@fatstack/x402 0.0.1 → 0.1.1

package/dist/index.d.cts

@@ -0,0 +1,117 @@
+export { D as DEFAULT_FACILITATOR_URL, a as DOCS_URL, E as EvmWallet, N as NETWORKS, b as NO_REFUNDS_NOTICE, c as NetworkName, P as PAYMENT_REF_HEADER, d as PAYMENT_SIGNATURE_HEADERS, e as PayFetchOptions, S as SETTLEMENT_HEADERS, f as SpendGuards, g as SpendRecord, h as SpendStore, U as USDC_DECIMALS, i as createMemorySpendStore, j as evaluateGuards, p as payFetch, q as quoteUsdOf, r as readSettlementHeader } from './client-BBsrY6gC.cjs';
+export { ExpressMiddleware, ExpressResponseLike, HonoContextLike, HonoMiddleware, Paywall, PaywallOptions, UnpaidBody, paywall } from './provider.cjs';
+import { z } from 'zod';
+export { decodePaymentResponseHeader } from '@x402/core/http';
+export { FacilitatorClient, RouteConfig } from '@x402/core/server';
+import '@x402/core/types';
+import '@x402/evm/exact/client';
+
+/** Names of the spend guards an agent can set. */
+type GuardName = 'maxPerCall' | 'maxPerHour' | 'maxPerDay' | 'allowedHosts';
+/**
+ * Thrown before anything is signed when a call would breach a spend guard.
+ *
+ * Payments are final, so the only place to stop an unwanted spend is before the
+ * signature exists. Every guard raises this, and it is never thrown after a payment
+ * payload has been created.
+ */
+declare class SpendGuardError extends Error {
+    readonly guard: GuardName;
+    readonly detail: {
+        limitUsd?: number;
+        attemptedUsd?: number;
+        host?: string;
+    };
+    readonly name = "SpendGuardError";
+    constructor(guard: GuardName, message: string, detail?: {
+        limitUsd?: number;
+        attemptedUsd?: number;
+        host?: string;
+    });
+}
+/** Thrown by seams that are typed and reachable but deliberately not built yet. */
+declare class NotImplementedError extends Error {
+    readonly name = "NotImplementedError";
+    constructor(feature: string);
+}
+/** Thrown when an optional framework adapter is used without its package installed. */
+declare class MissingAdapterError extends Error {
+    readonly name = "MissingAdapterError";
+    constructor(pkg: string);
+}
+/**
+ * A 402 arrived whose payment requirements could not be read, so the call cannot be
+ * priced and therefore cannot be checked against a spend cap. Refusing is the safe
+ * outcome: paying blind is irreversible.
+ */
+declare class UnreadableQuoteError extends Error {
+    readonly name = "UnreadableQuoteError";
+    constructor(message: string);
+}
+
+type FeeMode = 'direct' | 'splitter';
+interface PayeeResolution {
+    /** The single address that receives the transfer. */
+    payTo: string;
+    /** Platform fee in basis points. Always 0 while FEE_MODE=direct. */
+    feeBps: number;
+}
+/**
+ * Resolves who is paid for a call. Under `direct` this is always, and only, the
+ * provider's own wallet — the platform is never a payee and never custodies funds.
+ *
+ * `splitter` is a reserved seam for the fee-splitting contract. It is typed and reachable
+ * so the shape is settled, but it throws: there is no splitter contract in this build.
+ */
+declare function resolvePayee(mode: FeeMode, providerWallet: string): PayeeResolution;
+
+/** "1.25" -> 1250000n. Rejects anything that is not a plain non-negative decimal. */
+declare function parseUsdc(input: string): bigint;
+/** 1250000n -> "1.25". Trailing zeros trimmed. */
+declare function formatUsdc(atomic: bigint): string;
+/**
+ * Converts a quoted amount to USD for guard evaluation.
+ *
+ * Fails closed: if the asset is not a USDC contract we recognise and the quote carries no
+ * usable `decimals`, this throws rather than guessing. Guessing here would let an
+ * unrecognised token slip past a spend cap, and the payment is irreversible.
+ */
+declare function quoteToUsd(quote: {
+    amountAtomic: string;
+    asset: string;
+    decimals?: number | undefined;
+}): number;
+
+/**
+ * Environment the paywall reads. Parsed lazily inside `paywall()`, never at module load,
+ * so importing this package never throws in a build step.
+ */
+declare const paywallEnvSchema: z.ZodObject<{
+    /** Hosted facilitator (Coinbase CDP). Fatstack does not run its own. */
+    FACILITATOR_URL: z.ZodDefault<z.ZodString>;
+    FACILITATOR_API_KEY: z.ZodOptional<z.ZodString>;
+    /**
+     * `1` takes every paywalled route offline with a 503. Intended for an incident where
+     * continuing to take irreversible payments would be worse than being down.
+     */
+    KILLSWITCH: z.ZodDefault<z.ZodEnum<["0", "1"]>>;
+    /**
+     * direct   = agent pays the provider wallet, 0% platform fee (the launch build)
+     * splitter = reserved for the fee-splitting contract; not implemented
+     */
+    FEE_MODE: z.ZodDefault<z.ZodEnum<["direct", "splitter"]>>;
+}, "strip", z.ZodTypeAny, {
+    FACILITATOR_URL: string;
+    KILLSWITCH: "0" | "1";
+    FEE_MODE: "direct" | "splitter";
+    FACILITATOR_API_KEY?: string | undefined;
+}, {
+    FACILITATOR_URL?: string | undefined;
+    FACILITATOR_API_KEY?: string | undefined;
+    KILLSWITCH?: "0" | "1" | undefined;
+    FEE_MODE?: "direct" | "splitter" | undefined;
+}>;
+type PaywallEnv = z.infer<typeof paywallEnvSchema>;
+declare function readPaywallEnv(source?: Record<string, string | undefined>): PaywallEnv;
+
+export { type FeeMode, type GuardName, MissingAdapterError, NotImplementedError, type PayeeResolution, type PaywallEnv, SpendGuardError, UnreadableQuoteError, formatUsdc, parseUsdc, paywallEnvSchema, quoteToUsd, readPaywallEnv, resolvePayee };

package/dist/index.d.ts

@@ -0,0 +1,117 @@
+export { D as DEFAULT_FACILITATOR_URL, a as DOCS_URL, E as EvmWallet, N as NETWORKS, b as NO_REFUNDS_NOTICE, c as NetworkName, P as PAYMENT_REF_HEADER, d as PAYMENT_SIGNATURE_HEADERS, e as PayFetchOptions, S as SETTLEMENT_HEADERS, f as SpendGuards, g as SpendRecord, h as SpendStore, U as USDC_DECIMALS, i as createMemorySpendStore, j as evaluateGuards, p as payFetch, q as quoteUsdOf, r as readSettlementHeader } from './client-BBsrY6gC.js';
+export { ExpressMiddleware, ExpressResponseLike, HonoContextLike, HonoMiddleware, Paywall, PaywallOptions, UnpaidBody, paywall } from './provider.js';
+import { z } from 'zod';
+export { decodePaymentResponseHeader } from '@x402/core/http';
+export { FacilitatorClient, RouteConfig } from '@x402/core/server';
+import '@x402/core/types';
+import '@x402/evm/exact/client';
+
+/** Names of the spend guards an agent can set. */
+type GuardName = 'maxPerCall' | 'maxPerHour' | 'maxPerDay' | 'allowedHosts';
+/**
+ * Thrown before anything is signed when a call would breach a spend guard.
+ *
+ * Payments are final, so the only place to stop an unwanted spend is before the
+ * signature exists. Every guard raises this, and it is never thrown after a payment
+ * payload has been created.
+ */
+declare class SpendGuardError extends Error {
+    readonly guard: GuardName;
+    readonly detail: {
+        limitUsd?: number;
+        attemptedUsd?: number;
+        host?: string;
+    };
+    readonly name = "SpendGuardError";
+    constructor(guard: GuardName, message: string, detail?: {
+        limitUsd?: number;
+        attemptedUsd?: number;
+        host?: string;
+    });
+}
+/** Thrown by seams that are typed and reachable but deliberately not built yet. */
+declare class NotImplementedError extends Error {
+    readonly name = "NotImplementedError";
+    constructor(feature: string);
+}
+/** Thrown when an optional framework adapter is used without its package installed. */
+declare class MissingAdapterError extends Error {
+    readonly name = "MissingAdapterError";
+    constructor(pkg: string);
+}
+/**
+ * A 402 arrived whose payment requirements could not be read, so the call cannot be
+ * priced and therefore cannot be checked against a spend cap. Refusing is the safe
+ * outcome: paying blind is irreversible.
+ */
+declare class UnreadableQuoteError extends Error {
+    readonly name = "UnreadableQuoteError";
+    constructor(message: string);
+}
+
+type FeeMode = 'direct' | 'splitter';
+interface PayeeResolution {
+    /** The single address that receives the transfer. */
+    payTo: string;
+    /** Platform fee in basis points. Always 0 while FEE_MODE=direct. */
+    feeBps: number;
+}
+/**
+ * Resolves who is paid for a call. Under `direct` this is always, and only, the
+ * provider's own wallet — the platform is never a payee and never custodies funds.
+ *
+ * `splitter` is a reserved seam for the fee-splitting contract. It is typed and reachable
+ * so the shape is settled, but it throws: there is no splitter contract in this build.
+ */
+declare function resolvePayee(mode: FeeMode, providerWallet: string): PayeeResolution;
+
+/** "1.25" -> 1250000n. Rejects anything that is not a plain non-negative decimal. */
+declare function parseUsdc(input: string): bigint;
+/** 1250000n -> "1.25". Trailing zeros trimmed. */
+declare function formatUsdc(atomic: bigint): string;
+/**
+ * Converts a quoted amount to USD for guard evaluation.
+ *
+ * Fails closed: if the asset is not a USDC contract we recognise and the quote carries no
+ * usable `decimals`, this throws rather than guessing. Guessing here would let an
+ * unrecognised token slip past a spend cap, and the payment is irreversible.
+ */
+declare function quoteToUsd(quote: {
+    amountAtomic: string;
+    asset: string;
+    decimals?: number | undefined;
+}): number;
+
+/**
+ * Environment the paywall reads. Parsed lazily inside `paywall()`, never at module load,
+ * so importing this package never throws in a build step.
+ */
+declare const paywallEnvSchema: z.ZodObject<{
+    /** Hosted facilitator (Coinbase CDP). Fatstack does not run its own. */
+    FACILITATOR_URL: z.ZodDefault<z.ZodString>;
+    FACILITATOR_API_KEY: z.ZodOptional<z.ZodString>;
+    /**
+     * `1` takes every paywalled route offline with a 503. Intended for an incident where
+     * continuing to take irreversible payments would be worse than being down.
+     */
+    KILLSWITCH: z.ZodDefault<z.ZodEnum<["0", "1"]>>;
+    /**
+     * direct   = agent pays the provider wallet, 0% platform fee (the launch build)
+     * splitter = reserved for the fee-splitting contract; not implemented
+     */
+    FEE_MODE: z.ZodDefault<z.ZodEnum<["direct", "splitter"]>>;
+}, "strip", z.ZodTypeAny, {
+    FACILITATOR_URL: string;
+    KILLSWITCH: "0" | "1";
+    FEE_MODE: "direct" | "splitter";
+    FACILITATOR_API_KEY?: string | undefined;
+}, {
+    FACILITATOR_URL?: string | undefined;
+    FACILITATOR_API_KEY?: string | undefined;
+    KILLSWITCH?: "0" | "1" | undefined;
+    FEE_MODE?: "direct" | "splitter" | undefined;
+}>;
+type PaywallEnv = z.infer<typeof paywallEnvSchema>;
+declare function readPaywallEnv(source?: Record<string, string | undefined>): PaywallEnv;
+
+export { type FeeMode, type GuardName, MissingAdapterError, NotImplementedError, type PayeeResolution, type PaywallEnv, SpendGuardError, UnreadableQuoteError, formatUsdc, parseUsdc, paywallEnvSchema, quoteToUsd, readPaywallEnv, resolvePayee };

package/dist/index.js

@@ -0,0 +1,61 @@
+import {
+  createMemorySpendStore,
+  evaluateGuards,
+  payFetch,
+  quoteUsdOf
+} from "./chunk-ZGVPNFNS.js";
+import {
+  paywall,
+  paywallEnvSchema,
+  readPaywallEnv,
+  resolvePayee
+} from "./chunk-PY25VKHS.js";
+import {
+  DEFAULT_FACILITATOR_URL,
+  DOCS_URL,
+  MissingAdapterError,
+  NETWORKS,
+  NO_REFUNDS_NOTICE,
+  NotImplementedError,
+  PAYMENT_REF_HEADER,
+  PAYMENT_SIGNATURE_HEADERS,
+  SETTLEMENT_HEADERS,
+  SpendGuardError,
+  USDC_DECIMALS,
+  UnreadableQuoteError,
+  formatUsdc,
+  parseUsdc,
+  quoteToUsd,
+  readSettlementHeader
+} from "./chunk-C4BASAUA.js";
+
+// src/index.ts
+import { decodePaymentResponseHeader } from "@x402/core/http";
+export {
+  DEFAULT_FACILITATOR_URL,
+  DOCS_URL,
+  MissingAdapterError,
+  NETWORKS,
+  NO_REFUNDS_NOTICE,
+  NotImplementedError,
+  PAYMENT_REF_HEADER,
+  PAYMENT_SIGNATURE_HEADERS,
+  SETTLEMENT_HEADERS,
+  SpendGuardError,
+  USDC_DECIMALS,
+  UnreadableQuoteError,
+  createMemorySpendStore,
+  decodePaymentResponseHeader,
+  evaluateGuards,
+  formatUsdc,
+  parseUsdc,
+  payFetch,
+  paywall,
+  paywallEnvSchema,
+  quoteToUsd,
+  quoteUsdOf,
+  readPaywallEnv,
+  readSettlementHeader,
+  resolvePayee
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from './constants.js';\nexport * from './errors.js';\nexport * from './fee-mode.js';\nexport * from './money.js';\nexport * from './store.js';\nexport { paywall } from './provider.js';\nexport type {\n  Paywall,\n  PaywallOptions,\n  UnpaidBody,\n  HonoMiddleware,\n  HonoContextLike,\n  ExpressMiddleware,\n  ExpressResponseLike,\n  FacilitatorClient,\n  RouteConfig,\n} from './provider.js';\nexport { payFetch, evaluateGuards, quoteUsdOf } from './client.js';\nexport type { EvmWallet, PayFetchOptions, SpendGuards } from './client.js';\nexport { readPaywallEnv, paywallEnvSchema } from './env.js';\nexport type { PaywallEnv } from './env.js';\nexport { decodePaymentResponseHeader } from '@x402/core/http';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAS,mCAAmC;","names":[]}

package/dist/provider.cjs

@@ -0,0 +1,289 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/provider.ts
+var provider_exports = {};
+__export(provider_exports, {
+  paywall: () => paywall
+});
+module.exports = __toCommonJS(provider_exports);
+var import_http = require("@x402/core/http");
+var import_server = require("@x402/core/server");
+var import_server2 = require("@x402/evm/exact/server");
+var import_zod2 = require("zod");
+
+// src/constants.ts
+var NETWORKS = {
+  base: {
+    caip2: "eip155:8453",
+    chainId: 8453,
+    usdc: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
+  },
+  "base-sepolia": {
+    caip2: "eip155:84532",
+    chainId: 84532,
+    usdc: "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+  }
+};
+var USDC_DECIMALS = 6;
+var NO_REFUNDS_NOTICE = "Payments are final. Once settled on-chain the transfer cannot be reversed, and there are no refunds.";
+var DOCS_URL = "https://fatstack.net/docs/payments";
+var PAYMENT_REF_HEADER = "X-Fatstack-Payment-Ref";
+var SETTLEMENT_HEADERS = ["payment-response", "x-payment-response"];
+function readSettlementHeader(headers) {
+  for (const name of SETTLEMENT_HEADERS) {
+    const value = headers.get(name);
+    if (value) return value;
+  }
+  return null;
+}
+var DEFAULT_FACILITATOR_URL = "https://x402.org/facilitator";
+
+// src/env.ts
+var import_zod = require("zod");
+var paywallEnvSchema = import_zod.z.object({
+  /** Hosted facilitator (Coinbase CDP). Fatstack does not run its own. */
+  FACILITATOR_URL: import_zod.z.string().url().default(DEFAULT_FACILITATOR_URL),
+  FACILITATOR_API_KEY: import_zod.z.string().min(1).optional(),
+  /**
+   * `1` takes every paywalled route offline with a 503. Intended for an incident where
+   * continuing to take irreversible payments would be worse than being down.
+   */
+  KILLSWITCH: import_zod.z.enum(["0", "1"]).default("0"),
+  /**
+   * direct   = agent pays the provider wallet, 0% platform fee (the launch build)
+   * splitter = reserved for the fee-splitting contract; not implemented
+   */
+  FEE_MODE: import_zod.z.enum(["direct", "splitter"]).default("direct")
+});
+function readPaywallEnv(source = process.env) {
+  return paywallEnvSchema.parse({
+    FACILITATOR_URL: source.FACILITATOR_URL,
+    FACILITATOR_API_KEY: source.FACILITATOR_API_KEY,
+    KILLSWITCH: source.KILLSWITCH,
+    FEE_MODE: source.FEE_MODE
+  });
+}
+
+// src/errors.ts
+var NotImplementedError = class extends Error {
+  name = "NotImplementedError";
+  constructor(feature) {
+    super(`${feature} is not implemented in this build.`);
+  }
+};
+var MissingAdapterError = class extends Error {
+  name = "MissingAdapterError";
+  constructor(pkg) {
+    super(`${pkg} is not installed. Add it to use this adapter: pnpm add ${pkg}`);
+  }
+};
+
+// src/fee-mode.ts
+function resolvePayee(mode, providerWallet) {
+  switch (mode) {
+    case "direct":
+      return { payTo: providerWallet, feeBps: 0 };
+    case "splitter":
+      throw new NotImplementedError(
+        "FEE_MODE=splitter (no splitter contract ships in the launch build)"
+      );
+  }
+}
+
+// src/money.ts
+var UNITS_PER_USDC = 10n ** BigInt(USDC_DECIMALS);
+function parseUsdc(input) {
+  const match = /^(\d+)(?:\.(\d{1,6}))?$/.exec(input.trim());
+  if (!match) {
+    throw new RangeError(`Not a USDC amount with at most ${USDC_DECIMALS} decimals: ${input}`);
+  }
+  const whole = BigInt(match[1] ?? "0");
+  const fraction = BigInt((match[2] ?? "").padEnd(USDC_DECIMALS, "0") || "0");
+  return whole * UNITS_PER_USDC + fraction;
+}
+function formatUsdc(atomic) {
+  if (atomic < 0n) throw new RangeError("USDC amounts are never negative");
+  const whole = atomic / UNITS_PER_USDC;
+  const fraction = (atomic % UNITS_PER_USDC).toString().padStart(USDC_DECIMALS, "0");
+  const trimmed = fraction.replace(/0+$/, "");
+  return trimmed ? `${whole}.${trimmed}` : whole.toString();
+}
+var USDC_ADDRESSES = new Set(
+  Object.values(NETWORKS).map((network) => network.usdc.toLowerCase())
+);
+
+// src/provider.ts
+var optionsSchema = import_zod2.z.object({
+  /** Price per call in USD, as a decimal string: "0.002". */
+  price: import_zod2.z.string().regex(/^\d+(?:\.\d{1,6})?$/, "price must be USD with at most 6 decimals"),
+  /** The provider's own wallet. Under FEE_MODE=direct this is the sole payee. */
+  wallet: import_zod2.z.string().regex(/^0x[0-9a-fA-F]{40}$/, "wallet must be a 20-byte address"),
+  toolId: import_zod2.z.string().min(1).max(128),
+  network: import_zod2.z.enum(["base", "base-sepolia"]).default("base"),
+  description: import_zod2.z.string().optional(),
+  docsUrl: import_zod2.z.string().url().default(DOCS_URL),
+  mimeType: import_zod2.z.string().default("application/json"),
+  maxTimeoutSeconds: import_zod2.z.number().int().positive().default(60)
+});
+var KILLSWITCH_BODY = {
+  error: "service_unavailable",
+  message: "This tool is temporarily disabled by its operator (KILLSWITCH). No payment was taken. Try again later."
+};
+function paywall(options) {
+  const config = optionsSchema.parse(options);
+  const env = readPaywallEnv(options.env);
+  const network = NETWORKS[config.network];
+  const { payTo } = resolvePayee(env.FEE_MODE, config.wallet);
+  const amountAtomic = parseUsdc(config.price).toString();
+  const priceUsdc = formatUsdc(parseUsdc(config.price));
+  const unpaidBody = {
+    error: "payment_required",
+    tool: config.toolId,
+    price: {
+      usdc: priceUsdc,
+      amountAtomic,
+      asset: network.usdc,
+      network: network.caip2
+    },
+    payTo,
+    terms: { refundable: false, notice: NO_REFUNDS_NOTICE },
+    docs: config.docsUrl,
+    message: `This call costs ${priceUsdc} USDC on ${config.network}, paid directly to the provider. ${NO_REFUNDS_NOTICE} See ${config.docsUrl}`
+  };
+  const routeConfig = {
+    accepts: {
+      scheme: "exact",
+      network: network.caip2,
+      payTo,
+      // An explicit asset+amount pins USDC and the exact atomic amount, rather than
+      // leaving the quote to a price feed.
+      // A dollar price, not an explicit { asset, amount }: the EVM scheme resolves the
+      // network's default asset (USDC) and publishes its EIP-712 domain in `extra`, which
+      // the payer needs to sign the EIP-3009 authorisation. Naming the asset directly
+      // skips that lookup and emits `extra: {}`, which nobody can pay against.
+      price: `$${priceUsdc}`,
+      maxTimeoutSeconds: config.maxTimeoutSeconds
+    },
+    description: config.description ?? `Fatstack tool ${config.toolId}`,
+    mimeType: config.mimeType,
+    unpaidResponseBody: () => ({ contentType: "application/json", body: unpaidBody })
+  };
+  const facilitator = options.facilitator ?? new import_server.HTTPFacilitatorClient({
+    url: env.FACILITATOR_URL,
+    ...env.FACILITATOR_API_KEY ? {
+      createAuthHeaders: async () => ({
+        verify: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` },
+        settle: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` },
+        supported: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` }
+      })
+    } : {}
+  });
+  const server = new import_server.x402ResourceServer(facilitator).register(network.caip2, new import_server2.ExactEvmScheme());
+  const killed = env.KILLSWITCH === "1";
+  function paymentRef(paymentResponseHeader) {
+    if (!paymentResponseHeader) return null;
+    try {
+      const settled = (0, import_http.decodePaymentResponseHeader)(paymentResponseHeader);
+      const transaction = settled.transaction;
+      return transaction ? `${config.toolId}:${network.caip2}:${transaction}` : null;
+    } catch {
+      return null;
+    }
+  }
+  return {
+    routeConfig,
+    payTo,
+    hono() {
+      let cached;
+      return async (c, next) => {
+        if (killed) return c.json(KILLSWITCH_BODY, 503);
+        if (!cached) {
+          const mod = await importOptional("@x402/hono");
+          cached = mod.paymentMiddleware(routeConfig, server);
+        }
+        const middleware = cached;
+        const result = await middleware(c, next);
+        const carrier = result instanceof Response ? result : c.res;
+        const ref = paymentRef(carrier ? readSettlementHeader(carrier.headers) : null);
+        if (ref) carrier.headers.set(PAYMENT_REF_HEADER, ref);
+        return result;
+      };
+    },
+    express() {
+      let cached;
+      return async (req, res, next) => {
+        const response = res;
+        if (killed) {
+          response.status(503).json(KILLSWITCH_BODY);
+          return;
+        }
+        if (!cached) {
+          const mod = await importOptional("@x402/express");
+          cached = mod.paymentMiddleware(routeConfig, server);
+        }
+        const originalSetHeader = response.setHeader.bind(response);
+        response.setHeader = (name, value) => {
+          const out = originalSetHeader(name, value);
+          if (SETTLEMENT_HEADERS.includes(String(name).toLowerCase())) {
+            const ref = paymentRef(String(value));
+            if (ref) originalSetHeader(PAYMENT_REF_HEADER, ref);
+          }
+          return out;
+        };
+        const middleware = cached;
+        await middleware(req, res, next);
+      };
+    },
+    next(handler) {
+      let cached;
+      return async (request) => {
+        if (killed) {
+          return Response.json(KILLSWITCH_BODY, { status: 503 });
+        }
+        if (!cached) {
+          const mod = await importOptional("@x402/next");
+          cached = mod.withX402(handler, routeConfig, server);
+        }
+        const wrapped = cached;
+        const result = await wrapped(request);
+        if (result instanceof Response) {
+          const ref = paymentRef(readSettlementHeader(result.headers));
+          if (ref) result.headers.set(PAYMENT_REF_HEADER, ref);
+        }
+        return result;
+      };
+    }
+  };
+}
+async function importOptional(specifier) {
+  try {
+    return await import(
+      /* @vite-ignore */
+      specifier
+    );
+  } catch {
+    throw new MissingAdapterError(specifier);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  paywall
+});
+//# sourceMappingURL=provider.cjs.map

package/dist/provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts","../src/constants.ts","../src/env.ts","../src/errors.ts","../src/fee-mode.ts","../src/money.ts"],"sourcesContent":["import { decodePaymentResponseHeader } from '@x402/core/http';\nimport { HTTPFacilitatorClient, x402ResourceServer } from '@x402/core/server';\nimport type { FacilitatorClient, RouteConfig } from '@x402/core/server';\nimport { ExactEvmScheme } from '@x402/evm/exact/server';\nimport { z } from 'zod';\n\nimport {\n  DOCS_URL,\n  NETWORKS,\n  NO_REFUNDS_NOTICE,\n  PAYMENT_REF_HEADER,\n  readSettlementHeader,\n} from './constants.js';\nimport type { NetworkName } from './constants.js';\nimport { readPaywallEnv } from './env.js';\nimport { SETTLEMENT_HEADERS } from './constants.js';\nimport { MissingAdapterError } from './errors.js';\nimport { resolvePayee } from './fee-mode.js';\nimport { formatUsdc, parseUsdc } from './money.js';\n\nconst optionsSchema = z.object({\n  /** Price per call in USD, as a decimal string: \"0.002\". */\n  price: z.string().regex(/^\\d+(?:\\.\\d{1,6})?$/, 'price must be USD with at most 6 decimals'),\n  /** The provider's own wallet. Under FEE_MODE=direct this is the sole payee. */\n  wallet: z.string().regex(/^0x[0-9a-fA-F]{40}$/, 'wallet must be a 20-byte address'),\n  toolId: z.string().min(1).max(128),\n  network: z.enum(['base', 'base-sepolia']).default('base'),\n  description: z.string().optional(),\n  docsUrl: z.string().url().default(DOCS_URL),\n  mimeType: z.string().default('application/json'),\n  maxTimeoutSeconds: z.number().int().positive().default(60),\n});\n\nexport interface PaywallOptions extends z.input<typeof optionsSchema> {\n  /** Defaults to process.env. */\n  env?: Record<string, string | undefined>;\n  /** Injects a facilitator instead of building an HTTP one. Used by tests. */\n  facilitator?: FacilitatorClient;\n}\n\n/** The 402 body an agent reads before deciding to pay. */\nexport interface UnpaidBody {\n  error: 'payment_required';\n  tool: string;\n  price: { usdc: string; amountAtomic: string; asset: string; network: string };\n  payTo: string;\n  terms: { refundable: false; notice: string };\n  docs: string;\n  message: string;\n}\n\n/** Structurally compatible with Hono's `MiddlewareHandler`, without importing hono. */\nexport interface HonoContextLike {\n  json: (body: unknown, status?: number) => Response;\n  res: Response;\n  req: { raw: Request };\n}\nexport type HonoMiddleware = (\n  c: HonoContextLike,\n  next: () => Promise<void>,\n) => Promise<Response | void>;\n\n/** Structurally compatible with an Express request handler. */\nexport interface ExpressResponseLike {\n  status: (code: number) => { json: (body: unknown) => void };\n  setHeader: (name: string, value: string | number | readonly string[]) => unknown;\n}\nexport type ExpressMiddleware = (\n  req: unknown,\n  res: ExpressResponseLike,\n  next: (err?: unknown) => void,\n) => Promise<void>;\n\nexport interface Paywall {\n  /** Hono middleware. Requires @x402/hono. */\n  hono(): HonoMiddleware;\n  /** Express middleware. Requires @x402/express. */\n  express(): ExpressMiddleware;\n  /** Wraps a Next.js route handler. Requires @x402/next (which needs Next >= 16.2.6). */\n  next<T>(handler: (request: never) => Promise<T>): (request: never) => Promise<T>;\n  /** The x402 route config, for advanced use with the official adapters directly. */\n  routeConfig: RouteConfig;\n  /** Resolved payee. Always the provider wallet while FEE_MODE=direct. */\n  payTo: string;\n}\n\n/** Minimal shapes of the optional adapter packages, so their types are not required. */\ninterface HonoAdapterModule {\n  paymentMiddleware: (routes: RouteConfig, server: x402ResourceServer) => unknown;\n}\ninterface ExpressAdapterModule {\n  paymentMiddleware: (routes: RouteConfig, server: x402ResourceServer) => unknown;\n}\ninterface NextAdapterModule {\n  withX402: (handler: unknown, routeConfig: RouteConfig, server: x402ResourceServer) => unknown;\n}\n\nconst KILLSWITCH_BODY = {\n  error: 'service_unavailable',\n  message:\n    'This tool is temporarily disabled by its operator (KILLSWITCH). No payment was taken. Try again later.',\n} as const;\n\n/**\n * Paywalls a route with x402: USDC on Base, paid directly to the provider's wallet.\n *\n * Verification and settlement are delegated to the official x402 packages against the\n * hosted facilitator — this module does not sign or verify anything itself.\n *\n * Throws immediately when FEE_MODE=splitter: there is no splitter contract in this build,\n * and silently falling back to `direct` would pay the wrong party.\n */\nexport function paywall(options: PaywallOptions): Paywall {\n  const config = optionsSchema.parse(options);\n  const env = readPaywallEnv(options.env);\n  const network = NETWORKS[config.network as NetworkName];\n\n  // Throws for FEE_MODE=splitter, at construction time rather than mid-request.\n  const { payTo } = resolvePayee(env.FEE_MODE, config.wallet);\n\n  const amountAtomic = parseUsdc(config.price).toString();\n  const priceUsdc = formatUsdc(parseUsdc(config.price));\n\n  const unpaidBody: UnpaidBody = {\n    error: 'payment_required',\n    tool: config.toolId,\n    price: {\n      usdc: priceUsdc,\n      amountAtomic,\n      asset: network.usdc,\n      network: network.caip2,\n    },\n    payTo,\n    terms: { refundable: false, notice: NO_REFUNDS_NOTICE },\n    docs: config.docsUrl,\n    message: `This call costs ${priceUsdc} USDC on ${config.network}, paid directly to the provider. ${NO_REFUNDS_NOTICE} See ${config.docsUrl}`,\n  };\n\n  const routeConfig: RouteConfig = {\n    accepts: {\n      scheme: 'exact',\n      network: network.caip2,\n      payTo,\n      // An explicit asset+amount pins USDC and the exact atomic amount, rather than\n      // leaving the quote to a price feed.\n      // A dollar price, not an explicit { asset, amount }: the EVM scheme resolves the\n      // network's default asset (USDC) and publishes its EIP-712 domain in `extra`, which\n      // the payer needs to sign the EIP-3009 authorisation. Naming the asset directly\n      // skips that lookup and emits `extra: {}`, which nobody can pay against.\n      price: `$${priceUsdc}`,\n      maxTimeoutSeconds: config.maxTimeoutSeconds,\n    },\n    description: config.description ?? `Fatstack tool ${config.toolId}`,\n    mimeType: config.mimeType,\n    unpaidResponseBody: () => ({ contentType: 'application/json', body: unpaidBody }),\n  };\n\n  const facilitator: FacilitatorClient =\n    options.facilitator ??\n    new HTTPFacilitatorClient({\n      url: env.FACILITATOR_URL,\n      ...(env.FACILITATOR_API_KEY\n        ? {\n            createAuthHeaders: async () => ({\n              verify: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` },\n              settle: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` },\n              supported: { authorization: `Bearer ${env.FACILITATOR_API_KEY}` },\n            }),\n          }\n        : {}),\n    });\n\n  const server = new x402ResourceServer(facilitator).register(network.caip2, new ExactEvmScheme());\n\n  const killed = env.KILLSWITCH === '1';\n\n  /** Derives the indexing reference from the settlement receipt the adapter emitted. */\n  function paymentRef(paymentResponseHeader: string | null | undefined): string | null {\n    if (!paymentResponseHeader) return null;\n    try {\n      const settled = decodePaymentResponseHeader(paymentResponseHeader);\n      const transaction = (settled as { transaction?: string }).transaction;\n      return transaction ? `${config.toolId}:${network.caip2}:${transaction}` : null;\n    } catch {\n      return null;\n    }\n  }\n\n  return {\n    routeConfig,\n    payTo,\n\n    hono(): HonoMiddleware {\n      let cached: unknown;\n      return async (c, next) => {\n        if (killed) return c.json(KILLSWITCH_BODY, 503);\n\n        if (!cached) {\n          const mod = await importOptional<HonoAdapterModule>('@x402/hono');\n          cached = mod.paymentMiddleware(routeConfig, server);\n        }\n        const middleware = cached as (\n          ctx: HonoContextLike,\n          n: () => Promise<void>,\n        ) => Promise<Response | void>;\n        const result = await middleware(c, next);\n\n        // c.res carries the response Hono will send, whether the middleware set it or\n        // the downstream handler did.\n        const carrier = result instanceof Response ? result : c.res;\n        const ref = paymentRef(carrier ? readSettlementHeader(carrier.headers) : null);\n        if (ref) carrier.headers.set(PAYMENT_REF_HEADER, ref);\n        return result;\n      };\n    },\n\n    express(): ExpressMiddleware {\n      let cached: unknown;\n      return async (req, res, next) => {\n        const response = res;\n        if (killed) {\n          response.status(503).json(KILLSWITCH_BODY);\n          return;\n        }\n\n        if (!cached) {\n          const mod = await importOptional<ExpressAdapterModule>('@x402/express');\n          cached = mod.paymentMiddleware(routeConfig, server);\n        }\n\n        // Headers must be attached before the response flushes, so mirror the settlement\n        // receipt onto the ref header the moment the adapter sets it.\n        const originalSetHeader = response.setHeader.bind(response);\n        response.setHeader = (name, value) => {\n          const out = originalSetHeader(name, value);\n          if (SETTLEMENT_HEADERS.includes(String(name).toLowerCase() as never)) {\n            const ref = paymentRef(String(value));\n            if (ref) originalSetHeader(PAYMENT_REF_HEADER, ref);\n          }\n          return out;\n        };\n\n        const middleware = cached as (\n          q: unknown,\n          s: unknown,\n          n: (err?: unknown) => void,\n        ) => Promise<void>;\n        await middleware(req, res, next);\n      };\n    },\n\n    next<T>(handler: (request: never) => Promise<T>) {\n      let cached: unknown;\n      return async (request: never): Promise<T> => {\n        if (killed) {\n          return Response.json(KILLSWITCH_BODY, { status: 503 }) as T;\n        }\n\n        if (!cached) {\n          const mod = await importOptional<NextAdapterModule>('@x402/next');\n          cached = mod.withX402(handler as never, routeConfig, server);\n        }\n        const wrapped = cached as (r: never) => Promise<T>;\n        const result = await wrapped(request);\n\n        if (result instanceof Response) {\n          const ref = paymentRef(readSettlementHeader(result.headers));\n          if (ref) result.headers.set(PAYMENT_REF_HEADER, ref);\n        }\n        return result;\n      };\n    },\n  };\n}\n\nasync function importOptional<T>(specifier: string): Promise<T> {\n  try {\n    return (await import(/* @vite-ignore */ specifier)) as T;\n  } catch {\n    throw new MissingAdapterError(specifier);\n  }\n}\n\nexport type { FacilitatorClient, RouteConfig } from '@x402/core/server';\n","/** Base networks in CAIP-2 form, which is what x402 v2 speaks. */\n/**\n * The EIP-712 domain a payer signs the EIP-3009 authorisation against is **not** listed\n * here on purpose: it differs per network (mainnet USDC is \"USD Coin\", the Sepolia\n * deployment is \"USDC\"), and the EVM scheme owns the authoritative table. Quoting a\n * dollar price lets it resolve the asset and publish that domain in the 402; naming an\n * explicit asset bypasses the lookup and emits `extra: {}`, which no payer can sign\n * against.\n */\nexport const NETWORKS = {\n  base: {\n    caip2: 'eip155:8453',\n    chainId: 8453,\n    usdc: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',\n  },\n  'base-sepolia': {\n    caip2: 'eip155:84532',\n    chainId: 84532,\n    usdc: '0x036CbD53842c5426634e7929541eC2318f3dCF7e',\n  },\n} as const;\n\nexport type NetworkName = keyof typeof NETWORKS;\n\n/** USDC is 6 decimals on Base. */\nexport const USDC_DECIMALS = 6;\n\n/**\n * Required on every 402 body and every payment-facing doc page. A payment is a direct\n * on-chain transfer between two wallets: once settled nobody, Fatstack included, can\n * reverse it.\n */\nexport const NO_REFUNDS_NOTICE =\n  'Payments are final. Once settled on-chain the transfer cannot be reversed, and there are no refunds.';\n\nexport const DOCS_URL = 'https://fatstack.net/docs/payments';\n\n/** Correlates a settled payment with the indexer's view of the on-chain transfer. */\nexport const PAYMENT_REF_HEADER = 'X-Fatstack-Payment-Ref';\n\n/**\n * x402 v2 dropped the `X-` prefix: the settlement receipt is `PAYMENT-RESPONSE` and the\n * payer's payload is `PAYMENT-SIGNATURE`. The v1 spellings are still read so a v1 payer\n * or resource keeps working. Header names are case-insensitive; these are lowercase\n * because `Headers.get` normalises.\n */\nexport const SETTLEMENT_HEADERS = ['payment-response', 'x-payment-response'] as const;\nexport const PAYMENT_SIGNATURE_HEADERS = ['payment-signature', 'x-payment'] as const;\n\n/** First settlement receipt present on a response, in either spelling. */\nexport function readSettlementHeader(headers: Headers): string | null {\n  for (const name of SETTLEMENT_HEADERS) {\n    const value = headers.get(name);\n    if (value) return value;\n  }\n  return null;\n}\n\nexport const DEFAULT_FACILITATOR_URL = 'https://x402.org/facilitator';\n","import { z } from 'zod';\n\nimport { DEFAULT_FACILITATOR_URL } from './constants.js';\n\n/**\n * Environment the paywall reads. Parsed lazily inside `paywall()`, never at module load,\n * so importing this package never throws in a build step.\n */\nexport const paywallEnvSchema = z.object({\n  /** Hosted facilitator (Coinbase CDP). Fatstack does not run its own. */\n  FACILITATOR_URL: z.string().url().default(DEFAULT_FACILITATOR_URL),\n  FACILITATOR_API_KEY: z.string().min(1).optional(),\n  /**\n   * `1` takes every paywalled route offline with a 503. Intended for an incident where\n   * continuing to take irreversible payments would be worse than being down.\n   */\n  KILLSWITCH: z.enum(['0', '1']).default('0'),\n  /**\n   * direct   = agent pays the provider wallet, 0% platform fee (the launch build)\n   * splitter = reserved for the fee-splitting contract; not implemented\n   */\n  FEE_MODE: z.enum(['direct', 'splitter']).default('direct'),\n});\n\nexport type PaywallEnv = z.infer<typeof paywallEnvSchema>;\n\nexport function readPaywallEnv(\n  source: Record<string, string | undefined> = process.env,\n): PaywallEnv {\n  return paywallEnvSchema.parse({\n    FACILITATOR_URL: source.FACILITATOR_URL,\n    FACILITATOR_API_KEY: source.FACILITATOR_API_KEY,\n    KILLSWITCH: source.KILLSWITCH,\n    FEE_MODE: source.FEE_MODE,\n  });\n}\n","/** Names of the spend guards an agent can set. */\nexport type GuardName = 'maxPerCall' | 'maxPerHour' | 'maxPerDay' | 'allowedHosts';\n\n/**\n * Thrown before anything is signed when a call would breach a spend guard.\n *\n * Payments are final, so the only place to stop an unwanted spend is before the\n * signature exists. Every guard raises this, and it is never thrown after a payment\n * payload has been created.\n */\nexport class SpendGuardError extends Error {\n  override readonly name = 'SpendGuardError';\n\n  constructor(\n    readonly guard: GuardName,\n    message: string,\n    readonly detail: { limitUsd?: number; attemptedUsd?: number; host?: string } = {},\n  ) {\n    super(message);\n  }\n}\n\n/** Thrown by seams that are typed and reachable but deliberately not built yet. */\nexport class NotImplementedError extends Error {\n  override readonly name = 'NotImplementedError';\n\n  constructor(feature: string) {\n    super(`${feature} is not implemented in this build.`);\n  }\n}\n\n/** Thrown when an optional framework adapter is used without its package installed. */\nexport class MissingAdapterError extends Error {\n  override readonly name = 'MissingAdapterError';\n\n  constructor(pkg: string) {\n    super(`${pkg} is not installed. Add it to use this adapter: pnpm add ${pkg}`);\n  }\n}\n\n/**\n * A 402 arrived whose payment requirements could not be read, so the call cannot be\n * priced and therefore cannot be checked against a spend cap. Refusing is the safe\n * outcome: paying blind is irreversible.\n */\nexport class UnreadableQuoteError extends Error {\n  override readonly name = 'UnreadableQuoteError';\n\n  constructor(message: string) {\n    super(message);\n  }\n}\n","import { NotImplementedError } from './errors.js';\n\nexport type FeeMode = 'direct' | 'splitter';\n\nexport interface PayeeResolution {\n  /** The single address that receives the transfer. */\n  payTo: string;\n  /** Platform fee in basis points. Always 0 while FEE_MODE=direct. */\n  feeBps: number;\n}\n\n/**\n * Resolves who is paid for a call. Under `direct` this is always, and only, the\n * provider's own wallet — the platform is never a payee and never custodies funds.\n *\n * `splitter` is a reserved seam for the fee-splitting contract. It is typed and reachable\n * so the shape is settled, but it throws: there is no splitter contract in this build.\n */\nexport function resolvePayee(mode: FeeMode, providerWallet: string): PayeeResolution {\n  switch (mode) {\n    case 'direct':\n      return { payTo: providerWallet, feeBps: 0 };\n    case 'splitter':\n      throw new NotImplementedError(\n        'FEE_MODE=splitter (no splitter contract ships in the launch build)',\n      );\n  }\n}\n","import { NETWORKS, USDC_DECIMALS } from './constants.js';\n\nconst UNITS_PER_USDC = 10n ** BigInt(USDC_DECIMALS);\n\n/** \"1.25\" -> 1250000n. Rejects anything that is not a plain non-negative decimal. */\nexport function parseUsdc(input: string): bigint {\n  const match = /^(\\d+)(?:\\.(\\d{1,6}))?$/.exec(input.trim());\n  if (!match) {\n    throw new RangeError(`Not a USDC amount with at most ${USDC_DECIMALS} decimals: ${input}`);\n  }\n  const whole = BigInt(match[1] ?? '0');\n  const fraction = BigInt((match[2] ?? '').padEnd(USDC_DECIMALS, '0') || '0');\n  return whole * UNITS_PER_USDC + fraction;\n}\n\n/** 1250000n -> \"1.25\". Trailing zeros trimmed. */\nexport function formatUsdc(atomic: bigint): string {\n  if (atomic < 0n) throw new RangeError('USDC amounts are never negative');\n  const whole = atomic / UNITS_PER_USDC;\n  const fraction = (atomic % UNITS_PER_USDC).toString().padStart(USDC_DECIMALS, '0');\n  const trimmed = fraction.replace(/0+$/, '');\n  return trimmed ? `${whole}.${trimmed}` : whole.toString();\n}\n\nconst USDC_ADDRESSES = new Set(\n  Object.values(NETWORKS).map((network) => network.usdc.toLowerCase()),\n);\n\n/**\n * Converts a quoted amount to USD for guard evaluation.\n *\n * Fails closed: if the asset is not a USDC contract we recognise and the quote carries no\n * usable `decimals`, this throws rather than guessing. Guessing here would let an\n * unrecognised token slip past a spend cap, and the payment is irreversible.\n */\nexport function quoteToUsd(quote: {\n  amountAtomic: string;\n  asset: string;\n  decimals?: number | undefined;\n}): number {\n  const decimals = USDC_ADDRESSES.has(quote.asset.toLowerCase()) ? USDC_DECIMALS : quote.decimals;\n\n  if (decimals === undefined || !Number.isInteger(decimals) || decimals < 0 || decimals > 36) {\n    throw new RangeError(\n      `Cannot price asset ${quote.asset}: unknown decimals. Refusing to evaluate spend guards against an unpriceable quote.`,\n    );\n  }\n\n  if (!/^\\d+$/.test(quote.amountAtomic)) {\n    throw new RangeError(`Quoted amount is not an integer atomic value: ${quote.amountAtomic}`);\n  }\n\n  return Number(quote.amountAtomic) / 10 ** decimals;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAA4C;AAC5C,oBAA0D;AAE1D,IAAAA,iBAA+B;AAC/B,IAAAC,cAAkB;;;ACKX,IAAM,WAAW;AAAA,EACtB,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,gBAAgB;AAAA,IACd,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AACF;AAKO,IAAM,gBAAgB;AAOtB,IAAM,oBACX;AAEK,IAAM,WAAW;AAGjB,IAAM,qBAAqB;AAQ3B,IAAM,qBAAqB,CAAC,oBAAoB,oBAAoB;AAIpE,SAAS,qBAAqB,SAAiC;AACpE,aAAW,QAAQ,oBAAoB;AACrC,UAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,QAAI,MAAO,QAAO;AAAA,EACpB;AACA,SAAO;AACT;AAEO,IAAM,0BAA0B;;;AC1DvC,iBAAkB;AAQX,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA,EAEvC,iBAAiB,aAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,uBAAuB;AAAA,EACjE,qBAAqB,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,YAAY,aAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1C,UAAU,aAAE,KAAK,CAAC,UAAU,UAAU,CAAC,EAAE,QAAQ,QAAQ;AAC3D,CAAC;AAIM,SAAS,eACd,SAA6C,QAAQ,KACzC;AACZ,SAAO,iBAAiB,MAAM;AAAA,IAC5B,iBAAiB,OAAO;AAAA,IACxB,qBAAqB,OAAO;AAAA,IAC5B,YAAY,OAAO;AAAA,IACnB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;;;ACZO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC3B,OAAO;AAAA,EAEzB,YAAY,SAAiB;AAC3B,UAAM,GAAG,OAAO,oCAAoC;AAAA,EACtD;AACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC3B,OAAO;AAAA,EAEzB,YAAY,KAAa;AACvB,UAAM,GAAG,GAAG,2DAA2D,GAAG,EAAE;AAAA,EAC9E;AACF;;;ACpBO,SAAS,aAAa,MAAe,gBAAyC;AACnF,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,EAAE,OAAO,gBAAgB,QAAQ,EAAE;AAAA,IAC5C,KAAK;AACH,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,EACJ;AACF;;;ACzBA,IAAM,iBAAiB,OAAO,OAAO,aAAa;AAG3C,SAAS,UAAU,OAAuB;AAC/C,QAAM,QAAQ,0BAA0B,KAAK,MAAM,KAAK,CAAC;AACzD,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,WAAW,kCAAkC,aAAa,cAAc,KAAK,EAAE;AAAA,EAC3F;AACA,QAAM,QAAQ,OAAO,MAAM,CAAC,KAAK,GAAG;AACpC,QAAM,WAAW,QAAQ,MAAM,CAAC,KAAK,IAAI,OAAO,eAAe,GAAG,KAAK,GAAG;AAC1E,SAAO,QAAQ,iBAAiB;AAClC;AAGO,SAAS,WAAW,QAAwB;AACjD,MAAI,SAAS,GAAI,OAAM,IAAI,WAAW,iCAAiC;AACvE,QAAM,QAAQ,SAAS;AACvB,QAAM,YAAY,SAAS,gBAAgB,SAAS,EAAE,SAAS,eAAe,GAAG;AACjF,QAAM,UAAU,SAAS,QAAQ,OAAO,EAAE;AAC1C,SAAO,UAAU,GAAG,KAAK,IAAI,OAAO,KAAK,MAAM,SAAS;AAC1D;AAEA,IAAM,iBAAiB,IAAI;AAAA,EACzB,OAAO,OAAO,QAAQ,EAAE,IAAI,CAAC,YAAY,QAAQ,KAAK,YAAY,CAAC;AACrE;;;ALNA,IAAM,gBAAgB,cAAE,OAAO;AAAA;AAAA,EAE7B,OAAO,cAAE,OAAO,EAAE,MAAM,uBAAuB,2CAA2C;AAAA;AAAA,EAE1F,QAAQ,cAAE,OAAO,EAAE,MAAM,uBAAuB,kCAAkC;AAAA,EAClF,QAAQ,cAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACjC,SAAS,cAAE,KAAK,CAAC,QAAQ,cAAc,CAAC,EAAE,QAAQ,MAAM;AAAA,EACxD,aAAa,cAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,cAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,QAAQ;AAAA,EAC1C,UAAU,cAAE,OAAO,EAAE,QAAQ,kBAAkB;AAAA,EAC/C,mBAAmB,cAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAC3D,CAAC;AAkED,IAAM,kBAAkB;AAAA,EACtB,OAAO;AAAA,EACP,SACE;AACJ;AAWO,SAAS,QAAQ,SAAkC;AACxD,QAAM,SAAS,cAAc,MAAM,OAAO;AAC1C,QAAM,MAAM,eAAe,QAAQ,GAAG;AACtC,QAAM,UAAU,SAAS,OAAO,OAAsB;AAGtD,QAAM,EAAE,MAAM,IAAI,aAAa,IAAI,UAAU,OAAO,MAAM;AAE1D,QAAM,eAAe,UAAU,OAAO,KAAK,EAAE,SAAS;AACtD,QAAM,YAAY,WAAW,UAAU,OAAO,KAAK,CAAC;AAEpD,QAAM,aAAyB;AAAA,IAC7B,OAAO;AAAA,IACP,MAAM,OAAO;AAAA,IACb,OAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,SAAS,QAAQ;AAAA,IACnB;AAAA,IACA;AAAA,IACA,OAAO,EAAE,YAAY,OAAO,QAAQ,kBAAkB;AAAA,IACtD,MAAM,OAAO;AAAA,IACb,SAAS,mBAAmB,SAAS,YAAY,OAAO,OAAO,oCAAoC,iBAAiB,QAAQ,OAAO,OAAO;AAAA,EAC5I;AAEA,QAAM,cAA2B;AAAA,IAC/B,SAAS;AAAA,MACP,QAAQ;AAAA,MACR,SAAS,QAAQ;AAAA,MACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,OAAO,IAAI,SAAS;AAAA,MACpB,mBAAmB,OAAO;AAAA,IAC5B;AAAA,IACA,aAAa,OAAO,eAAe,iBAAiB,OAAO,MAAM;AAAA,IACjE,UAAU,OAAO;AAAA,IACjB,oBAAoB,OAAO,EAAE,aAAa,oBAAoB,MAAM,WAAW;AAAA,EACjF;AAEA,QAAM,cACJ,QAAQ,eACR,IAAI,oCAAsB;AAAA,IACxB,KAAK,IAAI;AAAA,IACT,GAAI,IAAI,sBACJ;AAAA,MACE,mBAAmB,aAAa;AAAA,QAC9B,QAAQ,EAAE,eAAe,UAAU,IAAI,mBAAmB,GAAG;AAAA,QAC7D,QAAQ,EAAE,eAAe,UAAU,IAAI,mBAAmB,GAAG;AAAA,QAC7D,WAAW,EAAE,eAAe,UAAU,IAAI,mBAAmB,GAAG;AAAA,MAClE;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AAEH,QAAM,SAAS,IAAI,iCAAmB,WAAW,EAAE,SAAS,QAAQ,OAAO,IAAI,8BAAe,CAAC;AAE/F,QAAM,SAAS,IAAI,eAAe;AAGlC,WAAS,WAAW,uBAAiE;AACnF,QAAI,CAAC,sBAAuB,QAAO;AACnC,QAAI;AACF,YAAM,cAAU,yCAA4B,qBAAqB;AACjE,YAAM,cAAe,QAAqC;AAC1D,aAAO,cAAc,GAAG,OAAO,MAAM,IAAI,QAAQ,KAAK,IAAI,WAAW,KAAK;AAAA,IAC5E,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IAEA,OAAuB;AACrB,UAAI;AACJ,aAAO,OAAO,GAAG,SAAS;AACxB,YAAI,OAAQ,QAAO,EAAE,KAAK,iBAAiB,GAAG;AAE9C,YAAI,CAAC,QAAQ;AACX,gBAAM,MAAM,MAAM,eAAkC,YAAY;AAChE,mBAAS,IAAI,kBAAkB,aAAa,MAAM;AAAA,QACpD;AACA,cAAM,aAAa;AAInB,cAAM,SAAS,MAAM,WAAW,GAAG,IAAI;AAIvC,cAAM,UAAU,kBAAkB,WAAW,SAAS,EAAE;AACxD,cAAM,MAAM,WAAW,UAAU,qBAAqB,QAAQ,OAAO,IAAI,IAAI;AAC7E,YAAI,IAAK,SAAQ,QAAQ,IAAI,oBAAoB,GAAG;AACpD,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IAEA,UAA6B;AAC3B,UAAI;AACJ,aAAO,OAAO,KAAK,KAAK,SAAS;AAC/B,cAAM,WAAW;AACjB,YAAI,QAAQ;AACV,mBAAS,OAAO,GAAG,EAAE,KAAK,eAAe;AACzC;AAAA,QACF;AAEA,YAAI,CAAC,QAAQ;AACX,gBAAM,MAAM,MAAM,eAAqC,eAAe;AACtE,mBAAS,IAAI,kBAAkB,aAAa,MAAM;AAAA,QACpD;AAIA,cAAM,oBAAoB,SAAS,UAAU,KAAK,QAAQ;AAC1D,iBAAS,YAAY,CAAC,MAAM,UAAU;AACpC,gBAAM,MAAM,kBAAkB,MAAM,KAAK;AACzC,cAAI,mBAAmB,SAAS,OAAO,IAAI,EAAE,YAAY,CAAU,GAAG;AACpE,kBAAM,MAAM,WAAW,OAAO,KAAK,CAAC;AACpC,gBAAI,IAAK,mBAAkB,oBAAoB,GAAG;AAAA,UACpD;AACA,iBAAO;AAAA,QACT;AAEA,cAAM,aAAa;AAKnB,cAAM,WAAW,KAAK,KAAK,IAAI;AAAA,MACjC;AAAA,IACF;AAAA,IAEA,KAAQ,SAAyC;AAC/C,UAAI;AACJ,aAAO,OAAO,YAA+B;AAC3C,YAAI,QAAQ;AACV,iBAAO,SAAS,KAAK,iBAAiB,EAAE,QAAQ,IAAI,CAAC;AAAA,QACvD;AAEA,YAAI,CAAC,QAAQ;AACX,gBAAM,MAAM,MAAM,eAAkC,YAAY;AAChE,mBAAS,IAAI,SAAS,SAAkB,aAAa,MAAM;AAAA,QAC7D;AACA,cAAM,UAAU;AAChB,cAAM,SAAS,MAAM,QAAQ,OAAO;AAEpC,YAAI,kBAAkB,UAAU;AAC9B,gBAAM,MAAM,WAAW,qBAAqB,OAAO,OAAO,CAAC;AAC3D,cAAI,IAAK,QAAO,QAAQ,IAAI,oBAAoB,GAAG;AAAA,QACrD;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,eAAkB,WAA+B;AAC9D,MAAI;AACF,WAAQ,MAAM;AAAA;AAAA,MAA0B;AAAA;AAAA,EAC1C,QAAQ;AACN,UAAM,IAAI,oBAAoB,SAAS;AAAA,EACzC;AACF;","names":["import_server","import_zod"]}