@parallel-protocol/mpp 0.1.4 → 0.2.0

package/README.md

@@ -41,6 +41,7 @@ Agent                        Merchant (this SDK)           Facilitator
 - The handler only runs after the credential is verified.
 - Settlement (on-chain) happens after a 2xx handler response — the agent is never charged on errors.
 - If settlement fails, the middleware returns `402` and discards the handler response.
+- If the handler does not finish within 30 seconds, the Express, Hono and Next.js adapters answer `504` and nothing is settled. Next.js also answers an empty `504` when the handler throws.
 - CORS preflight (`OPTIONS`) is always passed through without challenge.
 - The `402` challenge body also includes the `challenge` object as JSON for agents that prefer parsing the body over parsing the header.
 
@@ -49,18 +50,20 @@ Agent                        Merchant (this SDK)           Facilitator
 ## Install
 
 ```bash
-npm install @parallel-protocol/mpp
+npm install @parallel-protocol/mpp viem
 # or
-bun add @parallel-protocol/mpp
+bun add @parallel-protocol/mpp viem
 ```
 
+`viem` 2.x is a peer dependency. The public types use its `Address` type and the chain catalog loads it at runtime.
+
 Install your framework separately (all are optional peer dependencies):
 
 ```bash
 npm install express       # Express 4 or 5
 npm install next          # Next.js 14 or 15
 npm install fastify       # Fastify 4 or 5
-npm install hono          # Hono 4+
+npm install hono          # Hono 4
 ```
 
 ---
@@ -113,7 +116,7 @@ app.use(
         network: "ethereum",
         currency: "0x9B3a8f7CEC208e247d97dEE13313690977e24459",  // USDp on Ethereum
         payTo: "0xYourAddress",
-        method: "parallel",   // unlocks all routes A–L
+        method: "parallel",   // any route that delivers USDp (see Methods)
       },
     },
   }),
@@ -128,6 +131,7 @@ app.get("/api/data", (req, res) => {
 
 ```typescript
 // app/api/data/route.ts
+import { NextResponse } from "next/server";
 import { withPayment } from "@parallel-protocol/mpp/next";
 
 export const GET = withPayment(
@@ -144,7 +148,7 @@ export const GET = withPayment(
     },
   },
   async (req) => {
-    return Response.json({ data: "protected content" });
+    return NextResponse.json({ data: "protected content" });
   },
 );
 ```
@@ -153,27 +157,32 @@ export const GET = withPayment(
 
 ```typescript
 import Fastify from "fastify";
+import fp from "fastify-plugin";
 import { paymentMiddleware } from "@parallel-protocol/mpp/fastify";
 
 const app = Fastify();
 
 await app.register(
-  paymentMiddleware({
-    facilitator: { url: "https://agents.parallel.best" },
-    routes: {
-      "/api/data": {
-        price: 1000000n,   // 1 USDC as raw bigint (6 decimals → skip parsing)
-        network: "avalanche",
-        currency: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",
-        payTo: "0xYourAddress",
+  fp(
+    paymentMiddleware({
+      facilitator: { url: "https://agents.parallel.best" },
+      routes: {
+        "/api/data": {
+          price: 1000000n,   // 1 USDC as raw bigint (6 decimals, no parsing)
+          network: "avalanche",
+          currency: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",  // USDC on Avalanche
+          payTo: "0xYourAddress",
+        },
       },
-    },
-  }),
+    }),
+  ),
 );
 
 app.get("/api/data", async () => ({ data: "protected content" }));
 ```
 
+`paymentMiddleware` returns a Fastify plugin that adds `onRequest` and `onSend` hooks. Fastify keeps a plugin's hooks inside the plugin, so wrap it with [`fastify-plugin`](https://www.npmjs.com/package/fastify-plugin) (`npm install fastify-plugin`) as above. The hooks then also apply to routes declared outside it, like `/api/data` here.
+
 ---
 
 ## Configuration
@@ -191,7 +200,7 @@ interface MppMiddlewareConfig {
 
 | Field | Type | Required | Description |
 |-------|------|----------|-------------|
-| `url` | `string` | Yes | Base URL of the Parallel facilitator (e.g. `https://agents.parallel.best`). The SDK internally appends `/mpp/verify` and `/mpp/settle` to this value. |
+| `url` | `string` | Yes | Base URL of the Parallel facilitator (e.g. `https://agents.parallel.best`). The SDK internally appends `/mpp/verify` and `/mpp/settle` to this value, so give it without a trailing slash. |
 | `apiKey` | `string` | No | Reserved for future use. If provided, sent as `X-API-Key` header on facilitator requests but currently not enforced server-side. |
 
 ### `MppRouteConfig`
@@ -200,15 +209,15 @@ interface MppMiddlewareConfig {
 |-------|------|----------|-------------|
 | `price` | `string \| bigint` | Yes | Amount required. A decimal string like `"0.10"` is parsed using `decimals`. Pass a `bigint` to skip parsing. |
 | `decimals` | `number` | No | Token decimals for string price parsing. **Default: `6`** (USDC). Use `18` for USDp or sUSDp. |
-| `network` | `string` | Yes | Chain slug: `"ethereum"`, `"base"`, `"avalanche"`, `"hyperevm"`, etc. Must be in the Parallel chain catalog. |
+| `network` | `string` | Yes | Chain slug: `"ethereum"`, `"base"`, `"avalanche"` or `"hyperevm"`, the chains the facilitator settles on. Any other network raises `MppConfigError` when the middleware is created. |
 | `payTo` | `Address` | Yes | Merchant receiving address. |
-| `currency` | `Address` | Yes | ERC-20 token the payer authorizes. One token per route. |
+| `currency` | `Address` | Yes | ERC-20 token that `payTo` receives. With `method: "evm"` it is also the token the payer signs for. One token per route. |
 | `method` | `"evm" \| "parallel"` | No | **Default: `"evm"`**. Controls the credential shape agents must provide (see [Methods](#methods)). |
-| `maxTimeoutSeconds` | `number` | No | Challenge validity window in seconds. Default `300`. Informational only — the nonce TTL is enforced by the facilitator. |
+| `maxTimeoutSeconds` | `number` | No | Seconds until the challenge `expires`. Default `300`. Informational only: the facilitator enforces the `validBefore` that the payer signs. |
 | `description` | `string` | No | Human-readable description included in the challenge. |
 | `realm` | `string` | No | Optional realm identifier in the `WWW-Authenticate` header. |
 
-Route matching uses **longest prefix wins**: `/api/v1/data` matches `/api/v1` before `/api`.
+Route matching uses **longest prefix wins**, on whole path segments: `/api/v1/data` matches `/api/v1` before `/api`, and `/api/database` does not match `/api/data`.
 
 > **Note:** Unlike x402's `acceptedTokens` list, MPP charges a **single currency per route**. To accept multiple tokens, declare multiple routes.
 
@@ -218,7 +227,7 @@ Route matching uses **longest prefix wins**: `/api/v1/data` matches `/api/v1` be
 
 The `method` field controls what the agent must sign:
 
-### `"evm"` (default) — Route A only
+### `"evm"` (default): direct transfer
 
 Standard MPP `evm/authorization`. The agent provides a flat EIP-3009 authorization:
 
@@ -236,15 +245,19 @@ Standard MPP `evm/authorization`. The agent provides a flat EIP-3009 authorizati
 }
 ```
 
-Settles as Route A: a direct `transferWithAuthorization` on-chain. Maximum compatibility — payable by any MPP `evm` client.
+The facilitator requires `to` to be the challenge `recipient` and `value` to cover the challenge `amount`.
+
+Settles as a direct `transferWithAuthorization` of `currency` to `payTo`: Route A when `currency` is USDp, Route J for sUSDp and Route F for USDC. Maximum compatibility: payable by any MPP `evm` client.
+
+### `"parallel"`: any route that delivers `currency`
 
-### `"parallel"` — Routes A–L
+Parallel's extension method. The credential payload is a full `SignedPaymentPayload` (same wire format as x402). The payer can use any route below that delivers `currency` to `payTo` for at least the charged amount, except Route G, which is not available over MPP. With `currency` set to USDp, for example, routes A, E, H and L qualify.
 
-Parallel's extension method. The credential payload is a full `SignedPaymentPayload` (same wire format as x402). This unlocks all 12 facilitator routes (A–L), including:
+The facilitator routes are:
 
 - Routes A / F / J: direct transfers (USDp→USDp, USDC→USDC, sUSDp→sUSDp)
 - Routes B / D: USDp → collateral swap via Parallelizer (exact output)
-- Routes E / G: USDC → USDp or sUSDp swap via Parallelizer (exact input)
+- Routes E / G: USDC swapped via Parallelizer into USDp or sUSDp (exact input), on Base and Avalanche, where USDC is a collateral
 - Route C: USDp deposit into sUSDp savings vault
 - Routes H / I / K: sUSDp redemption (→ USDp, USDC, or other collateral)
 - Route L: partial sUSDp redeem combined with USDp
@@ -262,7 +275,8 @@ When no valid `Authorization: Payment` header is present:
 ```
 HTTP/1.1 402 Payment Required
 Content-Type: application/json
-WWW-Authenticate: Payment id="a1b2c3d4", method="evm", intent="charge", request="eyJhbW91bnQiOiIxMDAwMDAiLCJjdXJyZW5jeSI6IjB4ODMzNS4uLiIsInJlY2lwaWVudCI6IjB4TWVyY2hhbnQiLCJtZXRob2REZXRhaWxzIjp7ImNoYWluSWQiOjg0NTN9fQ", expires="2025-01-15T12:05:00.000Z", description="AI model inference"
+WWW-Authenticate: Payment id="a1b2c3d4", method="evm", intent="charge", request="eyJhbW91bnQiOiIxMDAwMDAiLCJjdXJyZW5jeSI6IjB4ODMzNS4uLiIsInJlY2lwaWVudCI6IjB4TWVyY2hhbnQiLCJkZXNjcmlwdGlvbiI6IkFJIG1vZGVsIGluZmVyZW5jZSIsIm1ldGhvZERldGFpbHMiOnsiY2hhaW5JZCI6ODQ1M319", expires="2025-01-15T12:05:00.000Z", description="AI model inference"
+access-control-expose-headers: WWW-Authenticate
 ```
 
 The `request` param is `base64url(JSON<EvmChargeRequest>)`:
@@ -287,12 +301,13 @@ The body is JSON and also includes the challenge object for agents that parse th
     "method": "evm",
     "intent": "charge",
     "request": "<base64url>",
-    "expires": "2025-01-15T12:05:00.000Z"
+    "expires": "2025-01-15T12:05:00.000Z",
+    "description": "AI model inference"
   }
 }
 ```
 
-On re-challenge (verification failed), the body also includes `{ "error": "INVALID_SIGNATURE" }`.
+When the credential uses another method, when the facilitator refuses it at verify, or when verify cannot complete, the fresh challenge also carries the error code, for example `{ "error": "INVALID_SIGNATURE" }` or `{ "error": "FACILITATOR_UNAVAILABLE" }` (see [Error codes](#error-codes)). A missing or unreadable credential gets a challenge without `error`.
 
 ### Request: `Authorization: Payment`
 
@@ -315,7 +330,7 @@ interface MppChargeCredential {
 
 ### 200 response: `Payment-Receipt`
 
-On success, the middleware sets a `Payment-Receipt` header with `base64url(JSON<MppReceipt>)`:
+On success, the middleware sets a `Payment-Receipt` header with `base64url(JSON<MppReceipt>)`, and `access-control-expose-headers: Payment-Receipt` so that browser clients can read it:
 
 ```typescript
 interface MppReceipt {
@@ -362,6 +377,9 @@ import {
   type MppSettleFailure,
   type PaymentGateResult,
   type HTTPAdapter,
+  type MiddlewareResult,
+  type PassResult,
+  type RunHandlerResult,
 
   // Wire helpers (re-exported from mpp-types)
   encodeBase64Url,
@@ -380,10 +398,10 @@ import {
 
 | Import path | Export | Framework |
 |-------------|--------|-----------|
-| `@parallel-protocol/mpp/express` | `paymentMiddleware(config)` | Express 4/5 |
-| `@parallel-protocol/mpp/next` | `withPayment(config, handler)` | Next.js 14/15 |
-| `@parallel-protocol/mpp/fastify` | `paymentMiddleware(config)` | Fastify 4/5 |
-| `@parallel-protocol/mpp/hono` | `paymentMiddleware(config)` | Hono 4+ |
+| `@parallel-protocol/mpp/express` | `paymentMiddleware(config)`, `ExpressAdapter` | Express 4/5 |
+| `@parallel-protocol/mpp/next` | `withPayment(config, handler)`, `NextAdapter` | Next.js 14/15 |
+| `@parallel-protocol/mpp/fastify` | `paymentMiddleware(config)` (a plugin, see [Fastify](#fastify)), `FastifyAdapter` | Fastify 4/5 |
+| `@parallel-protocol/mpp/hono` | `paymentMiddleware(config)`, `HonoAdapter` | Hono 4 |
 
 ---
 
@@ -413,9 +431,12 @@ if (result.type === "pass") {
   const handlerStatus = await runHandler();
 
   if (handlerStatus >= 200 && handlerStatus < 300) {
-    const settlement = await result.settle();
+    const settlement = await result.settle();  // can throw MppRuntimeError, see MppFacilitatorClient
     if (settlement.success) {
       // settlement.receipt.reference = txHash
+      // set the Payment-Receipt header to encodeBase64Url(settlement.receipt)
+    } else {
+      // settlement.error.code: discard the handler response and answer 402
     }
   }
 }
@@ -427,7 +448,7 @@ if (result.type === "pass") {
 
 ### `buildChallenge(route)`
 
-Builds an `MppChallenge` for a route. Generates a random `id`, encodes the charge request as `base64url`, and computes `expires` from `maxTimeoutSeconds`.
+Builds an `MppChallenge` for a route. Generates a random `id`, encodes the charge request as `base64url`, and computes `expires` from `maxTimeoutSeconds`. Throws `MppConfigError` when the route's `network` is not in the chain catalog.
 
 ```typescript
 import { buildChallenge, serializeChallenge } from "@parallel-protocol/mpp";
@@ -481,7 +502,7 @@ if (result.success) {
 }
 ```
 
-Both methods use a 10-second timeout. `verify` throws on any failure; `settle` returns a `MppSettleResult` union on facilitator errors and throws `MppRuntimeError` only on connectivity issues.
+Both methods use a 10-second timeout. `verify` throws `MppRuntimeError` on any failure, with the facilitator's error code as `.code` when it sent one. `settle` returns a `MppSettleResult` union when the facilitator refuses the settlement, with `SETTLEMENT_FAILED` as the code when the refusal carries none. It throws `MppRuntimeError` when the facilitator cannot be reached, does not answer in time, or answers 2xx without a valid receipt.
 
 ---
 
@@ -491,29 +512,54 @@ Both methods use a 10-second timeout. `verify` throws on any failure; `settle` r
 
 | Error class | When |
 |-------------|------|
-| `MppConfigError` | Invalid config at startup (bad `payTo`, bad `currency`, unknown `network`, invalid facilitator URL) |
-| `MppRuntimeError` | Runtime failure; `.code` is one of the values below |
+| `MppConfigError` | Invalid config at startup, when the middleware is created: for example no routes, a bad `price`, `payTo` or `currency`, a `network` other than `ethereum`, `base`, `avalanche` or `hyperevm`, or a facilitator URL that does not parse |
+| `MppRuntimeError` | Thrown by `MppFacilitatorClient`. `.code` is one of the SDK codes below, or the facilitator's own code |
 
-| `MppRuntimeError.code` | Meaning |
-|------------------------|---------|
-| `FACILITATOR_UNAVAILABLE` | Facilitator timed out (10s) or returned a non-JSON error |
-| `FACILITATOR_INVALID_RESPONSE` | Facilitator returned an unexpected response shape |
-| `INVALID_CREDENTIAL` | Credential could not be parsed or failed schema validation |
-| `METHOD_MISMATCH` | Credential `challenge.method` doesn't match the route's configured method |
+| `MPP_ERROR_CODES` | Meaning |
+|-------------------|---------|
+| `FACILITATOR_UNAVAILABLE` | The facilitator could not be reached, did not answer within 10 seconds, or answered 2xx with a body that is not JSON. `verify` also uses it for a refusal that carries no error code |
+| `FACILITATOR_INVALID_RESPONSE` | The facilitator answered 2xx with something other than `{ "valid": true }` at verify, or other than a receipt at settle |
+| `METHOD_MISMATCH` | The credential's `challenge.method` is not the route's `method`. The middleware returns it in the 402 body and does not throw it |
+| `INVALID_CREDENTIAL` | Not emitted. A credential that cannot be read gets a challenge without `error` |
 
 ### Propagated from the facilitator
 
-When the facilitator rejects a credential, its error code is forwarded as the `error` field in the re-issued 402 body:
+When the facilitator refuses a credential at verify, its error code is forwarded as the `error` field in the re-issued 402 body:
 
 | Code | Meaning |
 |------|---------|
+| `INVALID_PAYLOAD` | The credential, its charge request or its payload is malformed, or the payload does not fit its route |
 | `INVALID_SIGNATURE` | EIP-712 signature recovery failed |
 | `INVALID_NONCE` | Nonce already used (replay detected) |
 | `PAYMENT_EXPIRED` | `validBefore` has passed |
 | `INSUFFICIENT_AMOUNT` | Signed amount < required amount |
-| `NETWORK_MISMATCH` | Payload chain ≠ route config chain |
-| `RATE_LIMIT_EXCEEDED` | Signer exceeded the hourly transaction limit |
-| `PARALLELIZER_PAUSED` | On-chain router temporarily paused (swap routes only) |
+| `RECIPIENT_MISMATCH` | The signed recipient is not the challenge `recipient` |
+| `ASSET_MISMATCH` | The payment does not deliver the route's `currency` |
+| `NETWORK_MISMATCH` | The facilitator does not support this chain, or a token or contract the payment needs is missing on it |
+| `PAYMENT_METHOD_NOT_SUPPORTED` | No settlement route matches this payment on this chain |
+| `COLLATERAL_NOT_SUPPORTED` | The swap output is not a collateral accepted on this chain |
+| `RATE_LIMIT_EXCEEDED` | The payer reached the facilitator's hourly limit of verified payments |
+| `PARALLELIZER_PAUSED` | The Parallelizer has closed the swap the payment needs, or its state could not be read. Nothing was taken. Pay with another token, or retry later |
+| `SAVINGS_PAUSED` | The sUSDp savings vault the payment deposits into or redeems from is paused, or its state could not be read. Nothing was taken. Pay with another token, or retry later |
+| `SERVICE_UNAVAILABLE` | The facilitator could not reach its storage or the chain. Retry later |
+
+Settlement failures are not forwarded to the agent. The facilitator's code is available as `error.code` on the result of `settle()`, from `createMppPaymentGate` or `MppFacilitatorClient`. Settlement can return some of the verify codes above. Its own codes include:
+
+| Code | Meaning |
+|------|---------|
+| `PAYMENT_NOT_VERIFIED` | No verified payment matches this credential, or it already failed to settle. After `AUTHORIZATION_USED`, `RECEIPT_UNAVAILABLE` or `SUBMISSION_FAILED`, a repeated settle gets that code again instead. The payer must sign a new payment |
+| `PAYMENT_EXPIRED` | The authorization expired before settlement |
+| `INSUFFICIENT_BALANCE` | The payer's balance is below the signed amount |
+| `AUTHORIZATION_USED` | The authorization nonce is no longer usable on-chain. This facilitator did not settle it |
+| `PARALLELIZER_PAUSED` | The Parallelizer has closed this swap, or its state could not be read. No tokens moved, but the payment may still settle until its authorization expires |
+| `SAVINGS_PAUSED` | The sUSDp savings vault is paused, or its state could not be read. No tokens moved, but the payment may still settle until its authorization expires |
+| `RELAYER_UNAVAILABLE` | The facilitator cannot submit transactions for now |
+| `SETTLE_IN_PROGRESS` | Another settlement of this payment is running. Retry shortly to get its outcome |
+| `TX_REVERTED` | The transaction reverted. The payment did not settle |
+| `SWAP_PRICE_MOVED` | The Parallelizer refused the swap: its price or fee moved, between signing and settlement, beyond the margin signed with the payment. Nothing was taken, and the facilitator will not settle it. The payer must sign a new payment |
+| `SWAP_UNAVAILABLE` | The Parallelizer refused the swap because it cannot make it now: the swap closed since the facilitator checked it, a cap or a maximum fee is reached, the amount exceeds what it can release, or a price feed is stale. Nothing was taken, and the facilitator will not settle it. The payer can pay with another token, or later |
+| `RECEIPT_UNAVAILABLE` | A transaction was sent but its outcome is unknown. It may still settle |
+| `SUBMISSION_FAILED` | The settle failed. When the message says the outcome is unknown, a transaction may have been sent, or the facilitator could not read whether the authorization was used, and the payment may have settled or may still settle |
 
 ---
 
@@ -540,13 +586,13 @@ import { chainIdFromSlug, matchRoute, parsePrice } from "@parallel-protocol/mpp"
 | Credential header | `payment-signature: <base64>` | `Authorization: Payment <base64url>` |
 | Receipt header | `payment-response: <base64>` | `Payment-Receipt: <base64url>` |
 | Token per route | list (`acceptedTokens`) | single (`currency`) |
-| Default decimals | 18 | 6 |
+| Decimals | per accepted token (chains catalog) | 6 (default) |
 | Auth standard | x402 / Coinbase | RFC 9110 `Payment` auth-scheme |
 | Facilitator endpoints | `/x402/verify`, `/x402/settle` | `/mpp/verify`, `/mpp/settle` |
-| On-chain routes | A–L | A–L (same) |
+| On-chain routes | A to L, and U for metered `upto` payments | A to L, except G |
 | Cashback | Yes | Yes (same) |
 
-Both protocols share the same facilitator backend, the same `SignedPaymentPayload` authorization format, and the same settlement routes.
+Both protocols settle through the same facilitator backend and its routes. The `parallel` method carries the same `SignedPaymentPayload` as x402, and the `evm` method a plain EIP-3009 authorization.
 
 ---
 
@@ -557,7 +603,7 @@ Both protocols share the same facilitator backend, the same `SignedPaymentPayloa
 | [`@parallel-protocol/mpp-types`](../mpp-types) | Wire-format Zod schemas + `mppCredentialToPayment()` helper |
 | [`@parallel-protocol/x402`](../x402) | HTTP-402 payment middleware (x402 / Coinbase protocol) |
 | [`@parallel-protocol/payment-core`](../payment-core) | EIP-3009 signing helpers shared by x402 and MPP |
-| [`@parallel-protocol/chains`](../chains) | 25-chain catalog with contract addresses |
+| [`@parallel-protocol/chains`](../chains) | Chain catalog with chain ids and contract addresses |
 
 ---
 

package/dist/{chunk-HTUIO2MB.js → chunk-CQ62EEHN.js}

@@ -1,4 +1,4 @@
-import { CHAIN_NAMES, CHAINS_STATIC } from '@parallel-protocol/chains';
+import { CHAIN_NAMES, CHAINS_STATIC, isActiveParallelizerChain, ACTIVE_PARALLELIZER_CHAINS } from '@parallel-protocol/chains';
 import { MppChargeCredentialSchema, MppVerifyResponseSchema, MppReceiptSchema, encodeBase64Url } from '@parallel-protocol/mpp-types';
 import { z } from 'zod';
 
@@ -212,7 +212,11 @@ var facilitatorConfigSchema = z.object({
 var routeConfigSchema = z.object({
   price: priceSchema,
   decimals: z.number().int().nonnegative().optional(),
-  network: z.string().min(1, "Network is required"),
+  // The facilitator settles on the chains whose Parallelizer is live.
+  network: z.string().min(1, "Network is required").refine(
+    isActiveParallelizerChain,
+    `network must be one of the chains the facilitator settles on: ${ACTIVE_PARALLELIZER_CHAINS.join(", ")}`
+  ),
   payTo: ethereumAddressSchema,
   currency: ethereumAddressSchema,
   method: z.enum(["evm", "parallel"]).optional(),

package/dist/{chunk-ILKUNJBE.cjs → chunk-MEDPOLT4.cjs}

@@ -214,7 +214,11 @@ var facilitatorConfigSchema = zod.z.object({
 var routeConfigSchema = zod.z.object({
   price: priceSchema,
   decimals: zod.z.number().int().nonnegative().optional(),
-  network: zod.z.string().min(1, "Network is required"),
+  // The facilitator settles on the chains whose Parallelizer is live.
+  network: zod.z.string().min(1, "Network is required").refine(
+    chains.isActiveParallelizerChain,
+    `network must be one of the chains the facilitator settles on: ${chains.ACTIVE_PARALLELIZER_CHAINS.join(", ")}`
+  ),
   payTo: ethereumAddressSchema,
   currency: ethereumAddressSchema,
   method: zod.z.enum(["evm", "parallel"]).optional(),

package/dist/express.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkRNM3RDKR_cjs = require('./chunk-RNM3RDKR.cjs');
-var chunkILKUNJBE_cjs = require('./chunk-ILKUNJBE.cjs');
+var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
 
 // src/express/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({
@@ -113,7 +113,7 @@ var ExpressAdapter = class {
 
 // src/express/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkILKUNJBE_cjs.createMppPaymentMiddleware(config);
+  const middleware = chunkMEDPOLT4_cjs.createMppPaymentMiddleware(config);
   return async (req, res, next) => {
     const result = await middleware(new ExpressAdapter(req, res, next));
     if ("pass" in result) {

package/dist/express.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-DXHOWEAQ.js';
-import { createMppPaymentMiddleware } from './chunk-HTUIO2MB.js';
+import { createMppPaymentMiddleware } from './chunk-CQ62EEHN.js';
 
 // src/express/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({

package/dist/fastify.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkILKUNJBE_cjs = require('./chunk-ILKUNJBE.cjs');
+var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
 var mppTypes = require('@parallel-protocol/mpp-types');
 
 // src/fastify/adapter.ts
@@ -27,7 +27,7 @@ var FastifyAdapter = class {
 // src/fastify/index.ts
 function paymentMiddleware(config) {
   return async (fastify) => {
-    const gate = chunkILKUNJBE_cjs.createMppPaymentGate(config);
+    const gate = chunkMEDPOLT4_cjs.createMppPaymentGate(config);
     const settleMap = /* @__PURE__ */ new WeakMap();
     fastify.addHook("onRequest", async (req, reply) => {
       const gateResult = await gate(new FastifyAdapter(req));
@@ -43,7 +43,7 @@ function paymentMiddleware(config) {
     });
     fastify.addHook("onSend", async (req, reply, payload) => {
       const settle = settleMap.get(req);
-      if (!settle || !chunkILKUNJBE_cjs.isSuccessStatus(reply.statusCode)) {
+      if (!settle || !chunkMEDPOLT4_cjs.isSuccessStatus(reply.statusCode)) {
         return payload;
       }
       let settled = false;
@@ -60,7 +60,7 @@ function paymentMiddleware(config) {
       } catch {
       }
       if (!settled) {
-        const body = JSON.stringify(chunkILKUNJBE_cjs.SETTLE_FAILURE_BODY);
+        const body = JSON.stringify(chunkMEDPOLT4_cjs.SETTLE_FAILURE_BODY);
         reply.status(402);
         reply.header("Content-Type", "application/json");
         reply.header("Content-Length", Buffer.byteLength(body));

package/dist/fastify.js

@@ -1,4 +1,4 @@
-import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-HTUIO2MB.js';
+import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-CQ62EEHN.js';
 import { encodeBase64Url } from '@parallel-protocol/mpp-types';
 
 // src/fastify/adapter.ts

package/dist/hono.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkRNM3RDKR_cjs = require('./chunk-RNM3RDKR.cjs');
-var chunkILKUNJBE_cjs = require('./chunk-ILKUNJBE.cjs');
+var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
 
 // src/hono/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({
@@ -58,7 +58,7 @@ var HonoAdapter = class {
 
 // src/hono/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkILKUNJBE_cjs.createMppPaymentMiddleware(config);
+  const middleware = chunkMEDPOLT4_cjs.createMppPaymentMiddleware(config);
   return async (c, next) => {
     const result = await middleware(new HonoAdapter(c, next));
     if ("pass" in result) {

package/dist/hono.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-DXHOWEAQ.js';
-import { createMppPaymentMiddleware } from './chunk-HTUIO2MB.js';
+import { createMppPaymentMiddleware } from './chunk-CQ62EEHN.js';
 
 // src/hono/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({

package/dist/index.cjs

@@ -1,57 +1,57 @@
 'use strict';
 
-var chunkILKUNJBE_cjs = require('./chunk-ILKUNJBE.cjs');
+var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
 var mppTypes = require('@parallel-protocol/mpp-types');
 
 
 
 Object.defineProperty(exports, "MPP_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.MPP_ERROR_CODES; }
+  get: function () { return chunkMEDPOLT4_cjs.MPP_ERROR_CODES; }
 });
 Object.defineProperty(exports, "MppConfigError", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.MppConfigError; }
+  get: function () { return chunkMEDPOLT4_cjs.MppConfigError; }
 });
 Object.defineProperty(exports, "MppFacilitatorClient", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.MppFacilitatorClient; }
+  get: function () { return chunkMEDPOLT4_cjs.MppFacilitatorClient; }
 });
 Object.defineProperty(exports, "MppRuntimeError", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.MppRuntimeError; }
+  get: function () { return chunkMEDPOLT4_cjs.MppRuntimeError; }
 });
 Object.defineProperty(exports, "buildChallenge", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.buildChallenge; }
+  get: function () { return chunkMEDPOLT4_cjs.buildChallenge; }
 });
 Object.defineProperty(exports, "chainIdFromSlug", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.chainIdFromSlug; }
+  get: function () { return chunkMEDPOLT4_cjs.chainIdFromSlug; }
 });
 Object.defineProperty(exports, "createMppPaymentGate", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.createMppPaymentGate; }
+  get: function () { return chunkMEDPOLT4_cjs.createMppPaymentGate; }
 });
 Object.defineProperty(exports, "createMppPaymentMiddleware", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.createMppPaymentMiddleware; }
+  get: function () { return chunkMEDPOLT4_cjs.createMppPaymentMiddleware; }
 });
 Object.defineProperty(exports, "matchRoute", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.matchRoute; }
+  get: function () { return chunkMEDPOLT4_cjs.matchRoute; }
 });
 Object.defineProperty(exports, "parseAuthorizationHeader", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.parseAuthorizationHeader; }
+  get: function () { return chunkMEDPOLT4_cjs.parseAuthorizationHeader; }
 });
 Object.defineProperty(exports, "parsePrice", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.parsePrice; }
+  get: function () { return chunkMEDPOLT4_cjs.parsePrice; }
 });
 Object.defineProperty(exports, "serializeChallenge", {
   enumerable: true,
-  get: function () { return chunkILKUNJBE_cjs.serializeChallenge; }
+  get: function () { return chunkMEDPOLT4_cjs.serializeChallenge; }
 });
 Object.defineProperty(exports, "decodeBase64Url", {
   enumerable: true,

package/dist/index.js

@@ -1,2 +1,2 @@
-export { MPP_ERROR_CODES, MppConfigError, MppFacilitatorClient, MppRuntimeError, buildChallenge, chainIdFromSlug, createMppPaymentGate, createMppPaymentMiddleware, matchRoute, parseAuthorizationHeader, parsePrice, serializeChallenge } from './chunk-HTUIO2MB.js';
+export { MPP_ERROR_CODES, MppConfigError, MppFacilitatorClient, MppRuntimeError, buildChallenge, chainIdFromSlug, createMppPaymentGate, createMppPaymentMiddleware, matchRoute, parseAuthorizationHeader, parsePrice, serializeChallenge } from './chunk-CQ62EEHN.js';
 export { decodeBase64Url, encodeBase64Url } from '@parallel-protocol/mpp-types';

package/dist/next.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkRNM3RDKR_cjs = require('./chunk-RNM3RDKR.cjs');
-var chunkILKUNJBE_cjs = require('./chunk-ILKUNJBE.cjs');
+var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
 var mppTypes = require('@parallel-protocol/mpp-types');
 var server = require('next/server');
 
@@ -27,7 +27,7 @@ var NextAdapter = class {
 
 // src/next/index.ts
 function withPayment(config, handler) {
-  const gate = chunkILKUNJBE_cjs.createMppPaymentGate(config);
+  const gate = chunkMEDPOLT4_cjs.createMppPaymentGate(config);
   return async (req) => {
     const gateResult = await gate(new NextAdapter(req));
     if (gateResult.type === "pass") {
@@ -52,7 +52,7 @@ function withPayment(config, handler) {
     } catch {
       return new server.NextResponse(null, { status: 504 });
     }
-    if (chunkILKUNJBE_cjs.isSuccessStatus(response.status)) {
+    if (chunkMEDPOLT4_cjs.isSuccessStatus(response.status)) {
       try {
         const settleResponse = await gateResult.settle();
         if (settleResponse.success) {
@@ -69,7 +69,7 @@ function withPayment(config, handler) {
         }
       } catch {
       }
-      return server.NextResponse.json(chunkILKUNJBE_cjs.SETTLE_FAILURE_BODY, { status: 402 });
+      return server.NextResponse.json(chunkMEDPOLT4_cjs.SETTLE_FAILURE_BODY, { status: 402 });
     }
     return response;
   };

package/dist/next.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-DXHOWEAQ.js';
-import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-HTUIO2MB.js';
+import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-CQ62EEHN.js';
 import { encodeBase64Url } from '@parallel-protocol/mpp-types';
 import { NextResponse } from 'next/server';
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@parallel-protocol/mpp",
-	"version": "0.1.4",
+	"version": "0.2.0",
 	"description": "Parallel Protocol MPP (Machine Payments Protocol) merchant middleware — the Payment HTTP auth-scheme dance (402 challenge → credential → receipt) over the facilitator's /mpp endpoints",
 	"author": "Parallel Protocol <contact@parallel.best>",
 	"repository": "github:parallel-protocol/sdk-merchant",
@@ -86,7 +86,7 @@
 		"viem": "^2.0.0",
 		"express": "^4.0.0 || ^5.0.0",
 		"next": "^14.0.0 || ^15.0.0",
-		"fastify": "^4.0.0 || ^5.0.0",
+		"fastify": "^5.12.7",
 		"hono": "^4.0.0"
 	},
 	"peerDependenciesMeta": {
@@ -109,7 +109,7 @@
 	"devDependencies": {
 		"@types/express": "^5.0.1",
 		"@types/node": "^22.0.0",
-		"fastify": "^5.0.0",
+		"fastify": "^5.12.7",
 		"hono": "^4.0.0",
 		"next": "^15.0.0",
 		"tsup": "^8.0.0",
@@ -118,7 +118,7 @@
 		"vitest": "^4.0.14"
 	},
 	"dependencies": {
-		"@parallel-protocol/chains": "^0.5.0",
+		"@parallel-protocol/chains": "^0.5.1",
 		"@parallel-protocol/mpp-types": "^0.1.5",
 		"zod": "^4.4.3"
 	}