@nevermined-io/payments 1.9.0 → 1.11.0

package/dist/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AAEjC,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,WAAW,EAAE,eAAe,CAAA;IAE5B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,CAAC,EAAE,aAAa,CAAA;IAEtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAA;AAEnC;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;OAEG;IACH,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAA;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,uBAAuB,EAAE,OAAO,CAAA;IAChC;;OAEG;IACH,cAAc,EAAE,kBAAkB,CAAA;IAClC;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;GAMG;AACH,oBAAY,aAAa;IACvB,WAAW,IAAA;IACX,gBAAgB,IAAA;IAChB,oBAAoB,IAAA;CACrB;AAED;;;;GAIG;AACH,oBAAY,QAAQ;IAClB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,OAAsD,CAAA;AACvF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,EAAE,OAAsD,CAAA;AAE/F;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,SAAS,IAAA;IACT,KAAK,IAAA;IACL,OAAO,IAAA;CACR;AAED;;;;;;;GAOG;AACH,oBAAY,kBAAkB;IAC5B,gBAAgB,IAAI,CAAE,qBAAqB;IAC3C,UAAU,IAAI,CAAE,iBAAiB;IACjC,cAAc,IAAI;IAClB,eAAe,IAAI;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,OAAO,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,IAAI,CAAC,EAAE,IAAI,CAAA;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,uBAAuB,EAAE,MAAM,CAAA;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;OAEG;IACH,WAAW,CAAC,EAAE,IAAI,CAAA;CAGnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAI3B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;IAChD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,SAAS,EAAE,KAAK,GAAG,MAAM,CAAS;IAClC;;;OAGG;IACH,IAAI,SAAI;IACR;;;OAGG;IACH,MAAM,SAAK;IAEX;;;OAGG;gBACS,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAShD;;;;OAIG;IACH,aAAa,IAAI,MAAM;CAWxB;AAED;;GAEG;AACH,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IAEtB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,qBAAqB,CAAA;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAG/D,CAAA;AAYD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,eAAe,GAAG,MAAM,CAK/F;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,cAAc,CAE7D;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;AAEhE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4GAA4G;IAC5G,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,0FAA0F;IAC1F,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAA;IACrD,2IAA2I;IAC3I,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sCAAsC;IACtC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAA;IACpB,uHAAuH;IACvH,QAAQ,EAAE,kBAAkB,CAAA;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sBAAsB;IACtB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,CAAA;AAEjC,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,eAAe,CAAA;IAE7B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,CAAC,EAAE,aAAa,CAAA;IAEtB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAA;AAEnC;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;OAEG;IACH,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAA;IACjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,uBAAuB,EAAE,OAAO,CAAA;IAChC;;OAEG;IACH,cAAc,EAAE,kBAAkB,CAAA;IAClC;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;GAMG;AACH,oBAAY,aAAa;IACvB,WAAW,IAAA;IACX,gBAAgB,IAAA;IAChB,oBAAoB,IAAA;CACrB;AAED;;;;GAIG;AACH,oBAAY,QAAQ;IAClB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,IAAI,SAAS;CACd;AAED,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,EAAE,OAAsD,CAAA;AACvF,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,EAAE,OAAsD,CAAA;AAE/F;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,SAAS,IAAA;IACT,KAAK,IAAA;IACL,OAAO,IAAA;CACR;AAED;;;;;;;GAOG;AACH,oBAAY,kBAAkB;IAC5B,gBAAgB,IAAI,CAAE,qBAAqB;IAC3C,UAAU,IAAI,CAAE,iBAAiB;IACjC,cAAc,IAAI;IAClB,eAAe,IAAI;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,OAAO,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,IAAI,CAAC,EAAE,IAAI,CAAA;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,uBAAuB,EAAE,MAAM,CAAA;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;OAEG;IACH,WAAW,CAAC,EAAE,IAAI,CAAA;CAGnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAI3B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;IAChD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,SAAS,EAAE,KAAK,GAAG,MAAM,CAAS;IAClC;;;OAGG;IACH,IAAI,SAAI;IACR;;;OAGG;IACH,MAAM,SAAK;IAEX;;;OAGG;gBACS,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAShD;;;;OAIG;IACH,aAAa,IAAI,MAAM;CAWxB;AAED;;GAEG;AACH,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IAEtB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,qBAAqB,CAAA;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAG/D,CAAA;AAYD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,eAAe,GAAG,MAAM,CAK/F;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,cAAc,CAE7D;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;AAEhE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4GAA4G;IAC5G,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,0FAA0F;IAC1F,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAA;IACrD,2IAA2I;IAC3I,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sCAAsC;IACtC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAA;IACpB,uHAAuH;IACvH,QAAQ,EAAE,kBAAkB,CAAA;IAC5B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sBAAsB;IACtB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CACpC"}

package/dist/common/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/common/types.ts"],"names":[],"mappings":"AAsKA;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,+DAAW,CAAA;IACX,yEAAgB,CAAA;IAChB,iFAAoB,CAAA;AACtB,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,uBAAW,CAAA;IACX,uBAAW,CAAA;IACX,yBAAa,CAAA;IACb,yBAAa,CAAA;AACf,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAY,4CAA4C,CAAA;AACvF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAY,4CAA4C,CAAA;AAE/F;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,+DAAS,CAAA;IACT,uDAAK,CAAA;IACL,2DAAO,CAAA;AACT,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,mFAAoB,CAAA;IACpB,uEAAc,CAAA;IACd,+EAAkB,CAAA;IAClB,iFAAmB,CAAA;AACrB,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AA2KD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAsB5B;;;OAGG;IACH,YAAY,OAAoC;QApBhD;;;WAGG;QACH,cAAS,GAAmB,MAAM,CAAA;QAClC;;;WAGG;QACH,SAAI,GAAG,CAAC,CAAA;QACR;;;WAGG;QACH,WAAM,GAAG,EAAE,CAAA;QAOT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;YAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7B,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;QAExC,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,sCAAmB,CAAA;IACnB,oCAAiB,CAAA;IACjB,sCAAmB,CAAA;AACrB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AA+CD;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmC;IAClE,aAAa,EAAE,cAAc;IAC7B,qBAAqB,EAAE,QAAQ;CAChC,CAAA;AAED;;GAEG;AACH,MAAM,sBAAsB,GAA2B;IACrD,OAAO,EAAE,cAAc,EAAE,eAAe;IACxC,eAAe,EAAE,cAAc,EAAE,eAAe;IAChD,IAAI,EAAE,aAAa,EAAE,eAAe;IACpC,YAAY,EAAE,aAAa,EAAE,eAAe;CAC7C,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,WAA6B;IACrF,IAAI,MAAM,KAAK,aAAa,IAAI,WAAW,EAAE,CAAC;QAC5C,OAAO,sBAAsB,CAAC,WAAW,CAAC,IAAI,cAAc,CAAA;IAC9D,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,qBAAqB,CAAA;AAC3D,CAAC","sourcesContent":["import { EnvironmentName } from '../environments.js'\n\n/**\n * The payment scheme to use.\n * - 'nvm' (default): Nevermined-issued x402 access tokens covering both\n *   credit-based ERC-4337 payments and fiat card delegations (Stripe,\n *   Braintree, Visa).\n */\nexport type PaymentScheme = 'nvm'\n\nexport interface PaymentOptions {\n  /**\n   * The Nevermined environment to connect to.\n   * If you are developing an agent it's recommended to use the \"sandbox\" environment.\n   * When deploying to live use the \"live\" environment.\n   */\n  environment: EnvironmentName\n\n  /**\n   * The Nevermined API Key. This key identify your user and is required to interact with the Nevermined API.\n   * You can get your API key by logging in to the Nevermined App.\n   * @see https://nevermined.ai/docs/tutorials/integration/nvm-api-keys\n   */\n  nvmApiKey: string\n\n  /**\n   * The payment scheme to use. Defaults to 'nvm'.\n   */\n  scheme?: PaymentScheme\n\n  /**\n   * The URL to return to the app after a successful login.\n   */\n  returnUrl?: string\n\n  /**\n   * The app id. This attribute is optional and helps to associate assets registered into Nevermined with a common identifier.\n   */\n  appId?: string\n\n  /**\n   * Pins the Nevermined backend API version (MAJOR.MINOR) sent with every\n   * request via the `Nevermined-Version` header. Defaults to\n   * {@link LOCKED_API_VERSION} — the backend contract this SDK release is\n   * built and tested against. Override only to deliberately target a\n   * different backend contract.\n   *\n   * @see https://docs.nevermined.app/api-reference/versioning\n   */\n  version?: string\n\n  /**\n   * Optional organization ID to use as the active workspace for every\n   * authenticated backend request. When set, the SDK sends an\n   * `X-Current-Org-Id` header so the backend scopes published agents,\n   * plans, and other resources to this organization.\n   *\n   * If omitted the backend falls back to the API key's org tag or to the\n   * caller's most-recent active membership (see `CurrentOrgContextGuard`\n   * in nvm-monorepo).\n   *\n   * Override per-call via the `organizationId` option on create methods.\n   *\n   * @see Payments.setOrganizationId\n   */\n  organizationId?: string\n}\n\nexport interface Endpoint {\n  [verb: string]: string\n}\n\nexport interface ApiResponse<T> {\n  success: boolean\n  data?: T\n  error?: string\n}\n\nexport type Address = `0x${string}`\n\n/**\n * Definition of the price configuration for a Payment Plan\n */\nexport interface PlanPriceConfig {\n  /**\n   * The address of the token (ERC20 or Native if zero address) for paying the plan\n   */\n  tokenAddress?: Address\n  /**\n   * The amounts to be paid for the plan\n   */\n  amounts: bigint[]\n  /**\n   * The receivers of the payments of the plan\n   */\n  receivers: string[]\n  /**\n   * The address of the smart contract that calculates the price\n   */\n  contractAddress?: Address\n  /**\n   * The address of the fee controller contract, if any\n   * @remarks if not given, the fee controller is the default one\n   */\n  feeController?: Address\n  /**\n   * The address of the external price contract, if any\n   */\n  externalPriceAddress?: Address\n  /**\n   * The address of the template contract, if any\n   */\n  templateAddress?: Address\n  /**\n   * Whether this is a crypto payment (true) or fiat payment (false)\n   */\n  isCrypto: boolean\n  /**\n   * Optional currency for the plan (e.g., 'USD', 'EUR', 'USDC', 'EURC').\n   * When omitted, the backend determines the default based on the payment type.\n   */\n  currency?: Currency | string\n}\n\n/**\n * Definition of the credits configuration for a payment plan\n */\nexport interface PlanCreditsConfig {\n  /**\n   * Whether the redemption amount is fixed (true) or dynamic (false)\n   */\n  isRedemptionAmountFixed: boolean\n  /**\n   * How the credits can be redeemed\n   */\n  redemptionType: PlanRedemptionType\n  /**\n   * Whether burns of these credits are mirrored on-chain. When `false`\n   * (default) the credits ledger lives in the API's Postgres and burns\n   * are recorded off-chain only. When `true` an `OnchainMirrorWorker`\n   * replays each off-chain burn to `NFT1155Credits` for audit.\n   */\n  onchainMirror: boolean\n  /**\n   * The duration of the credits in seconds\n   * @remarks 0 means non-expirable\n   */\n  durationSecs: bigint\n  /**\n   * The amount of credits that are granted when purchasing the plan (as string for API)\n   */\n  amount: bigint\n  /**\n   * The minimum number of credits redeemed when using the plan\n   */\n  minAmount: bigint\n  /**\n   * The maximum number of credits redeemed when using the plan\n   */\n  maxAmount: bigint\n  /**\n   * The address of the NFT contract that represents the plan's credits\n   */\n  nftAddress?: Address\n}\n\n/**\n * Different types of prices that can be configured for a plan\n * @remarks 0 - FIXED_PRICE, 1 - FIXED_FIAT_PRICE, 2 - SMART_CONTRACT_PRICE\n * If FIXED_PRICE it means the plan can be paid in crypto by a fixed amount of a ERC20 or Native token\n * If FIXED_FIAT_PRICE it means the plan can be paid in fiat by a fixed amount (typically USD)\n * If SMART_CONTRACT_PRICE it means the plan can be paid in crypto and the amount to be paid is calculated by a smart contract\n */\nexport enum PlanPriceType {\n  FIXED_PRICE,\n  FIXED_FIAT_PRICE,\n  SMART_CONTRACT_PRICE,\n}\n\n/**\n * Supported currencies for payment plans.\n * - Fiat: USD, EUR (processed via Stripe)\n * - Crypto: USDC, EURC (ERC20 stablecoins on Base)\n */\nexport enum Currency {\n  USD = 'USD',\n  EUR = 'EUR',\n  USDC = 'USDC',\n  EURC = 'EURC',\n}\n\n/** EURC token address on Base Mainnet (chain 8453) */\nexport const EURC_TOKEN_ADDRESS: Address = '0x60a3E35Cc302bFA44Cb288Bc5a4F316Fdb1adb42'\n/** EURC token address on Base Sepolia testnet (chain 84532) */\nexport const EURC_TOKEN_ADDRESS_TESTNET: Address = '0x808456652fdb597867f38412077A9182bf77359F'\n\n/**\n * Different types of credits that can be obtained when purchasing a plan\n * @remarks 0 - EXPIRABLE, 1 - FIXED, 2 - DYNAMIC\n * If EXPIRABLE it means the credits can be used for a fixed amount of time (calculated in seconds)\n * If FIXED it means the credits can be used for a fixed amount of times\n * If DYNAMIC it means the credits can be used but the redemption amount is dynamic\n */\nexport enum PlanCreditsType {\n  EXPIRABLE,\n  FIXED,\n  DYNAMIC,\n}\n\n/**\n * Different types of redemptions criterias that can be used when redeeming credits\n * @remarks 0 - ONLY_GLOBAL_ROLE, 1 - ONLY_OWNER, 2 - ROLE_AND_OWNER\n * If ONLY_GLOBAL_ROLE it means the credits can be redeemed only by an account with the `CREDITS_BURNER_ROLE`\n * If ONLY_OWNER it means the credits can be redeemed only by the owner of the Plan\n * If ONLY_PLAN_ROLE it means the credits can be redeemed by an account with specifics grants for the plan\n * If ONLY_SUBSCRIBER means only the subscriber (the one who holds the credits NFT) can redeem\n */\nexport enum PlanRedemptionType {\n  ONLY_GLOBAL_ROLE = 0, // NVM Proxy can burn\n  ONLY_OWNER = 1, // Agent can burn\n  ONLY_PLAN_ROLE = 2,\n  ONLY_SUBSCRIBER = 4, // Subscriber who ordered the plan can redeem\n}\n\nexport interface PlanBalance {\n  planId: string\n  planName: string\n  planType: string\n  holderAddress: Address\n  balance: bigint\n  creditsContract: Address\n  isSubscriber: boolean\n  pricePerCredit: number\n}\n\nexport interface StartAgentRequest {\n  agentRequestId: string\n  agentName: string\n  agentId: string\n  balance: PlanBalance\n  urlMatching: string\n  verbMatching: string\n  batch: boolean\n}\n\nexport interface ValidationAgentRequest {\n  balance: PlanBalance\n  urlMatching: string\n  verbMatching: string\n}\n\nexport interface AgentAccessCredentials {\n  accessToken: string\n  proxies?: string[]\n}\n\nexport interface SubscriberRequestStatus {\n  planId: string\n  agentId: string\n  isValid: boolean\n  code: number\n  message?: string\n}\n\nexport interface NvmAPIResult {\n  success: boolean\n  message?: string\n  txHash?: string\n  httpStatus?: number\n  data?: APIOutputData\n  when?: Date\n}\n\nexport interface APIOutputData {\n  [key: string]: any\n}\n\nexport interface StripeCheckoutResult {\n  stripeCheckoutSessionId: string\n  checkoutLink: string\n  clientReferenceId: string\n  paymentStatus?: string\n  linkCreatedAt: number\n  linkExpiresAt: number\n}\n\n/**\n * Metadata attributes describing the AI Agent.\n */\nexport interface AgentMetadata {\n  /**\n   * Name of the Agent\n   */\n  name: string\n  /**\n   * Description of the Agent\n   */\n  description?: string\n  /**\n   * The author of the Agent (organization or person) that own the Agent.\n   */\n  author?: string\n  /**\n   * The author of the Agent (organization or person) that own the Agent.\n   */\n  license?: string\n  /**\n   * Tags describing the AI Agent\n   */\n  tags?: string[]\n  /**\n   * Some description or instructions about how to integrate the Agent.\n   */\n  integration?: string\n  /**\n   * A link to some same usage of the Agent.\n   */\n  sampleLink?: string\n  /**\n   * Text describing the API of the Agent.\n   */\n  apiDescription?: string\n  /**\n   * The date when the Agent was created.\n   */\n  dateCreated?: Date\n\n  // internalAttributes?: any\n}\n\n/**\n * Metadata attributes describing the Payment Plan.\n */\nexport interface PlanMetadata extends AgentMetadata {\n  /**\n   * Indicates if a payment plan is a Trial plan.\n   * A Trial plan is a plan that allows users to test the AI Agents associated with it typically without any cost.\n   * @remarks A Trial plan only can be purchased once by a user.\n   */\n  isTrialPlan?: boolean\n  /**\n   * Indicates if a payment plan is limited by credits.\n   * If 'time', the plan will be limited by time.\n   * If 'credits', the plan will be limited by credits.\n   */\n  accessLimit?: 'credits' | 'time'\n}\n\n/**\n * It describes the API exposed by an AI Agent.\n * This information is necessary to query the AI Agent and to know which endpoints are available.\n */\nexport interface AgentAPIAttributes {\n  /**\n   * Optional allowlist of upstream endpoints that require a valid Payment Plan\n   * subscription. When provided, the Nevermined platform enforces this list as\n   * **Additional Security** (defense-in-depth) on top of any per-route gating\n   * the Payments library middleware applies in your agent. When omitted, no\n   * route-level allowlist is enforced — your library middleware remains the\n   * sole gate.\n   */\n  endpoints?: Endpoint[]\n  /**\n   * The list of endpoints of the upstream service that publicly available. The access to these endpoints don't require subscription to the Payment Plan. They are useful to expose documentation, etc.\n   */\n  openEndpoints?: string[]\n  /**\n   * Optional URL to a discoverable agent definition (OpenAPI spec, MCP\n   * Manifest, or A2A agent card). Stored as metadata for documentation /\n   * discovery — not consumed at runtime by the Nevermined platform.\n   */\n  agentDefinitionUrl?: string\n\n  /////// AUTHORIZATION ///////\n\n  /**\n   * The upstream agent/service authentication type ('none', 'basic', 'bearer' or 'oauth').\n   */\n  authType?: 'none' | 'basic' | 'oauth' | 'bearer'\n  /**\n   * The upstream agent/service username for authentication. Only if `authType` is 'basic'.\n   */\n  username?: string\n  /**\n   * The upstream agent/service password for authentication. Only if `authType` is 'basic'.\n   */\n  password?: string\n  /**\n   * The upstream agent/service bearer token for authentication. Only if `authType` is 'bearer' or 'oauth'.\n   */\n  token?: string\n}\n\n/**\n * Options for pagination in API requests to the Nevermined API.\n */\nexport class PaginationOptions {\n  /**\n   * The field to sort the results by.\n   * If not provided, the default sorting defined by the API will be applied.\n   */\n  sortBy?: string\n  /**\n   * The order in which to sort the results.\n   * Default is 'desc' (descending).\n   */\n  sortOrder: 'asc' | 'desc' = 'desc'\n  /**\n   * The page number to retrieve.\n   * Default is 1.\n   */\n  page = 1\n  /**\n   * The number of items per page.\n   * Default is 10.\n   */\n  offset = 10\n\n  /**\n   * Constructs a new PaginationOptions instance.\n   * @param options - Optional initial values for the pagination options.\n   */\n  constructor(options?: Partial<PaginationOptions>) {\n    if (options) {\n      this.sortBy = options.sortBy\n      this.sortOrder = options.sortOrder || 'desc'\n      this.page = options.page || 1\n      this.offset = options.offset || 10\n    }\n  }\n\n  /**\n   * It returns a string representation of the pagination options\n   * @returns A string representation of the pagination options as URL query parameters.\n   * This can be used to append to API requests for pagination.\n   */\n  asQueryParams(): string {\n    const params: Record<string, string> = {}\n    if (this.sortBy) {\n      params.sortBy = this.sortBy\n    }\n    params.sortOrder = this.sortOrder\n    params.page = this.page.toString()\n    params.pageSize = this.offset.toString()\n\n    return new URLSearchParams(params).toString()\n  }\n}\n\n/**\n * Status of an agent task\n */\nexport enum AgentTaskStatus {\n  SUCCESS = 'SUCCESS',\n  FAILED = 'FAILED',\n  PENDING = 'PENDING',\n}\n\n/**\n * Data transfer object for tracking agent sub tasks\n */\nexport interface TrackAgentSubTaskDto {\n  /**\n   * The unique identifier of the agent task\n   */\n  agentRequestId: string\n\n  /**\n   * The number of credits burned in this agent sub task (optional)\n   * @defaultValue 0\n   */\n  creditsToRedeem?: number\n\n  /**\n   * A tag to categorize this agent sub task (optional)\n   */\n  tag?: string\n\n  /**\n   * A description of this agent sub task (optional)\n   */\n  description?: string\n\n  /**\n   * The status of the agent sub task (optional)\n   */\n  status?: AgentTaskStatus\n}\n\nexport type SimulationRequestOptions = {\n  agentName?: string\n  planName?: string\n  batch?: boolean\n  pricePerCredit?: number\n}\n\n/**\n * x402 payment scheme type.\n * - 'nvm:erc4337': Crypto payments via ERC-4337 smart accounts\n * - 'nvm:card-delegation': Fiat/Stripe card delegation payments\n */\nexport type X402SchemeType = 'nvm:erc4337' | 'nvm:card-delegation'\n\n/**\n * Default network for each x402 scheme (backward-compat: defaults to Base Sepolia).\n */\nexport const X402_SCHEME_NETWORKS: Record<X402SchemeType, string> = {\n  'nvm:erc4337': 'eip155:84532',\n  'nvm:card-delegation': 'stripe',\n}\n\n/**\n * Environment-specific network for the erc4337 scheme.\n */\nconst ERC4337_NETWORK_BY_ENV: Record<string, string> = {\n  sandbox: 'eip155:84532', // Base Sepolia\n  staging_sandbox: 'eip155:84532', // Base Sepolia\n  live: 'eip155:8453', // Base Mainnet\n  staging_live: 'eip155:8453', // Base Mainnet\n}\n\n/**\n * Return the default network for a scheme, accounting for the environment.\n *\n * For `nvm:erc4337`, the network depends on the environment:\n * - sandbox / staging_sandbox → `eip155:84532` (Base Sepolia)\n * - live / staging_live → `eip155:8453` (Base Mainnet)\n *\n * Falls back to `X402_SCHEME_NETWORKS` when no environment is given.\n */\nexport function getDefaultNetwork(scheme: X402SchemeType, environment?: EnvironmentName): string {\n  if (scheme === 'nvm:erc4337' && environment) {\n    return ERC4337_NETWORK_BY_ENV[environment] ?? 'eip155:84532'\n  }\n  return X402_SCHEME_NETWORKS[scheme]\n}\n\n/**\n * Type guard to check if a value is a valid x402 scheme type.\n */\nexport function isValidScheme(s: unknown): s is X402SchemeType {\n  return s === 'nvm:erc4337' || s === 'nvm:card-delegation'\n}\n\n/**\n * Currency codes accepted for a delegation. Lowercase, mirroring the\n * backend's `@IsIn(['usd','eur','usdc','eurc'])` constraint on\n * `POST /api/v1/delegation/create` and the Python SDK's `DelegationCurrency`.\n * Card providers use `'usd'`/`'eur'`; erc4337 uses `'usdc'`/`'eurc'`.\n */\nexport type DelegationCurrency = 'usd' | 'eur' | 'usdc' | 'eurc'\n\n/**\n * Configuration for delegation-based payments (both crypto and card schemes).\n *\n * The supported flow is **create-first**: create a delegation with\n * {@link DelegationAPI.createDelegation}, then request the access token with\n * `delegationConfig: { delegationId }`.\n *\n * @remarks\n * The inline create-on-the-fly fields (`providerPaymentMethodId`,\n * `spendingLimitCents`, `durationSecs`, `currency`, `merchantAccountId`,\n * `maxTransactions`, `cardId`) are individually deprecated. Calling\n * {@link X402TokenAPI.getX402AccessToken} with a `delegationConfig` that lacks\n * `delegationId` but carries one of those fields emits a runtime deprecation\n * warning; create the delegation first and pass only `delegationId` (optionally\n * `apiKeyId`) here. The interface itself is NOT deprecated — the\n * `{ delegationId }` reuse path is the supported way to configure a token request.\n */\nexport interface DelegationConfig {\n  /**\n   * PaymentMethod entity UUID — references an enrolled card.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  cardId?: string\n  /** Existing delegation UUID to reuse instead of creating a new one. The supported (non-deprecated) path. */\n  delegationId?: string\n  /**\n   * Stripe payment method ID (e.g., 'pm_...'). Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  providerPaymentMethodId?: string\n  /**\n   * Maximum spending limit in cents. Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  spendingLimitCents?: number\n  /**\n   * Duration of the delegation in seconds. Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  durationSecs?: number\n  /**\n   * Currency code (e.g., 'usd' for card providers, 'usdc' for erc4337).\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  currency?: DelegationCurrency\n  /**\n   * Merchant account ID (Stripe Connect acct_xxx or Braintree merchantId).\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  merchantAccountId?: string\n  /**\n   * Maximum number of transactions allowed.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  maxTransactions?: number\n  /**\n   * Plan ID to scope a newly-created delegation to. Optional and additive:\n   * delegations are plan-agnostic by default; supplying `planId` opts into a\n   * plan-bound delegation. (Visa delegations are always plan-specific and\n   * require it server-side.)\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  planId?: string\n  /** NVM API Key ID to scope the delegation to. Active (non-deprecated). */\n  apiKeyId?: string\n}\n\n/**\n * Payload for creating a new delegation via POST /api/v1/delegation/create.\n */\nexport interface CreateDelegationPayload {\n  /** Delegation provider: 'stripe' | 'braintree' | 'visa' for card, 'erc4337' for crypto */\n  provider: 'stripe' | 'braintree' | 'visa' | 'erc4337'\n  /** Payment method ID from the provider (Stripe 'pm_...', Braintree vault token, or Visa Agentic token id). Required for card providers. */\n  providerPaymentMethodId?: string\n  /** Maximum spending limit in cents */\n  spendingLimitCents: number\n  /** Duration of the delegation in seconds */\n  durationSecs: number\n  /** Currency code (e.g., 'usd' for card providers, 'usdc' for erc4337). Required by the backend — no silent default. */\n  currency: DelegationCurrency\n  /**\n   * Plan ID to scope the delegation to. Optional and additive: delegations are\n   * plan-agnostic by default; supplying `planId` opts into a plan-bound\n   * delegation. (Visa delegations are always plan-specific and require it.)\n   */\n  planId?: string\n  /** Merchant account ID (Stripe Connect acct_xxx or Braintree merchantId) */\n  merchantAccountId?: string\n  /** Maximum number of transactions allowed */\n  maxTransactions?: number\n  /** NVM API Key ID to scope the delegation to */\n  apiKeyId?: string\n}\n\n/**\n * Response from creating a delegation.\n */\nexport interface CreateDelegationResponse {\n  /** Delegation token (for card delegations) */\n  delegationToken?: string\n  /** Delegation UUID */\n  delegationId: string\n}\n\n/**\n * Options for x402 token generation that control scheme and delegation behavior.\n */\nexport interface X402TokenOptions {\n  /** The x402 scheme to use (defaults to 'nvm:erc4337') */\n  scheme?: X402SchemeType\n  /** Network identifier (auto-derived from scheme if omitted) */\n  network?: string\n  /** Delegation configuration for both erc4337 and card-delegation schemes */\n  delegationConfig?: DelegationConfig\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/common/types.ts"],"names":[],"mappings":"AA2KA;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,+DAAW,CAAA;IACX,yEAAgB,CAAA;IAChB,iFAAoB,CAAA;AACtB,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,uBAAW,CAAA;IACX,uBAAW,CAAA;IACX,yBAAa,CAAA;IACb,yBAAa,CAAA;AACf,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAY,4CAA4C,CAAA;AACvF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAY,4CAA4C,CAAA;AAE/F;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,+DAAS,CAAA;IACT,uDAAK,CAAA;IACL,2DAAO,CAAA;AACT,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,mFAAoB,CAAA;IACpB,uEAAc,CAAA;IACd,+EAAkB,CAAA;IAClB,iFAAmB,CAAA;AACrB,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AA2KD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAsB5B;;;OAGG;IACH,YAAY,OAAoC;QApBhD;;;WAGG;QACH,cAAS,GAAmB,MAAM,CAAA;QAClC;;;WAGG;QACH,SAAI,GAAG,CAAC,CAAA;QACR;;;WAGG;QACH,WAAM,GAAG,EAAE,CAAA;QAOT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;YAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7B,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAA;QAExC,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,sCAAmB,CAAA;IACnB,oCAAiB,CAAA;IACjB,sCAAmB,CAAA;AACrB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AA+CD;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmC;IAClE,aAAa,EAAE,cAAc;IAC7B,qBAAqB,EAAE,QAAQ;CAChC,CAAA;AAED;;GAEG;AACH,MAAM,sBAAsB,GAA2B;IACrD,OAAO,EAAE,cAAc,EAAE,eAAe;IACxC,eAAe,EAAE,cAAc,EAAE,eAAe;IAChD,IAAI,EAAE,aAAa,EAAE,eAAe;IACpC,YAAY,EAAE,aAAa,EAAE,eAAe;CAC7C,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,WAA6B;IACrF,IAAI,MAAM,KAAK,aAAa,IAAI,WAAW,EAAE,CAAC;QAC5C,OAAO,sBAAsB,CAAC,WAAW,CAAC,IAAI,cAAc,CAAA;IAC9D,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,qBAAqB,CAAA;AAC3D,CAAC","sourcesContent":["import { EnvironmentName } from '../environments.js'\n\n/**\n * The payment scheme to use.\n * - 'nvm' (default): Nevermined-issued x402 access tokens covering both\n *   credit-based ERC-4337 payments and fiat card delegations (Stripe,\n *   Braintree, Visa).\n */\nexport type PaymentScheme = 'nvm'\n\nexport interface PaymentOptions {\n  /**\n   * The Nevermined environment to connect to.\n   *\n   * @deprecated The environment is now derived from the NVM API key prefix\n   * (`<prefix>:<jwt>`), so this option is no longer required. It is still\n   * accepted for backward compatibility and as a fallback when the key prefix\n   * is unrecognized (e.g. local/custom development), but when the prefix maps\n   * to a known environment the key wins and this option is ignored (a one-time\n   * deprecation warning is emitted). It will be removed in a future release.\n   */\n  environment?: EnvironmentName\n\n  /**\n   * The Nevermined API Key. This key identify your user and is required to interact with the Nevermined API.\n   * You can get your API key by logging in to the Nevermined App.\n   * @see https://nevermined.ai/docs/tutorials/integration/nvm-api-keys\n   */\n  nvmApiKey: string\n\n  /**\n   * The payment scheme to use. Defaults to 'nvm'.\n   */\n  scheme?: PaymentScheme\n\n  /**\n   * The URL to return to the app after a successful login.\n   */\n  returnUrl?: string\n\n  /**\n   * The app id. This attribute is optional and helps to associate assets registered into Nevermined with a common identifier.\n   */\n  appId?: string\n\n  /**\n   * Pins the Nevermined backend API version (MAJOR.MINOR) sent with every\n   * request via the `Nevermined-Version` header. Defaults to\n   * {@link LOCKED_API_VERSION} — the backend contract this SDK release is\n   * built and tested against. Override only to deliberately target a\n   * different backend contract.\n   *\n   * @see https://nevermined.ai/docs/development-guide/api-versioning\n   */\n  version?: string\n\n  /**\n   * Optional organization ID to use as the active workspace for every\n   * authenticated backend request. When set, the SDK sends an\n   * `X-Current-Org-Id` header so the backend scopes published agents,\n   * plans, and other resources to this organization.\n   *\n   * If omitted the backend falls back to the API key's org tag or to the\n   * caller's most-recent active membership (see `CurrentOrgContextGuard`\n   * in nvm-monorepo).\n   *\n   * Override per-call via the `organizationId` option on create methods.\n   *\n   * @see Payments.setOrganizationId\n   */\n  organizationId?: string\n}\n\nexport interface Endpoint {\n  [verb: string]: string\n}\n\nexport interface ApiResponse<T> {\n  success: boolean\n  data?: T\n  error?: string\n}\n\nexport type Address = `0x${string}`\n\n/**\n * Definition of the price configuration for a Payment Plan\n */\nexport interface PlanPriceConfig {\n  /**\n   * The address of the token (ERC20 or Native if zero address) for paying the plan\n   */\n  tokenAddress?: Address\n  /**\n   * The amounts to be paid for the plan\n   */\n  amounts: bigint[]\n  /**\n   * The receivers of the payments of the plan\n   */\n  receivers: string[]\n  /**\n   * The address of the smart contract that calculates the price\n   */\n  contractAddress?: Address\n  /**\n   * The address of the fee controller contract, if any\n   * @remarks if not given, the fee controller is the default one\n   */\n  feeController?: Address\n  /**\n   * The address of the external price contract, if any\n   */\n  externalPriceAddress?: Address\n  /**\n   * The address of the template contract, if any\n   */\n  templateAddress?: Address\n  /**\n   * Whether this is a crypto payment (true) or fiat payment (false)\n   */\n  isCrypto: boolean\n  /**\n   * Optional currency for the plan (e.g., 'USD', 'EUR', 'USDC', 'EURC').\n   * When omitted, the backend determines the default based on the payment type.\n   */\n  currency?: Currency | string\n}\n\n/**\n * Definition of the credits configuration for a payment plan\n */\nexport interface PlanCreditsConfig {\n  /**\n   * Whether the redemption amount is fixed (true) or dynamic (false)\n   */\n  isRedemptionAmountFixed: boolean\n  /**\n   * How the credits can be redeemed\n   */\n  redemptionType: PlanRedemptionType\n  /**\n   * Whether burns of these credits are mirrored on-chain. When `false`\n   * (default) the credits ledger lives in the API's Postgres and burns\n   * are recorded off-chain only. When `true` an `OnchainMirrorWorker`\n   * replays each off-chain burn to `NFT1155Credits` for audit.\n   */\n  onchainMirror: boolean\n  /**\n   * The duration of the credits in seconds\n   * @remarks 0 means non-expirable\n   */\n  durationSecs: bigint\n  /**\n   * The amount of credits that are granted when purchasing the plan (as string for API)\n   */\n  amount: bigint\n  /**\n   * The minimum number of credits redeemed when using the plan\n   */\n  minAmount: bigint\n  /**\n   * The maximum number of credits redeemed when using the plan\n   */\n  maxAmount: bigint\n  /**\n   * The address of the NFT contract that represents the plan's credits\n   */\n  nftAddress?: Address\n}\n\n/**\n * Different types of prices that can be configured for a plan\n * @remarks 0 - FIXED_PRICE, 1 - FIXED_FIAT_PRICE, 2 - SMART_CONTRACT_PRICE\n * If FIXED_PRICE it means the plan can be paid in crypto by a fixed amount of a ERC20 or Native token\n * If FIXED_FIAT_PRICE it means the plan can be paid in fiat by a fixed amount (typically USD)\n * If SMART_CONTRACT_PRICE it means the plan can be paid in crypto and the amount to be paid is calculated by a smart contract\n */\nexport enum PlanPriceType {\n  FIXED_PRICE,\n  FIXED_FIAT_PRICE,\n  SMART_CONTRACT_PRICE,\n}\n\n/**\n * Supported currencies for payment plans.\n * - Fiat: USD, EUR (processed via Stripe)\n * - Crypto: USDC, EURC (ERC20 stablecoins on Base)\n */\nexport enum Currency {\n  USD = 'USD',\n  EUR = 'EUR',\n  USDC = 'USDC',\n  EURC = 'EURC',\n}\n\n/** EURC token address on Base Mainnet (chain 8453) */\nexport const EURC_TOKEN_ADDRESS: Address = '0x60a3E35Cc302bFA44Cb288Bc5a4F316Fdb1adb42'\n/** EURC token address on Base Sepolia testnet (chain 84532) */\nexport const EURC_TOKEN_ADDRESS_TESTNET: Address = '0x808456652fdb597867f38412077A9182bf77359F'\n\n/**\n * Different types of credits that can be obtained when purchasing a plan\n * @remarks 0 - EXPIRABLE, 1 - FIXED, 2 - DYNAMIC\n * If EXPIRABLE it means the credits can be used for a fixed amount of time (calculated in seconds)\n * If FIXED it means the credits can be used for a fixed amount of times\n * If DYNAMIC it means the credits can be used but the redemption amount is dynamic\n */\nexport enum PlanCreditsType {\n  EXPIRABLE,\n  FIXED,\n  DYNAMIC,\n}\n\n/**\n * Different types of redemptions criterias that can be used when redeeming credits\n * @remarks 0 - ONLY_GLOBAL_ROLE, 1 - ONLY_OWNER, 2 - ROLE_AND_OWNER\n * If ONLY_GLOBAL_ROLE it means the credits can be redeemed only by an account with the `CREDITS_BURNER_ROLE`\n * If ONLY_OWNER it means the credits can be redeemed only by the owner of the Plan\n * If ONLY_PLAN_ROLE it means the credits can be redeemed by an account with specifics grants for the plan\n * If ONLY_SUBSCRIBER means only the subscriber (the one who holds the credits NFT) can redeem\n */\nexport enum PlanRedemptionType {\n  ONLY_GLOBAL_ROLE = 0, // NVM Proxy can burn\n  ONLY_OWNER = 1, // Agent can burn\n  ONLY_PLAN_ROLE = 2,\n  ONLY_SUBSCRIBER = 4, // Subscriber who ordered the plan can redeem\n}\n\nexport interface PlanBalance {\n  planId: string\n  planName: string\n  planType: string\n  holderAddress: Address\n  balance: bigint\n  creditsContract: Address\n  isSubscriber: boolean\n  pricePerCredit: number\n}\n\nexport interface StartAgentRequest {\n  agentRequestId: string\n  agentName: string\n  agentId: string\n  balance: PlanBalance\n  urlMatching: string\n  verbMatching: string\n  batch: boolean\n}\n\nexport interface ValidationAgentRequest {\n  balance: PlanBalance\n  urlMatching: string\n  verbMatching: string\n}\n\nexport interface AgentAccessCredentials {\n  accessToken: string\n  proxies?: string[]\n}\n\nexport interface SubscriberRequestStatus {\n  planId: string\n  agentId: string\n  isValid: boolean\n  code: number\n  message?: string\n}\n\nexport interface NvmAPIResult {\n  success: boolean\n  message?: string\n  txHash?: string\n  httpStatus?: number\n  data?: APIOutputData\n  when?: Date\n}\n\nexport interface APIOutputData {\n  [key: string]: any\n}\n\nexport interface StripeCheckoutResult {\n  stripeCheckoutSessionId: string\n  checkoutLink: string\n  clientReferenceId: string\n  paymentStatus?: string\n  linkCreatedAt: number\n  linkExpiresAt: number\n}\n\n/**\n * Metadata attributes describing the AI Agent.\n */\nexport interface AgentMetadata {\n  /**\n   * Name of the Agent\n   */\n  name: string\n  /**\n   * Description of the Agent\n   */\n  description?: string\n  /**\n   * The author of the Agent (organization or person) that own the Agent.\n   */\n  author?: string\n  /**\n   * The author of the Agent (organization or person) that own the Agent.\n   */\n  license?: string\n  /**\n   * Tags describing the AI Agent\n   */\n  tags?: string[]\n  /**\n   * Some description or instructions about how to integrate the Agent.\n   */\n  integration?: string\n  /**\n   * A link to some same usage of the Agent.\n   */\n  sampleLink?: string\n  /**\n   * Text describing the API of the Agent.\n   */\n  apiDescription?: string\n  /**\n   * The date when the Agent was created.\n   */\n  dateCreated?: Date\n\n  // internalAttributes?: any\n}\n\n/**\n * Metadata attributes describing the Payment Plan.\n */\nexport interface PlanMetadata extends AgentMetadata {\n  /**\n   * Indicates if a payment plan is a Trial plan.\n   * A Trial plan is a plan that allows users to test the AI Agents associated with it typically without any cost.\n   * @remarks A Trial plan only can be purchased once by a user.\n   */\n  isTrialPlan?: boolean\n  /**\n   * Indicates if a payment plan is limited by credits.\n   * If 'time', the plan will be limited by time.\n   * If 'credits', the plan will be limited by credits.\n   */\n  accessLimit?: 'credits' | 'time'\n}\n\n/**\n * It describes the API exposed by an AI Agent.\n * This information is necessary to query the AI Agent and to know which endpoints are available.\n */\nexport interface AgentAPIAttributes {\n  /**\n   * Optional allowlist of upstream endpoints that require a valid Payment Plan\n   * subscription. When provided, the Nevermined platform enforces this list as\n   * **Additional Security** (defense-in-depth) on top of any per-route gating\n   * the Payments library middleware applies in your agent. When omitted, no\n   * route-level allowlist is enforced — your library middleware remains the\n   * sole gate.\n   */\n  endpoints?: Endpoint[]\n  /**\n   * The list of endpoints of the upstream service that publicly available. The access to these endpoints don't require subscription to the Payment Plan. They are useful to expose documentation, etc.\n   */\n  openEndpoints?: string[]\n  /**\n   * Optional URL to a discoverable agent definition (OpenAPI spec, MCP\n   * Manifest, or A2A agent card). Stored as metadata for documentation /\n   * discovery — not consumed at runtime by the Nevermined platform.\n   */\n  agentDefinitionUrl?: string\n\n  /////// AUTHORIZATION ///////\n\n  /**\n   * The upstream agent/service authentication type ('none', 'basic', 'bearer' or 'oauth').\n   */\n  authType?: 'none' | 'basic' | 'oauth' | 'bearer'\n  /**\n   * The upstream agent/service username for authentication. Only if `authType` is 'basic'.\n   */\n  username?: string\n  /**\n   * The upstream agent/service password for authentication. Only if `authType` is 'basic'.\n   */\n  password?: string\n  /**\n   * The upstream agent/service bearer token for authentication. Only if `authType` is 'bearer' or 'oauth'.\n   */\n  token?: string\n}\n\n/**\n * Options for pagination in API requests to the Nevermined API.\n */\nexport class PaginationOptions {\n  /**\n   * The field to sort the results by.\n   * If not provided, the default sorting defined by the API will be applied.\n   */\n  sortBy?: string\n  /**\n   * The order in which to sort the results.\n   * Default is 'desc' (descending).\n   */\n  sortOrder: 'asc' | 'desc' = 'desc'\n  /**\n   * The page number to retrieve.\n   * Default is 1.\n   */\n  page = 1\n  /**\n   * The number of items per page.\n   * Default is 10.\n   */\n  offset = 10\n\n  /**\n   * Constructs a new PaginationOptions instance.\n   * @param options - Optional initial values for the pagination options.\n   */\n  constructor(options?: Partial<PaginationOptions>) {\n    if (options) {\n      this.sortBy = options.sortBy\n      this.sortOrder = options.sortOrder || 'desc'\n      this.page = options.page || 1\n      this.offset = options.offset || 10\n    }\n  }\n\n  /**\n   * It returns a string representation of the pagination options\n   * @returns A string representation of the pagination options as URL query parameters.\n   * This can be used to append to API requests for pagination.\n   */\n  asQueryParams(): string {\n    const params: Record<string, string> = {}\n    if (this.sortBy) {\n      params.sortBy = this.sortBy\n    }\n    params.sortOrder = this.sortOrder\n    params.page = this.page.toString()\n    params.pageSize = this.offset.toString()\n\n    return new URLSearchParams(params).toString()\n  }\n}\n\n/**\n * Status of an agent task\n */\nexport enum AgentTaskStatus {\n  SUCCESS = 'SUCCESS',\n  FAILED = 'FAILED',\n  PENDING = 'PENDING',\n}\n\n/**\n * Data transfer object for tracking agent sub tasks\n */\nexport interface TrackAgentSubTaskDto {\n  /**\n   * The unique identifier of the agent task\n   */\n  agentRequestId: string\n\n  /**\n   * The number of credits burned in this agent sub task (optional)\n   * @defaultValue 0\n   */\n  creditsToRedeem?: number\n\n  /**\n   * A tag to categorize this agent sub task (optional)\n   */\n  tag?: string\n\n  /**\n   * A description of this agent sub task (optional)\n   */\n  description?: string\n\n  /**\n   * The status of the agent sub task (optional)\n   */\n  status?: AgentTaskStatus\n}\n\nexport type SimulationRequestOptions = {\n  agentName?: string\n  planName?: string\n  batch?: boolean\n  pricePerCredit?: number\n}\n\n/**\n * x402 payment scheme type.\n * - 'nvm:erc4337': Crypto payments via ERC-4337 smart accounts\n * - 'nvm:card-delegation': Fiat/Stripe card delegation payments\n */\nexport type X402SchemeType = 'nvm:erc4337' | 'nvm:card-delegation'\n\n/**\n * Default network for each x402 scheme (backward-compat: defaults to Base Sepolia).\n */\nexport const X402_SCHEME_NETWORKS: Record<X402SchemeType, string> = {\n  'nvm:erc4337': 'eip155:84532',\n  'nvm:card-delegation': 'stripe',\n}\n\n/**\n * Environment-specific network for the erc4337 scheme.\n */\nconst ERC4337_NETWORK_BY_ENV: Record<string, string> = {\n  sandbox: 'eip155:84532', // Base Sepolia\n  staging_sandbox: 'eip155:84532', // Base Sepolia\n  live: 'eip155:8453', // Base Mainnet\n  staging_live: 'eip155:8453', // Base Mainnet\n}\n\n/**\n * Return the default network for a scheme, accounting for the environment.\n *\n * For `nvm:erc4337`, the network depends on the environment:\n * - sandbox / staging_sandbox → `eip155:84532` (Base Sepolia)\n * - live / staging_live → `eip155:8453` (Base Mainnet)\n *\n * Falls back to `X402_SCHEME_NETWORKS` when no environment is given.\n */\nexport function getDefaultNetwork(scheme: X402SchemeType, environment?: EnvironmentName): string {\n  if (scheme === 'nvm:erc4337' && environment) {\n    return ERC4337_NETWORK_BY_ENV[environment] ?? 'eip155:84532'\n  }\n  return X402_SCHEME_NETWORKS[scheme]\n}\n\n/**\n * Type guard to check if a value is a valid x402 scheme type.\n */\nexport function isValidScheme(s: unknown): s is X402SchemeType {\n  return s === 'nvm:erc4337' || s === 'nvm:card-delegation'\n}\n\n/**\n * Currency codes accepted for a delegation. Lowercase, mirroring the\n * backend's `@IsIn(['usd','eur','usdc','eurc'])` constraint on\n * `POST /api/v1/delegation/create` and the Python SDK's `DelegationCurrency`.\n * Card providers use `'usd'`/`'eur'`; erc4337 uses `'usdc'`/`'eurc'`.\n */\nexport type DelegationCurrency = 'usd' | 'eur' | 'usdc' | 'eurc'\n\n/**\n * Configuration for delegation-based payments (both crypto and card schemes).\n *\n * The supported flow is **create-first**: create a delegation with\n * {@link DelegationAPI.createDelegation}, then request the access token with\n * `delegationConfig: { delegationId }`.\n *\n * @remarks\n * The inline create-on-the-fly fields (`providerPaymentMethodId`,\n * `spendingLimitCents`, `durationSecs`, `currency`, `merchantAccountId`,\n * `maxTransactions`, `cardId`) are individually deprecated. Calling\n * {@link X402TokenAPI.getX402AccessToken} with a `delegationConfig` that lacks\n * `delegationId` but carries one of those fields emits a runtime deprecation\n * warning; create the delegation first and pass only `delegationId` (optionally\n * `apiKeyId`) here. The interface itself is NOT deprecated — the\n * `{ delegationId }` reuse path is the supported way to configure a token request.\n */\nexport interface DelegationConfig {\n  /**\n   * PaymentMethod entity UUID — references an enrolled card.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  cardId?: string\n  /** Existing delegation UUID to reuse instead of creating a new one. The supported (non-deprecated) path. */\n  delegationId?: string\n  /**\n   * Stripe payment method ID (e.g., 'pm_...'). Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  providerPaymentMethodId?: string\n  /**\n   * Maximum spending limit in cents. Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  spendingLimitCents?: number\n  /**\n   * Duration of the delegation in seconds. Required only for new delegations.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  durationSecs?: number\n  /**\n   * Currency code (e.g., 'usd' for card providers, 'usdc' for erc4337).\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  currency?: DelegationCurrency\n  /**\n   * Merchant account ID (Stripe Connect acct_xxx or Braintree merchantId).\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  merchantAccountId?: string\n  /**\n   * Maximum number of transactions allowed.\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  maxTransactions?: number\n  /**\n   * Plan ID to scope a newly-created delegation to. Optional and additive:\n   * delegations are plan-agnostic by default; supplying `planId` opts into a\n   * plan-bound delegation. (Visa delegations are always plan-specific and\n   * require it server-side.)\n   * @deprecated Inline create-on-the-fly. Create the delegation first and pass `delegationId`.\n   */\n  planId?: string\n  /** NVM API Key ID to scope the delegation to. Active (non-deprecated). */\n  apiKeyId?: string\n}\n\n/**\n * Payload for creating a new delegation via POST /api/v1/delegation/create.\n */\nexport interface CreateDelegationPayload {\n  /** Delegation provider: 'stripe' | 'braintree' | 'visa' for card, 'erc4337' for crypto */\n  provider: 'stripe' | 'braintree' | 'visa' | 'erc4337'\n  /** Payment method ID from the provider (Stripe 'pm_...', Braintree vault token, or Visa Agentic token id). Required for card providers. */\n  providerPaymentMethodId?: string\n  /** Maximum spending limit in cents */\n  spendingLimitCents: number\n  /** Duration of the delegation in seconds */\n  durationSecs: number\n  /** Currency code (e.g., 'usd' for card providers, 'usdc' for erc4337). Required by the backend — no silent default. */\n  currency: DelegationCurrency\n  /**\n   * Plan ID to scope the delegation to. Optional and additive: delegations are\n   * plan-agnostic by default; supplying `planId` opts into a plan-bound\n   * delegation. (Visa delegations are always plan-specific and require it.)\n   */\n  planId?: string\n  /** Merchant account ID (Stripe Connect acct_xxx or Braintree merchantId) */\n  merchantAccountId?: string\n  /** Maximum number of transactions allowed */\n  maxTransactions?: number\n  /** NVM API Key ID to scope the delegation to */\n  apiKeyId?: string\n}\n\n/**\n * Response from creating a delegation.\n */\nexport interface CreateDelegationResponse {\n  /** Delegation token (for card delegations) */\n  delegationToken?: string\n  /** Delegation UUID */\n  delegationId: string\n}\n\n/**\n * Options for x402 token generation that control scheme and delegation behavior.\n */\nexport interface X402TokenOptions {\n  /** The x402 scheme to use (defaults to 'nvm:erc4337') */\n  scheme?: X402SchemeType\n  /** Network identifier (auto-derived from scheme if omitted) */\n  network?: string\n  /** Delegation configuration for both erc4337 and card-delegation schemes */\n  delegationConfig?: DelegationConfig\n}\n"]}

package/dist/environments.d.ts

@@ -14,6 +14,18 @@ export interface EnvironmentInfo {
 }
 export declare const ZeroAddress = "0x0000000000000000000000000000000000000000";
 export type EnvironmentName = 'staging_sandbox' | 'staging_live' | 'sandbox' | 'live' | 'custom';
+/**
+ * Maps the prefix of an NVM API key (`<prefix>:<jwt>`) to the environment the
+ * key targets. This is the inverse of the backend's `addPrefixToToken`: a key
+ * minted for `staging_sandbox` carries the prefix `sandbox-staging`, i.e.
+ * `{env}-{deployment}` on the wire maps to `{deployment}_{env}` here.
+ *
+ * @param nvmApiKey - The full NVM API key (`<prefix>:<jwt>`), or a bare JWT.
+ * @returns The mapped {@link EnvironmentName}, or `undefined` when the key has
+ *   no prefix or the prefix is not recognized (caller falls back to the
+ *   deprecated `environment` option, else `custom`).
+ */
+export declare const getEnvironmentFromApiKey: (nvmApiKey: string) => EnvironmentName | undefined;
 /**
  * Represents the different environments and their corresponding URLs.
  */

package/dist/environments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environments.d.ts","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,eAAO,MAAM,WAAW,+CAA+C,CAAA;AAEvE,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEhG;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAqDjE,CAAA"}
+{"version":3,"file":"environments.d.ts","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,eAAO,MAAM,WAAW,+CAA+C,CAAA;AAEvE,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEhG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GAAI,WAAW,MAAM,KAAG,eAAe,GAAG,SAkB9E,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAqDjE,CAAA"}

package/dist/environments.js

@@ -1,4 +1,35 @@
 export const ZeroAddress = '0x0000000000000000000000000000000000000000';
+/**
+ * Maps the prefix of an NVM API key (`<prefix>:<jwt>`) to the environment the
+ * key targets. This is the inverse of the backend's `addPrefixToToken`: a key
+ * minted for `staging_sandbox` carries the prefix `sandbox-staging`, i.e.
+ * `{env}-{deployment}` on the wire maps to `{deployment}_{env}` here.
+ *
+ * @param nvmApiKey - The full NVM API key (`<prefix>:<jwt>`), or a bare JWT.
+ * @returns The mapped {@link EnvironmentName}, or `undefined` when the key has
+ *   no prefix or the prefix is not recognized (caller falls back to the
+ *   deprecated `environment` option, else `custom`).
+ */
+export const getEnvironmentFromApiKey = (nvmApiKey) => {
+    if (!nvmApiKey || !nvmApiKey.includes(':'))
+        return undefined;
+    // Backend-minted prefixes are always lowercase; lowercasing keeps this in
+    // exact parity with the payments-py sibling and tolerates a non-canonical
+    // uppercase prefix.
+    const prefix = nvmApiKey.slice(0, nvmApiKey.indexOf(':')).toLowerCase();
+    switch (prefix) {
+        case 'sandbox-staging':
+            return 'staging_sandbox';
+        case 'live-staging':
+            return 'staging_live';
+        case 'sandbox':
+            return 'sandbox';
+        case 'live':
+            return 'live';
+        default:
+            return undefined;
+    }
+};
 /**
  * Represents the different environments and their corresponding URLs.
  */

package/dist/environments.js.map

@@ -1 +1 @@
-{"version":3,"file":"environments.js","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,MAAM,WAAW,GAAG,4CAA4C,CAAA;AAIvE;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA6C;IACpE;;OAEG;IACH,eAAe,EAAE;QACf,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,iCAAiC;KAC/C;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,OAAO,EAAE;QACP,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,IAAI,EAAE;QACJ,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,MAAM,EAAE;QACN,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB;QACjE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,uBAAuB;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB;QAC/D,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,uBAAuB;QAC3D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB;KACjE;CACF,CAAA","sourcesContent":["export interface EnvironmentInfo {\n  frontend: string\n  /**\n   * Base URL of the standalone, Privy-free embed app (the `embed.<tier>`\n   * origin that serves the chromeless `/cards/*` and `/checkout/*` pages).\n   * Formed by prepending `embed.` to the webapp host. The CLI redirect-mode\n   * card flows open `${embed}/cards/setup` here — the old webapp\n   * `/embed/cards/*` routes were removed in the #1787 cutover.\n   */\n  embed: string\n  backend: string\n  proxy: string\n  heliconeUrl: string\n}\n\nexport const ZeroAddress = '0x0000000000000000000000000000000000000000'\n\nexport type EnvironmentName = 'staging_sandbox' | 'staging_live' | 'sandbox' | 'live' | 'custom'\n\n/**\n * Represents the different environments and their corresponding URLs.\n */\nexport const Environments: Record<EnvironmentName, EnvironmentInfo> = {\n  /**\n   * The staging environment URLs.\n   */\n  staging_sandbox: {\n    frontend: 'https://nevermined.dev',\n    embed: 'https://embed.nevermined.dev',\n    backend: 'https://api.sandbox.nevermined.dev/',\n    proxy: 'https://proxy.sandbox.nevermined.dev',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  staging_live: {\n    frontend: 'https://nevermined.dev',\n    embed: 'https://embed.nevermined.dev',\n    backend: 'https://api.live.nevermined.dev/',\n    proxy: 'https://proxy.live.nevermined.dev',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * The Sandbox environment URLs.\n   */\n  sandbox: {\n    frontend: 'https://nevermined.app',\n    embed: 'https://embed.nevermined.app',\n    backend: 'https://api.sandbox.nevermined.app/',\n    proxy: 'https://proxy.sandbox.nevermined.app',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * The Live environment URLs.\n   */\n  live: {\n    frontend: 'https://nevermined.app',\n    embed: 'https://embed.nevermined.app',\n    backend: 'https://api.live.nevermined.app/',\n    proxy: 'https://proxy.live.nevermined.app',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * A custom environment URLs.\n   */\n  custom: {\n    frontend: process.env.NVM_FRONTEND_URL || 'http://localhost:4200',\n    // No fallback to NVM_FRONTEND_URL: the webapp host no longer serves\n    // the card pages post-#1787 cutover, so silently reusing it would\n    // reintroduce a dead-route footgun. The embed app runs on its own\n    // port (4250, matching nvm-monorepo#1824); set NVM_EMBED_URL to\n    // override.\n    embed: process.env.NVM_EMBED_URL || 'http://localhost:4250',\n    backend: process.env.NVM_BACKEND_URL || 'http://localhost:3001',\n    proxy: process.env.NVM_PROXY_URL || 'https://localhost:443',\n    heliconeUrl: process.env.HELICONE_URL || 'http://localhost:8585',\n  },\n}\n"]}
+{"version":3,"file":"environments.js","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,MAAM,WAAW,GAAG,4CAA4C,CAAA;AAIvE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAiB,EAA+B,EAAE;IACzF,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5D,0EAA0E;IAC1E,0EAA0E;IAC1E,oBAAoB;IACpB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACvE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAA;QAC1B,KAAK,cAAc;YACjB,OAAO,cAAc,CAAA;QACvB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAA;QAClB,KAAK,MAAM;YACT,OAAO,MAAM,CAAA;QACf;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA6C;IACpE;;OAEG;IACH,eAAe,EAAE;QACf,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,iCAAiC;KAC/C;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,OAAO,EAAE;QACP,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,IAAI,EAAE;QACJ,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,iCAAiC;KAC/C;IACD;;OAEG;IACH,MAAM,EAAE;QACN,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB;QACjE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,YAAY;QACZ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,uBAAuB;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB;QAC/D,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,uBAAuB;QAC3D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB;KACjE;CACF,CAAA","sourcesContent":["export interface EnvironmentInfo {\n  frontend: string\n  /**\n   * Base URL of the standalone, Privy-free embed app (the `embed.<tier>`\n   * origin that serves the chromeless `/cards/*` and `/checkout/*` pages).\n   * Formed by prepending `embed.` to the webapp host. The CLI redirect-mode\n   * card flows open `${embed}/cards/setup` here — the old webapp\n   * `/embed/cards/*` routes were removed in the #1787 cutover.\n   */\n  embed: string\n  backend: string\n  proxy: string\n  heliconeUrl: string\n}\n\nexport const ZeroAddress = '0x0000000000000000000000000000000000000000'\n\nexport type EnvironmentName = 'staging_sandbox' | 'staging_live' | 'sandbox' | 'live' | 'custom'\n\n/**\n * Maps the prefix of an NVM API key (`<prefix>:<jwt>`) to the environment the\n * key targets. This is the inverse of the backend's `addPrefixToToken`: a key\n * minted for `staging_sandbox` carries the prefix `sandbox-staging`, i.e.\n * `{env}-{deployment}` on the wire maps to `{deployment}_{env}` here.\n *\n * @param nvmApiKey - The full NVM API key (`<prefix>:<jwt>`), or a bare JWT.\n * @returns The mapped {@link EnvironmentName}, or `undefined` when the key has\n *   no prefix or the prefix is not recognized (caller falls back to the\n *   deprecated `environment` option, else `custom`).\n */\nexport const getEnvironmentFromApiKey = (nvmApiKey: string): EnvironmentName | undefined => {\n  if (!nvmApiKey || !nvmApiKey.includes(':')) return undefined\n  // Backend-minted prefixes are always lowercase; lowercasing keeps this in\n  // exact parity with the payments-py sibling and tolerates a non-canonical\n  // uppercase prefix.\n  const prefix = nvmApiKey.slice(0, nvmApiKey.indexOf(':')).toLowerCase()\n  switch (prefix) {\n    case 'sandbox-staging':\n      return 'staging_sandbox'\n    case 'live-staging':\n      return 'staging_live'\n    case 'sandbox':\n      return 'sandbox'\n    case 'live':\n      return 'live'\n    default:\n      return undefined\n  }\n}\n\n/**\n * Represents the different environments and their corresponding URLs.\n */\nexport const Environments: Record<EnvironmentName, EnvironmentInfo> = {\n  /**\n   * The staging environment URLs.\n   */\n  staging_sandbox: {\n    frontend: 'https://nevermined.dev',\n    embed: 'https://embed.nevermined.dev',\n    backend: 'https://api.sandbox.nevermined.dev/',\n    proxy: 'https://proxy.sandbox.nevermined.dev',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  staging_live: {\n    frontend: 'https://nevermined.dev',\n    embed: 'https://embed.nevermined.dev',\n    backend: 'https://api.live.nevermined.dev/',\n    proxy: 'https://proxy.live.nevermined.dev',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * The Sandbox environment URLs.\n   */\n  sandbox: {\n    frontend: 'https://nevermined.app',\n    embed: 'https://embed.nevermined.app',\n    backend: 'https://api.sandbox.nevermined.app/',\n    proxy: 'https://proxy.sandbox.nevermined.app',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * The Live environment URLs.\n   */\n  live: {\n    frontend: 'https://nevermined.app',\n    embed: 'https://embed.nevermined.app',\n    backend: 'https://api.live.nevermined.app/',\n    proxy: 'https://proxy.live.nevermined.app',\n    heliconeUrl: 'https://helicone.nevermined.dev',\n  },\n  /**\n   * A custom environment URLs.\n   */\n  custom: {\n    frontend: process.env.NVM_FRONTEND_URL || 'http://localhost:4200',\n    // No fallback to NVM_FRONTEND_URL: the webapp host no longer serves\n    // the card pages post-#1787 cutover, so silently reusing it would\n    // reintroduce a dead-route footgun. The embed app runs on its own\n    // port (4250, matching nvm-monorepo#1824); set NVM_EMBED_URL to\n    // override.\n    embed: process.env.NVM_EMBED_URL || 'http://localhost:4250',\n    backend: process.env.NVM_BACKEND_URL || 'http://localhost:3001',\n    proxy: process.env.NVM_PROXY_URL || 'https://localhost:443',\n    heliconeUrl: process.env.HELICONE_URL || 'http://localhost:8585',\n  },\n}\n"]}

package/dist/index.d.ts

@@ -18,6 +18,7 @@ export { buildPaymentRequired, resolveNetwork, resolveScheme } from './x402/faci
 export { DelegationAPI } from './x402/delegation-api.js';
 export type { PaymentMethodSummary, UpdatePaymentMethodDto, DelegationSummary, DelegationListResponse, PurchasingPower, ListOptions, } from './x402/delegation-api.js';
 export type { X402PaymentRequired, X402PaymentAccepted, X402Resource, X402Scheme, X402SchemeExtra, VerifyPermissionsParams, VerifyPermissionsResult, SettlePermissionsParams, SettlePermissionsResult, } from './x402/facilitator-api.js';
+export * from './mpp/index.js';
 export type { CreditsContext, CreditsOption, PaywallOptions, McpConfig, PaywallContext, AuthResult, } from './mcp/types/paywall.types.js';
 export type { OAuthUrls, OAuthConfig, HttpRouterConfig, HttpServerConfig, HttpServerResult, } from './mcp/types/http.types.js';
 export type { ExtendedMcpConfig } from './mcp/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,8CAA8C,CAAA;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAA;AAC/E,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,WAAW,GACZ,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAElC,YAAY,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,SAAS,EACT,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAA;AAGrC,YAAY,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAA;AAGlC,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAExE,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,IAAI,EACJ,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,YAAY,EACZ,qCAAqC,GACtC,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,4BAA4B,EAC5B,aAAa,IAAI,gBAAgB,GAClC,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,8CAA8C,CAAA;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAA;AAC/E,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,WAAW,GACZ,MAAM,0BAA0B,CAAA;AACjC,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAGlC,cAAc,gBAAgB,CAAA;AAG9B,YAAY,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,SAAS,EACT,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAA;AAGrC,YAAY,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAA;AAGlC,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAExE,YAAY,EACV,SAAS,EACT,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,IAAI,EACJ,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,YAAY,EACZ,qCAAqC,GACtC,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,4BAA4B,EAC5B,aAAa,IAAI,gBAAgB,GAClC,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -14,6 +14,8 @@ export { OrganizationMemberRole, OrganizationType, OrganizationActivityEventType
 // x402 utilities and types
 export { buildPaymentRequired, resolveNetwork, resolveScheme } from './x402/facilitator-api.js';
 export { DelegationAPI } from './x402/delegation-api.js';
+// MPP (Machine Payments Protocol) public surface
+export * from './mpp/index.js';
 // MCP HTTP utilities
 export { createRequireAuthMiddleware } from './mcp/http/oauth-router.js';
 // x402 v2 A2A in-band transport utilities (mirrors the Python X402A2AUtils)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,8CAA8C,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAA;AAC/E,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AAQzC,2BAA2B;AAC3B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AA0CxD,qBAAqB;AACrB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAqBxE,4EAA4E;AAC5E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,4BAA4B,EAC5B,aAAa,IAAI,gBAAgB,GAClC,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,qBAAqB,CAAA","sourcesContent":["export * from './environments.js'\nexport * from './payments.js'\nexport * from './utils.js'\nexport * from './common/api-version.js'\nexport * from './common/types.js'\nexport * from './common/payments.error.js'\nexport * from './common/helper.js'\nexport * from './api/query-api.js'\nexport * from './api/observability-api/observability-api.js'\nexport type { BackendApiOptions } from './api/nvm-api.js'\nexport { ContractsAPI } from './api/contracts-api.js'\nexport { CURRENT_ORG_ID_HEADER } from './api/base-payments.js'\nexport type { PublicationOptions } from './api/base-payments.js'\nexport { OrganizationsAPI } from './api/organizations-api/organizations-api.js'\nexport {\n  OrganizationMemberRole,\n  OrganizationType,\n  OrganizationActivityEventType,\n} from './api/organizations-api/types.js'\nexport type {\n  MyMembership,\n  OrganizationActivityEvent,\n  OrganizationActivityFilters,\n  OrganizationActivityPage,\n} from './api/organizations-api/types.js'\n\n// x402 utilities and types\nexport { buildPaymentRequired, resolveNetwork, resolveScheme } from './x402/facilitator-api.js'\nexport { DelegationAPI } from './x402/delegation-api.js'\nexport type {\n  PaymentMethodSummary,\n  UpdatePaymentMethodDto,\n  DelegationSummary,\n  DelegationListResponse,\n  PurchasingPower,\n  ListOptions,\n} from './x402/delegation-api.js'\nexport type {\n  X402PaymentRequired,\n  X402PaymentAccepted,\n  X402Resource,\n  X402Scheme,\n  X402SchemeExtra,\n  VerifyPermissionsParams,\n  VerifyPermissionsResult,\n  SettlePermissionsParams,\n  SettlePermissionsResult,\n} from './x402/facilitator-api.js'\n// MCP public types\nexport type {\n  CreditsContext,\n  CreditsOption,\n  PaywallOptions,\n  McpConfig,\n  PaywallContext,\n  AuthResult,\n} from './mcp/types/paywall.types.js'\n\n// MCP HTTP types\nexport type {\n  OAuthUrls,\n  OAuthConfig,\n  HttpRouterConfig,\n  HttpServerConfig,\n  HttpServerResult,\n} from './mcp/types/http.types.js'\n\n// MCP extended config type\nexport type { ExtendedMcpConfig } from './mcp/index.js'\n\n// MCP HTTP utilities\nexport { createRequireAuthMiddleware } from './mcp/http/oauth-router.js'\n\nexport type {\n  AgentCard,\n  TaskHandlerResult,\n  TaskStatusUpdateEvent,\n  ExecutionEventBus,\n  AgentExecutor,\n  RequestContext,\n  PushNotificationConfig,\n  Task,\n  MessageSendParams,\n  SendMessageResponse,\n  TaskQueryParams,\n  GetTaskResponse,\n  TaskPushNotificationConfig,\n  SetTaskPushNotificationConfigResponse,\n  TaskIdParams,\n  GetTaskPushNotificationConfigResponse,\n} from './a2a/types.js'\n\n// x402 v2 A2A in-band transport utilities (mirrors the Python X402A2AUtils)\nexport {\n  X402A2AUtils,\n  x402A2AUtils,\n  X402A2AMetadata,\n  X402_SETTLEMENT_DEFERRED_KEY,\n  PaymentStatus as A2APaymentStatus,\n} from './a2a/x402-a2a.js'\nexport {\n  A2A_X402_EXTENSION_URI,\n  NVM_PAYMENT_EXTENSION_URI,\n  AGENT_CARD_WELL_KNOWN_PATH,\n  LEGACY_AGENT_CARD_WELL_KNOWN_PATH,\n} from './a2a/agent-card.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,8CAA8C,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAA;AAC/E,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AAQzC,2BAA2B;AAC3B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAqBxD,iDAAiD;AACjD,cAAc,gBAAgB,CAAA;AAwB9B,qBAAqB;AACrB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAqBxE,4EAA4E;AAC5E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,4BAA4B,EAC5B,aAAa,IAAI,gBAAgB,GAClC,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,qBAAqB,CAAA","sourcesContent":["export * from './environments.js'\nexport * from './payments.js'\nexport * from './utils.js'\nexport * from './common/api-version.js'\nexport * from './common/types.js'\nexport * from './common/payments.error.js'\nexport * from './common/helper.js'\nexport * from './api/query-api.js'\nexport * from './api/observability-api/observability-api.js'\nexport type { BackendApiOptions } from './api/nvm-api.js'\nexport { ContractsAPI } from './api/contracts-api.js'\nexport { CURRENT_ORG_ID_HEADER } from './api/base-payments.js'\nexport type { PublicationOptions } from './api/base-payments.js'\nexport { OrganizationsAPI } from './api/organizations-api/organizations-api.js'\nexport {\n  OrganizationMemberRole,\n  OrganizationType,\n  OrganizationActivityEventType,\n} from './api/organizations-api/types.js'\nexport type {\n  MyMembership,\n  OrganizationActivityEvent,\n  OrganizationActivityFilters,\n  OrganizationActivityPage,\n} from './api/organizations-api/types.js'\n\n// x402 utilities and types\nexport { buildPaymentRequired, resolveNetwork, resolveScheme } from './x402/facilitator-api.js'\nexport { DelegationAPI } from './x402/delegation-api.js'\nexport type {\n  PaymentMethodSummary,\n  UpdatePaymentMethodDto,\n  DelegationSummary,\n  DelegationListResponse,\n  PurchasingPower,\n  ListOptions,\n} from './x402/delegation-api.js'\nexport type {\n  X402PaymentRequired,\n  X402PaymentAccepted,\n  X402Resource,\n  X402Scheme,\n  X402SchemeExtra,\n  VerifyPermissionsParams,\n  VerifyPermissionsResult,\n  SettlePermissionsParams,\n  SettlePermissionsResult,\n} from './x402/facilitator-api.js'\n\n// MPP (Machine Payments Protocol) public surface\nexport * from './mpp/index.js'\n\n// MCP public types\nexport type {\n  CreditsContext,\n  CreditsOption,\n  PaywallOptions,\n  McpConfig,\n  PaywallContext,\n  AuthResult,\n} from './mcp/types/paywall.types.js'\n\n// MCP HTTP types\nexport type {\n  OAuthUrls,\n  OAuthConfig,\n  HttpRouterConfig,\n  HttpServerConfig,\n  HttpServerResult,\n} from './mcp/types/http.types.js'\n\n// MCP extended config type\nexport type { ExtendedMcpConfig } from './mcp/index.js'\n\n// MCP HTTP utilities\nexport { createRequireAuthMiddleware } from './mcp/http/oauth-router.js'\n\nexport type {\n  AgentCard,\n  TaskHandlerResult,\n  TaskStatusUpdateEvent,\n  ExecutionEventBus,\n  AgentExecutor,\n  RequestContext,\n  PushNotificationConfig,\n  Task,\n  MessageSendParams,\n  SendMessageResponse,\n  TaskQueryParams,\n  GetTaskResponse,\n  TaskPushNotificationConfig,\n  SetTaskPushNotificationConfigResponse,\n  TaskIdParams,\n  GetTaskPushNotificationConfigResponse,\n} from './a2a/types.js'\n\n// x402 v2 A2A in-band transport utilities (mirrors the Python X402A2AUtils)\nexport {\n  X402A2AUtils,\n  x402A2AUtils,\n  X402A2AMetadata,\n  X402_SETTLEMENT_DEFERRED_KEY,\n  PaymentStatus as A2APaymentStatus,\n} from './a2a/x402-a2a.js'\nexport {\n  A2A_X402_EXTENSION_URI,\n  NVM_PAYMENT_EXTENSION_URI,\n  AGENT_CARD_WELL_KNOWN_PATH,\n  LEGACY_AGENT_CARD_WELL_KNOWN_PATH,\n} from './a2a/agent-card.js'\n"]}

package/dist/mcp/core/server-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-manager.d.ts","sourceRoot":"","sources":["../../../src/mcp/core/server-manager.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EAKhB,MAAM,0BAA0B,CAAA;AAkCjC;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,GAAG,CAAqD;IAChE,OAAO,CAAC,gBAAgB,CAAkB;gBAE9B,QAAQ,EAAE,QAAQ;IAQ9B;;OAEG;IACH,QAAQ,IAAI,WAAW;IAIvB;;;OAGG;IACH,YAAY,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAkBP;;;OAGG;IACH,gBAAgB,CACd,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAmBP;;;OAGG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAkBP;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAmI9D;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B3B;;OAEG;YACW,2BAA2B;IAsKzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAiB1B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,CAExE"}
+{"version":3,"file":"server-manager.d.ts","sourceRoot":"","sources":["../../../src/mcp/core/server-manager.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EAKhB,MAAM,0BAA0B,CAAA;AAkCjC;;GAEG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,KAAK,CAA2C;IACxD,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,GAAG,CAAqD;IAChE,OAAO,CAAC,gBAAgB,CAAkB;gBAE9B,QAAQ,EAAE,QAAQ;IAQ9B;;OAEG;IACH,QAAQ,IAAI,WAAW;IAIvB;;;OAGG;IACH,YAAY,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAkBP;;;OAGG;IACH,gBAAgB,CACd,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAmBP;;;OAGG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,sBAA2B,GACnC,IAAI;IAkBP;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAsI9D;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B3B;;OAEG;YACW,2BAA2B;IAsKzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAiB1B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,CAExE"}

package/dist/mcp/core/server-manager.js

@@ -185,6 +185,9 @@ export class McpServerManager {
                 mountMcpHandlers(this.expressApp, {
                     sessionManager: this.sessionManager,
                     requireAuth: true,
+                    // Pin the challenge's resource_metadata origin to the operator's known
+                    // baseUrl (never client Host/X-Forwarded-* headers) — see #410 review.
+                    baseUrl,
                     log: this.log,
                 });
                 // Add 404 fallback

package/dist/mcp/core/server-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-manager.js","sourceRoot":"","sources":["../../../src/mcp/core/server-manager.ts"],"names":[],"mappings":"AAKA,OAAO,OAA6B,MAAM,SAAS,CAAA;AAiBnD,OAAO,EAAE,oBAAoB,EAAkB,MAAM,4BAA4B,CAAA;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,IAAI,cAAc,GAAQ,IAAI,CAAA;AAC9B,IAAI,qBAAqB,GAAQ,IAAI,CAAA;AAErC;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAA;YACtE,cAAc,GAAG,MAAM,CAAC,SAAS,CAAA;YACjC,qBAAqB,GAAG,MAAM,CAAC,gBAAgB,CAAA;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,oCAAqB,CAAA;AACvB,CAAC,EALW,WAAW,KAAX,WAAW,QAKtB;AAED;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAc3B,YAAY,QAAkB;QAbtB,UAAK,GAAgB,WAAW,CAAC,IAAI,CAAA;QAErC,UAAK,GAAkC,IAAI,GAAG,EAAE,CAAA;QAChD,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAA;QACxD,YAAO,GAAoC,IAAI,GAAG,EAAE,CAAA;QACpD,cAAS,GAAQ,IAAI,CAAA;QACrB,eAAU,GAAuB,IAAI,CAAA;QACrC,eAAU,GAAkB,IAAI,CAAA;QAChC,mBAAc,GAA0B,IAAI,CAAA;QAC5C,WAAM,GAA2B,IAAI,CAAA;QACrC,QAAG,GAA4C,SAAS,CAAA;QAI9D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,+BAA+B;QAC/B,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxD,MAAM,cAAc,GAAG,IAAI,sBAAsB,EAAE,CAAA;QACnD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAA;IACvF,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED;;;OAGG;IACH,YAAY,CACV,IAAY,EACZ,MAAqB,EACrB,OAAoB,EACpB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACnE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACnB,IAAI;YACJ,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC;IAED;;;OAGG;IACH,gBAAgB,CACd,IAAY,EACZ,aAAqB,EACrB,MAAyB,EACzB,OAAwB,EACxB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE;YAChC,IAAI;YACJ,aAAa;YACb,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,IAAI,OAAO,aAAa,EAAE,CAAC,CAAA;IAChE,CAAC;IAED;;;OAGG;IACH,cAAc,CACZ,IAAY,EACZ,MAAuB,EACvB,OAAsB,EACtB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrB,IAAI;YACJ,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,MAAuB;QACjC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAChE,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAA;QAEvB,IAAI,CAAC;YACH,wEAAwE;YACxE,mCAAmC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACvC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;YACrC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAA;YAEnE,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAA;YAE3C,oBAAoB;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;aACnC,CAAC,CAAA;YAEF,iEAAiE;YACjE,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAA;YAExC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,CAAA;YAE3B,0BAA0B;YAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,2DAA2D;gBAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC1D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAA;gBACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAA;YAC7C,CAAC;YAED,qBAAqB;YACrB,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,IAAK,IAAI,CAAC,QAAgB,CAAC,eAAe,IAAI,iBAAiB,CAAA;YAEnF,MAAM,WAAW,GAAG,iBAAiB,CAAC;gBACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW;gBACX,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;gBACzD,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,IAAI,IAAI;gBACjE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;gBACnD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;gBACjD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;gBAClC,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAA;YAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAClC,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;gBACzC,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAA;YACF,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAEhD,qBAAqB;YACrB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC3C,gBAAgB,CAAC,IAAI,CAAC,UAAiB,EAAE;oBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,WAAW,EAAE,IAAI;oBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAA;gBAEF,mBAAmB;gBACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;oBACzC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;oBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,WAAW;wBAClB,iBAAiB,EAAE,uBAAuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE;qBACnE,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAChD,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;YAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAA;gBACrC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;oBACvD,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;gBACF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;gBACxB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAA;YAEhC,MAAM,IAAI,GAAe;gBACvB,OAAO;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aACzC,CAAA;YAED,sBAAsB;YACtB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAEpC,wBAAwB;YACxB,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;YAEtB,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;aACxB,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAA;YAC7B,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YACvC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAA;QAEjC,uBAAuB;QACvB,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,CAAA;QAEzC,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/B,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc;QACd,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC1B,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAA;QAE7B,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAA;IAC9B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,2BAA2B;QACvC,+CAA+C;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SACnC,CAAC,CAAA;QAEF,iBAAiB;QACjB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAE7D,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,IAAS,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACrD,kEAAkE;gBAClE,MAAM,YAAY,GAAG,cAAc;oBACjC,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;oBACH,CAAC,CAAC,KAAK,CAAA;gBACT,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;gBAChD,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACjE,CAAC;QAED,qBAAqB;QACrB,KAAK,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAEvE,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,GAAQ,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACpD,0DAA0D;gBAC1D,MAAM,YAAY,GAAG,cAAc;oBACjC,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,UAAU,EAAE,cAAc,CAAC,UAAU;wBACrC,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;oBACH,CAAC,CAAC,KAAK,CAAA;gBACT,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;gBAC/C,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,MAAM,oBAAoB,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAE5D,IAAI,oBAAoB,EAAE,CAAC;gBACzB,MAAM,gBAAgB,GAAG,IAAI,qBAAqB,CAAC,aAAa,EAAE;oBAChE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;iBACtC,CAAC,CAAA;gBACF,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;YAC3F,CAAC;iBAAM,CAAC;gBACN,2EAA2E;gBAC3E,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAE/D,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,IAAS,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACrD,iDAAiD;gBACjD,sDAAsD;gBACtD,MAAM,aAAa,GAAG,cAAc;oBAClC,CAAC,CAAC;wBACE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,cAAc;wBACtD,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,KAAK,EAAE;4BACL,GAAG,KAAK;4BACR,UAAU,EAAE,cAAc,CAAC,UAAU;4BACrC,OAAO,EAAE,cAAc,CAAC,OAAO;4BAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;yBAC1C;qBACF;oBACH,CAAC,CAAC,KAAK;wBACL,CAAC,CAAC;4BACE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc;4BAC9C,OAAO,EAAE,KAAK,EAAE,OAAO;4BACvB,KAAK;yBACN;wBACH,CAAC,CAAC,SAAS,CAAA;gBAEf,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;gBACjD,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,MAAM,eAAe,GAAQ;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,WAAW,EAAE,YAAY,CAAC,WAAW;aACtC,CAAA;YAED,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAiB,CAAA;gBAC7C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC9D,eAAe,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;gBAC3C,CAAC;qBAAM,CAAC;oBACN,eAAe,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAgB,EAAE,MAAuB;QACjE,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAM;QAErB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACxE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAE9E,IAAI,CAAC,GAAG,CAAC;kBACK,IAAI,CAAC,OAAO;kBACZ,IAAI,CAAC,OAAO;kBACZ,IAAI,CAAC,OAAO;qBACT,IAAI,CAAC,OAAO;WACtB,SAAS;eACL,aAAa;aACf,WAAW;aACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrF,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AACvC,CAAC","sourcesContent":["/**\n * Server manager for simplified MCP API.\n * Orchestrates McpServer, Express, Transport, and session management.\n */\nimport type { Server } from 'http'\nimport express, { type Application } from 'express'\nimport type { Payments } from '../../payments.js'\nimport type {\n  McpToolConfig,\n  McpResourceConfig,\n  McpPromptConfig,\n  McpRegistrationOptions,\n  ToolHandler,\n  ResourceHandler,\n  PromptHandler,\n  McpServerConfig,\n  McpServerResult,\n  ServerInfo,\n  ToolRegistration,\n  ResourceRegistration,\n  PromptRegistration,\n} from '../types/server.types.js'\nimport { createSessionManager, SessionManager } from '../http/session-manager.js'\nimport { mountMcpHandlers } from '../http/mcp-handler.js'\nimport {\n  createOAuthRouter,\n  createCorsMiddleware,\n  createJsonMiddleware,\n  createHttpLoggingMiddleware,\n} from '../http/oauth-router.js'\nimport { PaywallDecorator } from './paywall.js'\nimport { PaywallAuthenticator } from './auth.js'\nimport { CreditsContextProvider } from './credits-context.js'\n\nlet McpServerClass: any = null\nlet ResourceTemplateClass: any = null\n\n/**\n * Lazily load McpServer and ResourceTemplate from the SDK.\n */\nasync function getMcpServerClass(): Promise<any> {\n  if (!McpServerClass) {\n    try {\n      const module = await import('@modelcontextprotocol/sdk/server/mcp.js')\n      McpServerClass = module.McpServer\n      ResourceTemplateClass = module.ResourceTemplate\n    } catch (error) {\n      throw new Error(\n        'Failed to load @modelcontextprotocol/sdk. Make sure it is installed: npm install @modelcontextprotocol/sdk',\n      )\n    }\n  }\n  return McpServerClass\n}\n\n/**\n * Server manager state.\n */\nexport enum ServerState {\n  Idle = 'idle',\n  Starting = 'starting',\n  Running = 'running',\n  Stopping = 'stopping',\n}\n\n/**\n * Manages the complete MCP server lifecycle.\n */\nexport class McpServerManager {\n  private state: ServerState = ServerState.Idle\n  private payments: Payments\n  private tools: Map<string, ToolRegistration> = new Map()\n  private resources: Map<string, ResourceRegistration> = new Map()\n  private prompts: Map<string, PromptRegistration> = new Map()\n  private mcpServer: any = null\n  private expressApp: Application | null = null\n  private httpServer: Server | null = null\n  private sessionManager: SessionManager | null = null\n  private config: McpServerConfig | null = null\n  private log: ((message: string) => void) | undefined = undefined\n  private paywallDecorator: PaywallDecorator\n\n  constructor(payments: Payments) {\n    this.payments = payments\n    // Initialize paywall decorator\n    const authenticator = new PaywallAuthenticator(payments)\n    const creditsContext = new CreditsContextProvider()\n    this.paywallDecorator = new PaywallDecorator(payments, authenticator, creditsContext)\n  }\n\n  /**\n   * Get current server state.\n   */\n  getState(): ServerState {\n    return this.state\n  }\n\n  /**\n   * Register a tool.\n   * Must be called before start().\n   */\n  registerTool(\n    name: string,\n    config: McpToolConfig,\n    handler: ToolHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register tools after server has started')\n    }\n\n    this.tools.set(name, {\n      name,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered tool: ${name}`)\n  }\n\n  /**\n   * Register a resource.\n   * Must be called before start().\n   */\n  registerResource(\n    name: string,\n    uriOrTemplate: string,\n    config: McpResourceConfig,\n    handler: ResourceHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register resources after server has started')\n    }\n\n    this.resources.set(uriOrTemplate, {\n      name,\n      uriOrTemplate,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered resource: ${name} at ${uriOrTemplate}`)\n  }\n\n  /**\n   * Register a prompt.\n   * Must be called before start().\n   */\n  registerPrompt(\n    name: string,\n    config: McpPromptConfig,\n    handler: PromptHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register prompts after server has started')\n    }\n\n    this.prompts.set(name, {\n      name,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered prompt: ${name}`)\n  }\n\n  /**\n   * Start the MCP server.\n   */\n  async start(config: McpServerConfig): Promise<McpServerResult> {\n    if (this.state !== ServerState.Idle) {\n      throw new Error(`Cannot start server in state: ${this.state}`)\n    }\n\n    this.state = ServerState.Starting\n    this.config = config\n    this.log = config.onLog\n\n    try {\n      // Validate configuration. planId is required (plan-centric); agentId is\n      // optional and informational only.\n      if (!config.planId) {\n        throw new Error('planId is required')\n      }\n      if (!config.port) {\n        throw new Error('port is required')\n      }\n\n      const baseUrl = config.baseUrl || `http://localhost:${config.port}`\n\n      const McpServer = await getMcpServerClass()\n\n      // Create MCP server\n      this.mcpServer = new McpServer({\n        name: config.serverName,\n        version: config.version || '1.0.0',\n      })\n\n      // Register tools, resources, and prompts with paywall protection\n      await this.registerHandlersWithPaywall()\n\n      this.expressApp = express()\n\n      // Apply global middleware\n      if (this.expressApp) {\n        // HTTP request logging (must be first to log all requests)\n        this.expressApp.use(createHttpLoggingMiddleware(this.log))\n        this.expressApp.use(createCorsMiddleware(config.corsOrigins || '*'))\n        this.expressApp.use(createJsonMiddleware())\n      }\n\n      // Mount OAuth router\n      const environment =\n        config.environment || (this.payments as any).environmentName || 'staging_sandbox'\n\n      const oauthRouter = createOAuthRouter({\n        payments: this.payments,\n        baseUrl,\n        agentId: config.agentId,\n        environment,\n        serverName: config.serverName,\n        tools: Array.from(this.tools.keys()),\n        resources: Array.from(this.resources.keys()),\n        prompts: Array.from(this.prompts.keys()),\n        enableOAuthDiscovery: config.enableOAuthDiscovery ?? true,\n        enableClientRegistration: config.enableClientRegistration ?? true,\n        enableHealthCheck: config.enableHealthCheck ?? true,\n        enableServerInfo: config.enableServerInfo ?? true,\n        version: config.version || '1.0.0',\n        description: config.description,\n      })\n\n      if (this.expressApp) {\n        this.expressApp.use(oauthRouter)\n      }\n\n      // Create session manager\n      this.sessionManager = createSessionManager({\n        log: this.log,\n      })\n      this.sessionManager.setMcpServer(this.mcpServer)\n\n      // Mount MCP handlers\n      if (this.expressApp && this.sessionManager) {\n        mountMcpHandlers(this.expressApp as any, {\n          sessionManager: this.sessionManager,\n          requireAuth: true,\n          log: this.log,\n        })\n\n        // Add 404 fallback\n        this.expressApp.use((req: any, res: any) => {\n          this.log?.(`404 - ${req.method} ${req.path}`)\n          res.status(404).json({\n            error: 'not_found',\n            error_description: `Endpoint not found: ${req.method} ${req.path}`,\n          })\n        })\n      }\n\n      // Start HTTP server\n      if (!this.expressApp) {\n        throw new Error('Express app not initialized')\n      }\n      const expressApp = this.expressApp\n      await new Promise<void>((resolve, reject) => {\n        const host = config.host || '0.0.0.0'\n        const server = expressApp.listen(config.port, host, () => {\n          resolve()\n        })\n        this.httpServer = server\n        server.on('error', reject)\n      })\n\n      this.state = ServerState.Running\n\n      const info: ServerInfo = {\n        baseUrl,\n        port: config.port,\n        tools: Array.from(this.tools.keys()),\n        resources: Array.from(this.resources.keys()),\n        prompts: Array.from(this.prompts.keys()),\n      }\n\n      // Log startup message\n      this.logStartupMessage(info, config)\n\n      // Call onStart callback\n      config.onStart?.(info)\n\n      return {\n        info,\n        stop: () => this.stop(),\n      }\n    } catch (error) {\n      this.state = ServerState.Idle\n      throw error\n    }\n  }\n\n  /**\n   * Stop the server gracefully.\n   */\n  async stop(): Promise<void> {\n    if (this.state !== ServerState.Running) {\n      return\n    }\n\n    this.state = ServerState.Stopping\n\n    // Destroy all sessions\n    this.sessionManager?.destroyAllSessions()\n\n    // Close HTTP server\n    const server = this.httpServer\n    if (server) {\n      await new Promise<void>((resolve) => {\n        server.close(() => resolve())\n      })\n    }\n\n    // Reset state\n    this.mcpServer = null\n    this.expressApp = null\n    this.httpServer = null\n    this.sessionManager = null\n    this.state = ServerState.Idle\n\n    this.log?.('Server stopped')\n  }\n\n  /**\n   * Register all tools, resources, and prompts with paywall protection.\n   */\n  private async registerHandlersWithPaywall(): Promise<void> {\n    // Configure paywall with agent and server info\n    if (!this.config) {\n      throw new Error('Server config not set')\n    }\n    this.paywallDecorator.configure({\n      planId: this.config.planId,\n      agentId: this.config.agentId,\n      serverName: this.config.serverName,\n    })\n\n    // Register tools\n    for (const [name, registration] of this.tools) {\n      const { config: toolConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (args: any, extra?: any, paywallContext?: any) => {\n          // Pass agentRequest directly in extra (consistent with resources)\n          const handlerExtra = paywallContext\n            ? {\n                ...extra,\n                agentRequest: paywallContext.agentRequest,\n              }\n            : extra\n          // Call the user's handler with the converted context\n          const result = await handler(args, handlerExtra)\n          return result\n        },\n        {\n          name,\n          kind: 'tool',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      this.mcpServer.registerTool(name, toolConfig, protectedHandler)\n    }\n\n    // Register resources\n    for (const [uriOrTemplate, registration] of this.resources) {\n      const { name, config: resourceConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (uri: URL, extra?: any, paywallContext?: any) => {\n          // Convert PaywallContext - pass extra directly to handler\n          const handlerExtra = paywallContext\n            ? {\n                ...extra,\n                authResult: paywallContext.authResult,\n                credits: paywallContext.credits,\n                agentRequest: paywallContext.agentRequest,\n              }\n            : extra\n          // Call the user's handler with the converted context\n          const result = await handler(uri, handlerExtra)\n          return result\n        },\n        {\n          name,\n          kind: 'resource',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      const hasTemplateVariables = /\\{[^}]+\\}/.test(uriOrTemplate)\n\n      if (hasTemplateVariables) {\n        const templateInstance = new ResourceTemplateClass(uriOrTemplate, {\n          list: async () => ({ resources: [] }),\n        })\n        this.mcpServer.registerResource(name, templateInstance, resourceConfig, protectedHandler)\n      } else {\n        // For static resources: registerResource(name, uriString, config, handler)\n        this.mcpServer.registerResource(name, uriOrTemplate, resourceConfig, protectedHandler)\n      }\n    }\n\n    // Register prompts\n    for (const [name, registration] of this.prompts) {\n      const { config: promptConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (args: any, extra?: any, paywallContext?: any) => {\n          // Convert PaywallContext to PromptContext format\n          // PromptContext has: { requestId?, credits?, extra? }\n          const promptContext = paywallContext\n            ? {\n                requestId: paywallContext.agentRequest?.agentRequestId,\n                credits: paywallContext.credits,\n                extra: {\n                  ...extra,\n                  authResult: paywallContext.authResult,\n                  credits: paywallContext.credits,\n                  agentRequest: paywallContext.agentRequest,\n                },\n              }\n            : extra\n              ? {\n                  requestId: extra?.agentRequest?.agentRequestId,\n                  credits: extra?.credits,\n                  extra,\n                }\n              : undefined\n\n          // Call the user's handler with the converted context\n          const result = await handler(args, promptContext)\n          return result\n        },\n        {\n          name,\n          kind: 'prompt',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      const sdkPromptConfig: any = {\n        title: promptConfig.title,\n        description: promptConfig.description,\n      }\n\n      if (promptConfig.argsSchema) {\n        const schema = promptConfig.argsSchema as any\n        if (schema && typeof schema === 'object' && 'shape' in schema) {\n          sdkPromptConfig.argsSchema = schema.shape\n        } else {\n          sdkPromptConfig.argsSchema = promptConfig.argsSchema\n        }\n      }\n\n      this.mcpServer.registerPrompt(name, sdkPromptConfig, protectedHandler)\n    }\n  }\n\n  /**\n   * Log startup message (only if onLog callback provided).\n   */\n  private logStartupMessage(info: ServerInfo, config: McpServerConfig): void {\n    if (!this.log) return\n\n    const toolsList = info.tools.length > 0 ? info.tools.join(', ') : 'none'\n    const resourcesList = info.resources.length > 0 ? info.resources.join(', ') : 'none'\n    const promptsList = info.prompts.length > 0 ? info.prompts.join(', ') : 'none'\n\n    this.log(`MCP Server Started!\n  MCP Endpoint: ${info.baseUrl}/mcp\n  Health Check: ${info.baseUrl}/health\n  Server Info:  ${info.baseUrl}/\n  OAuth Discovery: ${info.baseUrl}/.well-known/oauth-authorization-server\n  Tools: ${toolsList}\n  Resources: ${resourcesList}\n  Prompts: ${promptsList}\n  Plan ID: ${config.planId}${config.agentId ? `\\n  Agent ID: ${config.agentId}` : ''}`)\n  }\n}\n\n/**\n * Create a new server manager.\n */\nexport function createServerManager(payments: Payments): McpServerManager {\n  return new McpServerManager(payments)\n}\n"]}
+{"version":3,"file":"server-manager.js","sourceRoot":"","sources":["../../../src/mcp/core/server-manager.ts"],"names":[],"mappings":"AAKA,OAAO,OAA6B,MAAM,SAAS,CAAA;AAiBnD,OAAO,EAAE,oBAAoB,EAAkB,MAAM,4BAA4B,CAAA;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,IAAI,cAAc,GAAQ,IAAI,CAAA;AAC9B,IAAI,qBAAqB,GAAQ,IAAI,CAAA;AAErC;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAA;YACtE,cAAc,GAAG,MAAM,CAAC,SAAS,CAAA;YACjC,qBAAqB,GAAG,MAAM,CAAC,gBAAgB,CAAA;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,oCAAqB,CAAA;AACvB,CAAC,EALW,WAAW,KAAX,WAAW,QAKtB;AAED;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAc3B,YAAY,QAAkB;QAbtB,UAAK,GAAgB,WAAW,CAAC,IAAI,CAAA;QAErC,UAAK,GAAkC,IAAI,GAAG,EAAE,CAAA;QAChD,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAA;QACxD,YAAO,GAAoC,IAAI,GAAG,EAAE,CAAA;QACpD,cAAS,GAAQ,IAAI,CAAA;QACrB,eAAU,GAAuB,IAAI,CAAA;QACrC,eAAU,GAAkB,IAAI,CAAA;QAChC,mBAAc,GAA0B,IAAI,CAAA;QAC5C,WAAM,GAA2B,IAAI,CAAA;QACrC,QAAG,GAA4C,SAAS,CAAA;QAI9D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,+BAA+B;QAC/B,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxD,MAAM,cAAc,GAAG,IAAI,sBAAsB,EAAE,CAAA;QACnD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAA;IACvF,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED;;;OAGG;IACH,YAAY,CACV,IAAY,EACZ,MAAqB,EACrB,OAAoB,EACpB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACnE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACnB,IAAI;YACJ,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAA;IACxC,CAAC;IAED;;;OAGG;IACH,gBAAgB,CACd,IAAY,EACZ,aAAqB,EACrB,MAAyB,EACzB,OAAwB,EACxB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE;YAChC,IAAI;YACJ,aAAa;YACb,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,IAAI,OAAO,aAAa,EAAE,CAAC,CAAA;IAChE,CAAC;IAED;;;OAGG;IACH,cAAc,CACZ,IAAY,EACZ,MAAuB,EACvB,OAAsB,EACtB,UAAkC,EAAE;QAEpC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YACrB,IAAI;YACJ,MAAM;YACN,OAAO;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;aACjD;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,EAAE,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,MAAuB;QACjC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAChE,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAA;QAEvB,IAAI,CAAC;YACH,wEAAwE;YACxE,mCAAmC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACvC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;YACrC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAA;YAEnE,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAA;YAE3C,oBAAoB;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;aACnC,CAAC,CAAA;YAEF,iEAAiE;YACjE,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAA;YAExC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,CAAA;YAE3B,0BAA0B;YAC1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,2DAA2D;gBAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC1D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAA;gBACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAA;YAC7C,CAAC;YAED,qBAAqB;YACrB,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,IAAK,IAAI,CAAC,QAAgB,CAAC,eAAe,IAAI,iBAAiB,CAAA;YAEnF,MAAM,WAAW,GAAG,iBAAiB,CAAC;gBACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO;gBACP,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW;gBACX,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;gBACzD,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,IAAI,IAAI;gBACjE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;gBACnD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;gBACjD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;gBAClC,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAA;YAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAClC,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;gBACzC,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAA;YACF,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAEhD,qBAAqB;YACrB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC3C,gBAAgB,CAAC,IAAI,CAAC,UAAiB,EAAE;oBACvC,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,WAAW,EAAE,IAAI;oBACjB,uEAAuE;oBACvE,uEAAuE;oBACvE,OAAO;oBACP,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAA;gBAEF,mBAAmB;gBACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;oBACzC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;oBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,WAAW;wBAClB,iBAAiB,EAAE,uBAAuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE;qBACnE,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAChD,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;YAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAA;gBACrC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;oBACvD,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;gBACF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;gBACxB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,OAAO,CAAA;YAEhC,MAAM,IAAI,GAAe;gBACvB,OAAO;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aACzC,CAAA;YAED,sBAAsB;YACtB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAEpC,wBAAwB;YACxB,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;YAEtB,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;aACxB,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAA;YAC7B,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YACvC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAA;QAEjC,uBAAuB;QACvB,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,CAAA;QAEzC,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/B,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc;QACd,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC1B,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAA;QAE7B,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAA;IAC9B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,2BAA2B;QACvC,+CAA+C;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SACnC,CAAC,CAAA;QAEF,iBAAiB;QACjB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAE7D,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,IAAS,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACrD,kEAAkE;gBAClE,MAAM,YAAY,GAAG,cAAc;oBACjC,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;oBACH,CAAC,CAAC,KAAK,CAAA;gBACT,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;gBAChD,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAA;QACjE,CAAC;QAED,qBAAqB;QACrB,KAAK,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAEvE,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,GAAQ,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACpD,0DAA0D;gBAC1D,MAAM,YAAY,GAAG,cAAc;oBACjC,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,UAAU,EAAE,cAAc,CAAC,UAAU;wBACrC,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;oBACH,CAAC,CAAC,KAAK,CAAA;gBACT,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;gBAC/C,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,MAAM,oBAAoB,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAE5D,IAAI,oBAAoB,EAAE,CAAC;gBACzB,MAAM,gBAAgB,GAAG,IAAI,qBAAqB,CAAC,aAAa,EAAE;oBAChE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;iBACtC,CAAC,CAAA;gBACF,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;YAC3F,CAAC;iBAAM,CAAC;gBACN,2EAA2E;gBAC3E,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAA;YAE/D,4BAA4B;YAC5B,2EAA2E;YAC3E,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU;gBACnC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CACpD,KAAK,EAAE,IAAS,EAAE,KAAW,EAAE,cAAoB,EAAE,EAAE;gBACrD,iDAAiD;gBACjD,sDAAsD;gBACtD,MAAM,aAAa,GAAG,cAAc;oBAClC,CAAC,CAAC;wBACE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,cAAc;wBACtD,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,KAAK,EAAE;4BACL,GAAG,KAAK;4BACR,UAAU,EAAE,cAAc,CAAC,UAAU;4BACrC,OAAO,EAAE,cAAc,CAAC,OAAO;4BAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;yBAC1C;qBACF;oBACH,CAAC,CAAC,KAAK;wBACL,CAAC,CAAC;4BACE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc;4BAC9C,OAAO,EAAE,KAAK,EAAE,OAAO;4BACvB,KAAK;yBACN;wBACH,CAAC,CAAC,SAAS,CAAA;gBAEf,qDAAqD;gBACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;gBACjD,OAAO,MAAM,CAAA;YACf,CAAC,EACD;gBACE,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CACF,CAAA;YAED,2BAA2B;YAC3B,MAAM,eAAe,GAAQ;gBAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,WAAW,EAAE,YAAY,CAAC,WAAW;aACtC,CAAA;YAED,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAiB,CAAA;gBAC7C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC9D,eAAe,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;gBAC3C,CAAC;qBAAM,CAAC;oBACN,eAAe,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;gBACtD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAgB,EAAE,MAAuB;QACjE,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAM;QAErB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACxE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAE9E,IAAI,CAAC,GAAG,CAAC;kBACK,IAAI,CAAC,OAAO;kBACZ,IAAI,CAAC,OAAO;kBACZ,IAAI,CAAC,OAAO;qBACT,IAAI,CAAC,OAAO;WACtB,SAAS;eACL,aAAa;aACf,WAAW;aACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrF,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAkB;IACpD,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AACvC,CAAC","sourcesContent":["/**\n * Server manager for simplified MCP API.\n * Orchestrates McpServer, Express, Transport, and session management.\n */\nimport type { Server } from 'http'\nimport express, { type Application } from 'express'\nimport type { Payments } from '../../payments.js'\nimport type {\n  McpToolConfig,\n  McpResourceConfig,\n  McpPromptConfig,\n  McpRegistrationOptions,\n  ToolHandler,\n  ResourceHandler,\n  PromptHandler,\n  McpServerConfig,\n  McpServerResult,\n  ServerInfo,\n  ToolRegistration,\n  ResourceRegistration,\n  PromptRegistration,\n} from '../types/server.types.js'\nimport { createSessionManager, SessionManager } from '../http/session-manager.js'\nimport { mountMcpHandlers } from '../http/mcp-handler.js'\nimport {\n  createOAuthRouter,\n  createCorsMiddleware,\n  createJsonMiddleware,\n  createHttpLoggingMiddleware,\n} from '../http/oauth-router.js'\nimport { PaywallDecorator } from './paywall.js'\nimport { PaywallAuthenticator } from './auth.js'\nimport { CreditsContextProvider } from './credits-context.js'\n\nlet McpServerClass: any = null\nlet ResourceTemplateClass: any = null\n\n/**\n * Lazily load McpServer and ResourceTemplate from the SDK.\n */\nasync function getMcpServerClass(): Promise<any> {\n  if (!McpServerClass) {\n    try {\n      const module = await import('@modelcontextprotocol/sdk/server/mcp.js')\n      McpServerClass = module.McpServer\n      ResourceTemplateClass = module.ResourceTemplate\n    } catch (error) {\n      throw new Error(\n        'Failed to load @modelcontextprotocol/sdk. Make sure it is installed: npm install @modelcontextprotocol/sdk',\n      )\n    }\n  }\n  return McpServerClass\n}\n\n/**\n * Server manager state.\n */\nexport enum ServerState {\n  Idle = 'idle',\n  Starting = 'starting',\n  Running = 'running',\n  Stopping = 'stopping',\n}\n\n/**\n * Manages the complete MCP server lifecycle.\n */\nexport class McpServerManager {\n  private state: ServerState = ServerState.Idle\n  private payments: Payments\n  private tools: Map<string, ToolRegistration> = new Map()\n  private resources: Map<string, ResourceRegistration> = new Map()\n  private prompts: Map<string, PromptRegistration> = new Map()\n  private mcpServer: any = null\n  private expressApp: Application | null = null\n  private httpServer: Server | null = null\n  private sessionManager: SessionManager | null = null\n  private config: McpServerConfig | null = null\n  private log: ((message: string) => void) | undefined = undefined\n  private paywallDecorator: PaywallDecorator\n\n  constructor(payments: Payments) {\n    this.payments = payments\n    // Initialize paywall decorator\n    const authenticator = new PaywallAuthenticator(payments)\n    const creditsContext = new CreditsContextProvider()\n    this.paywallDecorator = new PaywallDecorator(payments, authenticator, creditsContext)\n  }\n\n  /**\n   * Get current server state.\n   */\n  getState(): ServerState {\n    return this.state\n  }\n\n  /**\n   * Register a tool.\n   * Must be called before start().\n   */\n  registerTool(\n    name: string,\n    config: McpToolConfig,\n    handler: ToolHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register tools after server has started')\n    }\n\n    this.tools.set(name, {\n      name,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered tool: ${name}`)\n  }\n\n  /**\n   * Register a resource.\n   * Must be called before start().\n   */\n  registerResource(\n    name: string,\n    uriOrTemplate: string,\n    config: McpResourceConfig,\n    handler: ResourceHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register resources after server has started')\n    }\n\n    this.resources.set(uriOrTemplate, {\n      name,\n      uriOrTemplate,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered resource: ${name} at ${uriOrTemplate}`)\n  }\n\n  /**\n   * Register a prompt.\n   * Must be called before start().\n   */\n  registerPrompt(\n    name: string,\n    config: McpPromptConfig,\n    handler: PromptHandler,\n    options: McpRegistrationOptions = {},\n  ): void {\n    if (this.state !== ServerState.Idle) {\n      throw new Error('Cannot register prompts after server has started')\n    }\n\n    this.prompts.set(name, {\n      name,\n      config,\n      handler,\n      options: {\n        credits: options.credits,\n        onRedeemError: options.onRedeemError ?? 'ignore',\n      },\n    })\n\n    this.log?.(`Registered prompt: ${name}`)\n  }\n\n  /**\n   * Start the MCP server.\n   */\n  async start(config: McpServerConfig): Promise<McpServerResult> {\n    if (this.state !== ServerState.Idle) {\n      throw new Error(`Cannot start server in state: ${this.state}`)\n    }\n\n    this.state = ServerState.Starting\n    this.config = config\n    this.log = config.onLog\n\n    try {\n      // Validate configuration. planId is required (plan-centric); agentId is\n      // optional and informational only.\n      if (!config.planId) {\n        throw new Error('planId is required')\n      }\n      if (!config.port) {\n        throw new Error('port is required')\n      }\n\n      const baseUrl = config.baseUrl || `http://localhost:${config.port}`\n\n      const McpServer = await getMcpServerClass()\n\n      // Create MCP server\n      this.mcpServer = new McpServer({\n        name: config.serverName,\n        version: config.version || '1.0.0',\n      })\n\n      // Register tools, resources, and prompts with paywall protection\n      await this.registerHandlersWithPaywall()\n\n      this.expressApp = express()\n\n      // Apply global middleware\n      if (this.expressApp) {\n        // HTTP request logging (must be first to log all requests)\n        this.expressApp.use(createHttpLoggingMiddleware(this.log))\n        this.expressApp.use(createCorsMiddleware(config.corsOrigins || '*'))\n        this.expressApp.use(createJsonMiddleware())\n      }\n\n      // Mount OAuth router\n      const environment =\n        config.environment || (this.payments as any).environmentName || 'staging_sandbox'\n\n      const oauthRouter = createOAuthRouter({\n        payments: this.payments,\n        baseUrl,\n        agentId: config.agentId,\n        environment,\n        serverName: config.serverName,\n        tools: Array.from(this.tools.keys()),\n        resources: Array.from(this.resources.keys()),\n        prompts: Array.from(this.prompts.keys()),\n        enableOAuthDiscovery: config.enableOAuthDiscovery ?? true,\n        enableClientRegistration: config.enableClientRegistration ?? true,\n        enableHealthCheck: config.enableHealthCheck ?? true,\n        enableServerInfo: config.enableServerInfo ?? true,\n        version: config.version || '1.0.0',\n        description: config.description,\n      })\n\n      if (this.expressApp) {\n        this.expressApp.use(oauthRouter)\n      }\n\n      // Create session manager\n      this.sessionManager = createSessionManager({\n        log: this.log,\n      })\n      this.sessionManager.setMcpServer(this.mcpServer)\n\n      // Mount MCP handlers\n      if (this.expressApp && this.sessionManager) {\n        mountMcpHandlers(this.expressApp as any, {\n          sessionManager: this.sessionManager,\n          requireAuth: true,\n          // Pin the challenge's resource_metadata origin to the operator's known\n          // baseUrl (never client Host/X-Forwarded-* headers) — see #410 review.\n          baseUrl,\n          log: this.log,\n        })\n\n        // Add 404 fallback\n        this.expressApp.use((req: any, res: any) => {\n          this.log?.(`404 - ${req.method} ${req.path}`)\n          res.status(404).json({\n            error: 'not_found',\n            error_description: `Endpoint not found: ${req.method} ${req.path}`,\n          })\n        })\n      }\n\n      // Start HTTP server\n      if (!this.expressApp) {\n        throw new Error('Express app not initialized')\n      }\n      const expressApp = this.expressApp\n      await new Promise<void>((resolve, reject) => {\n        const host = config.host || '0.0.0.0'\n        const server = expressApp.listen(config.port, host, () => {\n          resolve()\n        })\n        this.httpServer = server\n        server.on('error', reject)\n      })\n\n      this.state = ServerState.Running\n\n      const info: ServerInfo = {\n        baseUrl,\n        port: config.port,\n        tools: Array.from(this.tools.keys()),\n        resources: Array.from(this.resources.keys()),\n        prompts: Array.from(this.prompts.keys()),\n      }\n\n      // Log startup message\n      this.logStartupMessage(info, config)\n\n      // Call onStart callback\n      config.onStart?.(info)\n\n      return {\n        info,\n        stop: () => this.stop(),\n      }\n    } catch (error) {\n      this.state = ServerState.Idle\n      throw error\n    }\n  }\n\n  /**\n   * Stop the server gracefully.\n   */\n  async stop(): Promise<void> {\n    if (this.state !== ServerState.Running) {\n      return\n    }\n\n    this.state = ServerState.Stopping\n\n    // Destroy all sessions\n    this.sessionManager?.destroyAllSessions()\n\n    // Close HTTP server\n    const server = this.httpServer\n    if (server) {\n      await new Promise<void>((resolve) => {\n        server.close(() => resolve())\n      })\n    }\n\n    // Reset state\n    this.mcpServer = null\n    this.expressApp = null\n    this.httpServer = null\n    this.sessionManager = null\n    this.state = ServerState.Idle\n\n    this.log?.('Server stopped')\n  }\n\n  /**\n   * Register all tools, resources, and prompts with paywall protection.\n   */\n  private async registerHandlersWithPaywall(): Promise<void> {\n    // Configure paywall with agent and server info\n    if (!this.config) {\n      throw new Error('Server config not set')\n    }\n    this.paywallDecorator.configure({\n      planId: this.config.planId,\n      agentId: this.config.agentId,\n      serverName: this.config.serverName,\n    })\n\n    // Register tools\n    for (const [name, registration] of this.tools) {\n      const { config: toolConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (args: any, extra?: any, paywallContext?: any) => {\n          // Pass agentRequest directly in extra (consistent with resources)\n          const handlerExtra = paywallContext\n            ? {\n                ...extra,\n                agentRequest: paywallContext.agentRequest,\n              }\n            : extra\n          // Call the user's handler with the converted context\n          const result = await handler(args, handlerExtra)\n          return result\n        },\n        {\n          name,\n          kind: 'tool',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      this.mcpServer.registerTool(name, toolConfig, protectedHandler)\n    }\n\n    // Register resources\n    for (const [uriOrTemplate, registration] of this.resources) {\n      const { name, config: resourceConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (uri: URL, extra?: any, paywallContext?: any) => {\n          // Convert PaywallContext - pass extra directly to handler\n          const handlerExtra = paywallContext\n            ? {\n                ...extra,\n                authResult: paywallContext.authResult,\n                credits: paywallContext.credits,\n                agentRequest: paywallContext.agentRequest,\n              }\n            : extra\n          // Call the user's handler with the converted context\n          const result = await handler(uri, handlerExtra)\n          return result\n        },\n        {\n          name,\n          kind: 'resource',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      const hasTemplateVariables = /\\{[^}]+\\}/.test(uriOrTemplate)\n\n      if (hasTemplateVariables) {\n        const templateInstance = new ResourceTemplateClass(uriOrTemplate, {\n          list: async () => ({ resources: [] }),\n        })\n        this.mcpServer.registerResource(name, templateInstance, resourceConfig, protectedHandler)\n      } else {\n        // For static resources: registerResource(name, uriString, config, handler)\n        this.mcpServer.registerResource(name, uriOrTemplate, resourceConfig, protectedHandler)\n      }\n    }\n\n    // Register prompts\n    for (const [name, registration] of this.prompts) {\n      const { config: promptConfig, handler, options } = registration\n\n      // Wrap handler with paywall\n      // Convert number to bigint if needed, but preserve functions and undefined\n      const creditsOption: any =\n        typeof options.credits === 'function'\n          ? options.credits\n          : typeof options.credits === 'number'\n            ? BigInt(options.credits)\n            : options.credits\n\n      const protectedHandler = this.paywallDecorator.protect(\n        async (args: any, extra?: any, paywallContext?: any) => {\n          // Convert PaywallContext to PromptContext format\n          // PromptContext has: { requestId?, credits?, extra? }\n          const promptContext = paywallContext\n            ? {\n                requestId: paywallContext.agentRequest?.agentRequestId,\n                credits: paywallContext.credits,\n                extra: {\n                  ...extra,\n                  authResult: paywallContext.authResult,\n                  credits: paywallContext.credits,\n                  agentRequest: paywallContext.agentRequest,\n                },\n              }\n            : extra\n              ? {\n                  requestId: extra?.agentRequest?.agentRequestId,\n                  credits: extra?.credits,\n                  extra,\n                }\n              : undefined\n\n          // Call the user's handler with the converted context\n          const result = await handler(args, promptContext)\n          return result\n        },\n        {\n          name,\n          kind: 'prompt',\n          credits: creditsOption,\n          onRedeemError: options.onRedeemError,\n        },\n      )\n\n      // Register with MCP server\n      const sdkPromptConfig: any = {\n        title: promptConfig.title,\n        description: promptConfig.description,\n      }\n\n      if (promptConfig.argsSchema) {\n        const schema = promptConfig.argsSchema as any\n        if (schema && typeof schema === 'object' && 'shape' in schema) {\n          sdkPromptConfig.argsSchema = schema.shape\n        } else {\n          sdkPromptConfig.argsSchema = promptConfig.argsSchema\n        }\n      }\n\n      this.mcpServer.registerPrompt(name, sdkPromptConfig, protectedHandler)\n    }\n  }\n\n  /**\n   * Log startup message (only if onLog callback provided).\n   */\n  private logStartupMessage(info: ServerInfo, config: McpServerConfig): void {\n    if (!this.log) return\n\n    const toolsList = info.tools.length > 0 ? info.tools.join(', ') : 'none'\n    const resourcesList = info.resources.length > 0 ? info.resources.join(', ') : 'none'\n    const promptsList = info.prompts.length > 0 ? info.prompts.join(', ') : 'none'\n\n    this.log(`MCP Server Started!\n  MCP Endpoint: ${info.baseUrl}/mcp\n  Health Check: ${info.baseUrl}/health\n  Server Info:  ${info.baseUrl}/\n  OAuth Discovery: ${info.baseUrl}/.well-known/oauth-authorization-server\n  Tools: ${toolsList}\n  Resources: ${resourcesList}\n  Prompts: ${promptsList}\n  Plan ID: ${config.planId}${config.agentId ? `\\n  Agent ID: ${config.agentId}` : ''}`)\n  }\n}\n\n/**\n * Create a new server manager.\n */\nexport function createServerManager(payments: Payments): McpServerManager {\n  return new McpServerManager(payments)\n}\n"]}

package/dist/mcp/http/mcp-handler.d.ts

@@ -23,6 +23,13 @@ export interface McpHandlerConfig {
     sessionManager: SessionManager;
     /** Whether to require authentication (default: true) */
     requireAuth?: boolean;
+    /**
+     * Public base URL of this MCP server. When provided, the 401
+     * `WWW-Authenticate` challenge's `resource_metadata` pointer is built from it
+     * (never from client-supplied Host/X-Forwarded-* headers) — the correct,
+     * spoof-proof choice behind a TLS-terminating proxy.
+     */
+    baseUrl?: string;
     /** Logger function */
     log?: (message: string) => void;
 }

package/dist/mcp/http/mcp-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-handler.d.ts","sourceRoot":"","sources":["../../../src/mcp/http/mcp-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAG1E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mCAA0C,CAAA;AAE5E;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,cAAc,GAAG,SAAS,CAErE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,cAAc,EAAE,cAAc,CAAA;IAC9B,wDAAwD;IACxD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,sBAAsB;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAChC;AAsCD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CA6DjF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBhF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAYnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAiB/E"}
+{"version":3,"file":"mcp-handler.d.ts","sourceRoot":"","sources":["../../../src/mcp/http/mcp-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAG1E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mCAA0C,CAAA;AAE5E;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,cAAc,GAAG,SAAS,CAErE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,cAAc,EAAE,cAAc,CAAA;IAC9B,wDAAwD;IACxD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sBAAsB;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAChC;AAsCD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CA6DjF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBhF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,IAGtB,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAYnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAwB/E"}

package/dist/mcp/http/mcp-handler.js

@@ -155,7 +155,14 @@ export function mountMcpHandlers(router, config) {
     const getHandler = createGetMcpHandler(config);
     const deleteHandler = createDeleteMcpHandler(config);
     if (requireAuth) {
-        const authMiddleware = createRequireAuthMiddleware();
+        // These handlers protect the `/mcp` resource, so a 401 must advertise the
+        // `/mcp`-scoped PRM (resource: `<baseUrl>/mcp`), not the root document. Pin the
+        // origin to the operator baseUrl when known, so the challenge never depends on
+        // client-supplied Host/X-Forwarded-* headers.
+        const authMiddleware = createRequireAuthMiddleware({
+            baseUrl: config.baseUrl,
+            resourceMetadataPath: '/.well-known/oauth-protected-resource/mcp',
+        });
         router.post('/mcp', authMiddleware, postHandler);
         router.get('/mcp', authMiddleware, getHandler);
         router.delete('/mcp', authMiddleware, deleteHandler);

package/dist/mcp/http/mcp-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-handler.js","sourceRoot":"","sources":["../../../src/mcp/http/mcp-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAA;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,iBAAiB,EAAkB,CAAA;AAE5E;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,qBAAqB,CAAC,QAAQ,EAAE,CAAA;AACzC,CAAC;AAcD;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,SAAgC,CAAA;AACpF,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAS;IACpC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,CAAA;AACzE,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,qCAAqC,CAAA;IAC5D,CAAC;SAAM,IACL,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChD,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACjD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAClC,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa;QAC9D,IAAI,CAAC;YACH,GAAG,EAAE,CAAC,WAAW,CAAC,CAAA;YAElB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,uCAAuC;qBACjD;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YAED,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAE5C,IAAI,SAAS,GAAG,eAAe,CAAA;YAC/B,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzB,SAAS,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAA;gBAC9C,GAAG,EAAE,CAAC,wBAAwB,SAAS,EAAE,CAAC,CAAA;YAC5C,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;YAC1C,kBAAkB,CAAC,GAAG,CAAC,CAAA;YAEvB,2CAA2C;YAC3C,MAAM,cAAc,GAAmB;gBACrC,OAAO,EAAE,GAAG,CAAC,OAAwD;gBACrE,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,EAAE,EAAE,GAAG,CAAC,EAAE;aACX,CAAA;YAED,4CAA4C;YAC5C,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;YAE3D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;YAEpE,0DAA0D;YAC1D,+EAA+E;YAC/E,MAAM,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACnD,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,kDAAkD;YAClD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAA;gBACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,YAAY;qBACtB;oBACD,EAAE,EAAG,GAAG,CAAC,IAAY,EAAE,EAAE,IAAI,IAAI;iBAClC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;QAC7D,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAA;QAEvB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAEvC,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QAED,GAAG,EAAE,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAA;YAC9D,OAAM;QACR,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACzC,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa;QAChE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAA;QAEpB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAEvC,IAAI,SAAS,IAAI,cAAc,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,GAAG,EAAE,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAA;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAwB;IACvE,MAAM,EAAE,WAAW,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IAErC,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAEpD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,WAAkB,CAAC,CAAA;QACvD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,UAAiB,CAAC,CAAA;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,aAAoB,CAAC,CAAA;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAiB,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAoB,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC","sourcesContent":["/**\n * HTTP handlers for MCP endpoints.\n * Provides POST, GET, and DELETE handlers for the /mcp endpoint.\n */\nimport { AsyncLocalStorage } from 'async_hooks'\nimport type { Request, Response, Router } from 'express'\nimport type { SessionManager, RequestContext } from './session-manager.js'\nimport { createRequireAuthMiddleware } from './oauth-router.js'\n\n/**\n * AsyncLocalStorage to store request context within the async flow.\n * This allows handlers deep in the call stack to access HTTP headers.\n */\nexport const requestContextStorage = new AsyncLocalStorage<RequestContext>()\n\n/**\n * Get the current request context from AsyncLocalStorage.\n * Returns undefined if not in a request context.\n */\nexport function getCurrentRequestContext(): RequestContext | undefined {\n  return requestContextStorage.getStore()\n}\n\n/**\n * Configuration for MCP handlers.\n */\nexport interface McpHandlerConfig {\n  /** Session manager instance */\n  sessionManager: SessionManager\n  /** Whether to require authentication (default: true) */\n  requireAuth?: boolean\n  /** Logger function */\n  log?: (message: string) => void\n}\n\n/**\n * Extract session ID from request headers.\n */\nfunction extractSessionId(req: Request): string | undefined {\n  const headerVal = req.headers['mcp-session-id']\n  return Array.isArray(headerVal) ? headerVal[0] : (headerVal as string | undefined)\n}\n\n/**\n * Check if request is an initialize request.\n */\nfunction isInitializeRequest(body: any): boolean {\n  return body && typeof body === 'object' && body.method === 'initialize'\n}\n\n/**\n * Ensure Accept header includes required MIME types.\n */\nfunction ensureAcceptHeader(req: Request): void {\n  if (!req.headers.accept) {\n    req.headers.accept = 'application/json, text/event-stream'\n  } else if (\n    !req.headers.accept.includes('application/json') ||\n    !req.headers.accept.includes('text/event-stream')\n  ) {\n    const accept = req.headers.accept.split(',').map((s: string) => s.trim())\n    if (!accept.includes('application/json')) {\n      accept.push('application/json')\n    }\n    if (!accept.includes('text/event-stream')) {\n      accept.push('text/event-stream')\n    }\n    req.headers.accept = accept.join(', ')\n  }\n}\n\n/**\n * Create the POST /mcp handler.\n */\nexport function createPostMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function postMcpHandler(req: Request, res: Response): Promise<void> {\n    try {\n      log?.(`POST /mcp`)\n\n      if (!req.body || typeof req.body !== 'object') {\n        res.status(400).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32700,\n            message: 'Parse error: Invalid JSON-RPC request',\n          },\n          id: null,\n        })\n        return\n      }\n\n      const clientSessionId = extractSessionId(req)\n      const isInit = isInitializeRequest(req.body)\n\n      let sessionId = clientSessionId\n      if (isInit || !sessionId) {\n        sessionId = sessionManager.generateSessionId()\n        log?.(`Created new session: ${sessionId}`)\n      }\n\n      res.setHeader('Mcp-Session-Id', sessionId)\n      ensureAcceptHeader(req)\n\n      // Create request context with HTTP headers\n      const requestContext: RequestContext = {\n        headers: req.headers as Record<string, string | string[] | undefined>,\n        method: req.method,\n        url: req.url,\n        ip: req.ip,\n      }\n\n      // Store in session manager for later access\n      sessionManager.setRequestContext(sessionId, requestContext)\n\n      const transport = await sessionManager.getOrCreateSession(sessionId)\n\n      // Run transport handling within AsyncLocalStorage context\n      // This makes headers available to tool handlers via getCurrentRequestContext()\n      await requestContextStorage.run(requestContext, async () => {\n        await transport.handleRequest(req, res, req.body)\n      })\n    } catch (error: unknown) {\n      // Silently handle errors - library should not log\n      if (!res.headersSent) {\n        const errorMessage = error instanceof Error ? error.message : 'Internal server error'\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: errorMessage,\n          },\n          id: (req.body as any)?.id || null,\n        })\n      }\n    }\n  }\n}\n\n/**\n * Create the GET /mcp handler (SSE stream).\n */\nexport function createGetMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function getMcpHandler(req: Request, res: Response): Promise<void> {\n    log?.(`GET /mcp (SSE)`)\n\n    const sessionId = extractSessionId(req)\n\n    if (!sessionId || !sessionManager.hasSession(sessionId)) {\n      res.status(400).json({ error: 'Invalid or missing session ID' })\n      return\n    }\n\n    log?.(`Establishing SSE stream for session ${sessionId}`)\n    const transport = sessionManager.getSession(sessionId)\n    if (!transport) {\n      res.status(400).json({ error: 'Session transport not found' })\n      return\n    }\n    await transport.handleRequest(req, res)\n  }\n}\n\n/**\n * Create the DELETE /mcp handler (session termination).\n */\nexport function createDeleteMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function deleteMcpHandler(req: Request, res: Response): Promise<void> {\n    log?.(`DELETE /mcp`)\n\n    const sessionId = extractSessionId(req)\n\n    if (sessionId && sessionManager.destroySession(sessionId)) {\n      log?.(`Destroyed session: ${sessionId}`)\n      res.status(204).end()\n    } else {\n      res.status(404).json({ error: 'Session not found' })\n    }\n  }\n}\n\n/**\n * Mount all MCP handlers on an Express router.\n */\nexport function mountMcpHandlers(router: Router, config: McpHandlerConfig): void {\n  const { requireAuth = true } = config\n\n  const postHandler = createPostMcpHandler(config)\n  const getHandler = createGetMcpHandler(config)\n  const deleteHandler = createDeleteMcpHandler(config)\n\n  if (requireAuth) {\n    const authMiddleware = createRequireAuthMiddleware()\n    router.post('/mcp', authMiddleware, postHandler as any)\n    router.get('/mcp', authMiddleware, getHandler as any)\n    router.delete('/mcp', authMiddleware, deleteHandler as any)\n  } else {\n    router.post('/mcp', postHandler as any)\n    router.get('/mcp', getHandler as any)\n    router.delete('/mcp', deleteHandler as any)\n  }\n}\n"]}
+{"version":3,"file":"mcp-handler.js","sourceRoot":"","sources":["../../../src/mcp/http/mcp-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAA;AAE/D;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,iBAAiB,EAAkB,CAAA;AAE5E;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,qBAAqB,CAAC,QAAQ,EAAE,CAAA;AACzC,CAAC;AAqBD;;GAEG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,SAAgC,CAAA;AACpF,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAS;IACpC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,CAAA;AACzE,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,qCAAqC,CAAA;IAC5D,CAAC;SAAM,IACL,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChD,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACjD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAClC,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa;QAC9D,IAAI,CAAC;YACH,GAAG,EAAE,CAAC,WAAW,CAAC,CAAA;YAElB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,uCAAuC;qBACjD;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YAED,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAE5C,IAAI,SAAS,GAAG,eAAe,CAAA;YAC/B,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzB,SAAS,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAA;gBAC9C,GAAG,EAAE,CAAC,wBAAwB,SAAS,EAAE,CAAC,CAAA;YAC5C,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAA;YAC1C,kBAAkB,CAAC,GAAG,CAAC,CAAA;YAEvB,2CAA2C;YAC3C,MAAM,cAAc,GAAmB;gBACrC,OAAO,EAAE,GAAG,CAAC,OAAwD;gBACrE,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,EAAE,EAAE,GAAG,CAAC,EAAE;aACX,CAAA;YAED,4CAA4C;YAC5C,cAAc,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;YAE3D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;YAEpE,0DAA0D;YAC1D,+EAA+E;YAC/E,MAAM,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACnD,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,kDAAkD;YAClD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAA;gBACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,YAAY;qBACtB;oBACD,EAAE,EAAG,GAAG,CAAC,IAAY,EAAE,EAAE,IAAI,IAAI;iBAClC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;QAC7D,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAA;QAEvB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAEvC,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QAED,GAAG,EAAE,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAA;QACzD,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAA;YAC9D,OAAM;QACR,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACzC,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IAEtC,OAAO,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa;QAChE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAA;QAEpB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAEvC,IAAI,SAAS,IAAI,cAAc,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,GAAG,EAAE,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAA;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAwB;IACvE,MAAM,EAAE,WAAW,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IAErC,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAEpD,IAAI,WAAW,EAAE,CAAC;QAChB,0EAA0E;QAC1E,gFAAgF;QAChF,+EAA+E;QAC/E,8CAA8C;QAC9C,MAAM,cAAc,GAAG,2BAA2B,CAAC;YACjD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,oBAAoB,EAAE,2CAA2C;SAClE,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,WAAkB,CAAC,CAAA;QACvD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,UAAiB,CAAC,CAAA;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,aAAoB,CAAC,CAAA;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAkB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAiB,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAoB,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC","sourcesContent":["/**\n * HTTP handlers for MCP endpoints.\n * Provides POST, GET, and DELETE handlers for the /mcp endpoint.\n */\nimport { AsyncLocalStorage } from 'async_hooks'\nimport type { Request, Response, Router } from 'express'\nimport type { SessionManager, RequestContext } from './session-manager.js'\nimport { createRequireAuthMiddleware } from './oauth-router.js'\n\n/**\n * AsyncLocalStorage to store request context within the async flow.\n * This allows handlers deep in the call stack to access HTTP headers.\n */\nexport const requestContextStorage = new AsyncLocalStorage<RequestContext>()\n\n/**\n * Get the current request context from AsyncLocalStorage.\n * Returns undefined if not in a request context.\n */\nexport function getCurrentRequestContext(): RequestContext | undefined {\n  return requestContextStorage.getStore()\n}\n\n/**\n * Configuration for MCP handlers.\n */\nexport interface McpHandlerConfig {\n  /** Session manager instance */\n  sessionManager: SessionManager\n  /** Whether to require authentication (default: true) */\n  requireAuth?: boolean\n  /**\n   * Public base URL of this MCP server. When provided, the 401\n   * `WWW-Authenticate` challenge's `resource_metadata` pointer is built from it\n   * (never from client-supplied Host/X-Forwarded-* headers) — the correct,\n   * spoof-proof choice behind a TLS-terminating proxy.\n   */\n  baseUrl?: string\n  /** Logger function */\n  log?: (message: string) => void\n}\n\n/**\n * Extract session ID from request headers.\n */\nfunction extractSessionId(req: Request): string | undefined {\n  const headerVal = req.headers['mcp-session-id']\n  return Array.isArray(headerVal) ? headerVal[0] : (headerVal as string | undefined)\n}\n\n/**\n * Check if request is an initialize request.\n */\nfunction isInitializeRequest(body: any): boolean {\n  return body && typeof body === 'object' && body.method === 'initialize'\n}\n\n/**\n * Ensure Accept header includes required MIME types.\n */\nfunction ensureAcceptHeader(req: Request): void {\n  if (!req.headers.accept) {\n    req.headers.accept = 'application/json, text/event-stream'\n  } else if (\n    !req.headers.accept.includes('application/json') ||\n    !req.headers.accept.includes('text/event-stream')\n  ) {\n    const accept = req.headers.accept.split(',').map((s: string) => s.trim())\n    if (!accept.includes('application/json')) {\n      accept.push('application/json')\n    }\n    if (!accept.includes('text/event-stream')) {\n      accept.push('text/event-stream')\n    }\n    req.headers.accept = accept.join(', ')\n  }\n}\n\n/**\n * Create the POST /mcp handler.\n */\nexport function createPostMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function postMcpHandler(req: Request, res: Response): Promise<void> {\n    try {\n      log?.(`POST /mcp`)\n\n      if (!req.body || typeof req.body !== 'object') {\n        res.status(400).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32700,\n            message: 'Parse error: Invalid JSON-RPC request',\n          },\n          id: null,\n        })\n        return\n      }\n\n      const clientSessionId = extractSessionId(req)\n      const isInit = isInitializeRequest(req.body)\n\n      let sessionId = clientSessionId\n      if (isInit || !sessionId) {\n        sessionId = sessionManager.generateSessionId()\n        log?.(`Created new session: ${sessionId}`)\n      }\n\n      res.setHeader('Mcp-Session-Id', sessionId)\n      ensureAcceptHeader(req)\n\n      // Create request context with HTTP headers\n      const requestContext: RequestContext = {\n        headers: req.headers as Record<string, string | string[] | undefined>,\n        method: req.method,\n        url: req.url,\n        ip: req.ip,\n      }\n\n      // Store in session manager for later access\n      sessionManager.setRequestContext(sessionId, requestContext)\n\n      const transport = await sessionManager.getOrCreateSession(sessionId)\n\n      // Run transport handling within AsyncLocalStorage context\n      // This makes headers available to tool handlers via getCurrentRequestContext()\n      await requestContextStorage.run(requestContext, async () => {\n        await transport.handleRequest(req, res, req.body)\n      })\n    } catch (error: unknown) {\n      // Silently handle errors - library should not log\n      if (!res.headersSent) {\n        const errorMessage = error instanceof Error ? error.message : 'Internal server error'\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: errorMessage,\n          },\n          id: (req.body as any)?.id || null,\n        })\n      }\n    }\n  }\n}\n\n/**\n * Create the GET /mcp handler (SSE stream).\n */\nexport function createGetMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function getMcpHandler(req: Request, res: Response): Promise<void> {\n    log?.(`GET /mcp (SSE)`)\n\n    const sessionId = extractSessionId(req)\n\n    if (!sessionId || !sessionManager.hasSession(sessionId)) {\n      res.status(400).json({ error: 'Invalid or missing session ID' })\n      return\n    }\n\n    log?.(`Establishing SSE stream for session ${sessionId}`)\n    const transport = sessionManager.getSession(sessionId)\n    if (!transport) {\n      res.status(400).json({ error: 'Session transport not found' })\n      return\n    }\n    await transport.handleRequest(req, res)\n  }\n}\n\n/**\n * Create the DELETE /mcp handler (session termination).\n */\nexport function createDeleteMcpHandler(config: McpHandlerConfig) {\n  const { sessionManager, log } = config\n\n  return async function deleteMcpHandler(req: Request, res: Response): Promise<void> {\n    log?.(`DELETE /mcp`)\n\n    const sessionId = extractSessionId(req)\n\n    if (sessionId && sessionManager.destroySession(sessionId)) {\n      log?.(`Destroyed session: ${sessionId}`)\n      res.status(204).end()\n    } else {\n      res.status(404).json({ error: 'Session not found' })\n    }\n  }\n}\n\n/**\n * Mount all MCP handlers on an Express router.\n */\nexport function mountMcpHandlers(router: Router, config: McpHandlerConfig): void {\n  const { requireAuth = true } = config\n\n  const postHandler = createPostMcpHandler(config)\n  const getHandler = createGetMcpHandler(config)\n  const deleteHandler = createDeleteMcpHandler(config)\n\n  if (requireAuth) {\n    // These handlers protect the `/mcp` resource, so a 401 must advertise the\n    // `/mcp`-scoped PRM (resource: `<baseUrl>/mcp`), not the root document. Pin the\n    // origin to the operator baseUrl when known, so the challenge never depends on\n    // client-supplied Host/X-Forwarded-* headers.\n    const authMiddleware = createRequireAuthMiddleware({\n      baseUrl: config.baseUrl,\n      resourceMetadataPath: '/.well-known/oauth-protected-resource/mcp',\n    })\n    router.post('/mcp', authMiddleware, postHandler as any)\n    router.get('/mcp', authMiddleware, getHandler as any)\n    router.delete('/mcp', authMiddleware, deleteHandler as any)\n  } else {\n    router.post('/mcp', postHandler as any)\n    router.get('/mcp', getHandler as any)\n    router.delete('/mcp', deleteHandler as any)\n  }\n}\n"]}

package/dist/mcp/http/oauth-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../../src/mcp/http/oauth-metadata.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EACX,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EAClB,MAAM,wBAAwB,CAAA;AAiD/B;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,eAAe,EAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAC7B,SAAS,CAGX;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,WAAW,GAAG,yBAAyB,CAY7F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,WAAW,GAClB,4BAA4B,CAiB9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,WAAW,GAAG,2BAA2B,CAiBjG;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAqB7E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GACA;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CA8BA"}
+{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../../src/mcp/http/oauth-metadata.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EACX,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EAClB,MAAM,wBAAwB,CAAA;AAiD/B;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,eAAe,EAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAC7B,SAAS,CAGX;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,WAAW,GAAG,yBAAyB,CAU7F;AA6BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,WAAW,GAClB,4BAA4B,CAiB9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,WAAW,GAAG,2BAA2B,CAiBjG;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAqB7E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GACA;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CA8BA"}