@hpp-io/x402-mcp-bridge 0.0.1 → 0.0.3

package/dist/discovery.js

@@ -0,0 +1,62 @@
+/**
+ * Client for the HPP x402-discovery REST API — a curated, facilitator-indexed
+ * directory of paid x402 services on the HPP chain.
+ *
+ * Read-only from the bridge's side: we query discovery to *find* services,
+ * then pay them directly with the bridge's own wallet. Discovery never holds
+ * funds or sees our keys (non-custodial).
+ *
+ * REST contract (hpp-x402-discovery/spec/openapi.yaml → routes/discovery.ts):
+ *   GET /discovery/resources?type&network&limit&offset  -> { items: [...] }
+ *   GET /discovery/search?q&type&network&sort&limit      -> { items: [...] }
+ *   GET /discovery/resources/:id                         -> ResourceDetail
+ */
+import { log } from "./log.js";
+export class DiscoveryClient {
+    baseUrl;
+    timeoutMs;
+    constructor(baseUrl, timeoutMs = 10_000) {
+        this.baseUrl = baseUrl;
+        this.timeoutMs = timeoutMs;
+    }
+    async get(path) {
+        const url = this.baseUrl.replace(/\/$/, "") + path;
+        const ac = new AbortController();
+        const t = setTimeout(() => ac.abort(), this.timeoutMs);
+        try {
+            const res = await fetch(url, {
+                signal: ac.signal,
+                headers: { accept: "application/json" },
+            });
+            if (!res.ok)
+                throw new Error(`discovery ${res.status} for ${path}`);
+            return (await res.json());
+        }
+        finally {
+            clearTimeout(t);
+        }
+    }
+    /** List or semantically search the directory. */
+    async discover(q) {
+        const type = q.type ?? "all";
+        const limit = Math.min(Math.max(q.limit ?? 20, 1), 50);
+        const params = new URLSearchParams();
+        params.set("type", type);
+        if (q.network)
+            params.set("network", q.network);
+        params.set("limit", String(limit));
+        const query = q.query?.trim();
+        const path = query
+            ? `/discovery/search?q=${encodeURIComponent(query)}&${params.toString()}`
+            : `/discovery/resources?${params.toString()}`;
+        const out = await this.get(path);
+        const items = out.items ?? [];
+        log.debug("discovery.discover", { path, count: items.length });
+        return items;
+    }
+    /** Full detail for one resource (incl. metadata.schema when present). */
+    async detail(id) {
+        return this.get(`/discovery/resources/${encodeURIComponent(id)}`);
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAmC/B,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,OAAe,EACf,YAAY,MAAM;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAS;IAClC,CAAC;IAEI,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,QAAQ,CAAC,CAAgB;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAC,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;YACzE,CAAC,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmC,IAAI,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,GAAG,CACb,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/discoveryTools.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Discovery-backed local tools: hpp_discover + hpp_call.
+ *
+ * The multi-service UX decision (SERVICE_CONNECTION_DESIGN §멀티서비스 UX):
+ * instead of proxying every discovered service's tools (context explosion),
+ * expose two generic tools —
+ *   - hpp_discover: list/search the curated directory (read-only, no payment)
+ *   - hpp_call:     call one discovered service by id (payment via our wallet)
+ *
+ * hpp_call routes HTTP-typed resources through the same x402 HTTP payment path
+ * as x402_http_call, but marks the call `trustedSource` so it skips the manual
+ * host allowlist — curated discovery is the trust boundary — while keeping the
+ * daily spend cap. MCP/A2A-typed resources return connection guidance.
+ */
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { DiscoveryClient } from "./discovery.js";
+import { type HttpX402Deps } from "./httpX402.js";
+export declare const HPP_DISCOVER_TOOL: {
+    readonly name: "hpp_discover";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly query: {
+                readonly type: "string";
+                readonly description: "Optional free-text search over the directory.";
+            };
+            readonly type: {
+                readonly type: "string";
+                readonly enum: readonly ["http", "mcp", "a2a", "all"];
+                readonly description: "Filter by resource type (default all).";
+            };
+            readonly network: {
+                readonly type: "string";
+                readonly description: "Filter by CAIP-2 network, e.g. eip155:190415.";
+            };
+            readonly limit: {
+                readonly type: "number";
+                readonly description: "Max results (default 20, max 50).";
+            };
+        };
+        readonly additionalProperties: false;
+    };
+};
+export declare const HPP_CALL_TOOL: {
+    readonly name: "hpp_call";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly resourceId: {
+                readonly type: "string";
+                readonly description: "Service id returned by hpp_discover.";
+            };
+            readonly body: {
+                readonly type: "object";
+                readonly description: "Request body / input args for the service.";
+            };
+        };
+        readonly required: readonly ["resourceId"];
+        readonly additionalProperties: false;
+    };
+};
+export interface DiscoverArgs {
+    query?: string;
+    type?: "http" | "mcp" | "a2a" | "all";
+    network?: string;
+    limit?: number;
+}
+export interface HppCallArgs {
+    resourceId: string;
+    body?: unknown;
+}
+export declare function hppDiscover(client: DiscoveryClient, args: DiscoverArgs): Promise<CallToolResult>;
+export declare function hppCall(deps: HttpX402Deps, client: DiscoveryClient, args: HppCallArgs): Promise<CallToolResult>;

package/dist/discoveryTools.js

@@ -0,0 +1,101 @@
+import { x402HttpCall } from "./httpX402.js";
+export const HPP_DISCOVER_TOOL = {
+    name: "hpp_discover",
+    description: "Discover paid x402 services on the HPP chain from the curated discovery " +
+        "directory. Returns services with their resourceId, description, price " +
+        "(USDC.e atomic units), network and type. Pass `query` for a semantic " +
+        "search (e.g. 'image generation'), or omit it to browse. Then invoke one " +
+        "with hpp_call({ resourceId, body }).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            query: {
+                type: "string",
+                description: "Optional free-text search over the directory.",
+            },
+            type: {
+                type: "string",
+                enum: ["http", "mcp", "a2a", "all"],
+                description: "Filter by resource type (default all).",
+            },
+            network: {
+                type: "string",
+                description: "Filter by CAIP-2 network, e.g. eip155:190415.",
+            },
+            limit: { type: "number", description: "Max results (default 20, max 50)." },
+        },
+        additionalProperties: false,
+    },
+};
+export const HPP_CALL_TOOL = {
+    name: "hpp_call",
+    description: "Call a service found via hpp_discover. Pass its `resourceId` and a `body` " +
+        "(the service's input args). Payment (USDC.e) is handled automatically with " +
+        "your wallet, subject to the daily spend cap — you do not sign anything. " +
+        "HTTP-typed services are called directly; MCP/A2A-typed services return " +
+        "connection guidance.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            resourceId: {
+                type: "string",
+                description: "Service id returned by hpp_discover.",
+            },
+            body: {
+                type: "object",
+                description: "Request body / input args for the service.",
+            },
+        },
+        required: ["resourceId"],
+        additionalProperties: false,
+    },
+};
+function errorResult(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+export async function hppDiscover(client, args) {
+    const resources = await client.discover(args);
+    const services = resources.map((r) => ({
+        resourceId: r.id,
+        type: r.type,
+        description: r.description ?? r.toolName ?? r.resourceUrl,
+        priceAtomic: r.priceAtomic,
+        asset: r.asset,
+        network: r.network,
+        scheme: r.scheme,
+        ...(r.toolName ? { toolName: r.toolName } : {}),
+    }));
+    return {
+        content: [
+            { type: "text", text: JSON.stringify({ count: services.length, services }) },
+        ],
+    };
+}
+export async function hppCall(deps, client, args) {
+    if (!args.resourceId || typeof args.resourceId !== "string") {
+        return errorResult("resourceId required");
+    }
+    let detail;
+    try {
+        detail = await client.detail(args.resourceId);
+    }
+    catch (err) {
+        return errorResult(`discovery lookup failed: ${err.message}`);
+    }
+    if (detail.type !== "http") {
+        return errorResult(`resource "${args.resourceId}" is type "${detail.type}" — connect to it ` +
+            `directly at ${detail.resourceUrl}` +
+            (detail.type === "a2a"
+                ? ` (use pay_a2a_agent with its skill id).`
+                : ` (MCP transport).`));
+    }
+    // Curated discovery is the trust boundary → skip the manual host allowlist
+    // (trustedSource) but keep the spend cap. Exact-scheme only today; upto/batch
+    // resources surface a clear "no exact accept" error (follow-up).
+    return x402HttpCall({ ...deps, trustedSource: true }, {
+        url: detail.resourceUrl,
+        method: detail.httpMethod ?? "POST",
+        body: args.body,
+    });
+}
+//# sourceMappingURL=discoveryTools.js.map

package/dist/discoveryTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discoveryTools.js","sourceRoot":"","sources":["../src/discoveryTools.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,sCAAsC;IACxC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC7D;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBACnC,WAAW,EAAE,wCAAwC;aACtD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC7D;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;SAC5E;QACD,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,sBAAsB;IACxB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4CAA4C;aAC1D;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAcX,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAuB,EACvB,IAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAqB,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW;QACzD,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;SAC7E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAkB,EAClB,MAAuB,EACvB,IAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,WAAW,CAChB,aAAa,IAAI,CAAC,UAAU,cAAc,MAAM,CAAC,IAAI,oBAAoB;YACvE,eAAe,MAAM,CAAC,WAAW,EAAE;YACnC,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;gBACpB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,mBAAmB,CAAC,CAC3B,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,iEAAiE;IACjE,OAAO,YAAY,CACjB,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAChC;QACE,GAAG,EAAE,MAAM,CAAC,WAAW;QACvB,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CACF,CAAC;AACJ,CAAC"}

package/dist/funds/direct-balance.d.ts

@@ -0,0 +1,27 @@
+/**
+ * DirectBalance — light wallet mode (Safe-less).
+ *
+ * The delegate EOA holds USDC.e directly (funded by sending USDC.e straight to
+ * its address). No Safe, no AllowanceModule, no autoTopup — and because x402
+ * settlement is gasless (the facilitator submits EIP-3009 / sponsors the upto
+ * Permit2 approval), the delegate needs no native gas either. So funding the
+ * wallet is a single USDC.e transfer.
+ *
+ * This `Funds` impl simply reads the delegate's balance before each payment and,
+ * when short, throws an error whose message doubles as a funding instruction the
+ * MCP host surfaces to the LLM/user.
+ */
+import { type Address, type Hex } from "viem";
+import type { Funds } from "../funds.js";
+export declare class DirectBalance implements Funds {
+    private readonly delegate;
+    private readonly token;
+    private readonly publicClient;
+    constructor(delegate: Address, token: Address, chainId: number, rpcUrl: string);
+    /**
+     * Light mode never performs an on-chain topup, so this either returns null
+     * (sufficient balance) or throws with a funding instruction. It never returns
+     * a tx hash.
+     */
+    ensure(requiredAtomic: bigint): Promise<Hex | null>;
+}

package/dist/funds/direct-balance.js

@@ -0,0 +1,58 @@
+/**
+ * DirectBalance — light wallet mode (Safe-less).
+ *
+ * The delegate EOA holds USDC.e directly (funded by sending USDC.e straight to
+ * its address). No Safe, no AllowanceModule, no autoTopup — and because x402
+ * settlement is gasless (the facilitator submits EIP-3009 / sponsors the upto
+ * Permit2 approval), the delegate needs no native gas either. So funding the
+ * wallet is a single USDC.e transfer.
+ *
+ * This `Funds` impl simply reads the delegate's balance before each payment and,
+ * when short, throws an error whose message doubles as a funding instruction the
+ * MCP host surfaces to the LLM/user.
+ */
+import { createPublicClient, http, defineChain, } from "viem";
+const ERC20_BALANCE_ABI = [
+    {
+        type: "function",
+        name: "balanceOf",
+        inputs: [{ name: "account", type: "address" }],
+        outputs: [{ name: "", type: "uint256" }],
+        stateMutability: "view",
+    },
+];
+export class DirectBalance {
+    delegate;
+    token;
+    publicClient;
+    constructor(delegate, token, chainId, rpcUrl) {
+        this.delegate = delegate;
+        this.token = token;
+        const chain = defineChain({
+            id: chainId,
+            name: `chain-${chainId}`,
+            nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
+            rpcUrls: { default: { http: [rpcUrl] } },
+        });
+        this.publicClient = createPublicClient({ chain, transport: http(rpcUrl) });
+    }
+    /**
+     * Light mode never performs an on-chain topup, so this either returns null
+     * (sufficient balance) or throws with a funding instruction. It never returns
+     * a tx hash.
+     */
+    async ensure(requiredAtomic) {
+        const balance = (await this.publicClient.readContract({
+            address: this.token,
+            abi: ERC20_BALANCE_ABI,
+            functionName: "balanceOf",
+            args: [this.delegate],
+        }));
+        if (balance >= requiredAtomic)
+            return null;
+        throw new Error(`insufficient USDC.e: need ${requiredAtomic}, have ${balance}. ` +
+            `Send USDC.e to ${this.delegate} on this network to top up ` +
+            `(no native gas required).`);
+    }
+}
+//# sourceMappingURL=direct-balance.js.map

package/dist/funds/direct-balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-balance.js","sourceRoot":"","sources":["../../src/funds/direct-balance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,WAAW,GAIZ,MAAM,MAAM,CAAC;AAId,MAAM,iBAAiB,GAAG;IACxB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,eAAe,EAAE,MAAM;KACxB;CACO,CAAC;AAEX,MAAM,OAAO,aAAa;IAIL;IACA;IAJF,YAAY,CAAe;IAE5C,YACmB,QAAiB,EACjB,KAAc,EAC/B,OAAe,EACf,MAAc;QAHG,aAAQ,GAAR,QAAQ,CAAS;QACjB,UAAK,GAAL,KAAK,CAAS;QAI/B,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,SAAS,OAAO,EAAE;YACxB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACpD,OAAO,EAAE,IAAI,CAAC,KAAK;YACnB,GAAG,EAAE,iBAAiB;YACtB,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SACtB,CAAC,CAAW,CAAC;QAEd,IAAI,OAAO,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,IAAI,KAAK,CACb,6BAA6B,cAAc,UAAU,OAAO,IAAI;YAC9D,kBAAkB,IAAI,CAAC,QAAQ,6BAA6B;YAC5D,2BAA2B,CAC9B,CAAC;IACJ,CAAC;CACF"}

package/dist/funds.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Funds — abstraction over "ensure the delegate can cover this payment".
+ *
+ * Two implementations back the two wallet modes:
+ *   - AutoTopup (Safe mode): pulls USDC.e from the user's Safe to the delegate
+ *     EOA via AllowanceModule.executeAllowanceTransfer, within the on-chain
+ *     daily cap, when the delegate balance is short.
+ *   - DirectBalance (light mode): the delegate EOA holds USDC.e directly; this
+ *     impl only verifies the balance and surfaces a clear funding instruction
+ *     when short — no Safe, no on-chain topup, no native gas.
+ *
+ * The payment path (client.ts onPaymentRequested) depends only on this
+ * interface, so the two modes share a single code path.
+ */
+import type { Hex } from "viem";
+export interface Funds {
+    /**
+     * Ensure the delegate holds at least `requiredAtomic` of the payment asset
+     * before the x402 payment is signed.
+     *
+     * Returns the topup tx hash when an on-chain refill was performed (Safe mode),
+     * or `null` when no action was needed (already sufficient). Throws a clear,
+     * host-surfaceable error when funds are insufficient and cannot be topped up.
+     */
+    ensure(requiredAtomic: bigint): Promise<Hex | null>;
+}

package/dist/funds.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=funds.js.map

package/dist/funds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"funds.js","sourceRoot":"","sources":["../src/funds.ts"],"names":[],"mappings":""}

package/dist/httpX402.d.ts

@@ -0,0 +1,45 @@
+import type { Network } from "@x402/core/types";
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { Funds } from "./funds.js";
+import type { RawEoaSigner } from "./signers/raw-eoa.js";
+export interface HttpX402Deps {
+    signer: RawEoaSigner;
+    network: Network;
+    /** Ensure the delegate holds enough USDC.e before paying. */
+    funds?: Funds;
+    /**
+     * Set by hpp_call for curated-discovery resources: skip the manual host
+     * allowlist + local credential injection (discovery is the trust boundary).
+     * The spend cap (default limits, per-call amount, cooldown) still applies.
+     */
+    trustedSource?: boolean;
+}
+export declare const X402_HTTP_TOOL: {
+    readonly name: "x402_http_call";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly url: {
+                readonly type: "string";
+                readonly description: "Target endpoint URL (host must be allow-listed).";
+            };
+            readonly method: {
+                readonly type: "string";
+                readonly description: "HTTP method (default POST).";
+            };
+            readonly body: {
+                readonly type: "object";
+                readonly description: "JSON request body (for POST/PUT/...).";
+            };
+        };
+        readonly required: readonly ["url"];
+        readonly additionalProperties: false;
+    };
+};
+export interface X402HttpArgs {
+    url: string;
+    method?: string;
+    body?: unknown;
+}
+export declare function x402HttpCall(deps: HttpX402Deps, args: X402HttpArgs): Promise<CallToolResult>;

package/dist/httpX402.js

@@ -0,0 +1,214 @@
+/**
+ * Generic HTTP x402 tool for the bridge.
+ *
+ * Like `pay_a2a_agent`, this is a *local* tool (not forwarded upstream):
+ * it lets the host call an x402-protected HTTP endpoint. The first use is
+ * HPP Hub credit top-up (`POST /api/web3/credit/topup`), but nothing here
+ * is Hub-specific — the per-host auth header + spend limits come from the
+ * generic policy (see ./policy.ts), so any "x402 + auth header" service
+ * works with one policy entry and no code change.
+ *
+ * Flow (mirrors a2a.ts: gate → spend-cap → sign → re-send):
+ *   1. pre-flight guard: host allowlist + https              (policy.checkAccess)
+ *   2. inject auth headers from local policy                  (policy.resolveCredentials)
+ *   3. unpaid fetch; non-402 → passthrough (e.g. GET usage)
+ *   4. parse 402 → pick the (exact, ourNetwork) accept        (a2a.pickExactAccept)
+ *   5. per-call amount cap                                    (policy.checkAmount)
+ *   6. autoTopup the delegate from the Safe (reused)
+ *   7. sign exact payload, encode Payment-Signature, re-send
+ *
+ * Secrets (api keys) never travel through tool args — only `{url, method,
+ * body}` come from the host/LLM. Identity is the X-Api-Key injected locally.
+ */
+import { x402Client, x402HTTPClient } from "@x402/core/client";
+import { ExactEvmScheme } from "@x402/evm/exact/client";
+import { pickExactAccept } from "./a2a.js";
+import { loadPolicy, checkAccess, checkAmount, resolveCredentials, checkCooldown, recordPaid, acquireHostLock, } from "./policy.js";
+import { log } from "./log.js";
+export const X402_HTTP_TOOL = {
+    name: "x402_http_call",
+    description: "Call an x402-protected HTTP endpoint and return its response. Payment " +
+        "(USDC.e) is handled automatically with your wallet, subject to the daily " +
+        "spend cap; per-host auth headers come from local policy (you do NOT pass " +
+        "keys). Only allow-listed hosts can be called. Use for paid HTTP APIs and " +
+        "account actions such as Hub credit top-up " +
+        "(POST <hub>/api/web3/credit/topup {amount}) and usage checks " +
+        "(GET <hub>/api/web3/credit/usage).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            url: { type: "string", description: "Target endpoint URL (host must be allow-listed)." },
+            method: { type: "string", description: "HTTP method (default POST)." },
+            body: { type: "object", description: "JSON request body (for POST/PUT/...)." },
+        },
+        required: ["url"],
+        additionalProperties: false,
+    },
+};
+function errorResult(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+async function toToolResult(res) {
+    const text = await res.text();
+    let parsed = text;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        /* keep raw text */
+    }
+    return {
+        content: [
+            { type: "text", text: JSON.stringify({ status: res.status, ok: res.ok, body: parsed }) },
+        ],
+        isError: !res.ok,
+    };
+}
+export async function x402HttpCall(deps, args) {
+    const url = args.url;
+    if (!url || typeof url !== "string")
+        return errorResult("url required");
+    const method = (args.method ?? "POST").toUpperCase();
+    const policy = loadPolicy();
+    // 1. pre-flight guard — host allowlist + https (③ / H1·C1). Trusted
+    // (curated-discovery) calls skip the allowlist/https gate but still inherit
+    // the default spend limits carried on `access.limits`.
+    const access = checkAccess(policy, url);
+    if (!access.ok && !deps.trustedSource)
+        return errorResult(`blocked: ${access.error}`);
+    const host = new URL(url).host.toLowerCase();
+    // 2. inject auth headers from local policy (② — never from args/LLM). Trusted
+    // discovery services authenticate by payment (x402), not a local api key.
+    let authHeaders = {};
+    if (!deps.trustedSource) {
+        try {
+            authHeaders = resolveCredentials(policy, host);
+        }
+        catch (err) {
+            return errorResult(err.message);
+        }
+    }
+    const baseHeaders = { "Content-Type": "application/json", ...authHeaders };
+    const init = {
+        method,
+        headers: baseHeaders,
+        body: method === "GET" || method === "HEAD" ? undefined : JSON.stringify(args.body ?? {}),
+    };
+    // 3. unpaid request — non-402 passes through (e.g. GET /usage 200)
+    let res;
+    try {
+        res = await fetch(url, init);
+    }
+    catch (err) {
+        return errorResult(`request failed: ${err.message}`);
+    }
+    if (res.status !== 402)
+        return toToolResult(res);
+    // Paid path. Serialize per host so two near-simultaneous calls can't both
+    // pay (closes the cooldown's check-then-act race); combined with the
+    // cooldown below this dedupes agent-retry / heartbeat double-fire.
+    const release = acquireHostLock(host);
+    if (!release) {
+        log.info("x402_http_call.locked", { host });
+        return {
+            content: [
+                { type: "text", text: JSON.stringify({ inProgress: true, retry: true, message: `payment to ${host} already in progress` }) },
+            ],
+        };
+    }
+    try {
+        // H2 idempotency: if we paid this host within its cooldown window, return
+        // the previous result instead of paying again.
+        const cd = checkCooldown(host, access.limits.cooldownMs);
+        if (cd.throttled) {
+            let previous = cd.cachedResult;
+            try {
+                previous = JSON.parse(cd.cachedResult ?? "null");
+            }
+            catch {
+                /* keep raw */
+            }
+            log.info("x402_http_call.cooldown", { host, remainingMs: cd.remainingMs });
+            return {
+                content: [
+                    { type: "text", text: JSON.stringify({ cooldown: true, retryAfterMs: cd.remainingMs, previous }) },
+                ],
+            };
+        }
+        // x402 client — also parses the 402 (v2 header / v1 body) and signs.
+        const client = new x402Client().register(deps.network, new ExactEvmScheme(deps.signer.viemAccount));
+        const httpClient = new x402HTTPClient(client);
+        // Parse 402 requirements. x402 v2 carries them in the PAYMENT-REQUIRED
+        // header (body is the v1 fallback) — getPaymentRequiredResponse handles
+        // those. Some servers (incl. HPP Hub) instead return v2-shaped requirements
+        // directly in the JSON body; fall back to that when the SDK parser rejects.
+        const body = (await res.json().catch(() => undefined));
+        let required;
+        try {
+            required = httpClient.getPaymentRequiredResponse((name) => res.headers.get(name), body);
+        }
+        catch {
+            if (body && Array.isArray(body.accepts)) {
+                required = body;
+            }
+            else {
+                return errorResult("no x402 payment requirements found (header or body)");
+            }
+        }
+        const accept = pickExactAccept(required, deps.network);
+        if (!accept) {
+            return errorResult(`no "exact" accept for network ${deps.network} ` +
+                `(offered: ${JSON.stringify((required.accepts ?? []).map((a) => ({ scheme: a.scheme, network: a.network })))})`);
+        }
+        const narrowedRequired = { ...required, accepts: [accept] };
+        const amount = BigInt(accept.amount ?? "0");
+        // per-call amount cap — before pulling any funds
+        const deny = checkAmount(access.limits, amount);
+        if (deny)
+            return errorResult(`blocked: ${deny}`);
+        // Ensure the delegate holds enough USDC.e (Safe autoTopup within the
+        // on-chain cap, or a light-mode balance check — same gate either way).
+        if (deps.funds) {
+            try {
+                await deps.funds.ensure(amount);
+            }
+            catch (err) {
+                return errorResult(`funds check failed (spend cap / insufficient balance?): ${err.message}`);
+            }
+        }
+        // sign exact payload + encode Payment-Signature header
+        let payHeaders;
+        try {
+            const payload = await httpClient.createPaymentPayload(narrowedRequired);
+            payHeaders = httpClient.encodePaymentSignatureHeader(payload);
+        }
+        catch (err) {
+            return errorResult(`failed to sign payment: ${err.message}`);
+        }
+        // re-send with payment + preserved auth headers
+        let paid;
+        try {
+            paid = await fetch(url, { ...init, headers: { ...baseHeaders, ...payHeaders } });
+        }
+        catch (err) {
+            return errorResult(`paid request failed: ${err.message}`);
+        }
+        const result = await toToolResult(paid);
+        // Record only successful paid calls so the cooldown gate can dedupe
+        // retries; a failed settle (isError) stays retryable.
+        if (!result.isError) {
+            recordPaid(host, result.content[0].text ?? "");
+        }
+        log.info("x402_http_call.done", {
+            host,
+            status: paid.status,
+            amountAtomic: amount.toString(),
+            paid: !result.isError,
+        });
+        return result;
+    }
+    finally {
+        release();
+    }
+}
+//# sourceMappingURL=httpX402.js.map

package/dist/httpX402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpX402.js","sourceRoot":"","sources":["../src/httpX402.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMxD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAe/B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,4CAA4C;QAC5C,+DAA+D;QAC/D,oCAAoC;IACtC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;YACxF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;YACtE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;SAC/E;QACD,QAAQ,EAAE,CAAC,KAAK,CAAC;QACjB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAQX,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAa;IACvC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;SACzF;QACD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAkB,EAClB,IAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAErD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,oEAAoE;IACpE,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;QAAE,OAAO,WAAW,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAEtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAE7C,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,WAAW,GAA2B,EAAE,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC;IACnG,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;KAC1F,CAAC;IAEF,mEAAmE;IACnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAEjD,0EAA0E;IAC1E,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,IAAI,sBAAsB,EAAE,CAAC,EAAE;aAC7H;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,0EAA0E;QAC1E,+CAA+C;QAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,QAAQ,GAAY,EAAE,CAAC,YAAY,CAAC;YACxC,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3E,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACnG;aACF,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QAE9C,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAExC,CAAC;QACd,IAAI,QAA8D,CAAC;QACnE,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,0BAA0B,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAC/B,IAAI,CAC8D,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,WAAW,CAAC,qDAAqD,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,WAAW,CAChB,iCAAiC,IAAI,CAAC,OAAO,GAAG;gBAC9C,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAE,MAA8B,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;QAErE,iDAAiD;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI;YAAE,OAAO,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAEjD,qEAAqE;QACrE,uEAAuE;QACvE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,2DAA4D,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,UAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,gBAAyB,CAAC,CAAC;YACjF,UAAU,GAAG,UAAU,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,2BAA4B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,oEAAoE;QACpE,sDAAsD;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,EAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAC9B,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC/B,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}