@obbyx/sdk 0.0.0-stage → 0.1.0

package/dist/seller/paywall.js

@@ -0,0 +1,372 @@
+import { decodePaymentSignatureHeader, encodePaymentRequiredHeader, encodePaymentResponseHeader, } from '@x402/core/http';
+import { CHANNEL_BASE_AA, getNetwork, isAddress, isAssetId, networkKey, parseAmount, } from '@obbyx/obyte';
+import { moduleLogger, withLogContext } from '@obbyx/obyte/logger';
+import { BATCH_SCHEME, EXACT_SCHEME, batchExtraSchema, canonical, exactExtraSchema, } from '@obbyx/x402-obyte';
+import { bindingsEqual, sha256Hex } from './binding.js';
+import { PAYMENT_IDENTIFIER, decidePaymentId, paymentIdOf, paymentIdentifierDeclaration, } from './payment-identifier.js';
+import { bodyHashOf, newQuote, offerBinding, operationFingerprint, } from './quote.js';
+const EXPOSE = 'PAYMENT-REQUIRED, PAYMENT-RESPONSE';
+export class ObytePaywall {
+    options;
+    log;
+    now;
+    constructor(options) {
+        this.options = options;
+        getNetwork(options.network);
+        if (!isAddress(options.payTo))
+            throw new Error('payTo must be a valid Obyte address');
+        if ((typeof options.secret === 'string'
+            ? Buffer.byteLength(options.secret)
+            : options.secret.length) < 32) {
+            throw new Error('secret must be at least 32 bytes');
+        }
+        this.log = moduleLogger(options.logger, 'sdk.paywall', { network: options.network });
+        this.now = options.now ?? (() => Math.floor(Date.now() / 1000));
+    }
+    /** Wraps a handler so it only runs after a settled payment. */
+    paid(route, handler) {
+        const asset = route.price.asset ?? 'base';
+        if (!isAssetId(asset))
+            throw new Error(`Invalid asset ${asset}`);
+        const amount = parseAmount(route.price.amount).toString();
+        return (req, res, next) => {
+            const requestId = String(req.get('x-request-id') ?? cryptoId());
+            withLogContext({ requestId, network: this.options.network }, () => this.handle(req, res, route, { asset, amount }, handler).catch(next));
+        };
+    }
+    async handle(req, res, route, price, handler) {
+        res.setHeader('Access-Control-Expose-Headers', EXPOSE);
+        res.setHeader('Cache-Control', 'private, no-store');
+        const header = req.get('payment-signature');
+        if (header === undefined)
+            return this.paymentRequired(req, res, route, price);
+        let payload;
+        try {
+            payload = decodePaymentSignatureHeader(header);
+        }
+        catch {
+            res.status(400).json({ error: 'invalid_payment_header' });
+            return;
+        }
+        const accepted = payload.accepted;
+        const scheme = accepted?.scheme;
+        const offered = this.schemesFor(route);
+        const extra = scheme === EXACT_SCHEME
+            ? exactExtraSchema.safeParse(accepted?.extra)
+            : scheme === BATCH_SCHEME
+                ? batchExtraSchema.safeParse(accepted?.extra)
+                : undefined;
+        const proofId = scheme === undefined ? undefined : proofIdOf(scheme, payload);
+        if (payload.x402Version !== 2 ||
+            scheme === undefined ||
+            !offered.includes(scheme) ||
+            accepted?.network !== this.options.network ||
+            accepted.asset !== price.asset ||
+            accepted.amount !== price.amount ||
+            accepted.payTo !== this.options.payTo ||
+            extra === undefined ||
+            !extra.success ||
+            proofId === undefined ||
+            (scheme === BATCH_SCHEME &&
+                extra.data.minTimeout !==
+                    this.options.batch?.minChannelTimeoutSeconds)) {
+            return this.paymentRequired(req, res, route, price, 'invalid_payment_requirements');
+        }
+        const facts = this.requestFacts(req, route);
+        const terms = this.terms(price);
+        const expected = offerBinding(this.options, scheme, extra.data, facts, terms);
+        if (!bindingsEqual(expected, extra.data.binding)) {
+            this.log.warn({ proofId }, 'payment is bound to another operation or a forged quote');
+            return this.paymentRequired(req, res, route, price, 'invalid_binding');
+        }
+        const binding = extra.data.binding;
+        const key = networkKey(getNetwork(this.options.network), scheme === EXACT_SCHEME ? 'unit' : 'voucher', proofId);
+        await withLogContext({ binding, proofId }, async () => {
+            const store = this.options.store;
+            const begun = store.begin(key, binding);
+            const { created } = begun;
+            let { record } = begun;
+            // A proof left in `serving` by a crashed process is recovered after the lease.
+            if (record.state === 'serving' &&
+                store.reclaimStale(key, this.options.servingLeaseSeconds ?? 300)) {
+                this.log.warn('recovered a payment stuck in serving (lease expired)');
+                record = store.get(key) ?? record;
+            }
+            if (!bindingsEqual(record.binding, binding)) {
+                res.status(402).json({ error: 'invalid_payment_reused' });
+                return;
+            }
+            // x402 payment-identifier: one client id = one operation. Decided AFTER
+            // the proof row exists, so a concurrent request always sees this proof
+            // as in progress (never as "absent") and cannot take the id over.
+            if (this.options.paymentIdentifier !== undefined) {
+                const decision = decidePaymentId(store, {
+                    paymentId: paymentIdOf(payload),
+                    required: this.options.paymentIdentifier.required,
+                    scopeId: (id) => `${this.options.sellerId}:${id}`,
+                    fingerprint: operationFingerprint(facts, terms),
+                    proofKey: key,
+                });
+                if (decision.kind !== 'proceed' && created)
+                    store.forget(key, 'settling');
+                if (decision.kind === 'reject') {
+                    res.status(decision.status).json({ error: decision.error });
+                    return;
+                }
+                if (decision.kind === 'replay') {
+                    const original = store.get(decision.proofKey);
+                    this.log.info('payment-identifier repeat: stored response, new payment NOT settled');
+                    return this.send(res, original?.response ?? null, original?.paymentResponse ?? null);
+                }
+            }
+            if (created && extra.data.validUntil < this.now()) {
+                store.forget(key, 'settling');
+                return this.paymentRequired(req, res, route, price, 'quote_expired');
+            }
+            switch (record.state) {
+                case 'served':
+                    this.log.info('replaying stored response for a repeated operation');
+                    return this.send(res, record.response, record.paymentResponse);
+                case 'serving':
+                    if (record.paymentResponse !== null)
+                        res.setHeader('PAYMENT-RESPONSE', record.paymentResponse);
+                    res.status(409).json({ error: 'payment_in_progress' });
+                    return;
+                case 'failed':
+                    res.status(402).json({ error: 'payment_failed' });
+                    return;
+                case 'paid_not_served':
+                    return this.serve(req, res, key, record.paymentResponse, handler);
+                case 'awaiting_settle':
+                    return this.settleServed(req, res, route, price, key, payload, accepted);
+                case 'settling':
+                    break;
+            }
+            if (route.flow === 'authorization') {
+                return this.authorize(req, res, route, price, key, payload, accepted, handler);
+            }
+            const settled = await this.settleWithWait(payload, accepted);
+            const paymentResponse = encodePaymentResponseHeader(settled);
+            if (settled.success) {
+                store.transition(key, 'settling', 'paid_not_served', { paymentResponse });
+                this.log.info({ transaction: settled.transaction }, 'payment settled');
+                return this.serve(req, res, key, paymentResponse, handler);
+            }
+            if (settled.errorReason === 'settlement_pending') {
+                this.log.info({ transaction: settled.transaction }, 'settlement pending; client should retry with the same payment');
+                res.setHeader('PAYMENT-RESPONSE', paymentResponse);
+                res.setHeader('Retry-After', '5');
+                res.status(402).json({ error: 'settlement_pending', transaction: settled.transaction });
+                return;
+            }
+            if (settled.transaction === '') {
+                // Rejected before reaching the network: the proof was not consumed.
+                store.forget(key, 'settling');
+            }
+            else {
+                store.transition(key, 'settling', 'failed', { paymentResponse });
+            }
+            this.log.warn({ reason: settled.errorReason }, 'payment failed');
+            res.setHeader('PAYMENT-RESPONSE', paymentResponse);
+            return this.paymentRequired(req, res, route, price, settled.errorReason ?? 'payment_failed');
+        });
+    }
+    /** authorization flow: verify → handler (response stored) → settle → send. */
+    async authorize(req, res, route, price, key, payload, accepted, handler) {
+        const store = this.options.store;
+        let verified;
+        try {
+            verified = await this.options.facilitator.verify(payload, accepted);
+        }
+        catch (err) {
+            this.log.warn({ err }, 'facilitator unreachable during verify');
+            store.forget(key, 'settling');
+            res.status(503).json({ error: 'facilitator_unavailable' });
+            return;
+        }
+        if (!verified.isValid) {
+            store.forget(key, 'settling');
+            return this.paymentRequired(req, res, route, price, verified.invalidReason ?? 'invalid_payment');
+        }
+        if (!store.transition(key, 'settling', 'serving')) {
+            res.status(409).json({ error: 'payment_in_progress' });
+            return;
+        }
+        let result;
+        try {
+            result = await handler(req);
+        }
+        catch (err) {
+            store.transition(key, 'serving', 'settling'); // nothing settled; the same payment may retry
+            this.log.error({ err }, 'paid handler failed before settlement');
+            res.status(500).json({ error: 'handler_failed', retry: 'same payment, same request' });
+            return;
+        }
+        store.transition(key, 'serving', 'awaiting_settle', { response: toStored(result) });
+        return this.settleServed(req, res, route, price, key, payload, accepted);
+    }
+    async settleServed(req, res, route, price, key, payload, accepted) {
+        const store = this.options.store;
+        const settled = await this.settleWithWait(payload, accepted);
+        const paymentResponse = encodePaymentResponseHeader(settled);
+        if (settled.success) {
+            store.transition(key, 'awaiting_settle', 'served', { paymentResponse });
+            const record = store.get(key);
+            this.log.info({ transaction: settled.transaction }, 'payment settled after the handler; response sent');
+            return this.send(res, record?.response ?? null, paymentResponse);
+        }
+        res.setHeader('PAYMENT-RESPONSE', paymentResponse);
+        if (settled.errorReason === 'settlement_pending') {
+            res.setHeader('Retry-After', '5');
+            res.status(402).json({ error: 'settlement_pending', transaction: settled.transaction });
+            return;
+        }
+        store.transition(key, 'awaiting_settle', 'failed', { paymentResponse });
+        this.log.warn({ reason: settled.errorReason }, 'payment failed AFTER the handler ran (authorization flow); response withheld');
+        return this.paymentRequired(req, res, route, price, settled.errorReason ?? 'payment_failed');
+    }
+    async serve(req, res, key, paymentResponse, handler) {
+        const store = this.options.store;
+        if (!store.transition(key, 'paid_not_served', 'serving')) {
+            res.status(409).json({ error: 'payment_in_progress' });
+            return;
+        }
+        let result;
+        try {
+            result = await handler(req);
+        }
+        catch (err) {
+            store.transition(key, 'serving', 'paid_not_served');
+            this.log.error({ err }, 'paid handler failed; the payment can be retried for the same operation');
+            // The payment WAS settled: tell the client (its budget must count it).
+            if (paymentResponse !== null)
+                res.setHeader('PAYMENT-RESPONSE', paymentResponse);
+            res.status(500).json({ error: 'handler_failed', retry: 'same payment, same request' });
+            return;
+        }
+        const response = toStored(result);
+        if (!store.transition(key, 'serving', 'served', { response })) {
+            this.log.error('lost the serving state while storing the response');
+        }
+        this.log.info({ status: response.status }, 'paid response served');
+        this.send(res, response, paymentResponse);
+    }
+    send(res, response, paymentResponse) {
+        if (response === null) {
+            res.status(500).json({ error: 'missing_stored_response' });
+            return;
+        }
+        if (paymentResponse !== null)
+            res.setHeader('PAYMENT-RESPONSE', paymentResponse);
+        for (const [name, value] of Object.entries(response.headers))
+            res.setHeader(name, value);
+        res.status(response.status).end(Buffer.from(response.body));
+    }
+    paymentRequired(req, res, route, price, error) {
+        const quote = newQuote(this.now(), this.options.quoteTtlSeconds ?? 300);
+        const facts = this.requestFacts(req, route);
+        const terms = this.terms(price);
+        const accepts = this.schemesFor(route).map((scheme) => ({
+            scheme,
+            network: this.options.network,
+            asset: price.asset,
+            amount: price.amount,
+            payTo: this.options.payTo,
+            maxTimeoutSeconds: this.options.maxTimeoutSeconds ?? 300,
+            extra: {
+                binding: offerBinding(this.options, scheme, quote, facts, terms),
+                ...quote,
+                // x402 §6.1: a non-default flow must be declared in the offer.
+                ...(route.flow === 'authorization' ? {} : { paymentFlow: 'upfront' }),
+                ...(scheme === BATCH_SCHEME
+                    ? {
+                        baseAa: CHANNEL_BASE_AA,
+                        minTimeout: this.options.batch?.minChannelTimeoutSeconds ?? 0,
+                    }
+                    : {}),
+            },
+        }));
+        const body = {
+            x402Version: 2,
+            ...(error === undefined ? {} : { error }),
+            resource: {
+                url: `${req.protocol}://${req.get('host') ?? 'localhost'}${req.originalUrl}`,
+                ...(route.description ? { description: route.description } : {}),
+                ...(route.mimeType ? { mimeType: route.mimeType } : {}),
+            },
+            accepts,
+            ...(this.options.paymentIdentifier
+                ? {
+                    extensions: {
+                        [PAYMENT_IDENTIFIER]: paymentIdentifierDeclaration(this.options.paymentIdentifier.required),
+                    },
+                }
+                : {}),
+        };
+        res.setHeader('PAYMENT-REQUIRED', encodePaymentRequiredHeader(body));
+        res.status(402).json(body);
+    }
+    requestFacts(req, route) {
+        return {
+            method: req.method,
+            url: req.originalUrl,
+            bodyHash: route.fingerprint ? route.fingerprint(req) : bodyHashOf(req.body),
+        };
+    }
+    terms(price) {
+        return { network: this.options.network, payTo: this.options.payTo, ...price };
+    }
+    schemesFor(route) {
+        const all = route.schemes ?? (this.options.batch ? [BATCH_SCHEME, EXACT_SCHEME] : [EXACT_SCHEME]);
+        return all.filter((s) => s === EXACT_SCHEME || this.options.batch !== undefined);
+    }
+    async settleWithWait(payload, req) {
+        const deadline = Date.now() + (this.options.settleWaitMs ?? 20_000);
+        const poll = this.options.settlePollMs ?? 2_000;
+        for (;;) {
+            let res;
+            try {
+                res = await this.options.facilitator.settle(payload, req);
+            }
+            catch (err) {
+                // Unknown outcome talking to the facilitator: keep the proof in `settling`.
+                this.log.warn({ err }, 'facilitator unreachable during settle');
+                return {
+                    success: false,
+                    errorReason: 'settlement_pending',
+                    transaction: String(payload.payload['unit']?.unit ?? ''),
+                    network: req.network,
+                };
+            }
+            if (res.errorReason !== 'settlement_pending' || Date.now() + poll > deadline)
+                return res;
+            await new Promise((r) => setTimeout(r, poll));
+        }
+    }
+}
+/** Identifies a payment proof: the unit hash (exact) or the voucher hash (batch). */
+function proofIdOf(scheme, payload) {
+    if (scheme === EXACT_SCHEME) {
+        const hash = payload.payload?.['unit']?.unit;
+        return typeof hash === 'string' ? hash : undefined;
+    }
+    const pkg = payload.payload?.['signedPackage'];
+    return pkg !== null && typeof pkg === 'object' ? sha256Hex(canonical(pkg)) : undefined;
+}
+function toStored(result) {
+    const headers = { ...(result.headers ?? {}) };
+    let body;
+    if (result.body instanceof Uint8Array)
+        body = result.body;
+    else if (typeof result.body === 'string')
+        body = Buffer.from(result.body);
+    else {
+        body = Buffer.from(JSON.stringify(result.body));
+        headers['content-type'] ??= 'application/json; charset=utf-8';
+    }
+    return { status: result.status ?? 200, headers, body };
+}
+function cryptoId() {
+    return globalThis.crypto.randomUUID();
+}
+//# sourceMappingURL=paywall.js.map

package/dist/seller/paywall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paywall.js","sourceRoot":"","sources":["../../src/seller/paywall.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EACL,eAAe,EACf,UAAU,EACV,SAAS,EACT,SAAS,EACT,UAAU,EACV,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAe,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACT,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,oBAAoB,GACrB,MAAM,YAAY,CAAC;AA+EpB,MAAM,MAAM,GAAG,oCAAoC,CAAC;AAEpD,MAAM,OAAO,YAAY;IAIM;IAHZ,GAAG,CAAS;IACZ,GAAG,CAAe;IAEnC,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACtF,IACE,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,KAAuB,EAAE,OAAoB;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;YAChE,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CACrE,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,GAAY,EACZ,GAAa,EACb,KAAuB,EACvB,KAAwC,EACxC,OAAoB;QAEpB,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;QACvD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAE9E,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAmC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GACT,MAAM,KAAK,YAAY;YACrB,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;YAC7C,CAAC,CAAC,MAAM,KAAK,YAAY;gBACvB,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9E,IACE,OAAO,CAAC,WAAW,KAAK,CAAC;YACzB,MAAM,KAAK,SAAS;YACpB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzB,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;YAC1C,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAC9B,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAChC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK;YACrC,KAAK,KAAK,SAAS;YACnB,CAAC,KAAK,CAAC,OAAO;YACd,OAAO,KAAK,SAAS;YACrB,CAAC,MAAM,KAAK,YAAY;gBACrB,KAAK,CAAC,IAAgC,CAAC,UAAU;oBAChD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,EACjD,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,yDAAyD,CAAC,CAAC;YACtF,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,MAAM,GAAG,GAAG,UAAU,CACpB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAChC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAC5C,OAAO,CACR,CAAC;QAEF,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;YAC1B,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YACvB,+EAA+E;YAC/E,IACE,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC1B,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,GAAG,CAAC,EAChE,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;gBACtE,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE;oBACtC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;oBAC/B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ;oBACjD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBACjD,WAAW,EAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC;oBAC/C,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO;oBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC1E,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;gBACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC9C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;oBACrF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAClD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YACvE,CAAC;YACD,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,KAAK,QAAQ;oBACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;oBACpE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;gBACjE,KAAK,SAAS;oBACZ,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI;wBACjC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;oBAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;oBACvD,OAAO;gBACT,KAAK,QAAQ;oBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBAClD,OAAO;gBACT,KAAK,iBAAiB;oBACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBACpE,KAAK,iBAAiB;oBACpB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC3E,KAAK,UAAU;oBACb,MAAM;YACV,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjF,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7D,MAAM,eAAe,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC1E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBACvE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;gBACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EACpC,+DAA+D,CAChE,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;gBACnD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;gBAC/B,oEAAoE;gBACpE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjE,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,SAAS,CACrB,GAAY,EACZ,GAAa,EACb,KAAuB,EACvB,KAAwC,EACxC,GAAW,EACX,OAAuB,EACvB,QAA6B,EAC7B,OAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;YAChE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC,eAAe,CACzB,GAAG,EACH,GAAG,EACH,KAAK,EACL,KAAK,EACL,QAAQ,CAAC,aAAa,IAAI,iBAAiB,CAC5C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,8CAA8C;YAC5F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,GAAY,EACZ,GAAa,EACb,KAAuB,EACvB,KAAwC,EACxC,GAAW,EACX,OAAuB,EACvB,QAA6B;QAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EACpC,kDAAkD,CACnD,CAAC;YACF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,eAAe,CAAC,CAAC;QACnE,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,EAC/B,8EAA8E,CAC/E,CAAC;QACF,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,CAAC;IAC/F,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,GAAY,EACZ,GAAa,EACb,GAAW,EACX,eAA8B,EAC9B,OAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,KAAK,CACZ,EAAE,GAAG,EAAE,EACP,wEAAwE,CACzE,CAAC;YACF,uEAAuE;YACvE,IAAI,eAAe,KAAK,IAAI;gBAAE,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5C,CAAC;IAEO,IAAI,CACV,GAAa,EACb,QAA+B,EAC/B,eAA8B;QAE9B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,eAAe,KAAK,IAAI;YAAE,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzF,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,eAAe,CACrB,GAAY,EACZ,GAAa,EACb,KAAuB,EACvB,KAAwC,EACxC,KAAc;QAEd,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,OAAO,GAA0B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAyC;YAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,GAAG;YACxD,KAAK,EAAE;gBACL,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAChE,GAAG,KAAK;gBACR,+DAA+D;gBAC/D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;gBACrE,GAAG,CAAC,MAAM,KAAK,YAAY;oBACzB,CAAC,CAAC;wBACE,MAAM,EAAE,eAAe;wBACvB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,IAAI,CAAC;qBAC9D;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAoB;YAC5B,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,QAAQ,EAAE;gBACR,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE;gBAC5E,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD;YACD,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBAChC,CAAC,CAAC;oBACE,UAAU,EAAE;wBACV,CAAC,kBAAkB,CAAC,EAAE,4BAA4B,CAChD,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CACxC;qBACF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAEO,YAAY,CAAC,GAAY,EAAE,KAAuB;QACxD,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;SAC5E,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAwC;QACpD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;IAChF,CAAC;IAEO,UAAU,CAAC,KAAuB;QACxC,MAAM,GAAG,GACP,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,OAAuB,EACvB,GAAwB;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAChD,SAAS,CAAC;YACR,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4EAA4E;gBAC5E,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;gBAChE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,oBAAoB;oBACjC,WAAW,EAAE,MAAM,CAChB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAoC,EAAE,IAAI,IAAI,EAAE,CACxE;oBACD,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,KAAK,oBAAoB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,QAAQ;gBAAE,OAAO,GAAG,CAAC;YACzF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,MAAqB,EAAE,OAAuB;IAC/D,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAI,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAoC,EAAE,IAAI,CAAC;QACjF,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC/C,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAkB;IAClC,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACtE,IAAI,IAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,YAAY,UAAU;QAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;SACrD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACrE,CAAC;QACJ,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,cAAc,CAAC,KAAK,iCAAiC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC"}

package/dist/seller/quote.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Offers ("quotes") and their binding to ONE request — shared by ObytePaywall
+ * and ObyteExactServer so both compute byte-identical bindings.
+ *
+ * binding = HMAC(secret, {sellerId, scheme, quoteId, validUntil, method, url,
+ *           bodyHash, network, asset, amount, payTo})
+ */
+export interface RequestFacts {
+    readonly method: string;
+    /** Path and query string, as requested. */
+    readonly url: string;
+    /** sha256 hex of the canonical body, or a route-specific fingerprint. */
+    readonly bodyHash: string;
+}
+export interface PaymentTerms {
+    readonly network: string;
+    readonly asset: string;
+    readonly amount: string;
+    readonly payTo: string;
+}
+export interface Quote {
+    readonly quoteId: string;
+    readonly validUntil: number;
+}
+export interface SellerKey {
+    readonly sellerId: string;
+    readonly secret: string | Uint8Array;
+}
+/** sha256 of the canonical JSON body ('' when there is none). */
+export declare function bodyHashOf(body: unknown): string;
+export declare function newQuote(now: number, ttlSeconds: number): Quote;
+export declare function offerBinding(seller: SellerKey, scheme: string, quote: Quote, request: RequestFacts, terms: PaymentTerms): string;
+/**
+ * The operation independent of the quote (method, URL, body, price, payee):
+ * what a payment-identifier is bound to.
+ */
+export declare function operationFingerprint(request: RequestFacts, terms: PaymentTerms): string;
+//# sourceMappingURL=quote.d.ts.map

package/dist/seller/quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.d.ts","sourceRoot":"","sources":["../../src/seller/quote.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CACtC;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEhD;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,KAAK,CAE/D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,YAAY,GAClB,MAAM,CAcR;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAYvF"}

package/dist/seller/quote.js

@@ -0,0 +1,39 @@
+import { canonical, computeBinding, newQuoteId, sha256Hex } from '@obbyx/x402-obyte';
+/** sha256 of the canonical JSON body ('' when there is none). */
+export function bodyHashOf(body) {
+    return sha256Hex(body === undefined ? '' : canonical(body));
+}
+export function newQuote(now, ttlSeconds) {
+    return { quoteId: newQuoteId(), validUntil: now + ttlSeconds };
+}
+export function offerBinding(seller, scheme, quote, request, terms) {
+    return computeBinding(seller.secret, {
+        sellerId: seller.sellerId,
+        scheme,
+        quoteId: quote.quoteId,
+        validUntil: quote.validUntil,
+        method: request.method,
+        url: request.url,
+        bodyHash: request.bodyHash,
+        network: terms.network,
+        asset: terms.asset,
+        amount: terms.amount,
+        payTo: terms.payTo,
+    });
+}
+/**
+ * The operation independent of the quote (method, URL, body, price, payee):
+ * what a payment-identifier is bound to.
+ */
+export function operationFingerprint(request, terms) {
+    return sha256Hex(canonical({
+        method: request.method.toUpperCase(),
+        url: request.url,
+        body: request.bodyHash,
+        network: terms.network,
+        asset: terms.asset,
+        amount: terms.amount,
+        payTo: terms.payTo,
+    }));
+}
+//# sourceMappingURL=quote.js.map

package/dist/seller/quote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.js","sourceRoot":"","sources":["../../src/seller/quote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAkCrF,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,UAAkB;IACtD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAAiB,EACjB,MAAc,EACd,KAAY,EACZ,OAAqB,EACrB,KAAmB;IAEnB,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAqB,EAAE,KAAmB;IAC7E,OAAO,SAAS,CACd,SAAS,CAAC;QACR,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,OAAO,CAAC,QAAQ;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/seller/x402-server.d.ts

@@ -0,0 +1,57 @@
+import type { AssetAmount, Network, PaymentRequirements, Price, SchemeNetworkServer, SchemePaymentRequiredContext, SchemeServerHooks } from '@x402/core/types';
+import { type Logger } from '@obbyx/obyte/logger';
+import type { ConsumedProofsStore } from './consumed-proofs.js';
+/**
+ * Obyte `exact` for the OFFICIAL x402 resource server (`@x402/core/server`,
+ * `@x402/express`, `@x402/hono`, …): a SchemeNetworkServer.
+ *
+ * - Binding (I1/I2): `enrichPaymentRequiredResponse` adds a per-request HMAC
+ *   binding + quote to every offer. On a paid request it recomputes the HMAC
+ *   from the request and the quote the client accepted; only if it matches are
+ *   those fields reused (declared in `dynamicExtraFields`), so the facilitator
+ *   then sees exactly the requirements the client signed. Otherwise a fresh
+ *   binding is issued and the facilitator refuses the payment.
+ * - One payment, one operation (I3): the official middleware keeps no
+ *   consumed-proof registry, so the scheme hooks do — `onBeforeVerify` refuses
+ *   a proof that already served a request, `onAfterSettle` marks it served.
+ *   Unlike `@obbyx/sdk`'s ObytePaywall, a repeated request gets a 402 instead
+ *   of the stored response (the official middleware cannot replay responses).
+ */
+export interface ObyteExactServerOptions {
+    readonly sellerId: string;
+    /** HMAC key for bindings (≥ 32 bytes). */
+    readonly secret: string | Uint8Array;
+    readonly proofs: ConsumedProofsStore;
+    readonly logger: Logger;
+    readonly quoteTtlSeconds?: number;
+    readonly now?: () => number;
+}
+export declare class ObyteExactServer implements SchemeNetworkServer {
+    private readonly options;
+    readonly scheme = "exact";
+    readonly defaultAssetTransferMethod = "default";
+    readonly paymentFlows: {
+        default: {
+            supported: readonly ["upfront"];
+            default: "upfront";
+        };
+    };
+    readonly dynamicExtraFields: string[];
+    readonly schemeHooks: SchemeServerHooks;
+    private readonly log;
+    private readonly now;
+    constructor(options: ObyteExactServerOptions);
+    /** `{asset, amount}` in atomic units, or "20000 bytes" / "0.00002 GBYTE". */
+    parsePrice(price: Price, network: Network): Promise<AssetAmount>;
+    getAssetDecimals(asset: string): number | undefined;
+    /** Nothing to add from /supported for exact; the per-request fields come from the enrich hook. */
+    enhancePaymentRequirements(requirements: PaymentRequirements): Promise<PaymentRequirements>;
+    /** Adds (or, for a valid paid request, re-confirms) the per-request binding and quote. */
+    enrichPaymentRequiredResponse: (ctx: SchemePaymentRequiredContext) => Promise<PaymentRequirements[]>;
+    private acceptedQuote;
+    private bindingFor;
+    /** Proof key of the payment in a hook context (undefined when malformed). */
+    private keyOf;
+    private key;
+}
+//# sourceMappingURL=x402-server.d.ts.map

package/dist/seller/x402-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-server.d.ts","sourceRoot":"","sources":["../../src/seller/x402-server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,WAAW,EACX,OAAO,EACP,mBAAmB,EACnB,KAAK,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EAClB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGhE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAwBD,qBAAa,gBAAiB,YAAW,mBAAmB;IAW9C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,QAAQ,CAAC,MAAM,WAAgB;IAC/B,QAAQ,CAAC,0BAA0B,aAAa;IAChD,QAAQ,CAAC,YAAY;;;;;MAEnB;IACF,QAAQ,CAAC,kBAAkB,WAAwC;IACnE,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEN,OAAO,EAAE,uBAAuB;IAoD7D,6EAA6E;IACvE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAmBtE,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,kGAAkG;IAC5F,0BAA0B,CAC9B,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,mBAAmB,CAAC;IAI/B,0FAA0F;IAC1F,6BAA6B,GAC3B,KAAK,4BAA4B,KAChC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmB/B;IAEF,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,UAAU;IAUlB,6EAA6E;IAC7E,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,GAAG;CAGZ"}