc(32);return t.write("OTS_SESSION_REGISTER_V2","ascii"),t})(),Xt=class extends Error{constructor(r,n){super(`native_tab_v2_solana_reservation_invalid:${r}`+(n?`:${n}`:""));this.code=r;this.name="SolanaFinalVoucherV2ReservationError"}code};function A(t,e){throw new Xt(t,e)}function L(t,e){try{return new Q(t)}catch{return A(e)}}function wt(t,e){return t.length===e.length&&t.every((r,n)=>r===e[n])}async function Ir(t){let r=(await t.connection.getSignatureStatuses([t.signature],{searchTransactionHistory:!0})).value[0]??null;if(!r)return null;r.confirmationStatus!=="confirmed"&&r.confirmationStatus!=="finalized"&&A("transaction_commitment"),r.err!==null&&A("transaction_failed");let n=await t.connection.getTransaction(t.signature,{commitment:t.commitment,maxSupportedTransactionVersion:0});if(!n)return null;n.meta||A("transaction_meta_missing"),n.slot!==r.slot&&A("transaction_status_slot");let o=n.transaction.message,i=o.version===0?o.getAccountKeys({accountKeysFromLookups:n.meta.loadedAddresses??null}):o.getAccountKeys(),s=(a,c)=>{let u=i.get(a);return u||A(c),u};return{slot:n.slot,confirmationStatus:r.confirmationStatus,err:n.meta.err,signatures:[...n.transaction.signatures],accountKeys:Array.from({length:i.length},(a,c)=>({address:s(c,"transaction_account_key").toBase58(),signer:o.isAccountSigner(c),writable:o.isAccountWritable(c)})),instructions:o.compiledInstructions.map(a=>({programId:s(a.programIdIndex,"transaction_program_id").toBase58(),accounts:a.accountKeyIndexes.map(c=>s(c,"transaction_instruction_account").toBase58()),data:Uint8Array.from(a.data)}))}}function Vr(t,e,r,n){n.length!==Rr&&A("binding_length"),wt(n.subarray(0,8),xr)||A("binding_discriminator");let o=n.readUInt8(8),i=n.readUInt8(9);return bn(o)||A("binding_version"),i!==e&&A("binding_bump"),{address:t.toBase58(),owner:r.toBase58(),version:o,bump:i,swig:new Q(n.subarray(10,42)).toBase58(),vault:new Q(n.subarray(42,74)).toBase58()}}async function Cr(t){let e=L(t.input.programId,"program_id"),r=L(t.input.buyerSwigAddress,"buyer_swig"),n=L(t.input.vaultPda,"vault_pda"),o=L(t.input.seller,"seller"),[i,s]=Yt(r,e),[a]=Qt(n,o,e),c=await t.connection.getMultipleAccountsInfoAndContext([i,n,a],{commitment:t.commitment,minContextSlot:t.minimumSlot}),[u,d,p]=c.value;u||A("binding_missing"),d||A("vault_missing"),p||A("session_missing");let f,b;try{f=wr(Buffer.from(d.data)),b=_r(a,p.data)}catch(m){return A("post_state_decode",m instanceof Error?m.message:String(m))}let l=b.session;return{contextSlot:c.context.slot,binding:Vr(i,s,u.owner,Buffer.from(u.data)),vault:{owner:d.owner.toBase58(),exists:f.exists,version:f.version,swigAddress:f.swigAddress,dexterAuthority:f.dexterAuthority,pendingVoucherCount:f.pendingVoucherCount},session:{owner:p.owner.toBase58(),version:b.version,bump:b.bump,vault:b.vault,sessionPublicKey:Jt(l.sessionPubkey),maxAmount:l.maxAmount,expiresAt:l.expiresAt,seller:l.allowedCounterparty,nonce:l.nonce,spent:l.spent,currentOutstanding:l.currentOutstanding,maxRevolvingCapacity:l.maxRevolvingCapacity,crystallizedCumulative:l.crystallizedCumulative}}}function Nr(t){let e=Buffer.from(t.voucher.sessionRegistration);return e.length!==Tr&&A("registration_length"),wt(e.subarray(0,32),Pr)||A("registration_domain"),{programId:new Q(e.subarray(32,64)).toBase58(),vaultPda:new Q(e.subarray(64,96)).toBase58(),sessionPublicKey:Jt(e.subarray(96,128)),maxAmount:e.readBigUInt64LE(128),expiresAt:e.readBigInt64LE(136),seller:new Q(e.subarray(144,176)).toBase58(),nonce:e.readUInt32LE(176),maxRevolvingCapacity:e.readBigUInt64LE(180)}}function Ce(t,e,r){let n=t.accountKeys.filter(o=>o.address===e);return n.length!==1&&A(`${r}_account_key`),n[0]}function kr(t,e,r){(!Number.isSafeInteger(r.slot)||r.slot<=0)&&A("transaction_slot"),r.slot!==e.confirmationSlot&&A("transaction_confirmation_slot"),r.err!==null&&A("transaction_failed"),r.signatures[0]!==e.transaction&&A("transaction_signature"),r.instructions.length!==2&&A("transaction_instruction_count");let n=L(t.programId,"program_id"),o=L(t.buyerSwigAddress,"buyer_swig"),i=L(t.vaultPda,"vault_pda"),s=L(t.seller,"seller"),a=L(t.sessionPda,"session_pda"),[c]=Qt(i,s,n),u=Yt(o,n)[0],d=Sr(o),p=Ar(n)[0];a.equals(c)||A("session_pda_derivation");let f=Buffer.from(vr.settle_voucher),b=r.instructions.filter(E=>{if(E.programId!==t.programId)return!1;let N=E.data;return N.length>=f.length&&wt(N.subarray(0,f.length),f)});b.length!==1&&A("settle_voucher_instruction_count");let l=b[0];r.instructions[0]!==l&&A("settle_voucher_instruction_order");let m=Buffer.from(l.data);m.length!==49&&A("settle_voucher_instruction_length"),m.readBigUInt64LE(8).toString()!==t.reservationAmountAtomic&&A("settle_voucher_amount"),m.readUInt8(16)!==1&&A("settle_voucher_increment"),new Q(m.subarray(17,49)).equals(s)||A("settle_voucher_seller"),l.accounts.length<8&&A("settle_voucher_accounts"),[i.toBase58(),null,a.toBase58(),null,o.toBase58(),d.toBase58(),u.toBase58(),p.toBase58()].forEach((E,N)=>{E!==null&&l.accounts[N]!==E&&A(`settle_voucher_account_${N}`)});let T=l.accounts[1];T||A("dexter_authority");let g=Ce(r,l.accounts[0],"vault"),h=Ce(r,T,"dexter_authority"),_=Ce(r,l.accounts[2],"session");(!g.writable||g.signer)&&A("vault_privileges"),h.signer||A("dexter_authority_signature"),(!_.writable||_.signer)&&A("session_privileges");for(let E=3;E<Math.min(l.accounts.length,8);E+=1)Ce(r,l.accounts[E],`account_${E}`).signer&&A(`settle_voucher_account_${E}_signer`);for(let E=8;E<l.accounts.length;E+=1){let N=Ce(r,l.accounts[E],`sibling_${E-8}`);(!N.writable||N.signer)&&A("settle_voucher_sibling_privileges")}let I=r.instructions[1];I.programId!==Er.toBase58()&&A("reservation_memo_program"),(I.accounts.length!==1||I.accounts[0]!==T)&&A("reservation_memo_authority"),Ce(r,T,"reservation_memo_authority").signer||A("reservation_memo_authority_signature");let K=new TextEncoder().encode(Gt(t));return wt(I.data,K)||A("reservation_memo_digest"),T}function Or(t,e,r,n){let o=L(t.programId,"program_id"),i=L(t.buyerSwigAddress,"buyer_swig"),s=L(t.vaultPda,"vault_pda"),a=L(t.seller,"seller"),[c,u]=Yt(i,o),[d,p]=Qt(s,a,o);(!Number.isSafeInteger(n.contextSlot)||n.contextSlot<e)&&A("post_state_slot"),(n.binding.address!==c.toBase58()||n.binding.owner!==t.programId||n.binding.bump!==u||!bn(n.binding.version)||n.binding.swig!==t.buyerSwigAddress||n.binding.vault!==t.vaultPda)&&A("binding_identity"),(n.vault.owner!==t.programId||!n.vault.exists||n.vault.version!==7||n.vault.swigAddress!==t.buyerSwigAddress||n.vault.dexterAuthority!==r)&&A("vault_post_state"),(t.sessionPda!==d.toBase58()||n.session.owner!==t.programId||n.session.version!==1||n.session.bump!==p||n.session.vault!==t.vaultPda||n.session.sessionPublicKey!==Jt(t.voucher.sessionPublicKey)||n.session.seller!==t.seller||n.session.nonce!==t.sessionNonce||n.session.currentOutstanding.toString()!==t.reservationAmountAtomic)&&A("session_post_state");let f=Nr(t);(f.programId!==t.programId||f.vaultPda!==t.vaultPda||f.sessionPublicKey!==n.session.sessionPublicKey||f.seller!==t.seller||f.nonce!==t.sessionNonce||f.maxAmount!==n.session.maxAmount||f.expiresAt!==BigInt(n.session.expiresAt)||f.maxRevolvingCapacity!==n.session.maxRevolvingCapacity)&&A("registration_post_state");let b=n.session.spent>n.session.crystallizedCumulative?n.session.spent:n.session.crystallizedCumulative;return b.toString()!==t.previousCumulativeAtomic&&A("session_frontier"),{commitment:"confirmed",confirmationSlot:e,postStateSlot:n.contextSlot,sessionAccountVersion:n.session.version,wireVersion:2,frontierAtomic:b.toString(),spentAtomic:n.session.spent.toString(),currentOutstandingAtomic:n.session.currentOutstanding.toString(),crystallizedCumulativeAtomic:n.session.crystallizedCumulative.toString()}}async function Br(t,e,r,n={}){try{oe(e,r)}catch(a){return A("provider_receipt",a instanceof Error?a.message:String(a))}e.network!=="solana:mainnet"&&A("network"),e.programId!==br.toBase58()&&A("program_id");let o=await(n.readTransaction??Ir)({connection:t,signature:r.transaction,commitment:"confirmed"});o||A("transaction_missing"),o.confirmationStatus!=="confirmed"&&o.confirmationStatus!=="finalized"&&A("transaction_commitment");let i=kr(e,r,o),s=await(n.readPostState??Cr)({connection:t,input:e,minimumSlot:o.slot,commitment:"confirmed"});return{...Or(e,o.slot,i,s),commitment:o.confirmationStatus}}async function vn(t,e,r,n={}){await Br(t,e,r,n)}var Zt="solana:mainnet";async function qr(t){let e=t.facilitatorUrl??vt,r=t.programId??Pe,n=new je(t.vaultPda),o=new je(t.params.counterparty),i=Te(t.perUnitCapAtomic);if(i<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${t.perUnitCapAtomic}`);let s=Te(t.params.maxAmountAtomic),a=Te(t.params.maxRevolvingCapacityAtomic),c=(t.params.nonce&2147483648)!==0;if(!c)throw new Y("tabFromGrant");if(c&&!t.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let u=Wr(t.sessionSecretKey),d=new je(t.params.sessionPubkey).toBytes();if(!Sn(u.publicKey,d))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new je(u.publicKey).toBase58()} but params.sessionPubkey is ${t.params.sessionPubkey} \u2014 wrong key handed to this process`);let p=Ge.randomBytes(32),f=Ge.sign.detached(p,u.secretKey);if(!Ge.sign.detached.verify(p,f,d))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let b=$e({programId:r,vaultPda:n,sessionPubkey:u.publicKey,maxAmount:s,expiresAt:BigInt(t.params.expiresAtUnix),allowedCounterparty:o,nonce:t.params.nonce,maxRevolvingCapacity:a}),l=typeof t.connection=="string"?new Ur(t.connection,"confirmed"):t.connection,m=await Kr(l,n,o,r);if(!m||m.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Fr(m))throw new Error(m.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${m.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${m.session.expiresAt})`);if(!Sn(m.session.sessionPubkey,u.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new je(m.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(m.vault!==n.toBase58()||m.session.allowedCounterparty!==o.toBase58()||m.session.maxAmount!==s||m.session.expiresAt!==t.params.expiresAtUnix||m.session.nonce!==t.params.nonce||m.session.maxRevolvingCapacity!==a)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${m.session.maxAmount} expiresAt=${m.session.expiresAt} nonce=${m.session.nonce} revolving=${m.session.maxRevolvingCapacity}; params: ${t.params.maxAmountAtomic}/${t.params.expiresAtUnix}/${t.params.nonce}/${t.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&m.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${m.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let R=m.session.spent>m.session.crystallizedCumulative?m.session.spent:m.session.crystallizedCumulative;if(R>=s)throw new Error(`tab_exhausted: on-chain frontier ${R} has consumed the session cap ${s} \u2014 no voucher can strictly exceed it; open a new grant`);let T=t.sellerUrl??t.params.counterparty,g=BigInt(Math.floor(Math.random()*4294967295)),h=qe({vaultPda:n,sellerUrl:T,nonce:g}),_=Dr(h),I=t.swigAddress;if(!I){let y=await $r(l,n);if(!y.exists||!y.swigAddress)throw new Error(`tab_vault_unreadable: vault ${n.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);I=y.swigAddress}let $={channelId:_,maxAmountAtomic:t.params.maxAmountAtomic,revolvingCapacityAtomic:t.params.maxRevolvingCapacityAtomic,expiresAtUnix:t.params.expiresAtUnix,allowedCounterparty:t.params.counterparty},K=Lt({publicKey:u.publicKey,privateKey:u.secretKey},$,b),[E]=Mr(n,o,r),N={network:Zt,swigAddress:I,vaultPda:n.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(y,v)=>{if(!c)return $t(y,v,h);let S=qt({programId:r.toBase58(),vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),sessionNonce:t.params.nonce,channelId:v.channelId,cumulativeAmountAtomic:v.cumulativeAmount,sequenceOrdinal:v.sequenceNumber,sessionPrivateKey:y.privateKey,sessionPublicKey:y.publicKey,sessionRegistration:y.registration});return{payload:{channelId:S.channelId,cumulativeAmount:S.cumulativeAmount,sequenceNumber:S.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(S.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(S.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(S.sessionRegistration,"hex"))}},signOpenTab:async y=>y.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(y,v)=>vn(l,y,v):void 0};return new He({vault:N,network:Zt,seller:T,counterparty:t.params.counterparty,session:K,channelIdHex:_,channelIdBytes:h,perUnitCapAtomic:i,totalCapAtomic:s,expiresAtUnix:t.params.expiresAtUnix,facilitatorUrl:e,initialCumulativeAtomic:R,initialSequenceOrdinal:c&&m.session.lastLockedSequence!==0?Lr(m.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:y,incrementAtomic:v,previousCumulativeAtomic:S})=>{let x=We(y),C={network:Zt,programId:r.toBase58(),buyerSwigAddress:I,vaultPda:n.toBase58(),sessionPda:E.toBase58(),seller:o.toBase58(),channelId:_,sessionNonce:t.params.nonce,reservationAmountAtomic:v,previousCumulativeAtomic:S,...x,voucher:y},V=await t.reserveFinalVoucherV2(C);return oe(C,V),await N.verifyFinalVoucherV2Reservation(C,V),V}:void 0,closeMode:"settle-only"})}function Wr(t){if(t.length===64)return Ge.sign.keyPair.fromSecretKey(t);if(t.length===32)return Ge.sign.keyPair.fromSeed(t);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${t.length} bytes`)}function Sn(t,e){if(t.length!==e.length)return!1;let r=0;for(let n=0;n<t.length;n++)r|=t[n]^e[n];return r===0}import{PublicKey as zr}from"@solana/web3.js";var wn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],Hr=new Map(wn.map(t=>[t.caip2.toLowerCase(),t])),jr=new Map(wn.map(t=>[t.bare.toLowerCase(),t]));function ce(t){if(!t)return null;let e=t.toLowerCase(),r=Hr.get(e)||jr.get(e);return r?{caip2:r.caip2,bare:r.bare,family:r.family}:null}function en(t){let e=t.replace(/-/g,"+").replace(/_/g,"/"),r=e+"=".repeat((4-(e.length%4||4))%4);return JSON.parse(Buffer.from(r,"base64").toString("utf8"))}function Gr(t){let e=[];for(let r of t){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&e.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.amount??n.maxAmountRequired??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return e}async function _t(t){let e=t.headers.get("payment-required");if(!e)return null;let r;try{r=en(e)}catch{return null}let n=Array.isArray(r.accepts)?r.accepts:[];return n.length===0?null:{x402Version:2,options:Gr(n),extensions:r.extensions&&typeof r.extensions=="object"&&!Array.isArray(r.extensions)?r.extensions:void 0,resourceUrl:r.resource&&typeof r.resource=="object"?String(r.resource.url??""):void 0}}async function ze(t,e={},r=fetch){let n={method:e.method??"GET",headers:e.headers};typeof e.body=="string"&&(n.body=e.body);let o;try{o=await r(t,n)}catch(a){return{kind:"error",detail:`probe failed: ${a?.message??String(a)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let i=await _t(o);if(!i)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let s=i.options.find(a=>a.scheme==="tab"&&a.network.family==="svm");if(!s)return{kind:"no_tab",schemesOffered:i.options.map(a=>a.scheme)};try{new zr(s.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${s.payTo}"`}}return{kind:"offer",offer:{payTo:s.payTo,amountAtomic:s.amount,asset:s.asset,networkCaip2:s.network.caip2,...typeof s.extra?.voucherHeader=="string"?{voucherHeader:s.extra.voucherHeader}:{},...typeof s.extra?.registrationEncoding=="string"?{registrationEncoding:s.extra.registrationEncoding}:{},...typeof s.extra?.termsVersion=="string"?{termsVersion:s.extra.termsVersion}:{},...typeof s.extra?.acceptanceRule=="string"?{acceptanceRule:s.extra.acceptanceRule}:{},resourceUrl:i.resourceUrl}}}var Xr="dexter-tab-hosted-pay-before-delivery/v1",Jr="pay_before_delivery_seller_2xx",Yr="x-tab-voucher",Qr="base64(188-byte sessionRegisterMessage)";var Xe="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",xt="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",Rt="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",ue=Xe,Je=xt,Ye=Rt,le="eip155:8453",Ne="eip155:84532",ke="eip155:42161",Oe="eip155:137",Be="eip155:10",Ue="eip155:43114",De="eip155:56",me="eip155:480",de="eip155:143",pe="eip155:4663",fe="eip155:1187947933",ge="eip155:324705682",Me="eip155:1",he=le,Tt=Ne,Qe=ke,Ze=Oe,et=Be,tt=Ue,nt=De,rt=me,ot=de,st=pe,it=fe,at=ge,ct=Me,ut="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",_n="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",xn="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",tn="0x55d398326f99059fF775485246999027B3197955",Et="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",nn="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Pt={[De]:Et,[le]:xn,[Ne]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[ke]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[Oe]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Be]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[Ue]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[me]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[de]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[pe]:nn,[fe]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[ge]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Me]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},It={[tn]:{symbol:"USDT",decimals:18},[Et]:{symbol:"USDC",decimals:18}};var Vt={[me]:{name:"USDC",version:"2"},[de]:{name:"USDC",version:"2"},[pe]:{name:"Global Dollar",version:"1"},[fe]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[ge]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},Z="0x000000000022D473030F116dDEE9F6B43aC78BA3",lt="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",mt={[De]:56,[le]:8453,[Ne]:84532,[ke]:42161,[Oe]:137,[Be]:10,[Ue]:43114,[me]:480,[de]:143,[pe]:4663,[fe]:1187947933,[ge]:324705682,[Me]:1},ye={[Xe]:"https://api.dexter.cash/api/solana/rpc",[xt]:"https://api.devnet.solana.com",[Rt]:"https://api.testnet.solana.com"},D={[De]:"https://api.dexter.cash/api/evm/bsc/rpc",[le]:"https://api.dexter.cash/api/base/rpc",[Ne]:"https://sepolia.base.org",[ke]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[Oe]:"https://api.dexter.cash/api/evm/polygon/rpc",[Be]:"https://api.dexter.cash/api/evm/optimism/rpc",[Ue]:"https://api.dexter.cash/api/evm/avalanche/rpc",[me]:"https://worldchain-mainnet.g.alchemy.com/public",[de]:"https://rpc.monad.xyz",[pe]:"https://rpc.mainnet.chain.robinhood.com",[fe]:"https://skale-base.skalenodes.com/v1/base",[ge]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Me]:"https://eth.llamarpc.com"};var O=class t extends Error{code;details;constructor(e,r,n){super(r),this.name="X402Error",this.code=e,this.details=n,Object.setPrototypeOf(this,t.prototype)}};function j(t,e){let r=t.scheme??"exact";if(r!=="exact"&&!(e==="evm"&&r==="exact-approval"))return`Unsupported payment scheme: ${r}`;let n=t.extra?.paymentFlow;if(n!==void 0&&n!=="authorization")return`Unsupported payment flow: ${String(n)}`;let o=t.extra?.assetTransferMethod;if(o!==void 0&&(typeof o!="string"||!(r==="exact-approval"?[]:e==="evm"?["eip3009","permit2"]:["default"]).includes(o)))return`Unsupported payment asset transfer method: ${String(o)}`}function dt(t){let e=t?.["payment-identifier"];if(!e||typeof e!="object"||Array.isArray(e))return!1;let r=e.info;return!!r&&typeof r=="object"&&!Array.isArray(r)&&r.required===!0}import{PublicKey as Ae,Connection as rn,TransactionMessage as Zr,VersionedTransaction as eo,ComputeBudgetProgram as Rn}from"@solana/web3.js";import{getAssociatedTokenAddress as on,getAccount as to,createTransferCheckedInstruction as no,getMint as ro,TOKEN_PROGRAM_ID as Tn,TOKEN_2022_PROGRAM_ID as Ct}from"@solana/spl-token";var oo=12e3,so=1;function be(t){if(!t||typeof t!="object")return!1;let e=t;return"publicKey"in e&&"signTransaction"in e&&typeof e.signTransaction=="function"}var Nt=class{name="Solana";networks=[ue,Je,Ye];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="solana"||e==="solana-devnet"||e==="solana-testnet"||e.startsWith("solana:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:ye[e]?ye[e]:e==="solana"?ye[ue]:e==="solana-devnet"?ye[Je]:e==="solana-testnet"?ye[Ye]:ye[ue]}getAddress(e){return be(e)?e.publicKey?.toBase58()??null:null}isConnected(e){return be(e)?e.publicKey!==null:!1}async getBalance(e,r,n){if(!be(r)||!r.publicKey)return 0;let o=n||this.getDefaultRpcUrl(e.network),i=new rn(o,"confirmed"),s=new Ae(r.publicKey.toBase58()),a=new Ae(e.asset);try{let u=(await i.getAccountInfo(a,"confirmed"))?.owner.toBase58()===Ct.toBase58()?Ct:Tn,d=await on(a,s,!1,u),p=await to(i,d,void 0,u),f=e.extra?.decimals??6;return Number(p.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(e,r,n){let o=j(e,"svm");if(o)throw new Error(o);if(!be(r))throw new Error("Invalid Solana wallet");if(!r.publicKey)throw new Error("Wallet not connected");let i=n||this.getDefaultRpcUrl(e.network),s=new rn(i,"confirmed"),a=new Ae(r.publicKey.toBase58()),{payTo:c,asset:u,extra:d}=e,p=e.amount??e.maxAmountRequired;if(!p)throw new Error("Missing amount in payment requirements");if(!d?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new Ae(d.feePayer),b=new Ae(u),l=new Ae(c);this.log("Building transaction:",{from:a.toBase58(),to:c,amount:p,asset:u,feePayer:d.feePayer});let m=[];m.push(Rn.setComputeUnitLimit({units:oo})),m.push(Rn.setComputeUnitPrice({microLamports:so}));let R=await s.getAccountInfo(b,"confirmed");if(!R)throw new Error(`Token mint ${u} not found`);let T=R.owner.toBase58()===Ct.toBase58()?Ct:Tn,g=await ro(s,b,void 0,T);typeof d?.decimals=="number"&&g.decimals!==d.decimals&&this.log(`Decimals mismatch: requirements say ${d.decimals}, mint says ${g.decimals}`);let h=await on(b,a,!1,T),_=await on(b,l,!0,T);if(!await s.getAccountInfo(h,"confirmed"))throw new Error(`No token account found for ${u}. Please ensure you have USDC in your wallet.`);if(!await s.getAccountInfo(_,"confirmed"))throw new Error(`Seller token account not found. The seller (${c}) must have a USDC account.`);let K=BigInt(p);m.push(no(h,b,_,a,K,g.decimals,[],T));let{blockhash:E}=await s.getLatestBlockhash("confirmed"),N=new Zr({payerKey:f,recentBlockhash:E,instructions:m}).compileToV0Message(),y=new eo(N),v=await r.signTransaction(y);return this.log("Transaction signed successfully"),{serialized:Buffer.from(v.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:h.toBase58(),destinationAta:_.toBase58(),asset:u,amount:p,blockhash:E}}}async confirmSettlement(e,r){if(e.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`);let n=new rn(r,"confirmed"),o=new Ae(e.destinationAta),i=await n.getSignaturesForAddress(o,{limit:25});if(i.length===0)return{settled:!1};let s=BigInt(e.amount);for(let a of i){if(a.err)continue;let c=await n.getTransaction(a.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),d=c.meta.preTokenBalances??[],p=c.meta.postTokenBalances??[];for(let f of p){if(f.mint!==e.asset)continue;let b=u[f.accountIndex];if(!b||!b.equals(o))continue;let l=d.find(T=>T.accountIndex===f.accountIndex),m=BigInt(l?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-m===s)return{settled:!0,txSignature:a.signature}}}return{settled:!1}}};function ee(t){return new Nt(t)}var io={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},En=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function ve(t){if(!t||typeof t!="object")return!1;let e=t;return"address"in e&&typeof e.address=="string"&&e.address.startsWith("0x")}var kt=class{name="EVM";networks=[nt,he,Tt,ct,Qe,Ze,et,tt,rt,ot,st,it,at];config;log;constructor(e={}){this.config=e,this.log=e.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(e){return!!(this.networks.includes(e)||e==="base"||e==="bsc"||e==="ethereum"||e==="arbitrum"||e==="polygon"||e==="optimism"||e==="avalanche"||e==="world"||e==="monad"||e==="robinhood"||e==="skale-base"||e==="skale-base-sepolia"||e.startsWith("eip155:"))}getDefaultRpcUrl(e){return this.config.rpcUrls?.[e]?this.config.rpcUrls[e]:D[e]?D[e]:e==="base"?D[he]:e==="bsc"?D[nt]:e==="ethereum"?D[ct]:e==="arbitrum"?D[Qe]:e==="polygon"?D[Ze]:e==="optimism"?D[et]:e==="avalanche"?D[tt]:e==="world"?D[rt]:e==="monad"?D[ot]:e==="robinhood"?D[st]:e==="skale-base"?D[it]:e==="skale-base-sepolia"?D[at]:D[he]}getAddress(e){return ve(e)?e.address:null}isConnected(e){return ve(e)?!!e.address:!1}getChainId(e){if(mt[e])return mt[e];if(e.startsWith("eip155:")){let r=e.split(":")[1];return parseInt(r,10)}return e==="base"?8453:e==="bsc"?56:e==="ethereum"?1:e==="arbitrum"?42161:e==="polygon"?137:e==="optimism"?10:e==="avalanche"?43114:e==="world"?480:e==="monad"?143:e==="robinhood"?4663:e==="skale-base"?1187947933:e==="skale-base-sepolia"?324705682:8453}async getBalance(e,r,n){if(!ve(r)||!r.address)return 0;let o=n||this.getDefaultRpcUrl(e.network);try{let i=this.encodeBalanceOf(r.address),s=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:e.asset,data:i},"latest"]})});if(!s.ok)throw new Error(`RPC request failed: ${s.status}`);let a=await s.json();if(a.error)throw new Error(`RPC error: ${JSON.stringify(a.error)}`);if(!a.result||a.result==="0x")return 0;let c=BigInt(a.result),u=e.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(i){throw i}}encodeBalanceOf(e){let r="0x70a08231",n=e.slice(2).toLowerCase().padStart(64,"0");return r+n}async confirmSettlement(e,r){if(e.kind==="eip3009"){let n="0xe94a0102",o=e.from.slice(2).toLowerCase().padStart(64,"0"),i=e.nonce.slice(2).toLowerCase().padStart(64,"0"),s=n+o+i,a=await this.ethCall(r,e.asset,s);return{settled:BigInt(a)!==0n}}if(e.kind==="permit2"){let n="0x4fe02b44",o=BigInt(e.nonce),i=o>>8n,s=o&0xffn,a=e.from.slice(2).toLowerCase().padStart(64,"0"),c=i.toString(16).padStart(64,"0"),u=n+a+c,d=await this.ethCall(r,Z,u);return{settled:(BigInt(d)>>s&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${e.kind}"`)}async ethCall(e,r,n){let o=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:n},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let i=await o.json();if(i.error)throw new Error(`RPC error: ${JSON.stringify(i.error)}`);if(!i.result||i.result==="0x")throw new Error("RPC returned an empty result");return i.result}async buildTransaction(e,r,n){let o=j(e,"evm");if(o)throw new Error(o);if(!ve(r))throw new Error("Invalid EVM wallet");if(!r.address)throw new Error("Wallet not connected");if(e.scheme==="exact-approval")return this.buildApprovalTransaction(e,r,n);if(e.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(e,r,n);let{payTo:i,asset:s,extra:a}=e,c=e.amount??e.maxAmountRequired;if(!c)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:r.address,to:i,amount:c,asset:s,network:e.network});let u=this.getChainId(e.network),d=Vt[`eip155:${u}`],p={name:a?.name??d?.name??"USD Coin",version:a?.version??d?.version??"2",chainId:BigInt(u),verifyingContract:s},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},b=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l="0x"+[...b].map(_=>_.toString(16).padStart(2,"0")).join(""),m=Math.floor(Date.now()/1e3),R={from:r.address,to:i,value:c,validAfter:String(m-600),validBefore:String(m+(e.maxTimeoutSeconds||60)),nonce:l},T={from:r.address,to:i,value:BigInt(c),validAfter:BigInt(m-600),validBefore:BigInt(m+(e.maxTimeoutSeconds||60)),nonce:l};if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let g=await r.signTypedData({domain:p,types:f,primaryType:"TransferWithAuthorization",message:T});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:R,signature:g}),signature:g,settlementProbe:{kind:"eip3009",from:r.address,nonce:l,asset:s,chainId:u}}}async buildApprovalTransaction(e,r,n){let{payTo:o,asset:i,extra:s}=e,a=e.amount??e.maxAmountRequired;if(!a)throw new Error("Missing amount in payment requirements");let c=s?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:r.address,to:o,amount:a,asset:i,network:e.network,facilitatorContract:c});let u=n||this.getDefaultRpcUrl(e.network),d=s?.fee??"0",p=BigInt(a)+BigInt(d),f=await this.readAllowance(u,i,r.address,c);if(f<p){if(!r.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let N=this.calculateApprovalAmount(a,d,s?.approvalStrategy);this.log(`Approving ${N} for ${c} (current allowance: ${f})`);let y=await r.sendTransaction({to:i,data:this.encodeApprove(c,N),value:0n});this.log(`Approval tx sent: ${y}`),await this.waitForReceipt(u,y),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let b=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(b);let l=[...b].reduce((N,y)=>N*256n+BigInt(y),0n).toString(),m=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(m);let R="0x"+[...m].map(N=>N.toString(16).padStart(2,"0")).join(""),g=Math.floor(Date.now()/1e3)+(e.maxTimeoutSeconds||300),h=s?.eip712Domain,_=h?{name:h.name,version:h.version,chainId:BigInt(h.chainId),verifyingContract:h.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(e.network)),verifyingContract:c},I=s?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},$={from:r.address,to:o,token:i,amount:BigInt(a),fee:BigInt(d),nonce:BigInt(l),deadline:BigInt(g),paymentId:R},K=await r.signTypedData({domain:_,types:I,primaryType:"Payment",message:$});this.log("EIP-712 Payment signature obtained");let E={from:r.address,to:o,token:i,amount:a,fee:d,nonce:l,deadline:g,paymentId:R,signature:K};return{serialized:JSON.stringify(E),signature:K}}async buildPermit2Transaction(e,r,n){let{payTo:o,asset:i}=e,s=e.amount??e.maxAmountRequired;if(!s)throw new Error("Missing amount in payment requirements");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:r.address,to:o,amount:s,asset:i,network:e.network});let a=n||this.getDefaultRpcUrl(e.network),c=await this.readAllowance(a,i,r.address,Z),u;if(c<BigInt(s)){let _=this.encodeApprove(Z,En);if(r.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let I=this.getChainId(e.network),$=await this.readGasPrice(a),K=await this.readNonce(a,r.address),E=await r.signTransaction({to:i,data:_,chainId:I,gas:50000n,gasPrice:$,nonce:K});u={erc20ApprovalGasSponsoring:{info:{from:r.address,asset:i,spender:Z,amount:En.toString(),signedTransaction:E,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(r.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let I=await r.sendTransaction({to:i,data:_,value:0n});this.log(`Permit2 approval tx sent: ${I}`),await this.waitForReceipt(a,I),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let p=[...d].reduce((_,I)=>_*256n+BigInt(I),0n),f=Math.floor(Date.now()/1e3),b=f-600,l=f+(e.maxTimeoutSeconds||300),m=this.getChainId(e.network),R={name:"Permit2",chainId:BigInt(m),verifyingContract:Z},T={permitted:{token:i,amount:BigInt(s)},spender:lt,nonce:p,deadline:BigInt(l),witness:{to:o,validAfter:BigInt(b)}},g=await r.signTypedData({domain:R,types:io,primaryType:"PermitWitnessTransferFrom",message:T});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let h={signature:g,permit2Authorization:{from:r.address,permitted:{token:i,amount:s},spender:lt,nonce:p.toString(),deadline:String(l),witness:{to:o,validAfter:String(b)}}};return{serialized:JSON.stringify(h),signature:g,extensions:u,settlementProbe:{kind:"permit2",from:r.address,nonce:p.toString(),chainId:m}}}async readAllowance(e,r,n,o){let i="0xdd62ed3e",s=n.slice(2).toLowerCase().padStart(64,"0"),a=o.slice(2).toLowerCase().padStart(64,"0"),c=i+s+a;try{let d=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:c},"latest"]})})).json();return d.error||!d.result||d.result==="0x"?0n:BigInt(d.result)}catch{return 0n}}encodeApprove(e,r){let n="0x095ea7b3",o=e.slice(2).toLowerCase().padStart(64,"0"),i=r.toString(16).padStart(64,"0");return n+o+i}async waitForReceipt(e,r,n=3e4){let o=Date.now();for(;Date.now()-o<n;){try{let s=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[r]})})).json();if(s.result){if(s.result.status==="0x0")throw new Error(`Approval transaction reverted: ${r}`);return}}catch(i){if(i instanceof Error&&i.message.includes("reverted"))throw i}await new Promise(i=>setTimeout(i,2e3))}throw new Error(`Approval transaction receipt timeout after ${n}ms: ${r}`)}async readGasPrice(e){try{let n=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return n.result?BigInt(n.result):50000000n}catch{return 50000000n}}async readNonce(e,r){try{let o=await(await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[r,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(e,r,n){let o=BigInt(e)+BigInt(r);if(!n||n.mode==="exact")return o;let i=BigInt(n.defaultMultiple??10),s=o*i;if(n.maxCapUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(n.maxCapUsd*Math.pow(10,a)));if(s>c)return c}if(n.exactAboveUsd){let a=this.inferDecimals(e),c=BigInt(Math.floor(n.exactAboveUsd*Math.pow(10,a)));if(BigInt(e)>c)return o}return s}inferDecimals(e){return e.length>12?18:6}};function Ke(t){return new kt(t)}function sn(t){if(t===ut||t===_n)return!0;let e=t.toLowerCase();for(let r of Object.values(Pt))if(r.toLowerCase()===e)return!0;for(let r of Object.keys(It))if(r.toLowerCase()===e)return!0;return!1}function ao(t){return{[Xe]:"Solana",[xt]:"Solana Devnet",[Rt]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[le]:"Base",[Ne]:"Base Sepolia",[Me]:"Ethereum",[ke]:"Arbitrum",[Oe]:"Polygon",[Be]:"Optimism",[Ue]:"Avalanche",[De]:"BSC",[me]:"World Chain",[de]:"Monad",[pe]:"Robinhood Chain",[fe]:"SKALE Base",[ge]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[t]||t}function Pn(t,e){let r=ao(t);return r===t?e:r}async function co(t,e){if(typeof t=="string")return[t,e];if(t instanceof URL)return[t.href,e];let r=t,n=new Headers(r.headers);e?.headers&&new Headers(e.headers).forEach((s,a)=>n.set(a,s));let o={method:e?.method??r.method,headers:n,signal:e?.signal??r.signal,redirect:e?.redirect??r.redirect,credentials:e?.credentials??r.credentials},i=(o.method??"GET").toUpperCase();return e&&"body"in e?o.body=e.body:i!=="GET"&&i!=="HEAD"&&r.body&&(o.body=await r.arrayBuffer()),[r.url,o]}var In=new WeakMap;function Vn(t){return In.get(t)}function uo(t,e){let r=t.headers.get("PAYMENT-RESPONSE"),n;if(r)try{let a=en(r);a&&typeof a=="object"&&!Array.isArray(a)&&(n={...a})}catch{}n??={},n.settlementStatus="unconfirmed";let o=n.network===e.network,i=[n.errorReason,n.errorCode,n.errorMessage].every(a=>a===void 0||typeof a=="string"),s=[n.errorReason,n.errorCode].filter(a=>typeof a=="string"&&a.length>0);return s.some(a=>/pending|unknown|unconfirmed|timeout|temporar/i.test(a))?n.settlementStatus="pending":n.success===!0&&o&&i&&s.length===0&&typeof n.transaction=="string"&&n.transaction.trim().length>0?n.settlementStatus="settled":n.success===!1&&(o||n.network===void 0)&&s.length>0&&(n.settlementStatus="failed"),n.attemptedAmountAtomic=e.amountAtomic,n.settlementStatus==="settled"?n.amountAtomic=e.amountAtomic:delete n.amountAtomic,n.assetDecimals=e.assetDecimals,In.set(t,n),n}function Cn(t){let{adapters:e=[ee({verbose:t.verbose}),Ke({verbose:t.verbose})],wallets:r,wallet:n,preferredNetwork:o,rpcUrls:i={},maxAmountAtomic:s,fetch:a=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:d,onPaymentDispatched:p,maxRetries:f=0,retryDelayMs:b=500}=t,l=c?console.log.bind(console,"[x402]"):()=>{};async function m(y,v){let S;for(let x=0;x<=f;x++)try{let C=await a(y,v);if(C.status>=502&&C.status<=504&&x<f){l(`Retry ${x+1}/${f}: server returned ${C.status}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,x)));continue}return C}catch(C){S=C,x<f&&(l(`Retry ${x+1}/${f}: ${C instanceof Error?C.message:"network error"}`),await new Promise(V=>setTimeout(V,b*Math.pow(2,x))))}throw S}let R=new Map;function T(y){try{let v=new URL(y).host,S=R.get(v);if(S&&S.expiresAt>Date.now()/1e3+10)return S.jwt;S&&R.delete(v)}catch{}return null}function g(y,v){try{let S=new URL(y).host,x=v.split(".");if(x.length===3){let C=JSON.parse(atob(x[1].replace(/-/g,"+").replace(/_/g,"/"))),V=Math.floor(Date.now()/1e3),k=V+86400,q=Math.min(typeof C.exp=="number"?C.exp:V,k);R.set(S,{jwt:v,expiresAt:q}),l("Access pass cached for",S,"| expires:",new Date(q*1e3).toISOString())}}catch{l("Failed to cache access pass")}}let h=r||{};n&&!h.solana&&be(n)&&(h.solana=n),n&&!h.evm&&ve(n)&&(h.evm=n);function _(y){let v=[];for(let S of y){let x=e.find(k=>k.canHandle(S.network));if(!x)continue;let C=x.name==="Solana"?"svm":"evm";if(j(S,C))continue;let V;x.name==="Solana"?V=h.solana:x.name==="EVM"&&(V=h.evm),V&&x.isConnected(V)&&v.push({accept:S,adapter:x,wallet:V})}if(v.length===0)return null;if(o){let S=v.find(x=>x.accept.network===o);if(S)return S}return v[0]}function I(y,v){return Pn(y,v)}function $(y,v){return i[y]||v.getDefaultRpcUrl(y)}async function K(y,v,S,x,C){let V="";if(u?.preferTier&&x.tiers){let w=x.tiers.find(H=>H.id===u.preferTier);if(w){if(u.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Access pass tier "${w.id}" costs $${w.price}, exceeds max spend $${u.maxSpend}`);V=`tier=${w.id}`}}else if(u?.preferDuration&&x.ratePerHour)V=`duration=${u.preferDuration}`;else if(x.tiers&&x.tiers.length>0){let w=x.tiers[0];if(u?.maxSpend&&parseFloat(w.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Cheapest access pass costs $${w.price}, exceeds max spend $${u?.maxSpend}`);V=`tier=${w.id}`}let k=V?C.includes("?")?`${C}&${V}`:`${C}?${V}`:C;l("Purchasing access pass:",V||"default tier");let q=S.headers.get("PAYMENT-REQUIRED");if(!q)return null;let F;try{F=JSON.parse(atob(q))}catch{return null}let U=_(F.accepts);if(!U)return null;if(dt(F.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let{accept:B,adapter:W,wallet:Se}=U;if(W.name==="Solana"&&!B.extra?.feePayer)return null;let z=B.extra?.decimals??(sn(B.asset)?6:void 0);if(typeof z!="number")return null;let Fe=B.amount??B.maxAmountRequired;if(!Fe)return null;let X=$(B.network,W);try{let w=await W.getBalance(B,Se,X),H=Number(Fe)/Math.pow(10,z);if(w<H){let Mn=I(B.network,W.name);throw new O("insufficient_balance",`Insufficient balance for access pass on ${Mn}. Have $${w.toFixed(4)}, need $${H.toFixed(4)}`)}}catch(w){if(w instanceof O)throw w}let J=await W.buildTransaction(B,Se,X),we;W.name==="EVM"?we=JSON.parse(J.serialized):we={transaction:J.serialized};let te=typeof y=="string"?y:y instanceof URL?y.href:y.url,_e=F.resource;if(typeof F.resource=="string")try{let w=new URL(F.resource,te);["http:","https:"].includes(w.protocol)&&(_e=w.toString())}catch{}else if(F.resource&&typeof F.resource=="object"&&"url"in F.resource){let w=F.resource;try{let H=new URL(w.url,te);["http:","https:"].includes(H.protocol)&&(_e={...w,url:H.toString()})}catch{}}let ft={x402Version:B.x402Version??2,resource:_e,accepted:B,payload:we};J.extensions&&(ft.extensions=J.extensions);let Le=btoa(JSON.stringify(ft)),ne=await a(k,{...v,method:"POST",headers:{...v?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":Le}});if(!ne.ok)return l("Pass purchase failed:",ne.status),null;let P=ne.headers.get("ACCESS-PASS");return P&&(g(C,P),l("Access pass purchased and cached")),ne}async function E(y,v){let S=y;if(l("Making request:",S),u){let P=T(S);if(P){l("Using cached access pass");let w=await a(y,{...v,headers:{...v?.headers||{},Authorization:`Bearer ${P}`}});if(w.status!==401&&w.status!==402)return w;l("Cached pass rejected (status",w.status,"), purchasing new pass");try{R.delete(new URL(S).host)}catch{}}}let x=await m(y,v);if(x.status!==402)return x;l("Received 402 Payment Required");let C=x.headers.get("X-ACCESS-PASS-TIERS");if(u&&C){l("Server offers access passes, purchasing...");try{let P=JSON.parse(atob(C)),w=await K(y,v,x,P,S);if(w)return w}catch(P){l("Access pass purchase failed, falling back to per-request payment:",P)}}let V=x.headers.get("PAYMENT-REQUIRED");if(!V)throw new O("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let P=atob(V);k=JSON.parse(P)}catch{throw new O("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}if(l("Payment requirements:",k),dt(k.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let q=x.headers.get("X-Quote-Hash");q&&l("Quote hash received:",q);let F=_(k.accepts);if(!F){let P=k.accepts.map(w=>w.network).join(", ");throw new O("no_matching_payment_option",`No supported payment option with a connected wallet for: ${P}`)}let{accept:U,adapter:B,wallet:W}=F;if(l(`Using ${B.name} for ${U.network}`),B.name==="Solana"&&!U.extra?.feePayer)throw new O("missing_fee_payer","Solana payment option missing feePayer in extra");let Se=U.extra?.decimals??(sn(U.asset)?6:void 0);if(typeof Se!="number")throw new O("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let z=U.amount??U.maxAmountRequired;if(!z)throw new O("missing_amount","Payment option missing amount");if(s&&BigInt(z)>BigInt(s))throw new O("amount_exceeds_max",`Payment amount ${z} exceeds maximum ${s}`);let Fe=$(U.network,B);l("Checking balance...");try{let P=await B.getBalance(U,W,Fe),w=Number(z)/Math.pow(10,Se);if(P<w){let H=I(U.network,B.name);throw new O("insufficient_balance",`Insufficient balance on ${H}. Have $${P.toFixed(4)}, need $${w.toFixed(4)}`)}l(`Balance OK: $${P.toFixed(4)} >= $${w.toFixed(4)}`)}catch(P){if(P instanceof O)throw P;l("Balance check failed (RPC error), proceeding with transaction attempt")}if(d&&!await d(U))throw new O("payment_rejected","Payment rejected by onPaymentRequired callback");l("Building transaction...");let X=await B.buildTransaction(U,W,Fe);l("Transaction signed");let J;B.name==="EVM"?J=JSON.parse(X.serialized):J={transaction:X.serialized};let we=y,te=k.resource;if(typeof k.resource=="string")try{let P=new URL(k.resource,we).toString();P!==k.resource&&l("Resolved relative resource URL:",k.resource,"\u2192",P),te=P}catch{te=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let P=k.resource;try{let w=new URL(P.url,we).toString();w!==P.url&&(l("Resolved relative resource URL:",P.url,"\u2192",w),te={...P,url:w})}catch{}}let _e={x402Version:U.x402Version??2,resource:te,accepted:U,payload:J};X.extensions&&(_e.extensions=X.extensions);let ft=btoa(JSON.stringify(_e));if(p)try{p(U,X.settlementProbe)}catch{}l("Retrying request with payment...");let Le=await m(y,{...v,headers:{...v?.headers||{},"PAYMENT-SIGNATURE":ft,...q?{"X-Quote-Hash":q}:{}}});l("Retry response status:",Le.status);let ne=uo(Le,{network:U.network,amountAtomic:z,assetDecimals:Se});return ne.extensions&&l("Settlement extensions:",Object.keys(ne.extensions).join(", ")),Le}async function N(y,v){let[S,x]=await co(y,v);return E(S,x)}return{fetch:N}}function G(t){if(t instanceof Error){if(t.message&&t.message.length>0)return t.message;if(t.name&&t.name.length>0)return t.name}let e=String(t);return e.length>0?e:"unknown error"}async function pt(t){let e="";try{e=(await t.clone().text()).slice(0,600)}catch{}let r=e.toLowerCase(),n=r.includes("settle")||r.includes("facilitator"),o=e;try{let i=JSON.parse(e),s=[i.error,i.detail,i.message].filter(a=>typeof a=="string"&&a.length>0);s.length>0&&(o=s.join(" \u2014 "))}catch{}return o||(o=`HTTP ${t.status}`),{reason:n?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${t.status}: ${o}`}}var Ot="Payment authorization was sent, but the merchant did not respond within the timeout. ",Bt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Ut(t,e,r){if(!t)return{confirmed:!1,detail:Ot+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+Bt};try{if(t.kind==="solana"){let s=ee(),a=r??s.getDefaultRpcUrl(e.caip2);if(!s.confirmSettlement)return kn();let c=await s.confirmSettlement(t,a);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Nn()}let n=Ke(),o=n.getDefaultRpcUrl(e.caip2);if(!n.confirmSettlement)return kn();let i=await n.confirmSettlement(t,o);return i.settled?{confirmed:!0,txSignature:i.txSignature}:Nn()}catch(n){return{confirmed:!1,detail:Ot+`On-chain confirmation could not be completed (${G(n)}).`+Bt}}}function Nn(){return{confirmed:!1,detail:Ot+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+Bt}}function kn(){return{confirmed:!1,detail:Ot+"The chain adapter does not support on-chain confirmation."+Bt}}async function lo(t,e,r,n){let o;try{o=await n.signNextVoucher(r.amount)}catch(c){return n.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let i=new Headers(e.headers??void 0);i.set("X-Tab-Voucher",St(o));let s={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method??"GET",headers:i};e.signal&&(s.signal=e.signal),typeof e.body=="string"&&(s.body=e.body);let a;try{a=await fetch(t,s)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return a.status===402?n.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:n.rollbackVoucher?.call(n,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:a.ok?{ok:!0,paid:!0,response:a,amountPaid:r.amount,network:r.network}:{ok:!1,...await pt(a)}}var On={version:2,async parseChallenge(t){return _t(t)},async pay(t,e,r,n,o){if(dt(r.extensions))return{ok:!1,reason:"no_payment_options",detail:"unsupported_required_payment_identifier"};if(o.tab){let g=r.options.find(h=>h.scheme==="tab"&&h.network.family==="svm"&&h.payTo===o.tab.counterparty);if(g){let h=await lo(t,e,g,o.tab);if(h)return h}}let i=r.options.filter(g=>!j(g,g.network.family));if(i.length===0)return{ok:!1,reason:"no_payment_options",detail:`no supported payment capability offered: ${r.options.map(g=>j(g,g.network.family)).join("; ")}`};let s=i.find(g=>g.network.family==="evm"?!!n.evm:g.network.family==="svm"?!!n.solana:!1);if(!s)return{ok:!1,reason:"unsupported_network"};let a=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,u=new AbortController,d=setTimeout(()=>u.abort(),a),p=!1,f,b,l=(g,h)=>{p=!0,b=g,f=h,clearTimeout(d),d=setTimeout(()=>u.abort(),c)},m=Cn({wallets:n,preferredNetwork:s.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:l}),R=e.signal?AbortSignal.any([e.signal,u.signal]):u.signal,T={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method??"GET",headers:e.headers,signal:R};typeof e.body=="string"&&(T.body=e.body);try{let g=await m.fetch(t,T);if(clearTimeout(d),!p)return g.ok?{ok:!0,paid:!1,response:g}:{ok:!1,response:g,...await pt(g)};let h=Vn(g),_=typeof h?.transaction=="string"?h.transaction:void 0;if(h?.settlementStatus!=="settled"){let I=h?.settlementStatus==="failed";return{ok:!1,reason:I?"settlement_failed":"payment_unconfirmed",detail:`${I?"Merchant reports settlement failure":"Settlement is unconfirmed"}${h?.errorReason||h?.errorCode?` (${h.errorReason??h.errorCode})`:""}. Recover or reconcile this same payment; do not create a new authorization.`,response:g,txSignature:_,paymentReceipt:h}}return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b?.amount??b?.maxAmountRequired??s.amount,network:ce(b?.network??"")??s.network,txSignature:_,paymentReceipt:h}:{ok:!1,reason:"delivery_failed",detail:`Payment settled, but the merchant returned HTTP ${g.status}. Recover the result for this same payment; do not create a new authorization.`,response:g,txSignature:_,paymentReceipt:h}}catch(g){clearTimeout(d);let h=g;if(h?.name==="AbortError"){if(!p)return{ok:!1,reason:"timeout"};let _=await Ut(f,s.network,o.solanaRpcUrl);return _.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:s.amount,network:s.network,txSignature:_.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:_.detail}}return p?{ok:!1,reason:"payment_unconfirmed",detail:`${h?.message??String(g)}. Recover or reconcile this same payment; do not create a new authorization.`}:{ok:!1,reason:"error",detail:h?.message??String(g)}}}};import{getAddress as mo}from"viem";var po={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function fo(){let t=globalThis.crypto??(await import("crypto")).webcrypto,e=new Uint8Array(32);return t.getRandomValues(e),"0x"+Array.from(e,r=>r.toString(16).padStart(2,"0")).join("")}async function go(t,e,r){if(typeof t.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let n=Math.floor(Date.now()/1e3),o=String(n-600),i=String(n+(e.maxTimeoutSeconds??60)),s={from:t.address,to:e.payTo,value:e.amount,validAfter:o,validBefore:i,nonce:await fo()},a=mt[e.network.caip2];if(a===void 0)throw new Error(`unknown chain id for network ${e.network.caip2}`);let c=e.extra,u=await t.signTypedData({domain:{name:c.name,version:c.version,chainId:a,verifyingContract:mo(e.asset)},types:po,primaryType:"TransferWithAuthorization",message:s});return{payment:{x402Version:1,scheme:e.scheme,network:r,payload:{signature:u,authorization:s}},settlementProbe:{kind:"eip3009",from:s.from,nonce:s.nonce,asset:e.asset,chainId:a}}}async function an(t,e,r){try{let n;for(let o of t.options){let i=o.network.family==="evm"&&!!e.evm||o.network.family==="svm"&&!!e.solana;if(o.scheme!=="exact"){i&&(n=o.scheme);continue}if(o.network.family==="evm"&&e.evm){let s=await e.evm;return await ho(o,s,r)}if(o.network.family==="svm"&&e.solana){let s=await e.solana;return await yo(o,s,r)}}return n!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${n}'`}:{ok:!1,reason:"unsupported_network"}}catch(n){return{ok:!1,reason:"error",detail:G(n)}}}async function ho(t,e,r){if(r.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let n=t.extra??{},o=n.name,i=n.version;if(typeof o!="string"||o.length===0||typeof i!="string"||i.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let s=t.network.bare,{payment:a,settlementProbe:c}=await go(e,t,s);return{ok:!0,headerValue:Buffer.from(JSON.stringify(a),"utf8").toString("base64"),option:t,settlementProbe:c}}async function yo(t,e,r){if(r.maxAmountAtomic!==void 0&&BigInt(t.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(t.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${t.scheme}'`};let n=t.extra??{};if(typeof n.feePayer!="string"||n.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=t.network.bare,i={x402Version:1,scheme:t.scheme,network:o,asset:t.asset,payTo:t.payTo,amount:t.amount,maxAmountRequired:t.amount,maxTimeoutSeconds:t.maxTimeoutSeconds??60,extra:n},a=await ee().buildTransaction(i,e,r.solanaRpcUrl),c={x402Version:1,scheme:t.scheme,network:o,payload:{transaction:a.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:t,settlementProbe:a.settlementProbe}}function Ao(t){let e=[];for(let r of t){if(!r||typeof r!="object")continue;let n=r,o=ce(String(n.network??""));o&&e.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.maxAmountRequired??n.amount??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return e}var Bn={version:1,async parseChallenge(t){if(t.headers.get("payment-required"))return null;let e;try{e=await t.clone().json()}catch{return null}let r=Array.isArray(e.accepts)?e.accepts:[];if(r.length===0)return null;let n=Ao(r);return n.length===0?null:{x402Version:1,options:n}},async pay(t,e,r,n,o){let i,s=new AbortController,a=!1,c,u;try{let d=o.timeoutMs??15e3;i=setTimeout(()=>s.abort(),d);let p=await an(r,n,o);if(!p.ok)return{ok:!1,reason:p.reason,detail:p.detail};let f=p.headerValue,b=p.option;u=b,c=p.settlementProbe;let l=new Headers(e.headers??void 0);l.set("X-PAYMENT",f);let m=e.signal!=null?AbortSignal.any([e.signal,s.signal]):s.signal,R={...e.redirect!==void 0?{redirect:e.redirect}:{},method:e.method,headers:l,signal:m};typeof e.body=="string"&&(R.body=e.body),a=!0,clearTimeout(i);let T=o.responseTimeoutMs??12e4;i=setTimeout(()=>s.abort(),T);let g=await fetch(t,R);return g.ok?{ok:!0,paid:!0,response:g,amountPaid:b.amount,network:b.network,txSignature:bo(g)}:{ok:!1,...await pt(g)}}catch(d){if(d instanceof Error&&d.name==="AbortError"){if(!a)return{ok:!1,reason:"timeout"};let p=await Ut(c,u.network,o.solanaRpcUrl);return p.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:p.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:p.detail}}return{ok:!1,reason:"error",detail:G(d)}}finally{i!==void 0&&clearTimeout(i)}}};function bo(t){let e=t.headers.get("x-payment-response")??t.headers.get("X-PAYMENT-RESPONSE");if(e)try{let r=JSON.parse(Buffer.from(e,"base64").toString("utf8")),n=r.transaction??r.txHash??r.transactionHash;return typeof n=="string"?n:void 0}catch{return}}import*as Dn from"tweetnacl";import{Keypair as Ii,VersionedTransaction as Vi,Transaction as Ci}from"@solana/web3.js";var Un=Symbol.for("x402:keypair");function cn(t){let e=t.evm;if(e&&typeof e.signMessage=="function"&&typeof e.address=="string")return{address:e.address,signMessage:e.signMessage};let r=t.solana;if(r){let n=r[Un];if(n&&n.secretKey&&n.publicKey)return{publicKey:n.publicKey,signMessage:async o=>Dn.sign.detached(o,n.secretKey)}}return null}import{decodePaymentRequiredHeader as vo}from"@x402/core/http";var So=[On,Bn];async function wo(t){let e=async(o,i)=>({response:await fetch(o,i),paymentUrl:o,paymentInit:i}),r=cn(t);if(!r)return e;let n;try{n=await import("@x402/extensions/sign-in-with-x")}catch(o){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${G(o)}`),e}return async(o,i)=>{let s=new Request(o,i),a=s.clone(),c=await fetch(s),u={response:c,paymentUrl:o,paymentInit:i};if(c.status!==402)return u;let d=c.headers.get("PAYMENT-REQUIRED");if(!d)return u;let p=vo(d),f=p.extensions?.[n.SIGN_IN_WITH_X];if(!f?.supportedChains)return u;if(a.headers.has(n.SIGN_IN_WITH_X))throw new Error("SIWX authentication already attempted");let b=p.accepts?.[0]?.network,l=f.supportedChains.find(_=>_.chainId===b);if(!l)return u;let m=c.url||s.url;if(c.redirected&&!["GET","HEAD"].includes(s.method))throw new Error("SIWX cannot safely replay a redirected non-GET/HEAD request; use the final resource URL");let R={...f.info,chainId:l.chainId,type:l.type};if(n.assertSIWxChallengeBoundToOrigin(R,m),c.redirected||new URL(m).origin!==new URL(s.url).origin)for(let _ of["authorization","cookie","cookie2","proxy-authorization","host"])a.headers.delete(_);let T=new Headers(a.headers),g={response:c,paymentUrl:m,paymentInit:{...i,headers:Object.fromEntries(T),redirect:"error"}};try{let _=await n.createSIWxPayload(R,r,m);a.headers.set(n.SIGN_IN_WITH_X,n.encodeSIWxHeader(_))}catch{return g}let h=new Request(new Request(m,a),{redirect:"error"});return{...g,response:await fetch(h)}}}async function un(t,e,r,n){if(e.body!==void 0&&e.body!==null&&typeof e.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o,i=t,s=e;try{let c=await(await wo(r))(t,{...e});o=c.response,i=c.paymentUrl,s=c.paymentInit}catch(a){return{ok:!1,reason:"error",detail:G(a)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let a of So){let c=await a.parseChallenge(o.clone());if(c)return a.pay(i,s,c,r,n)}return{ok:!1,reason:"no_payment_options"}}async function _o(t,e={},r){let n=await ze(t,e);if(n.kind==="free")return{result:{ok:!0,paid:!1,response:n.response},tab:null};if(n.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${n.schemesOffered.join(", ")})`},tab:null};if(n.kind==="error")return{result:{ok:!1,reason:"error",detail:n.detail},tab:null};let{offer:o}=n,i=BigInt(ie(r.perUnitCap));if(BigInt(o.amountAtomic)>i)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${i}`},tab:null};let s=r.tabs?.get(o.payTo);return(!s||!s.state.isOpen)&&(s=await zt({vault:r.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:r.perUnitCap,totalCap:r.totalCap,sessionDuration:r.sessionDuration,facilitatorUrl:r.facilitatorUrl,onLiveSession:r.onLiveSession,reserveFinalVoucherV2:r.reserveFinalVoucherV2}),r.tabs?.set(o.payTo,s)),{result:await un(t,e,{},{tab:s}),tab:s}}function xo(t){return{counterparty:t.payTo,perRequest:{atomic:t.amountAtomic,human:Ie(t.amountAtomic)},asset:t.asset,network:{caip2:t.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...t.resourceUrl!==void 0?{resourceUrl:t.resourceUrl}:{}}}async function Ro(t,e={},r={}){let n=r.cache?.get(t);if(n)return{kind:"terms",terms:n};let o=await ze(t,e,r.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==ut)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let i=xo(o.offer);return r.cache?.set(t,i),{kind:"terms",terms:i}}export{vt as DEFAULT_FACILITATOR_URL,Pe as DEXTER_VAULT_PROGRAM_ID,jt as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,pn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,Wt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,Jr as HOSTED_TAB_ACCEPTANCE_RULE,Qr as HOSTED_TAB_REGISTRATION_ENCODING,Xr as HOSTED_TAB_TERMS_VERSION,Yr as HOSTED_TAB_VOUCHER_HEADER,Y as HistoricalV1MigrationRequiredError,cr as INSTRUCTIONS_SYSVAR_ID,Dt as LiveSessionExistsError,ar as SECP256R1_PROGRAM_ID,Re as SessionScopeExceededError,re as TabClosedError,xe as UnsupportedNetworkError,pr as armTabOpen,oe as assertFinalVoucherV2ReservationReceipt,Ie as atomicToHuman,or as buildRegisterSessionKeyInstruction,sr as buildRevokeSessionKeyInstruction,ir as buildSecp256r1VerifyInstruction,Hn as buildVoucherMessage,At as canonicalFinalVoucherV2ReservationNetwork,qe as deriveChannelId,bt as finalVoucherV2Digest,hn as finalVoucherV2ReservationBindingDigest,gn as finalVoucherV2ReservationBindingDigestFromIdentity,We as finalVoucherV2ReservationIdentity,Gt as finalVoucherV2ReservationMemo,qn as finalVoucherV2Sequence,Yn as generateSessionKeypair,ie as humanToAtomic,Lt as makeSessionKey,zt as openTab,Te as parseAtomic,_o as payUrlWithTab,ze as resolveTabOffer,Ro as resolveTabTerms,fr as resumeTab,tr as scopeCapAtomic,$e as sessionRegisterMessage,Kn as sessionReplaceV1Message,Fn as sessionRevokeMessage,$n as sessionVoucherV2AuthorizationNonce,Ln as sessionVoucherV2Nonce,qt as signContextBoundFinalVoucherV2,$t as signVoucher,qr as tabFromGrant,Mt as voucherPayloadMessage,St as voucherToHeader,Wn as voucherV2SequenceOrdinal};
+`))!==-1;){let s=n.slice(0,i);n=n.slice(i+2);let c=Tr(s);if(c.eventName==="end")return;if(c.data!==null){let u=c.data.replace(/\\(\\|n)/g,(d,g)=>g==="n"?`
+`:"\\");yield new TextEncoder().encode(u)}}}}finally{t.releaseLock()}}function Tr(e){let t=null,r=[];for(let n of e.split(`
+`))n.startsWith("event:")?t=n.slice(6).trim():n.startsWith("data:")&&r.push(n.slice(5).trimStart());return{eventName:t,data:r.length?r.join(`
+`):null}}import Xe from"tweetnacl";import{Connection as Wr,PublicKey as Ge}from"@solana/web3.js";import{bytesToHex as jr}from"@noble/hashes/utils";import{deriveSessionPda as zr,fetchSessionAccount as Gr,isSessionLive as Xr}from"@dexterai/vault/session";import{voucherV2SequenceOrdinal as Jr}from"@dexterai/vault/messages";import{readVaultFull as Yr}from"@dexterai/vault/reader";import{PublicKey as Z}from"@solana/web3.js";import{bytesToHex as en}from"@noble/hashes/utils";import{deriveGraphConfigPda as Er,deriveSwigVaultBindingPda as tn}from"@dexterai/vault/credit";import{DEXTER_VAULT_PROGRAM_ID as Pr,DISCRIMINATORS as Ir,isSwigVaultBindingIdentityVersion as Rn}from"@dexterai/vault/constants";import{deriveSwigWalletAddress as Vr}from"@dexterai/vault/instructions";import{decodeVaultFull as Cr}from"@dexterai/vault/reader";import{decodeSessionAccount as Nr,deriveSessionPda as nn}from"@dexterai/vault/session";var kr=Uint8Array.from([56,67,4,209,238,143,0,129]),Or=74,Br=188,Ur=new Z("MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr"),Dr=(()=>{let e=Buffer.alloc(32);return e.write("OTS_SESSION_REGISTER_V2","ascii"),e})(),Zt=class extends Error{constructor(r,n){super(`native_tab_v2_solana_reservation_invalid:${r}`+(n?`:${n}`:""));this.code=r;this.name="SolanaFinalVoucherV2ReservationError"}code};function b(e,t){throw new Zt(e,t)}function $(e,t){try{return new Z(e)}catch{return b(t)}}function Rt(e,t){return e.length===t.length&&e.every((r,n)=>r===t[n])}async function Mr(e){let r=(await e.connection.getSignatureStatuses([e.signature],{searchTransactionHistory:!0})).value[0]??null;if(!r)return null;r.confirmationStatus!=="confirmed"&&r.confirmationStatus!=="finalized"&&b("transaction_commitment"),r.err!==null&&b("transaction_failed");let n=await e.connection.getTransaction(e.signature,{commitment:e.commitment,maxSupportedTransactionVersion:0});if(!n)return null;n.meta||b("transaction_meta_missing"),n.slot!==r.slot&&b("transaction_status_slot");let o=n.transaction.message,a=o.version===0?o.getAccountKeys({accountKeysFromLookups:n.meta.loadedAddresses??null}):o.getAccountKeys(),i=(s,c)=>{let u=a.get(s);return u||b(c),u};return{slot:n.slot,confirmationStatus:r.confirmationStatus,err:n.meta.err,signatures:[...n.transaction.signatures],accountKeys:Array.from({length:a.length},(s,c)=>({address:i(c,"transaction_account_key").toBase58(),signer:o.isAccountSigner(c),writable:o.isAccountWritable(c)})),instructions:o.compiledInstructions.map(s=>({programId:i(s.programIdIndex,"transaction_program_id").toBase58(),accounts:s.accountKeyIndexes.map(c=>i(c,"transaction_instruction_account").toBase58()),data:Uint8Array.from(s.data)}))}}function Kr(e,t,r,n){n.length!==Or&&b("binding_length"),Rt(n.subarray(0,8),kr)||b("binding_discriminator");let o=n.readUInt8(8),a=n.readUInt8(9);return Rn(o)||b("binding_version"),a!==t&&b("binding_bump"),{address:e.toBase58(),owner:r.toBase58(),version:o,bump:a,swig:new Z(n.subarray(10,42)).toBase58(),vault:new Z(n.subarray(42,74)).toBase58()}}async function Fr(e){let t=$(e.input.programId,"program_id"),r=$(e.input.buyerSwigAddress,"buyer_swig"),n=$(e.input.vaultPda,"vault_pda"),o=$(e.input.seller,"seller"),[a,i]=tn(r,t),[s]=nn(n,o,t),c=await e.connection.getMultipleAccountsInfoAndContext([a,n,s],{commitment:e.commitment,minContextSlot:e.minimumSlot}),[u,d,g]=c.value;u||b("binding_missing"),d||b("vault_missing"),g||b("session_missing");let f,y;try{f=Cr(Buffer.from(d.data)),y=Nr(s,g.data)}catch(l){return b("post_state_decode",l instanceof Error?l.message:String(l))}let m=y.session;return{contextSlot:c.context.slot,binding:Kr(a,i,u.owner,Buffer.from(u.data)),vault:{owner:d.owner.toBase58(),exists:f.exists,version:f.version,swigAddress:f.swigAddress,dexterAuthority:f.dexterAuthority,pendingVoucherCount:f.pendingVoucherCount},session:{owner:g.owner.toBase58(),version:y.version,bump:y.bump,vault:y.vault,sessionPublicKey:en(m.sessionPubkey),maxAmount:m.maxAmount,expiresAt:m.expiresAt,seller:m.allowedCounterparty,nonce:m.nonce,spent:m.spent,currentOutstanding:m.currentOutstanding,maxRevolvingCapacity:m.maxRevolvingCapacity,crystallizedCumulative:m.crystallizedCumulative}}}function Lr(e){let t=Buffer.from(e.voucher.sessionRegistration);return t.length!==Br&&b("registration_length"),Rt(t.subarray(0,32),Dr)||b("registration_domain"),{programId:new Z(t.subarray(32,64)).toBase58(),vaultPda:new Z(t.subarray(64,96)).toBase58(),sessionPublicKey:en(t.subarray(96,128)),maxAmount:t.readBigUInt64LE(128),expiresAt:t.readBigInt64LE(136),seller:new Z(t.subarray(144,176)).toBase58(),nonce:t.readUInt32LE(176),maxRevolvingCapacity:t.readBigUInt64LE(180)}}function Ne(e,t,r){let n=e.accountKeys.filter(o=>o.address===t);return n.length!==1&&b(`${r}_account_key`),n[0]}function $r(e,t,r){(!Number.isSafeInteger(r.slot)||r.slot<=0)&&b("transaction_slot"),r.slot!==t.confirmationSlot&&b("transaction_confirmation_slot"),r.err!==null&&b("transaction_failed"),r.signatures[0]!==t.transaction&&b("transaction_signature"),r.instructions.length!==2&&b("transaction_instruction_count");let n=$(e.programId,"program_id"),o=$(e.buyerSwigAddress,"buyer_swig"),a=$(e.vaultPda,"vault_pda"),i=$(e.seller,"seller"),s=$(e.sessionPda,"session_pda"),[c]=nn(a,i,n),u=tn(o,n)[0],d=Vr(o),g=Er(n)[0];s.equals(c)||b("session_pda_derivation");let f=Buffer.from(Ir.settle_voucher),y=r.instructions.filter(P=>{if(P.programId!==e.programId)return!1;let N=P.data;return N.length>=f.length&&Rt(N.subarray(0,f.length),f)});y.length!==1&&b("settle_voucher_instruction_count");let m=y[0];r.instructions[0]!==m&&b("settle_voucher_instruction_order");let l=Buffer.from(m.data);l.length!==49&&b("settle_voucher_instruction_length"),l.readBigUInt64LE(8).toString()!==e.reservationAmountAtomic&&b("settle_voucher_amount"),l.readUInt8(16)!==1&&b("settle_voucher_increment"),new Z(l.subarray(17,49)).equals(i)||b("settle_voucher_seller"),m.accounts.length<8&&b("settle_voucher_accounts"),[a.toBase58(),null,s.toBase58(),null,o.toBase58(),d.toBase58(),u.toBase58(),g.toBase58()].forEach((P,N)=>{P!==null&&m.accounts[N]!==P&&b(`settle_voucher_account_${N}`)});let x=m.accounts[1];x||b("dexter_authority");let p=Ne(r,m.accounts[0],"vault"),h=Ne(r,x,"dexter_authority"),_=Ne(r,m.accounts[2],"session");(!p.writable||p.signer)&&b("vault_privileges"),h.signer||b("dexter_authority_signature"),(!_.writable||_.signer)&&b("session_privileges");for(let P=3;P<Math.min(m.accounts.length,8);P+=1)Ne(r,m.accounts[P],`account_${P}`).signer&&b(`settle_voucher_account_${P}_signer`);for(let P=8;P<m.accounts.length;P+=1){let N=Ne(r,m.accounts[P],`sibling_${P-8}`);(!N.writable||N.signer)&&b("settle_voucher_sibling_privileges")}let S=r.instructions[1];S.programId!==Ur.toBase58()&&b("reservation_memo_program"),(S.accounts.length!==1||S.accounts[0]!==x)&&b("reservation_memo_authority"),Ne(r,x,"reservation_memo_authority").signer||b("reservation_memo_authority_signature");let F=new TextEncoder().encode(Yt(e));return Rt(S.data,F)||b("reservation_memo_digest"),x}function qr(e,t,r,n){let o=$(e.programId,"program_id"),a=$(e.buyerSwigAddress,"buyer_swig"),i=$(e.vaultPda,"vault_pda"),s=$(e.seller,"seller"),[c,u]=tn(a,o),[d,g]=nn(i,s,o);(!Number.isSafeInteger(n.contextSlot)||n.contextSlot<t)&&b("post_state_slot"),(n.binding.address!==c.toBase58()||n.binding.owner!==e.programId||n.binding.bump!==u||!Rn(n.binding.version)||n.binding.swig!==e.buyerSwigAddress||n.binding.vault!==e.vaultPda)&&b("binding_identity"),(n.vault.owner!==e.programId||!n.vault.exists||n.vault.version!==7||n.vault.swigAddress!==e.buyerSwigAddress||n.vault.dexterAuthority!==r)&&b("vault_post_state"),(e.sessionPda!==d.toBase58()||n.session.owner!==e.programId||n.session.version!==1||n.session.bump!==g||n.session.vault!==e.vaultPda||n.session.sessionPublicKey!==en(e.voucher.sessionPublicKey)||n.session.seller!==e.seller||n.session.nonce!==e.sessionNonce||n.session.currentOutstanding.toString()!==e.reservationAmountAtomic)&&b("session_post_state");let f=Lr(e);(f.programId!==e.programId||f.vaultPda!==e.vaultPda||f.sessionPublicKey!==n.session.sessionPublicKey||f.seller!==e.seller||f.nonce!==e.sessionNonce||f.maxAmount!==n.session.maxAmount||f.expiresAt!==BigInt(n.session.expiresAt)||f.maxRevolvingCapacity!==n.session.maxRevolvingCapacity)&&b("registration_post_state");let y=n.session.spent>n.session.crystallizedCumulative?n.session.spent:n.session.crystallizedCumulative;return y.toString()!==e.previousCumulativeAtomic&&b("session_frontier"),{commitment:"confirmed",confirmationSlot:t,postStateSlot:n.contextSlot,sessionAccountVersion:n.session.version,wireVersion:2,frontierAtomic:y.toString(),spentAtomic:n.session.spent.toString(),currentOutstandingAtomic:n.session.currentOutstanding.toString(),crystallizedCumulativeAtomic:n.session.crystallizedCumulative.toString()}}async function Hr(e,t,r,n={}){try{se(t,r)}catch(s){return b("provider_receipt",s instanceof Error?s.message:String(s))}t.network!=="solana:mainnet"&&b("network"),t.programId!==Pr.toBase58()&&b("program_id");let o=await(n.readTransaction??Mr)({connection:e,signature:r.transaction,commitment:"confirmed"});o||b("transaction_missing"),o.confirmationStatus!=="confirmed"&&o.confirmationStatus!=="finalized"&&b("transaction_commitment");let a=$r(t,r,o),i=await(n.readPostState??Fr)({connection:e,input:t,minimumSlot:o.slot,commitment:"confirmed"});return{...qr(t,o.slot,a,i),commitment:o.confirmationStatus}}async function Tn(e,t,r,n={}){await Hr(e,t,r,n)}var rn="solana:mainnet";async function Qr(e){let t=e.facilitatorUrl??_t,r=e.programId??Ie,n=new Ge(e.vaultPda),o=new Ge(e.params.counterparty),a=Ee(e.perUnitCapAtomic);if(a<=0n)throw new Error(`perUnitCapAtomic must be > 0, got ${e.perUnitCapAtomic}`);let i=Ee(e.params.maxAmountAtomic),s=Ee(e.params.maxRevolvingCapacityAtomic),c=(e.params.nonce&2147483648)!==0;if(!c)throw new Q("tabFromGrant");if(c&&!e.reserveFinalVoucherV2)throw new Error("native_tab_v2_reservation_fence_required: provide reserveFinalVoucherV2; a FINAL voucher may not be released before its exact durable reservation");let u=Zr(e.sessionSecretKey),d=new Ge(e.params.sessionPubkey).toBytes();if(!En(u.publicKey,d))throw new Error(`tab_session_key_mismatch: the supplied secret derives ${new Ge(u.publicKey).toBase58()} but params.sessionPubkey is ${e.params.sessionPubkey} \u2014 wrong key handed to this process`);let g=Xe.randomBytes(32),f=Xe.sign.detached(g,u.secretKey);if(!Xe.sign.detached.verify(g,f,d))throw new Error("tab_session_key_mismatch: secret key failed the sign/verify self-check against params.sessionPubkey \u2014 the seed half does not sign for the granted pubkey");let y=He({programId:r,vaultPda:n,sessionPubkey:u.publicKey,maxAmount:i,expiresAt:BigInt(e.params.expiresAtUnix),allowedCounterparty:o,nonce:e.params.nonce,maxRevolvingCapacity:s}),m=typeof e.connection=="string"?new Wr(e.connection,"confirmed"):e.connection,l=await Gr(m,n,o,r);if(!l||l.version===0)throw new Error("tab_session_not_live: no live SessionAccount PDA for this (vault, counterparty) \u2014 revoked, expiry-swept, or never registered");if(!Xr(l))throw new Error(l.version!==1?`tab_session_not_live: SessionAccount has unsupported version ${l.version} \u2014 not a live v1 session`:`tab_session_not_live: SessionAccount is present but expired (expiresAt=${l.session.expiresAt})`);if(!En(l.session.sessionPubkey,u.publicKey))throw new Error(`tab_session_pubkey_mismatch: the on-chain session carries ${new Ge(l.session.sessionPubkey).toBase58()} \u2014 the grant this key belongs to was replaced by a newer registration`);if(l.vault!==n.toBase58()||l.session.allowedCounterparty!==o.toBase58()||l.session.maxAmount!==i||l.session.expiresAt!==e.params.expiresAtUnix||l.session.nonce!==e.params.nonce||l.session.maxRevolvingCapacity!==s)throw new Error(`tab_grant_params_stale: params disagree with the on-chain session scope (chain: maxAmount=${l.session.maxAmount} expiresAt=${l.session.expiresAt} nonce=${l.session.nonce} revolving=${l.session.maxRevolvingCapacity}; params: ${e.params.maxAmountAtomic}/${e.params.expiresAtUnix}/${e.params.nonce}/${e.params.maxRevolvingCapacityAtomic}) \u2014 refresh the grant hand-off`);if(c&&l.session.currentOutstanding!==0n)throw new Error(`native_tab_v2_reservation_pending: the session already has an exact outstanding reservation of ${l.session.currentOutstanding}; recover that immutable attempt before issuing another FINAL voucher`);let v=l.session.spent>l.session.crystallizedCumulative?l.session.spent:l.session.crystallizedCumulative;if(v>=i)throw new Error(`tab_exhausted: on-chain frontier ${v} has consumed the session cap ${i} \u2014 no voucher can strictly exceed it; open a new grant`);let x=e.sellerUrl??e.params.counterparty,p=BigInt(Math.floor(Math.random()*4294967295)),h=We({vaultPda:n,sellerUrl:x,nonce:p}),_=jr(h),S=e.swigAddress;if(!S){let A=await Yr(m,n);if(!A.exists||!A.swigAddress)throw new Error(`tab_vault_unreadable: vault ${n.toBase58()} has no readable swig_address on chain \u2014 pass options.swigAddress explicitly`);S=A.swigAddress}let q={channelId:_,maxAmountAtomic:e.params.maxAmountAtomic,revolvingCapacityAtomic:e.params.maxRevolvingCapacityAtomic,expiresAtUnix:e.params.expiresAtUnix,allowedCounterparty:e.params.counterparty},F=Wt({publicKey:u.publicKey,privateKey:u.secretKey},q,y),[P]=zr(n,o,r),N={network:rn,swigAddress:S,vaultPda:n.toBase58(),sessionVoucherVersion:c?2:1,authorizeSession:async()=>{throw new Error("grant_tab_no_passkey: a grant-held tab cannot authorize sessions \u2014 session birth requires the wallet owner's passkey ceremony")},signWithSession:async(A,w)=>{if(!c)return jt(A,w,h);let R=zt({programId:r.toBase58(),vaultPda:n.toBase58(),sessionPda:P.toBase58(),seller:o.toBase58(),sessionNonce:e.params.nonce,channelId:w.channelId,cumulativeAmountAtomic:w.cumulativeAmount,sequenceOrdinal:w.sequenceNumber,sessionPrivateKey:A.privateKey,sessionPublicKey:A.publicKey,sessionRegistration:A.registration});return{payload:{channelId:R.channelId,cumulativeAmount:R.cumulativeAmount,sequenceNumber:R.sequenceNumber},sessionPublicKey:Uint8Array.from(Buffer.from(R.sessionPublicKey,"hex")),sessionSignature:Uint8Array.from(Buffer.from(R.sessionSignature,"hex")),sessionRegistration:Uint8Array.from(Buffer.from(R.sessionRegistration,"hex"))}},signOpenTab:async A=>A.registration,signCloseTab:async()=>{throw new Error("grant_tab_cannot_revoke: session revocation is passkey-signed and belongs to the wallet owner's surfaces \u2014 a grant-held tab closes settle-only")},verifyFinalVoucherV2Reservation:c?(A,w)=>Tn(m,A,w):void 0};return new ze({vault:N,network:rn,seller:x,counterparty:e.params.counterparty,session:F,channelIdHex:_,channelIdBytes:h,perUnitCapAtomic:a,totalCapAtomic:i,expiresAtUnix:e.params.expiresAtUnix,facilitatorUrl:t,initialCumulativeAtomic:v,initialSequenceOrdinal:c&&l.session.lastLockedSequence!==0?Jr(l.session.lastLockedSequence):0,beforeVoucherRelease:c?async({voucher:A,incrementAtomic:w,previousCumulativeAtomic:R})=>{let E=je(A),C={network:rn,programId:r.toBase58(),buyerSwigAddress:S,vaultPda:n.toBase58(),sessionPda:P.toBase58(),seller:o.toBase58(),channelId:_,sessionNonce:e.params.nonce,reservationAmountAtomic:w,previousCumulativeAtomic:R,...E,voucher:A},V=await e.reserveFinalVoucherV2(C);return se(C,V),await N.verifyFinalVoucherV2Reservation(C,V),V}:void 0,closeMode:"settle-only"})}function Zr(e){if(e.length===64)return Xe.sign.keyPair.fromSecretKey(e);if(e.length===32)return Xe.sign.keyPair.fromSeed(e);throw new Error(`tab_session_key_invalid: expected a 64-byte nacl secretKey or a 32-byte ed25519 seed, got ${e.length} bytes`)}function En(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return r===0}import{PublicKey as ro}from"@solana/web3.js";var Pn=[{caip2:"eip155:8453",bare:"base",family:"evm"},{caip2:"eip155:1",bare:"ethereum",family:"evm"},{caip2:"eip155:137",bare:"polygon",family:"evm"},{caip2:"eip155:42161",bare:"arbitrum",family:"evm"},{caip2:"eip155:10",bare:"optimism",family:"evm"},{caip2:"eip155:43114",bare:"avalanche",family:"evm"},{caip2:"eip155:56",bare:"bsc",family:"evm"},{caip2:"eip155:480",bare:"world",family:"evm"},{caip2:"eip155:143",bare:"monad",family:"evm"},{caip2:"eip155:4663",bare:"robinhood",family:"evm"},{caip2:"eip155:1187947933",bare:"skale-base",family:"evm"},{caip2:"eip155:324705682",bare:"skale-base-sepolia",family:"evm"},{caip2:"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",bare:"solana",family:"svm"}],eo=new Map(Pn.map(e=>[e.caip2.toLowerCase(),e])),to=new Map(Pn.map(e=>[e.bare.toLowerCase(),e]));function ue(e){if(!e)return null;let t=e.toLowerCase(),r=eo.get(t)||to.get(t);return r?{caip2:r.caip2,bare:r.bare,family:r.family}:null}function on(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=t+"=".repeat((4-(t.length%4||4))%4);return JSON.parse(Buffer.from(r,"base64").toString("utf8"))}function no(e){let t=[];for(let r of e){if(!r||typeof r!="object")continue;let n=r,o=ue(String(n.network??""));o&&t.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.amount??n.maxAmountRequired??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return t}async function Tt(e){let t=e.headers.get("payment-required");if(!t)return null;let r;try{r=on(t)}catch{return null}let n=Array.isArray(r.accepts)?r.accepts:[];return n.length===0?null:{x402Version:2,options:no(n),extensions:r.extensions&&typeof r.extensions=="object"&&!Array.isArray(r.extensions)?r.extensions:void 0,resourceUrl:r.resource&&typeof r.resource=="object"?String(r.resource.url??""):void 0}}async function Je(e,t={},r=fetch){let n={method:t.method??"GET",headers:t.headers};typeof t.body=="string"&&(n.body=t.body);let o;try{o=await r(e,n)}catch(s){return{kind:"error",detail:`probe failed: ${s?.message??String(s)}`}}if(o.status!==402)return o.ok?{kind:"free",response:o}:{kind:"error",detail:`probe returned HTTP ${o.status}`};let a=await Tt(o);if(!a)return{kind:"error",detail:"the 402 carries no x402 v2 PAYMENT-REQUIRED challenge"};let i=a.options.find(s=>s.scheme==="tab"&&s.network.family==="svm");if(!i)return{kind:"no_tab",schemesOffered:a.options.map(s=>s.scheme)};try{new ro(i.payTo)}catch{return{kind:"error",detail:`tab option payTo is not a valid Solana pubkey: "${i.payTo}"`}}return{kind:"offer",offer:{payTo:i.payTo,amountAtomic:i.amount,asset:i.asset,networkCaip2:i.network.caip2,...typeof i.extra?.voucherHeader=="string"?{voucherHeader:i.extra.voucherHeader}:{},...typeof i.extra?.registrationEncoding=="string"?{registrationEncoding:i.extra.registrationEncoding}:{},...typeof i.extra?.termsVersion=="string"?{termsVersion:i.extra.termsVersion}:{},...typeof i.extra?.acceptanceRule=="string"?{acceptanceRule:i.extra.acceptanceRule}:{},resourceUrl:a.resourceUrl}}}var oo="dexter-tab-hosted-pay-before-delivery/v1",so="pay_before_delivery_seller_2xx",io="x-tab-voucher",ao="base64(188-byte sessionRegisterMessage)";var Ye="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",Et="solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1",Pt="solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z",le=Ye,Qe=Et,Ze=Pt,me="eip155:8453",ke="eip155:84532",Oe="eip155:42161",Be="eip155:137",Ue="eip155:10",De="eip155:43114",Me="eip155:56",de="eip155:480",pe="eip155:143",fe="eip155:4663",ge="eip155:1187947933",he="eip155:324705682",Ke="eip155:1",ye=me,It=ke,et=Oe,tt=Be,nt=Ue,rt=De,ot=Me,st=de,it=pe,at=fe,ct=ge,ut=he,lt=Ke,mt="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",In="4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU",Vn="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",sn="0x55d398326f99059fF775485246999027B3197955",Vt="0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",an="0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",Fe={[Me]:Vt,[me]:Vn,[ke]:"0x036CbD53842c5426634e7929541eC2318f3dCF7e",[Oe]:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831",[Be]:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",[Ue]:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",[De]:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",[de]:"0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",[pe]:"0x754704Bc059F8C67012fEd69BC8A327a5aafb603",[fe]:an,[ge]:"0x85889c8c714505E0c94b30fcfcF64fE3Ac8FCb20",[he]:"0x2e08028E3C4c2356572E096d8EF835cD5C6030bD",[Ke]:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},Ct={[sn]:{symbol:"USDT",decimals:18},[Vt]:{symbol:"USDC",decimals:18}};var Nt={[de]:{name:"USDC",version:"2"},[pe]:{name:"USDC",version:"2"},[fe]:{name:"Global Dollar",version:"1"},[ge]:{name:"Bridged USDC (SKALE Bridge)",version:"2"},[he]:{name:"Bridged USDC (SKALE Bridge)",version:"2"}},ee="0x000000000022D473030F116dDEE9F6B43aC78BA3",dt="0x402085c248EeA27D92E8b30b2C58ed07f9E20001",pt={[Me]:56,[me]:8453,[ke]:84532,[Oe]:42161,[Be]:137,[Ue]:10,[De]:43114,[de]:480,[pe]:143,[fe]:4663,[ge]:1187947933,[he]:324705682,[Ke]:1},Ae={[Ye]:"https://api.dexter.cash/api/solana/rpc",[Et]:"https://api.devnet.solana.com",[Pt]:"https://api.testnet.solana.com"},U={[Me]:"https://api.dexter.cash/api/evm/bsc/rpc",[me]:"https://api.dexter.cash/api/base/rpc",[ke]:"https://sepolia.base.org",[Oe]:"https://api.dexter.cash/api/evm/arbitrum/rpc",[Be]:"https://api.dexter.cash/api/evm/polygon/rpc",[Ue]:"https://api.dexter.cash/api/evm/optimism/rpc",[De]:"https://api.dexter.cash/api/evm/avalanche/rpc",[de]:"https://worldchain-mainnet.g.alchemy.com/public",[pe]:"https://rpc.monad.xyz",[fe]:"https://rpc.mainnet.chain.robinhood.com",[ge]:"https://skale-base.skalenodes.com/v1/base",[he]:"https://base-sepolia-testnet.skalenodes.com/v1/jubilant-horrible-ancha",[Ke]:"https://eth.llamarpc.com"};var O=class e extends Error{code;details;constructor(t,r,n){super(r),this.name="X402Error",this.code=t,this.details=n,Object.setPrototypeOf(this,e.prototype)}};function z(e,t){let r=e.scheme??"exact";if(r!=="exact"&&!(t==="evm"&&r==="exact-approval"))return`Unsupported payment scheme: ${r}`;let n=e.extra?.paymentFlow;if(n!==void 0&&n!=="authorization")return`Unsupported payment flow: ${String(n)}`;let o=e.extra?.assetTransferMethod;if(o!==void 0&&(typeof o!="string"||!(r==="exact-approval"?[]:t==="evm"?["eip3009","permit2"]:["default"]).includes(o)))return`Unsupported payment asset transfer method: ${String(o)}`}function ft(e){let t=e?.["payment-identifier"];if(!t||typeof t!="object"||Array.isArray(t))return!1;let r=t.info;return!!r&&typeof r=="object"&&!Array.isArray(r)&&r.required===!0}import{PublicKey as be,Connection as cn,TransactionMessage as co,VersionedTransaction as uo,ComputeBudgetProgram as Cn}from"@solana/web3.js";import{getAssociatedTokenAddress as un,getAccount as lo,createTransferCheckedInstruction as mo,getMint as po,TOKEN_PROGRAM_ID as Nn,TOKEN_2022_PROGRAM_ID as kt}from"@solana/spl-token";var fo=12e3,go=1;function ve(e){if(!e||typeof e!="object")return!1;let t=e;return"publicKey"in t&&"signTransaction"in t&&typeof t.signTransaction=="function"}var Ot=class{name="Solana";networks=[le,Qe,Ze];config;log;constructor(t={}){this.config=t,this.log=t.verbose?console.log.bind(console,"[x402:solana]"):()=>{}}canHandle(t){return!!(this.networks.includes(t)||t==="solana"||t==="solana-devnet"||t==="solana-testnet"||t.startsWith("solana:"))}getDefaultRpcUrl(t){return this.config.rpcUrls?.[t]?this.config.rpcUrls[t]:Ae[t]?Ae[t]:t==="solana"?Ae[le]:t==="solana-devnet"?Ae[Qe]:t==="solana-testnet"?Ae[Ze]:Ae[le]}getAddress(t){return ve(t)?t.publicKey?.toBase58()??null:null}isConnected(t){return ve(t)?t.publicKey!==null:!1}async getBalance(t,r,n){if(!ve(r)||!r.publicKey)return 0;let o=n||this.getDefaultRpcUrl(t.network),a=new cn(o,"confirmed"),i=new be(r.publicKey.toBase58()),s=new be(t.asset);try{let u=(await a.getAccountInfo(s,"confirmed"))?.owner.toBase58()===kt.toBase58()?kt:Nn,d=await un(s,i,!1,u),g=await lo(a,d,void 0,u),f=t.extra?.decimals??6;return Number(g.amount)/Math.pow(10,f)}catch(c){if(c&&typeof c=="object"&&"name"in c&&(c.name==="TokenAccountNotFoundError"||c.name==="TokenInvalidAccountOwnerError"))return 0;throw c}}async buildTransaction(t,r,n){let o=z(t,"svm");if(o)throw new Error(o);if(!ve(r))throw new Error("Invalid Solana wallet");if(!r.publicKey)throw new Error("Wallet not connected");let a=n||this.getDefaultRpcUrl(t.network),i=new cn(a,"confirmed"),s=new be(r.publicKey.toBase58()),{payTo:c,asset:u,extra:d}=t,g=t.amount??t.maxAmountRequired;if(!g)throw new Error("Missing amount in payment requirements");if(!d?.feePayer)throw new Error("Missing feePayer in payment requirements");let f=new be(d.feePayer),y=new be(u),m=new be(c);this.log("Building transaction:",{from:s.toBase58(),to:c,amount:g,asset:u,feePayer:d.feePayer});let l=[];l.push(Cn.setComputeUnitLimit({units:fo})),l.push(Cn.setComputeUnitPrice({microLamports:go}));let v=await i.getAccountInfo(y,"confirmed");if(!v)throw new Error(`Token mint ${u} not found`);let x=v.owner.toBase58()===kt.toBase58()?kt:Nn,p=await po(i,y,void 0,x);typeof d?.decimals=="number"&&p.decimals!==d.decimals&&this.log(`Decimals mismatch: requirements say ${d.decimals}, mint says ${p.decimals}`);let h=await un(y,s,!1,x),_=await un(y,m,!0,x);if(!await i.getAccountInfo(h,"confirmed"))throw new Error(`No token account found for ${u}. Please ensure you have USDC in your wallet.`);if(!await i.getAccountInfo(_,"confirmed"))throw new Error(`Seller token account not found. The seller (${c}) must have a USDC account.`);let F=BigInt(g);l.push(mo(h,y,_,s,F,p.decimals,[],x));let{blockhash:P}=await i.getLatestBlockhash("confirmed"),N=new co({payerKey:f,recentBlockhash:P,instructions:l}).compileToV0Message(),A=new uo(N),w=await r.signTransaction(A);return this.log("Transaction signed successfully"),{serialized:Buffer.from(w.serialize()).toString("base64"),settlementProbe:{kind:"solana",sourceAta:h.toBase58(),destinationAta:_.toBase58(),asset:u,amount:g,blockhash:P}}}async confirmSettlement(t,r){if(t.kind!=="solana")throw new Error(`SolanaAdapter.confirmSettlement cannot handle probe kind "${t.kind}"`);let n=new cn(r,"confirmed"),o=new be(t.destinationAta),a=await n.getSignaturesForAddress(o,{limit:25});if(a.length===0)return{settled:!1};let i=BigInt(t.amount);for(let s of a){if(s.err)continue;let c=await n.getTransaction(s.signature,{commitment:"confirmed",maxSupportedTransactionVersion:0});if(!c?.meta)continue;let u=c.transaction.message.getAccountKeys().keySegments().flat(),d=c.meta.preTokenBalances??[],g=c.meta.postTokenBalances??[];for(let f of g){if(f.mint!==t.asset)continue;let y=u[f.accountIndex];if(!y||!y.equals(o))continue;let m=d.find(x=>x.accountIndex===f.accountIndex),l=BigInt(m?.uiTokenAmount.amount??"0");if(BigInt(f.uiTokenAmount.amount??"0")-l===i)return{settled:!0,txSignature:s.signature}}}return{settled:!1}}};function te(e){return new Ot(e)}var ho={PermitWitnessTransferFrom:[{name:"permitted",type:"TokenPermissions"},{name:"spender",type:"address"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"witness",type:"Witness"}],TokenPermissions:[{name:"token",type:"address"},{name:"amount",type:"uint256"}],Witness:[{name:"to",type:"address"},{name:"validAfter",type:"uint256"}]},kn=BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function Se(e){if(!e||typeof e!="object")return!1;let t=e;return"address"in t&&typeof t.address=="string"&&t.address.startsWith("0x")}var Bt=class{name="EVM";networks=[ot,ye,It,lt,et,tt,nt,rt,st,it,at,ct,ut];config;log;constructor(t={}){this.config=t,this.log=t.verbose?console.log.bind(console,"[x402:evm]"):()=>{}}canHandle(t){return!!(this.networks.includes(t)||t==="base"||t==="bsc"||t==="ethereum"||t==="arbitrum"||t==="polygon"||t==="optimism"||t==="avalanche"||t==="world"||t==="monad"||t==="robinhood"||t==="skale-base"||t==="skale-base-sepolia"||t.startsWith("eip155:"))}getDefaultRpcUrl(t){return this.config.rpcUrls?.[t]?this.config.rpcUrls[t]:U[t]?U[t]:t==="base"?U[ye]:t==="bsc"?U[ot]:t==="ethereum"?U[lt]:t==="arbitrum"?U[et]:t==="polygon"?U[tt]:t==="optimism"?U[nt]:t==="avalanche"?U[rt]:t==="world"?U[st]:t==="monad"?U[it]:t==="robinhood"?U[at]:t==="skale-base"?U[ct]:t==="skale-base-sepolia"?U[ut]:U[ye]}getAddress(t){return Se(t)?t.address:null}isConnected(t){return Se(t)?!!t.address:!1}getChainId(t){if(pt[t])return pt[t];if(t.startsWith("eip155:")){let r=t.split(":")[1];return parseInt(r,10)}return t==="base"?8453:t==="bsc"?56:t==="ethereum"?1:t==="arbitrum"?42161:t==="polygon"?137:t==="optimism"?10:t==="avalanche"?43114:t==="world"?480:t==="monad"?143:t==="robinhood"?4663:t==="skale-base"?1187947933:t==="skale-base-sepolia"?324705682:8453}async getBalance(t,r,n){if(!Se(r)||!r.address)return 0;let o=n||this.getDefaultRpcUrl(t.network);try{let a=this.encodeBalanceOf(r.address),i=await fetch(o,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:t.asset,data:a},"latest"]})});if(!i.ok)throw new Error(`RPC request failed: ${i.status}`);let s=await i.json();if(s.error)throw new Error(`RPC error: ${JSON.stringify(s.error)}`);if(!s.result||s.result==="0x")return 0;let c=BigInt(s.result),u=t.extra?.decimals??6;return Number(c)/Math.pow(10,u)}catch(a){throw a}}encodeBalanceOf(t){let r="0x70a08231",n=t.slice(2).toLowerCase().padStart(64,"0");return r+n}async confirmSettlement(t,r){if(t.kind==="eip3009"){let n="0xe94a0102",o=t.from.slice(2).toLowerCase().padStart(64,"0"),a=t.nonce.slice(2).toLowerCase().padStart(64,"0"),i=n+o+a,s=await this.ethCall(r,t.asset,i);return{settled:BigInt(s)!==0n}}if(t.kind==="permit2"){let n="0x4fe02b44",o=BigInt(t.nonce),a=o>>8n,i=o&0xffn,s=t.from.slice(2).toLowerCase().padStart(64,"0"),c=a.toString(16).padStart(64,"0"),u=n+s+c,d=await this.ethCall(r,ee,u);return{settled:(BigInt(d)>>i&1n)===1n}}throw new Error(`EvmAdapter.confirmSettlement cannot handle probe kind "${t.kind}"`)}async ethCall(t,r,n){let o=await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:n},"latest"]})});if(!o.ok)throw new Error(`RPC request failed: ${o.status}`);let a=await o.json();if(a.error)throw new Error(`RPC error: ${JSON.stringify(a.error)}`);if(!a.result||a.result==="0x")throw new Error("RPC returned an empty result");return a.result}async buildTransaction(t,r,n){let o=z(t,"evm");if(o)throw new Error(o);if(!Se(r))throw new Error("Invalid EVM wallet");if(!r.address)throw new Error("Wallet not connected");if(t.scheme==="exact-approval")return this.buildApprovalTransaction(t,r,n);if(t.extra?.assetTransferMethod==="permit2")return this.buildPermit2Transaction(t,r,n);let{payTo:a,asset:i,extra:s}=t,c=t.amount??t.maxAmountRequired;if(!c)throw new Error("Missing amount in payment requirements");this.log("Building EVM transaction:",{from:r.address,to:a,amount:c,asset:i,network:t.network});let u=this.getChainId(t.network),d=Nt[`eip155:${u}`],g={name:s?.name??d?.name??"USD Coin",version:s?.version??d?.version??"2",chainId:BigInt(u),verifyingContract:i},f={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]},y=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(y);let m="0x"+[...y].map(_=>_.toString(16).padStart(2,"0")).join(""),l=Math.floor(Date.now()/1e3),v={from:r.address,to:a,value:c,validAfter:String(l-600),validBefore:String(l+(t.maxTimeoutSeconds||60)),nonce:m},x={from:r.address,to:a,value:BigInt(c),validAfter:BigInt(l-600),validBefore:BigInt(l+(t.maxTimeoutSeconds||60)),nonce:m};if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");let p=await r.signTypedData({domain:g,types:f,primaryType:"TransferWithAuthorization",message:x});return this.log("EIP-712 signature obtained"),{serialized:JSON.stringify({authorization:v,signature:p}),signature:p,settlementProbe:{kind:"eip3009",from:v.from,to:v.to,amount:v.value,nonce:m,asset:i,chainId:u}}}async buildApprovalTransaction(t,r,n){let{payTo:o,asset:a,extra:i}=t,s=t.amount??t.maxAmountRequired;if(!s)throw new Error("Missing amount in payment requirements");let c=i?.facilitatorContract;if(!c)throw new Error("exact-approval scheme requires extra.facilitatorContract from the facilitator. The /supported endpoint should provide this.");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building approval-based transaction:",{from:r.address,to:o,amount:s,asset:a,network:t.network,facilitatorContract:c});let u=n||this.getDefaultRpcUrl(t.network),d=i?.fee??"0",g=BigInt(s)+BigInt(d),f=await this.readAllowance(u,a,r.address,c);if(f<g){if(!r.sendTransaction)throw new Error("BSC payments require a wallet that supports sendTransaction for the one-time token approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.");let N=this.calculateApprovalAmount(s,d,i?.approvalStrategy);this.log(`Approving ${N} for ${c} (current allowance: ${f})`);let A=await r.sendTransaction({to:a,data:this.encodeApprove(c,N),value:0n});this.log(`Approval tx sent: ${A}`),await this.waitForReceipt(u,A),this.log("Approval confirmed")}else this.log("Sufficient allowance, skipping approval");let y=new Uint8Array(16);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(y);let m=[...y].reduce((N,A)=>N*256n+BigInt(A),0n).toString(),l=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(l);let v="0x"+[...l].map(N=>N.toString(16).padStart(2,"0")).join(""),p=Math.floor(Date.now()/1e3)+(t.maxTimeoutSeconds||300),h=i?.eip712Domain,_=h?{name:h.name,version:h.version,chainId:BigInt(h.chainId),verifyingContract:h.verifyingContract}:{name:"DexterBSCFacilitator",version:"1",chainId:BigInt(this.getChainId(t.network)),verifyingContract:c},S=i?.eip712Types??{Payment:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"token",type:"address"},{name:"amount",type:"uint256"},{name:"fee",type:"uint256"},{name:"nonce",type:"uint256"},{name:"deadline",type:"uint256"},{name:"paymentId",type:"bytes32"}]},q={from:r.address,to:o,token:a,amount:BigInt(s),fee:BigInt(d),nonce:BigInt(m),deadline:BigInt(p),paymentId:v},F=await r.signTypedData({domain:_,types:S,primaryType:"Payment",message:q});this.log("EIP-712 Payment signature obtained");let P={from:r.address,to:o,token:a,amount:s,fee:d,nonce:m,deadline:p,paymentId:v,signature:F};return{serialized:JSON.stringify(P),signature:F}}async buildPermit2Transaction(t,r,n){let{payTo:o,asset:a}=t,i=t.amount??t.maxAmountRequired;if(!i)throw new Error("Missing amount in payment requirements");if(!r.signTypedData)throw new Error("Wallet does not support signTypedData (EIP-712)");this.log("Building Permit2 transaction:",{from:r.address,to:o,amount:i,asset:a,network:t.network});let s=n||this.getDefaultRpcUrl(t.network),c=await this.readAllowance(s,a,r.address,ee),u;if(c<BigInt(i)){let _=this.encodeApprove(ee,kn);if(r.signTransaction){this.log(`Signing Permit2 approval for relay (current allowance: ${c})`);let S=this.getChainId(t.network),q=await this.readGasPrice(s),F=await this.readNonce(s,r.address),P=await r.signTransaction({to:a,data:_,chainId:S,gas:50000n,gasPrice:q,nonce:F});u={erc20ApprovalGasSponsoring:{info:{from:r.address,asset:a,spender:ee,amount:kn.toString(),signedTransaction:P,version:"1"}}},this.log("Permit2 approval signed for facilitator relay")}else if(r.sendTransaction){this.log(`Approving Permit2 directly (current allowance: ${c})`);let S=await r.sendTransaction({to:a,data:_,value:0n});this.log(`Permit2 approval tx sent: ${S}`),await this.waitForReceipt(s,S),this.log("Permit2 approval confirmed")}else throw new Error("Permit2 payments require a wallet that supports signTransaction or sendTransaction for the one-time Permit2 approval. Use createEvmKeypairWallet() or a browser wallet with transaction support.")}else this.log("Sufficient Permit2 allowance, skipping approval");let d=new Uint8Array(32);(globalThis.crypto??(await import("crypto")).webcrypto).getRandomValues(d);let g=[...d].reduce((_,S)=>_*256n+BigInt(S),0n),f=Math.floor(Date.now()/1e3),y=f-600,m=f+(t.maxTimeoutSeconds||300),l=this.getChainId(t.network),v={name:"Permit2",chainId:BigInt(l),verifyingContract:ee},x={permitted:{token:a,amount:BigInt(i)},spender:dt,nonce:g,deadline:BigInt(m),witness:{to:o,validAfter:BigInt(y)}},p=await r.signTypedData({domain:v,types:ho,primaryType:"PermitWitnessTransferFrom",message:x});this.log("Permit2 PermitWitnessTransferFrom signature obtained");let h={signature:p,permit2Authorization:{from:r.address,permitted:{token:a,amount:i},spender:dt,nonce:g.toString(),deadline:String(m),witness:{to:o,validAfter:String(y)}}};return{serialized:JSON.stringify(h),signature:p,extensions:u,settlementProbe:{kind:"permit2",from:r.address,nonce:g.toString(),chainId:l}}}async readAllowance(t,r,n,o){let a="0xdd62ed3e",i=n.slice(2).toLowerCase().padStart(64,"0"),s=o.slice(2).toLowerCase().padStart(64,"0"),c=a+i+s;try{let d=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:r,data:c},"latest"]})})).json();return d.error||!d.result||d.result==="0x"?0n:BigInt(d.result)}catch{return 0n}}encodeApprove(t,r){let n="0x095ea7b3",o=t.slice(2).toLowerCase().padStart(64,"0"),a=r.toString(16).padStart(64,"0");return n+o+a}async waitForReceipt(t,r,n=3e4){let o=Date.now();for(;Date.now()-o<n;){try{let i=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionReceipt",params:[r]})})).json();if(i.result){if(i.result.status==="0x0")throw new Error(`Approval transaction reverted: ${r}`);return}}catch(a){if(a instanceof Error&&a.message.includes("reverted"))throw a}await new Promise(a=>setTimeout(a,2e3))}throw new Error(`Approval transaction receipt timeout after ${n}ms: ${r}`)}async readGasPrice(t){try{let n=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_gasPrice",params:[]})})).json();return n.result?BigInt(n.result):50000000n}catch{return 50000000n}}async readNonce(t,r){try{let o=await(await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:"eth_getTransactionCount",params:[r,"latest"]})})).json();return o.result?parseInt(o.result,16):0}catch{return 0}}calculateApprovalAmount(t,r,n){let o=BigInt(t)+BigInt(r);if(!n||n.mode==="exact")return o;let a=BigInt(n.defaultMultiple??10),i=o*a;if(n.maxCapUsd){let s=this.inferDecimals(t),c=BigInt(Math.floor(n.maxCapUsd*Math.pow(10,s)));if(i>c)return c}if(n.exactAboveUsd){let s=this.inferDecimals(t),c=BigInt(Math.floor(n.exactAboveUsd*Math.pow(10,s)));if(BigInt(t)>c)return o}return i}inferDecimals(t){return t.length>12?18:6}};function Le(e){return new Bt(e)}function ln(e){if(e===mt||e===In)return!0;let t=e.toLowerCase();for(let r of Object.values(Fe))if(r.toLowerCase()===t)return!0;for(let r of Object.keys(Ct))if(r.toLowerCase()===t)return!0;return!1}function yo(e){return{[Ye]:"Solana",[Et]:"Solana Devnet",[Pt]:"Solana Testnet",solana:"Solana","solana-devnet":"Solana Devnet","solana-testnet":"Solana Testnet",[me]:"Base",[ke]:"Base Sepolia",[Ke]:"Ethereum",[Oe]:"Arbitrum",[Be]:"Polygon",[Ue]:"Optimism",[De]:"Avalanche",[Me]:"BSC",[de]:"World Chain",[pe]:"Monad",[fe]:"Robinhood Chain",[ge]:"SKALE Base",[he]:"SKALE Base Sepolia",base:"Base","base-sepolia":"Base Sepolia",ethereum:"Ethereum",arbitrum:"Arbitrum",polygon:"Polygon",optimism:"Optimism",avalanche:"Avalanche",bsc:"BSC",world:"World Chain",monad:"Monad",robinhood:"Robinhood Chain","skale-base":"SKALE Base","skale-base-sepolia":"SKALE Base Sepolia"}[e]||e}function On(e,t){let r=yo(e);return r===e?t:r}async function Ao(e,t){if(typeof e=="string")return[e,t];if(e instanceof URL)return[e.href,t];let r=e,n=new Headers(r.headers);t?.headers&&new Headers(t.headers).forEach((i,s)=>n.set(s,i));let o={method:t?.method??r.method,headers:n,signal:t?.signal??r.signal,redirect:t?.redirect??r.redirect,credentials:t?.credentials??r.credentials},a=(o.method??"GET").toUpperCase();return t&&"body"in t?o.body=t.body:a!=="GET"&&a!=="HEAD"&&r.body&&(o.body=await r.arrayBuffer()),[r.url,o]}var Bn=new WeakMap;function Un(e){return Bn.get(e)}function mn(e){if(!(e.length>16384))try{let t=e.trimStart().startsWith("{")?JSON.parse(e):on(e);return t&&typeof t=="object"&&!Array.isArray(t)?t:void 0}catch{return}}function bo(e,t){let r=e.headers.get("PAYMENT-RESPONSE")??e.headers.get("X-PAYMENT-RESPONSE"),n;if(r)try{let s=mn(r);s&&typeof s=="object"&&!Array.isArray(s)&&(n={...s})}catch{}n??={},delete n.chainConfirmation,n.settlementStatus="unconfirmed";let o=n.network===t.network,a=[n.errorReason,n.errorCode,n.errorMessage].every(s=>s===void 0||typeof s=="string"),i=[n.errorReason,n.errorCode].filter(s=>typeof s=="string"&&s.length>0);return i.some(s=>/pending|unknown|unconfirmed|timeout|temporar/i.test(s))?n.settlementStatus="pending":n.success===!0&&o&&a&&i.length===0&&typeof n.transaction=="string"&&n.transaction.trim().length>0?n.settlementStatus="settled":n.success===!1&&(o||n.network===void 0)&&i.length>0&&(n.settlementStatus="failed"),n.attemptedAmountAtomic=t.amountAtomic,n.settlementStatus==="settled"?n.amountAtomic=t.amountAtomic:delete n.amountAtomic,n.assetDecimals=t.assetDecimals,Bn.set(e,n),n}function Dn(e){let{adapters:t=[te({verbose:e.verbose}),Le({verbose:e.verbose})],wallets:r,wallet:n,preferredNetwork:o,rpcUrls:a={},maxAmountAtomic:i,fetch:s=globalThis.fetch,verbose:c=!1,accessPass:u,onPaymentRequired:d,onPaymentDispatched:g,maxRetries:f=0,retryDelayMs:y=500}=e,m=c?console.log.bind(console,"[x402]"):()=>{};async function l(A,w){let R;for(let E=0;E<=f;E++)try{let C=await s(A,w);if(C.status>=502&&C.status<=504&&E<f){m(`Retry ${E+1}/${f}: server returned ${C.status}`),await new Promise(V=>setTimeout(V,y*Math.pow(2,E)));continue}return C}catch(C){R=C,E<f&&(m(`Retry ${E+1}/${f}: ${C instanceof Error?C.message:"network error"}`),await new Promise(V=>setTimeout(V,y*Math.pow(2,E))))}throw R}let v=new Map;function x(A){try{let w=new URL(A).host,R=v.get(w);if(R&&R.expiresAt>Date.now()/1e3+10)return R.jwt;R&&v.delete(w)}catch{}return null}function p(A,w){try{let R=new URL(A).host,E=w.split(".");if(E.length===3){let C=JSON.parse(atob(E[1].replace(/-/g,"+").replace(/_/g,"/"))),V=Math.floor(Date.now()/1e3),k=V+86400,H=Math.min(typeof C.exp=="number"?C.exp:V,k);v.set(R,{jwt:w,expiresAt:H}),m("Access pass cached for",R,"| expires:",new Date(H*1e3).toISOString())}}catch{m("Failed to cache access pass")}}let h=r||{};n&&!h.solana&&ve(n)&&(h.solana=n),n&&!h.evm&&Se(n)&&(h.evm=n);function _(A){let w=[];for(let R of A){let E=t.find(k=>k.canHandle(R.network));if(!E)continue;let C=E.name==="Solana"?"svm":"evm";if(z(R,C))continue;let V;E.name==="Solana"?V=h.solana:E.name==="EVM"&&(V=h.evm),V&&E.isConnected(V)&&w.push({accept:R,adapter:E,wallet:V})}if(w.length===0)return null;if(o){let R=w.find(E=>E.accept.network===o);if(R)return R}return w[0]}function S(A,w){return On(A,w)}function q(A,w){return a[A]||w.getDefaultRpcUrl(A)}async function F(A,w,R,E,C){let V="";if(u?.preferTier&&E.tiers){let T=E.tiers.find(j=>j.id===u.preferTier);if(T){if(u.maxSpend&&parseFloat(T.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Access pass tier "${T.id}" costs $${T.price}, exceeds max spend $${u.maxSpend}`);V=`tier=${T.id}`}}else if(u?.preferDuration&&E.ratePerHour)V=`duration=${u.preferDuration}`;else if(E.tiers&&E.tiers.length>0){let T=E.tiers[0];if(u?.maxSpend&&parseFloat(T.price)>parseFloat(u.maxSpend))throw new O("access_pass_exceeds_max_spend",`Cheapest access pass costs $${T.price}, exceeds max spend $${u?.maxSpend}`);V=`tier=${T.id}`}let k=V?C.includes("?")?`${C}&${V}`:`${C}?${V}`:C;m("Purchasing access pass:",V||"default tier");let H=R.headers.get("PAYMENT-REQUIRED");if(!H)return null;let L;try{L=JSON.parse(atob(H))}catch{return null}let M=_(L.accepts);if(!M)return null;if(ft(L.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let{accept:B,adapter:W,wallet:we}=M;if(W.name==="Solana"&&!B.extra?.feePayer)return null;let X=B.extra?.decimals??(ln(B.asset)?6:void 0);if(typeof X!="number")return null;let $e=B.amount??B.maxAmountRequired;if(!$e)return null;let J=q(B.network,W);try{let T=await W.getBalance(B,we,J),j=Number($e)/Math.pow(10,X);if(T<j){let zn=S(B.network,W.name);throw new O("insufficient_balance",`Insufficient balance for access pass on ${zn}. Have $${T.toFixed(4)}, need $${j.toFixed(4)}`)}}catch(T){if(T instanceof O)throw T}let Y=await W.buildTransaction(B,we,J),_e;W.name==="EVM"?_e=JSON.parse(Y.serialized):_e={transaction:Y.serialized};let ne=typeof A=="string"?A:A instanceof URL?A.href:A.url,xe=L.resource;if(typeof L.resource=="string")try{let T=new URL(L.resource,ne);["http:","https:"].includes(T.protocol)&&(xe=T.toString())}catch{}else if(L.resource&&typeof L.resource=="object"&&"url"in L.resource){let T=L.resource;try{let j=new URL(T.url,ne);["http:","https:"].includes(j.protocol)&&(xe={...T,url:j.toString()})}catch{}}let yt={x402Version:B.x402Version??2,resource:xe,accepted:B,payload:_e};Y.extensions&&(yt.extensions=Y.extensions);let qe=btoa(JSON.stringify(yt)),re=await s(k,{...w,method:"POST",headers:{...w?.headers||{},"Content-Type":"application/json","PAYMENT-SIGNATURE":qe}});if(!re.ok)return m("Pass purchase failed:",re.status),null;let I=re.headers.get("ACCESS-PASS");return I&&(p(C,I),m("Access pass purchased and cached")),re}async function P(A,w){let R=A;if(m("Making request:",R),u){let I=x(R);if(I){m("Using cached access pass");let T=await s(A,{...w,headers:{...w?.headers||{},Authorization:`Bearer ${I}`}});if(T.status!==401&&T.status!==402)return T;m("Cached pass rejected (status",T.status,"), purchasing new pass");try{v.delete(new URL(R).host)}catch{}}}let E=await l(A,w);if(E.status!==402)return E;m("Received 402 Payment Required");let C=E.headers.get("X-ACCESS-PASS-TIERS");if(u&&C){m("Server offers access passes, purchasing...");try{let I=JSON.parse(atob(C)),T=await F(A,w,E,I,R);if(T)return T}catch(I){m("Access pass purchase failed, falling back to per-request payment:",I)}}let V=E.headers.get("PAYMENT-REQUIRED");if(!V)throw new O("missing_payment_required_header","Server returned 402 but no PAYMENT-REQUIRED header");let k;try{let I=atob(V);k=JSON.parse(I)}catch{throw new O("invalid_payment_required","Failed to decode PAYMENT-REQUIRED header")}if(m("Payment requirements:",k),ft(k.extensions))throw new O("unsupported_required_payment_identifier","Required payment identifiers are not supported by this client");let H=E.headers.get("X-Quote-Hash");H&&m("Quote hash received:",H);let L=_(k.accepts);if(!L){let I=k.accepts.map(T=>T.network).join(", ");throw new O("no_matching_payment_option",`No supported payment option with a connected wallet for: ${I}`)}let{accept:M,adapter:B,wallet:W}=L;if(m(`Using ${B.name} for ${M.network}`),B.name==="Solana"&&!M.extra?.feePayer)throw new O("missing_fee_payer","Solana payment option missing feePayer in extra");let we=M.extra?.decimals??(ln(M.asset)?6:void 0);if(typeof we!="number")throw new O("missing_decimals","Payment option missing decimals - provide in extra or use a known stablecoin");let X=M.amount??M.maxAmountRequired;if(!X)throw new O("missing_amount","Payment option missing amount");if(i&&BigInt(X)>BigInt(i))throw new O("amount_exceeds_max",`Payment amount ${X} exceeds maximum ${i}`);let $e=q(M.network,B);m("Checking balance...");try{let I=await B.getBalance(M,W,$e),T=Number(X)/Math.pow(10,we);if(I<T){let j=S(M.network,B.name);throw new O("insufficient_balance",`Insufficient balance on ${j}. Have $${I.toFixed(4)}, need $${T.toFixed(4)}`)}m(`Balance OK: $${I.toFixed(4)} >= $${T.toFixed(4)}`)}catch(I){if(I instanceof O)throw I;m("Balance check failed (RPC error), proceeding with transaction attempt")}if(d&&!await d(M))throw new O("payment_rejected","Payment rejected by onPaymentRequired callback");m("Building transaction...");let J=await B.buildTransaction(M,W,$e);m("Transaction signed");let Y;B.name==="EVM"?Y=JSON.parse(J.serialized):Y={transaction:J.serialized};let _e=A,ne=k.resource;if(typeof k.resource=="string")try{let I=new URL(k.resource,_e).toString();I!==k.resource&&m("Resolved relative resource URL:",k.resource,"\u2192",I),ne=I}catch{ne=k.resource}else if(k.resource&&typeof k.resource=="object"&&"url"in k.resource){let I=k.resource;try{let T=new URL(I.url,_e).toString();T!==I.url&&(m("Resolved relative resource URL:",I.url,"\u2192",T),ne={...I,url:T})}catch{}}let xe={x402Version:M.x402Version??2,resource:ne,accepted:M,payload:Y};J.extensions&&(xe.extensions=J.extensions);let yt=btoa(JSON.stringify(xe));if(g)try{g(M,J.settlementProbe)}catch{}m("Retrying request with payment...");let qe=await l(A,{...w,headers:{...w?.headers||{},"PAYMENT-SIGNATURE":yt,...H?{"X-Quote-Hash":H}:{}}});m("Retry response status:",qe.status);let re=bo(qe,{network:M.network,amountAtomic:X,assetDecimals:we});return re.extensions&&m("Settlement extensions:",Object.keys(re.extensions).join(", ")),qe}async function N(A,w){let[R,E]=await Ao(A,w);return P(R,E)}return{fetch:N}}function G(e){if(e instanceof Error){if(e.message&&e.message.length>0)return e.message;if(e.name&&e.name.length>0)return e.name}let t=String(e);return t.length>0?t:"unknown error"}async function gt(e){let t="";try{t=(await e.clone().text()).slice(0,600)}catch{}let r=t.toLowerCase(),n=r.includes("settle")||r.includes("facilitator"),o=t;try{let a=JSON.parse(t),i=[a.error,a.detail,a.message].filter(s=>typeof s=="string"&&s.length>0);i.length>0&&(o=i.join(" \u2014 "))}catch{}return o||(o=`HTTP ${e.status}`),{reason:n?"settlement_failed":"merchant_rejected",detail:`merchant HTTP ${e.status}: ${o}`}}var Ut="Payment authorization was sent, but the merchant did not respond within the timeout. ",Dt=" Do not retry without checking \u2014 inspect the funding wallet for a transfer to the merchant before attempting payment again.";async function Mt(e,t,r){if(!e)return{confirmed:!1,detail:Ut+"This payment scheme has no on-chain confirmation check, so the SDK cannot verify whether it settled."+Dt};try{if(e.kind==="solana"){let i=te(),s=r??i.getDefaultRpcUrl(t.caip2);if(!i.confirmSettlement)return Kn();let c=await i.confirmSettlement(e,s);return c.settled?{confirmed:!0,txSignature:c.txSignature}:Mn()}let n=Le(),o=n.getDefaultRpcUrl(t.caip2);if(!n.confirmSettlement)return Kn();let a=await n.confirmSettlement(e,o);return a.settled?{confirmed:!0,txSignature:a.txSignature}:Mn()}catch(n){return{confirmed:!1,detail:Ut+`On-chain confirmation could not be completed (${G(n)}).`+Dt}}}function Mn(){return{confirmed:!1,detail:Ut+"On-chain confirmation found no matching settlement yet \u2014 the payment may still be pending, or may not have settled."+Dt}}function Kn(){return{confirmed:!1,detail:Ut+"The chain adapter does not support on-chain confirmation."+Dt}}import{keccak_256 as vo}from"@noble/hashes/sha3";import{bytesToHex as So}from"@noble/hashes/utils";var Ft=/^0x[0-9a-f]{64}$/i,Fn=/^0x[0-9a-f]{40}$/i,wo=/^0x(?:0|[1-9a-f][0-9a-f]*)$/i,Ln=e=>`0x${So(vo(new TextEncoder().encode(e)))}`,_o=Ln("AuthorizationUsed(address,bytes32)"),xo=Ln("Transfer(address,address,uint256)"),dn=e=>`0x${e.slice(2).toLowerCase().padStart(64,"0")}`,D=(e,t)=>typeof e=="string"&&e.toLowerCase()===t.toLowerCase(),ht=e=>!!e&&typeof e=="object"&&!Array.isArray(e),Kt=e=>typeof e=="string"&&wo.test(e);function Ro(e,t,r,n){let o;for(let a of["PAYMENT-RESPONSE","X-PAYMENT-RESPONSE"]){let i=e.headers.get(a);if(i===null)continue;let s=mn(i);if(!s||typeof s.transaction!="string"||!Ft.test(s.transaction)||s.success!==void 0&&s.success!==!0||s.network!==void 0&&s.network!==t||s.settlementStatus!==void 0&&s.settlementStatus!=="settled"||[s.errorReason,s.errorCode,s.errorMessage].some(c=>c!==void 0&&c!=="")||s.payer!==void 0&&!D(s.payer,r)||[s.amountAtomic,s.attemptedAmountAtomic].some(c=>c!==void 0&&c!==n)||s.assetDecimals!==void 0&&s.assetDecimals!==6||s.success===!0&&s.network===t||o&&!D(s.transaction,o))return;o=s.transaction}return o}async function To(e,t){if(!e.ok||!e.body)throw new Error("RPC response unavailable");let r=e.body.getReader(),n=()=>{r.cancel().catch(()=>{})};t.addEventListener("abort",n,{once:!0});let o=[],a=0;try{for(;;){if(t.aborted)throw new Error("RPC confirmation aborted");let c=await r.read();if(c.done)break;if(a+=c.value.byteLength,a>1048576)throw new Error("RPC response too large");o.push(c.value)}let i=new Uint8Array(a),s=0;for(let c of o)i.set(c,s),s+=c.byteLength;return JSON.parse(new TextDecoder().decode(i))}finally{t.removeEventListener("abort",n),n()}}async function $n(e,t,r,n){if(t.settlementStatus!=="unconfirmed"||r?.kind!=="eip3009"||n.scheme!=="exact"||n.extra?.assetTransferMethod!==void 0&&n.extra.assetTransferMethod!=="eip3009")return;let o=`eip155:${r.chainId}`,a=Fe[o],i=U[o],s=n.amount??n.maxAmountRequired;if(!i||!a||n.network!==o||!D(r.asset,a)||!D(n.asset,r.asset)||!Fn.test(r.from)||!r.to||!Fn.test(r.to)||!D(n.payTo,r.to)||!s||!/^[0-9]+$/.test(s)||s!==r.amount||!Ft.test(r.nonce))return;let c=Ro(e,o,r.from,s);if(!c)return;let u=new AbortController,d,g=new Promise((m,l)=>{d=setTimeout(()=>{u.abort(),l(new Error("RPC confirmation timed out"))},5e3)}),f=0,y=async(m,l)=>{let v=++f,x=async()=>{let p=await fetch(i,{method:"POST",signal:u.signal,headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:v,method:m,params:l})}),h=await To(p,u.signal);if(!ht(h)||h.jsonrpc!=="2.0"||h.id!==v||h.error)throw new Error("Invalid RPC response");return h.result};return Promise.race([x(),g])};try{let[m,l,v]=await Promise.all([y("eth_chainId",[]),y("eth_getTransactionReceipt",[c]),y("eth_getTransactionByHash",[c])]);if(!Kt(m)||BigInt(m)!==BigInt(r.chainId)||!ht(l)||!ht(v)||l.status!=="0x1"||!D(l.transactionHash,c)||!D(v.hash,c)||typeof l.blockHash!="string"||!Ft.test(l.blockHash)||!D(v.blockHash,l.blockHash)||!Kt(l.blockNumber)||v.blockNumber!==l.blockNumber||!Kt(l.transactionIndex)||v.transactionIndex!==l.transactionIndex||v.chainId!==void 0&&(!Kt(v.chainId)||BigInt(v.chainId)!==BigInt(r.chainId)))return;let x=Number(BigInt(l.transactionIndex));if(!Number.isSafeInteger(x))return;let p=await y("eth_getBlockByNumber",[l.blockNumber,!1]);if(!ht(p)||!D(p.hash,l.blockHash)||p.number!==l.blockNumber||!Array.isArray(p.transactions)||!D(p.transactions[x],c)||!Array.isArray(l.logs))return;let h=!1,_=!1;for(let S of l.logs){if(!ht(S)||S.removed!==void 0&&S.removed!==!1||!D(S.blockHash,l.blockHash)||S.blockNumber!==l.blockNumber||!D(S.transactionHash,c)||S.transactionIndex!==l.transactionIndex||!Array.isArray(S.topics))return;if(D(S.address,r.asset)&&(D(S.topics[0],_o)&&S.topics.length===3&&D(S.topics[1],dn(r.from))&&D(S.topics[2],r.nonce)&&S.data==="0x"&&(h=!0),D(S.topics[0],xo)&&D(S.topics[1],dn(r.from)))){if(_||S.topics.length!==3||!D(S.topics[2],dn(r.to))||typeof S.data!="string"||!Ft.test(S.data)||BigInt(S.data)!==BigInt(s))return;_=!0}}if(!h||!_)return;t.settlementStatus="settled",t.amountAtomic=s,t.chainConfirmation={source:"eip3009_transaction",finality:"included",network:o,blockHash:l.blockHash,blockNumber:l.blockNumber,authorizationNonce:r.nonce}}catch{}finally{clearTimeout(d),u.abort()}}async function Eo(e,t,r,n){let o;try{o=await n.signNextVoucher(r.amount)}catch(c){return n.voucherVersion!==1?{ok:!1,reason:"error",detail:`context-bound FINAL tab voucher was not safely released; retry or reconcile this tab before another payment rail is attempted (${c instanceof Error?c.message:String(c)})`}:null}let a=new Headers(t.headers??void 0);a.set("X-Tab-Voucher",xt(o));let i={...t.redirect!==void 0?{redirect:t.redirect}:{},method:t.method??"GET",headers:a};t.signal&&(i.signal=t.signal),typeof t.body=="string"&&(i.body=t.body);let s;try{s=await fetch(e,i)}catch(c){return{ok:!1,reason:"error",detail:c?.message??String(c)}}return s.status===402?n.voucherVersion!==1?{ok:!1,reason:"error",detail:"seller refused an irrevocable FINAL tab voucher; its exact reservation must be reconciled before another payment rail is attempted"}:n.rollbackVoucher?.call(n,o)!==!0?{ok:!1,reason:"error",detail:"seller refused a V1 tab voucher but local rollback was unavailable or failed; another payment rail was not attempted to avoid double payment"}:null:s.ok?{ok:!0,paid:!0,response:s,amountPaid:r.amount,network:r.network}:{ok:!1,...await gt(s)}}var qn={version:2,async parseChallenge(e){return Tt(e)},async pay(e,t,r,n,o){if(ft(r.extensions))return{ok:!1,reason:"no_payment_options",detail:"unsupported_required_payment_identifier"};if(o.tab){let p=r.options.find(h=>h.scheme==="tab"&&h.network.family==="svm"&&h.payTo===o.tab.counterparty);if(p){let h=await Eo(e,t,p,o.tab);if(h)return h}}let a=r.options.filter(p=>!z(p,p.network.family));if(a.length===0)return{ok:!1,reason:"no_payment_options",detail:`no supported payment capability offered: ${r.options.map(p=>z(p,p.network.family)).join("; ")}`};let i=a.find(p=>p.network.family==="evm"?!!n.evm:p.network.family==="svm"?!!n.solana:!1);if(!i)return{ok:!1,reason:"unsupported_network"};let s=o.timeoutMs??15e3,c=o.responseTimeoutMs??12e4,u=new AbortController,d=setTimeout(()=>u.abort(),s),g=!1,f,y,m=(p,h)=>{g=!0,y=p,f=h,clearTimeout(d),d=setTimeout(()=>u.abort(),c)},l=Dn({wallets:n,preferredNetwork:i.network.caip2,maxAmountAtomic:o.maxAmountAtomic,fetch:globalThis.fetch,onPaymentDispatched:m}),v=t.signal?AbortSignal.any([t.signal,u.signal]):u.signal,x={...t.redirect!==void 0?{redirect:t.redirect}:{},method:t.method??"GET",headers:t.headers,signal:v};typeof t.body=="string"&&(x.body=t.body);try{let p=await l.fetch(e,x);if(clearTimeout(d),!g)return p.ok?{ok:!0,paid:!1,response:p}:{ok:!1,response:p,...await gt(p)};let h=Un(p);h?.settlementStatus==="unconfirmed"&&y&&await $n(p,h,f,y);let _=typeof h?.transaction=="string"?h.transaction:void 0;if(h?.settlementStatus!=="settled"){let S=h?.settlementStatus==="failed";return{ok:!1,reason:S?"settlement_failed":"payment_unconfirmed",detail:`${S?"Merchant reports settlement failure":"Settlement is unconfirmed"}${h?.errorReason||h?.errorCode?` (${h.errorReason??h.errorCode})`:""}. Recover or reconcile this same payment; do not create a new authorization.`,response:p,txSignature:_,paymentReceipt:h}}return p.ok?{ok:!0,paid:!0,response:p,amountPaid:y?.amount??y?.maxAmountRequired??i.amount,network:ue(y?.network??"")??i.network,txSignature:_,paymentReceipt:h}:{ok:!1,reason:"delivery_failed",detail:`Payment settled, but the merchant returned HTTP ${p.status}. Recover the result for this same payment; do not create a new authorization.`,response:p,txSignature:_,paymentReceipt:h}}catch(p){clearTimeout(d);let h=p;if(h?.name==="AbortError"){if(!g)return{ok:!1,reason:"timeout"};let _=await Mt(f,i.network,o.solanaRpcUrl);return _.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:i.amount,network:i.network,txSignature:_.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:_.detail}}return g?{ok:!1,reason:"payment_unconfirmed",detail:`${h?.message??String(p)}. Recover or reconcile this same payment; do not create a new authorization.`}:{ok:!1,reason:"error",detail:h?.message??String(p)}}}};import{getAddress as Po}from"viem";var Io={TransferWithAuthorization:[{name:"from",type:"address"},{name:"to",type:"address"},{name:"value",type:"uint256"},{name:"validAfter",type:"uint256"},{name:"validBefore",type:"uint256"},{name:"nonce",type:"bytes32"}]};async function Vo(){let e=globalThis.crypto??(await import("crypto")).webcrypto,t=new Uint8Array(32);return e.getRandomValues(t),"0x"+Array.from(t,r=>r.toString(16).padStart(2,"0")).join("")}async function Co(e,t,r){if(typeof e.signTypedData!="function")throw new Error("EVM wallet does not support signTypedData");let n=Math.floor(Date.now()/1e3),o=String(n-600),a=String(n+(t.maxTimeoutSeconds??60)),i={from:e.address,to:t.payTo,value:t.amount,validAfter:o,validBefore:a,nonce:await Vo()},s=pt[t.network.caip2];if(s===void 0)throw new Error(`unknown chain id for network ${t.network.caip2}`);let c=t.extra,u=await e.signTypedData({domain:{name:c.name,version:c.version,chainId:s,verifyingContract:Po(t.asset)},types:Io,primaryType:"TransferWithAuthorization",message:i});return{payment:{x402Version:1,scheme:t.scheme,network:r,payload:{signature:u,authorization:i}},settlementProbe:{kind:"eip3009",from:i.from,nonce:i.nonce,asset:t.asset,chainId:s}}}async function pn(e,t,r){try{let n;for(let o of e.options){let a=o.network.family==="evm"&&!!t.evm||o.network.family==="svm"&&!!t.solana;if(o.scheme!=="exact"){a&&(n=o.scheme);continue}if(o.network.family==="evm"&&t.evm){let i=await t.evm;return await No(o,i,r)}if(o.network.family==="svm"&&t.solana){let i=await t.solana;return await ko(o,i,r)}}return n!==void 0?{ok:!1,reason:"merchant_rejected",detail:`v1 supports only the 'exact' scheme, got '${n}'`}:{ok:!1,reason:"unsupported_network"}}catch(n){return{ok:!1,reason:"error",detail:G(n)}}}async function No(e,t,r){if(r.maxAmountAtomic!==void 0&&BigInt(e.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};let n=e.extra??{},o=n.name,a=n.version;if(typeof o!="string"||o.length===0||typeof a!="string"||a.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 challenge missing exact-scheme EIP-712 domain (extra.name / extra.version)"};let i=e.network.bare,{payment:s,settlementProbe:c}=await Co(t,e,i);return{ok:!0,headerValue:Buffer.from(JSON.stringify(s),"utf8").toString("base64"),option:e,settlementProbe:c}}async function ko(e,t,r){if(r.maxAmountAtomic!==void 0&&BigInt(e.amount)>BigInt(r.maxAmountAtomic))return{ok:!1,reason:"budget_exceeded"};if(e.scheme!=="exact")return{ok:!1,reason:"merchant_rejected",detail:`v1 SVM supports only the 'exact' scheme, got '${e.scheme}'`};let n=e.extra??{};if(typeof n.feePayer!="string"||n.feePayer.length===0)return{ok:!1,reason:"merchant_rejected",detail:"v1 SVM challenge missing extra.feePayer (required as the transaction fee payer)"};let o=e.network.bare,a={x402Version:1,scheme:e.scheme,network:o,asset:e.asset,payTo:e.payTo,amount:e.amount,maxAmountRequired:e.amount,maxTimeoutSeconds:e.maxTimeoutSeconds??60,extra:n},s=await te().buildTransaction(a,t,r.solanaRpcUrl),c={x402Version:1,scheme:e.scheme,network:o,payload:{transaction:s.serialized}};return{ok:!0,headerValue:Buffer.from(JSON.stringify(c),"utf8").toString("base64"),option:e,settlementProbe:s.settlementProbe}}function Oo(e){let t=[];for(let r of e){if(!r||typeof r!="object")continue;let n=r,o=ue(String(n.network??""));o&&t.push({scheme:String(n.scheme??"exact"),network:o,amount:String(n.maxAmountRequired??n.amount??"0"),asset:String(n.asset??""),payTo:String(n.payTo??""),maxTimeoutSeconds:typeof n.maxTimeoutSeconds=="number"?n.maxTimeoutSeconds:void 0,extra:n.extra&&typeof n.extra=="object"?n.extra:void 0})}return t}var Hn={version:1,async parseChallenge(e){if(e.headers.get("payment-required"))return null;let t;try{t=await e.clone().json()}catch{return null}let r=Array.isArray(t.accepts)?t.accepts:[];if(r.length===0)return null;let n=Oo(r);return n.length===0?null:{x402Version:1,options:n}},async pay(e,t,r,n,o){let a,i=new AbortController,s=!1,c,u;try{let d=o.timeoutMs??15e3;a=setTimeout(()=>i.abort(),d);let g=await pn(r,n,o);if(!g.ok)return{ok:!1,reason:g.reason,detail:g.detail};let f=g.headerValue,y=g.option;u=y,c=g.settlementProbe;let m=new Headers(t.headers??void 0);m.set("X-PAYMENT",f);let l=t.signal!=null?AbortSignal.any([t.signal,i.signal]):i.signal,v={...t.redirect!==void 0?{redirect:t.redirect}:{},method:t.method,headers:m,signal:l};typeof t.body=="string"&&(v.body=t.body),s=!0,clearTimeout(a);let x=o.responseTimeoutMs??12e4;a=setTimeout(()=>i.abort(),x);let p=await fetch(e,v);return p.ok?{ok:!0,paid:!0,response:p,amountPaid:y.amount,network:y.network,txSignature:Bo(p)}:{ok:!1,...await gt(p)}}catch(d){if(d instanceof Error&&d.name==="AbortError"){if(!s)return{ok:!1,reason:"timeout"};let g=await Mt(c,u.network,o.solanaRpcUrl);return g.confirmed?{ok:!0,paid:!0,response:void 0,amountPaid:u.amount,network:u.network,txSignature:g.txSignature}:{ok:!1,reason:"payment_unconfirmed",detail:g.detail}}return{ok:!1,reason:"error",detail:G(d)}}finally{a!==void 0&&clearTimeout(a)}}};function Bo(e){let t=e.headers.get("x-payment-response")??e.headers.get("X-PAYMENT-RESPONSE");if(t)try{let r=JSON.parse(Buffer.from(t,"base64").toString("utf8")),n=r.transaction??r.txHash??r.transactionHash;return typeof n=="string"?n:void 0}catch{return}}import*as jn from"tweetnacl";import{Keypair as Yi,VersionedTransaction as Qi,Transaction as Zi}from"@solana/web3.js";var Wn=Symbol.for("x402:keypair");function fn(e){let t=e.evm;if(t&&typeof t.signMessage=="function"&&typeof t.address=="string")return{address:t.address,signMessage:t.signMessage};let r=e.solana;if(r){let n=r[Wn];if(n&&n.secretKey&&n.publicKey)return{publicKey:n.publicKey,signMessage:async o=>jn.sign.detached(o,n.secretKey)}}return null}import{decodePaymentRequiredHeader as Uo}from"@x402/core/http";var Do=[qn,Hn];async function Mo(e){let t=async(o,a)=>({response:await fetch(o,a),paymentUrl:o,paymentInit:a}),r=fn(e);if(!r)return t;let n;try{n=await import("@x402/extensions/sign-in-with-x")}catch(o){return console.warn(`[x402] SIW-X unavailable \u2014 @x402/extensions failed to load; SIW-X merchants will not authenticate. ${G(o)}`),t}return async(o,a)=>{let i=new Request(o,a),s=i.clone(),c=await fetch(i),u={response:c,paymentUrl:o,paymentInit:a};if(c.status!==402)return u;let d=c.headers.get("PAYMENT-REQUIRED");if(!d)return u;let g=Uo(d),f=g.extensions?.[n.SIGN_IN_WITH_X];if(!f?.supportedChains)return u;if(s.headers.has(n.SIGN_IN_WITH_X))throw new Error("SIWX authentication already attempted");let y=g.accepts?.[0]?.network,m=f.supportedChains.find(_=>_.chainId===y);if(!m)return u;let l=c.url||i.url;if(c.redirected&&!["GET","HEAD"].includes(i.method))throw new Error("SIWX cannot safely replay a redirected non-GET/HEAD request; use the final resource URL");let v={...f.info,chainId:m.chainId,type:m.type};if(n.assertSIWxChallengeBoundToOrigin(v,l),c.redirected||new URL(l).origin!==new URL(i.url).origin)for(let _ of["authorization","cookie","cookie2","proxy-authorization","host"])s.headers.delete(_);let x=new Headers(s.headers),p={response:c,paymentUrl:l,paymentInit:{...a,headers:Object.fromEntries(x),redirect:"error"}};try{let _=await n.createSIWxPayload(v,r,l);s.headers.set(n.SIGN_IN_WITH_X,n.encodeSIWxHeader(_))}catch{return p}let h=new Request(new Request(l,s),{redirect:"error"});return{...p,response:await fetch(h)}}}async function gn(e,t,r,n){if(t.body!==void 0&&t.body!==null&&typeof t.body!="string")return{ok:!1,reason:"error",detail:"payAndFetch requires a string body; non-string bodies (Buffer, FormData, URLSearchParams, ReadableStream) cannot be safely re-sent on the paid retry"};let o,a=e,i=t;try{let c=await(await Mo(r))(e,{...t});o=c.response,a=c.paymentUrl,i=c.paymentInit}catch(s){return{ok:!1,reason:"error",detail:G(s)}}if(o.status!==402)return{ok:!0,paid:!1,response:o};for(let s of Do){let c=await s.parseChallenge(o.clone());if(c)return s.pay(a,i,c,r,n)}return{ok:!1,reason:"no_payment_options"}}async function Ko(e,t={},r){let n=await Je(e,t);if(n.kind==="free")return{result:{ok:!0,paid:!1,response:n.response},tab:null};if(n.kind==="no_tab")return{result:{ok:!1,reason:"no_payment_options",detail:`no tab option offered (schemes: ${n.schemesOffered.join(", ")})`},tab:null};if(n.kind==="error")return{result:{ok:!1,reason:"error",detail:n.detail},tab:null};let{offer:o}=n,a=BigInt(ae(r.perUnitCap));if(BigInt(o.amountAtomic)>a)return{result:{ok:!1,reason:"budget_exceeded",detail:`seller quotes ${o.amountAtomic} atomic; perUnitCap allows ${a}`},tab:null};let i=r.tabs?.get(o.payTo);return(!i||!i.state.isOpen)&&(i=await Qt({vault:r.vault,network:"solana:mainnet",seller:o.payTo,perUnitCap:r.perUnitCap,totalCap:r.totalCap,sessionDuration:r.sessionDuration,facilitatorUrl:r.facilitatorUrl,onLiveSession:r.onLiveSession,reserveFinalVoucherV2:r.reserveFinalVoucherV2}),r.tabs?.set(o.payTo,i)),{result:await gn(e,t,{},{tab:i}),tab:i}}function Fo(e){return{counterparty:e.payTo,perRequest:{atomic:e.amountAtomic,human:Ve(e.amountAtomic)},asset:e.asset,network:{caip2:e.networkCaip2},scheme:"tab",settlement:{custody:"non-custodial",protection:"lock",settleOn:"close"},credit:null,...e.resourceUrl!==void 0?{resourceUrl:e.resourceUrl}:{}}}async function Lo(e,t={},r={}){let n=r.cache?.get(e);if(n)return{kind:"terms",terms:n};let o=await Je(e,t,r.fetchImpl??fetch);if(o.kind!=="offer")return o;if(o.offer.asset!==mt)return{kind:"error",detail:`tab offer asset is not USDC ("${o.offer.asset}"); refusing to render a human price`};let a=Fo(o.offer);return r.cache?.set(e,a),{kind:"terms",terms:a}}export{_t as DEFAULT_FACILITATOR_URL,Ie as DEXTER_VAULT_PROGRAM_ID,Jt as FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN,bn as FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX,Gt as FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2,so as HOSTED_TAB_ACCEPTANCE_RULE,ao as HOSTED_TAB_REGISTRATION_ENCODING,oo as HOSTED_TAB_TERMS_VERSION,io as HOSTED_TAB_VOUCHER_HEADER,Q as HistoricalV1MigrationRequiredError,yr as INSTRUCTIONS_SYSVAR_ID,Lt as LiveSessionExistsError,hr as SECP256R1_PROGRAM_ID,Te as SessionScopeExceededError,oe as TabClosedError,Re as UnsupportedNetworkError,wr as armTabOpen,se as assertFinalVoucherV2ReservationReceipt,Ve as atomicToHuman,pr as buildRegisterSessionKeyInstruction,fr as buildRevokeSessionKeyInstruction,gr as buildSecp256r1VerifyInstruction,er as buildVoucherMessage,St as canonicalFinalVoucherV2ReservationNetwork,We as deriveChannelId,wt as finalVoucherV2Digest,wn as finalVoucherV2ReservationBindingDigest,Sn as finalVoucherV2ReservationBindingDigestFromIdentity,je as finalVoucherV2ReservationIdentity,Yt as finalVoucherV2ReservationMemo,Qn as finalVoucherV2Sequence,ir as generateSessionKeypair,ae as humanToAtomic,Wt as makeSessionKey,Qt as openTab,Ee as parseAtomic,Ko as payUrlWithTab,Je as resolveTabOffer,Lo as resolveTabTerms,_r as resumeTab,lr as scopeCapAtomic,He as sessionRegisterMessage,Gn as sessionReplaceV1Message,Xn as sessionRevokeMessage,Yn as sessionVoucherV2AuthorizationNonce,Jn as sessionVoucherV2Nonce,zt as signContextBoundFinalVoucherV2,jt as signVoucher,Qr as tabFromGrant,$t as voucherPayloadMessage,xt as voucherToHeader,Zn as voucherV2SequenceOrdinal};

package/dist/{types-BOEYu6ya.d.cts → types-B-fkCTII.d.cts}

@@ -1,5 +1,5 @@
 import { ClientChannelStorage } from '@x402/evm/batch-settlement/client';
-import { a as EvmWallet } from './types-B4JCwkHH.cjs';
+import { a as EvmWallet } from './types-CEOJ9sFp.cjs';
 
 /**
  * Buyer withdrawal escape hatch for batch-settlement escrow channels.

package/dist/{types-DhCxPFgg.d.ts → types-B4y1Lava.d.ts}

@@ -1,5 +1,5 @@
 import { ClientChannelStorage } from '@x402/evm/batch-settlement/client';
-import { a as EvmWallet } from './types-Ds9IUnXG.js';
+import { a as EvmWallet } from './types-Bm6-yPwi.js';
 
 /**
  * Buyer withdrawal escape hatch for batch-settlement escrow channels.

package/dist/{types-Ds9IUnXG.d.ts → types-Bm6-yPwi.d.ts}

@@ -236,6 +236,9 @@ interface GenericWallet {
 type SettlementProbe = {
     /** EVM EIP-3009 `transferWithAuthorization` — the default `exact` scheme. */
     kind: 'eip3009';
+    /** Exact recipient and amount signed by this attempt; absent in older adapters. */
+    to?: string;
+    amount?: string;
     /** The authorizer (payer) address — `authorization.from`. */
     from: string;
     /** The 32-byte authorization nonce the SDK generated. The unique key. */

package/dist/{types-B4JCwkHH.d.cts → types-CEOJ9sFp.d.cts}

@@ -236,6 +236,9 @@ interface GenericWallet {
 type SettlementProbe = {
     /** EVM EIP-3009 `transferWithAuthorization` — the default `exact` scheme. */
     kind: 'eip3009';
+    /** Exact recipient and amount signed by this attempt; absent in older adapters. */
+    to?: string;
+    amount?: string;
     /** The authorizer (payer) address — `authorization.from`. */
     from: string;
     /** The 32-byte authorization nonce the SDK generated. The unique key. */

package/dist/{types-CTYEYNZO.d.cts → types-CYO2QLUN.d.cts}

@@ -1,6 +1,6 @@
 import { RequestHandler } from 'express';
 import { ChannelStorage } from '@x402/evm/batch-settlement/server';
-import { b as CloseReceipt } from './types-BOEYu6ya.cjs';
+import { b as CloseReceipt } from './types-B-fkCTII.cjs';
 
 /**
  * Result of closing one channel from the seller side. Either a settlement

package/dist/{types-G6MIMJjK.d.cts → types-CnNjeeZP.d.cts}

@@ -1,6 +1,6 @@
-import { W as WalletSet } from './types-B4JCwkHH.cjs';
+import { W as WalletSet } from './types-CEOJ9sFp.cjs';
 import { T as Tab } from './types-D0IFR4Ro.cjs';
-import { P as PaymentReceipt } from './x402-client-Cil4Tmqy.cjs';
+import { P as PaymentReceipt } from './x402-client-zC0XNdb_.cjs';
 
 /**
  * Shared contract for the x402 version seam. Both the v1 and v2 strategy

package/dist/{types-zImyINj3.d.ts → types-CuTmhygi.d.ts}

@@ -1,6 +1,6 @@
-import { W as WalletSet } from './types-Ds9IUnXG.js';
+import { W as WalletSet } from './types-Bm6-yPwi.js';
 import { T as Tab } from './types-D0IFR4Ro.js';
-import { P as PaymentReceipt } from './x402-client-Cil4Tmqy.js';
+import { P as PaymentReceipt } from './x402-client-zC0XNdb_.js';
 
 /**
  * Shared contract for the x402 version seam. Both the v1 and v2 strategy

package/dist/{types-BdUPQzXu.d.ts → types-REjsl5JJ.d.ts}

@@ -1,6 +1,6 @@
 import { RequestHandler } from 'express';
 import { ChannelStorage } from '@x402/evm/batch-settlement/server';
-import { b as CloseReceipt } from './types-DhCxPFgg.js';
+import { b as CloseReceipt } from './types-B4y1Lava.js';
 
 /**
  * Result of closing one channel from the seller side. Either a settlement

package/dist/{x402-client-Cil4Tmqy.d.ts → x402-client-zC0XNdb_.d.cts}

@@ -64,6 +64,15 @@ interface PaymentReceipt {
      * amount: `Number(amountAtomic) / 10 ** assetDecimals`.
      */
     assetDecimals?: number;
+    /** Independent evidence for an incomplete merchant receipt. Inclusion is not finality. */
+    chainConfirmation?: {
+        source: 'eip3009_transaction';
+        finality: 'included';
+        network: string;
+        blockHash: string;
+        blockNumber: string;
+        authorizationNonce: string;
+    };
 }
 /**
  * Get the x402 payment receipt from a response, or undefined if none.

package/dist/{x402-client-Cil4Tmqy.d.cts → x402-client-zC0XNdb_.d.ts}

@@ -64,6 +64,15 @@ interface PaymentReceipt {
      * amount: `Number(amountAtomic) / 10 ** assetDecimals`.
      */
     assetDecimals?: number;
+    /** Independent evidence for an incomplete merchant receipt. Inclusion is not finality. */
+    chainConfirmation?: {
+        source: 'eip3009_transaction';
+        finality: 'included';
+        network: string;
+        blockHash: string;
+        blockNumber: string;
+        authorizationNonce: string;
+    };
 }
 /**
  * Get the x402 payment receipt from a response, or undefined if none.