@parallel-protocol/mpp 0.2.1 → 0.2.2

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { MppChargeCredential } from '@parallel-protocol/mpp-types';
 export { MppChargeCredential, MppReceipt, decodeBase64Url, encodeBase64Url } from '@parallel-protocol/mpp-types';
-import { a as MppRouteConfig, b as MppFacilitatorConfig, c as MppSettleResult, M as MppMiddlewareConfig, H as HTTPAdapter, P as PaymentGateResult, d as MiddlewareResult, e as PassResult } from './types-CCE-FI8i.js';
-export { f as MppSettleFailure, g as MppSettleSuccess, R as RunHandlerResult } from './types-CCE-FI8i.js';
+import { a as MppRouteConfig, b as MppFacilitatorConfig, c as MppSettleResult, M as MppMiddlewareConfig, H as HTTPAdapter, P as PaymentGateResult, d as MiddlewareResult, e as PassResult } from './types-BSzM92sD.js';
+export { f as MppSettleFailure, g as MppSettleSuccess, R as RunHandlerResult } from './types-BSzM92sD.js';
 import 'viem';
 
 /** The challenge echoed back inside a credential (derived — mpp-types has no standalone export). */
@@ -39,6 +39,8 @@ declare const MPP_ERROR_CODES: {
     readonly FACILITATOR_UNAVAILABLE: "FACILITATOR_UNAVAILABLE";
     readonly FACILITATOR_INVALID_RESPONSE: "FACILITATOR_INVALID_RESPONSE";
     readonly INVALID_CREDENTIAL: "INVALID_CREDENTIAL";
+    /** A path with `.` or `..` segments on a paid route, refused with 400. */
+    readonly INVALID_PATH: "INVALID_PATH";
     readonly METHOD_MISMATCH: "METHOD_MISMATCH";
 };
 type MppErrorCode = (typeof MPP_ERROR_CODES)[keyof typeof MPP_ERROR_CODES];
@@ -50,13 +52,14 @@ declare class MppRuntimeError extends Error {
     constructor(code: string);
 }
 
-declare function createMppPaymentGate(config: MppMiddlewareConfig): (adapter: Pick<HTTPAdapter, "getHeader" | "getPath" | "getUrl" | "getMethod">) => Promise<PaymentGateResult>;
+declare function createMppPaymentGate(config: MppMiddlewareConfig): (adapter: Pick<HTTPAdapter, "getHeader" | "getPath" | "getFullPath" | "getUrl" | "getMethod">) => Promise<PaymentGateResult>;
 declare function createMppPaymentMiddleware(config: MppMiddlewareConfig): (adapter: HTTPAdapter) => Promise<MiddlewareResult | PassResult>;
 
 /** Parse a human price ("0.01") or pass a bigint through. Default 6 decimals (stablecoins). */
 declare function parsePrice(price: string | bigint, decimals?: number): bigint;
 /** Resolve an EVM chain id from a chain slug via the static catalogue. */
 declare function chainIdFromSlug(network: string): number | undefined;
+/** The route a request path falls under, see `findRoute`. */
 declare function matchRoute<T>(path: string, routes: Record<string, T>): T | undefined;
 
 export { HTTPAdapter, MPP_ERROR_CODES, MiddlewareResult, type MppChallenge, MppConfigError, type MppErrorCode, MppFacilitatorClient, MppFacilitatorConfig, MppMiddlewareConfig, MppRouteConfig, MppRuntimeError, MppSettleResult, PassResult, PaymentGateResult, buildChallenge, chainIdFromSlug, createMppPaymentGate, createMppPaymentMiddleware, matchRoute, parseAuthorizationHeader, parsePrice, serializeChallenge };

package/dist/index.js

@@ -1,2 +1,2 @@
-export { MPP_ERROR_CODES, MppConfigError, MppFacilitatorClient, MppRuntimeError, buildChallenge, chainIdFromSlug, createMppPaymentGate, createMppPaymentMiddleware, matchRoute, parseAuthorizationHeader, parsePrice, serializeChallenge } from './chunk-CQ62EEHN.js';
+export { MPP_ERROR_CODES, MppConfigError, MppFacilitatorClient, MppRuntimeError, buildChallenge, chainIdFromSlug, createMppPaymentGate, createMppPaymentMiddleware, matchRoute, parseAuthorizationHeader, parsePrice, serializeChallenge } from './chunk-BYNIZG5S.js';
 export { decodeBase64Url, encodeBase64Url } from '@parallel-protocol/mpp-types';

package/dist/next.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkRNM3RDKR_cjs = require('./chunk-RNM3RDKR.cjs');
-var chunkMEDPOLT4_cjs = require('./chunk-MEDPOLT4.cjs');
+var chunk76KPBYGA_cjs = require('./chunk-76KPBYGA.cjs');
 var mppTypes = require('@parallel-protocol/mpp-types');
 var server = require('next/server');
 
@@ -27,11 +27,12 @@ var NextAdapter = class {
 
 // src/next/index.ts
 function withPayment(config, handler) {
-  const gate = chunkMEDPOLT4_cjs.createMppPaymentGate(config);
+  const gate = chunk76KPBYGA_cjs.createMppPaymentGate(config);
   return async (req) => {
     const gateResult = await gate(new NextAdapter(req));
     if (gateResult.type === "pass") {
-      return handler(req);
+      if (!gateResult.preflight) return handler(req);
+      return new server.NextResponse(null, { status: 204 });
     }
     if (gateResult.type === "error") {
       return new server.NextResponse(JSON.stringify(gateResult.result.body), {
@@ -52,7 +53,7 @@ function withPayment(config, handler) {
     } catch {
       return new server.NextResponse(null, { status: 504 });
     }
-    if (chunkMEDPOLT4_cjs.isSuccessStatus(response.status)) {
+    if (chunk76KPBYGA_cjs.isSuccessStatus(response.status)) {
       try {
         const settleResponse = await gateResult.settle();
         if (settleResponse.success) {
@@ -69,7 +70,9 @@ function withPayment(config, handler) {
         }
       } catch {
       }
-      return server.NextResponse.json(chunkMEDPOLT4_cjs.SETTLE_FAILURE_BODY, { status: 402 });
+      response.body?.cancel().catch(() => {
+      });
+      return server.NextResponse.json(chunk76KPBYGA_cjs.SETTLE_FAILURE_BODY, { status: 402 });
     }
     return response;
   };

package/dist/next.d.cts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { H as HTTPAdapter, M as MppMiddlewareConfig } from './types-CCE-FI8i.cjs';
+import { H as HTTPAdapter, M as MppMiddlewareConfig } from './types-BSzM92sD.cjs';
 import '@parallel-protocol/mpp-types';
 import 'viem';
 

package/dist/next.d.ts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { H as HTTPAdapter, M as MppMiddlewareConfig } from './types-CCE-FI8i.js';
+import { H as HTTPAdapter, M as MppMiddlewareConfig } from './types-BSzM92sD.js';
 import '@parallel-protocol/mpp-types';
 import 'viem';
 

package/dist/next.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-DXHOWEAQ.js';
-import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-CQ62EEHN.js';
+import { createMppPaymentGate, isSuccessStatus, SETTLE_FAILURE_BODY } from './chunk-BYNIZG5S.js';
 import { encodeBase64Url } from '@parallel-protocol/mpp-types';
 import { NextResponse } from 'next/server';
 
@@ -29,7 +29,8 @@ function withPayment(config, handler) {
   return async (req) => {
     const gateResult = await gate(new NextAdapter(req));
     if (gateResult.type === "pass") {
-      return handler(req);
+      if (!gateResult.preflight) return handler(req);
+      return new NextResponse(null, { status: 204 });
     }
     if (gateResult.type === "error") {
       return new NextResponse(JSON.stringify(gateResult.result.body), {
@@ -67,6 +68,8 @@ function withPayment(config, handler) {
         }
       } catch {
       }
+      response.body?.cancel().catch(() => {
+      });
       return NextResponse.json(SETTLE_FAILURE_BODY, { status: 402 });
     }
     return response;

package/dist/{types-CCE-FI8i.d.cts → types-BSzM92sD.d.cts}

@@ -44,6 +44,8 @@ interface HTTPAdapter {
     getHeader(name: string): string | undefined;
     getMethod(): string;
     getPath(): string;
+    /** The path with the prefix a mount stripped from `getPath()`. */
+    getFullPath?(): string;
     getUrl(): string;
     runHandler?(): Promise<RunHandlerResult>;
 }
@@ -67,9 +69,12 @@ interface MiddlewareResult {
 interface PassResult {
     pass: true;
     handlerRan?: true;
+    /** An OPTIONS on a paid route: send only the handler's status and CORS headers. */
+    preflight?: true;
 }
 type PaymentGateResult = {
     type: "pass";
+    preflight?: true;
 } | {
     type: "error";
     result: MiddlewareResult;

package/dist/{types-CCE-FI8i.d.ts → types-BSzM92sD.d.ts}

@@ -44,6 +44,8 @@ interface HTTPAdapter {
     getHeader(name: string): string | undefined;
     getMethod(): string;
     getPath(): string;
+    /** The path with the prefix a mount stripped from `getPath()`. */
+    getFullPath?(): string;
     getUrl(): string;
     runHandler?(): Promise<RunHandlerResult>;
 }
@@ -67,9 +69,12 @@ interface MiddlewareResult {
 interface PassResult {
     pass: true;
     handlerRan?: true;
+    /** An OPTIONS on a paid route: send only the handler's status and CORS headers. */
+    preflight?: true;
 }
 type PaymentGateResult = {
     type: "pass";
+    preflight?: true;
 } | {
     type: "error";
     result: MiddlewareResult;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@parallel-protocol/mpp",
-	"version": "0.2.1",
+	"version": "0.2.2",
 	"description": "Parallel Protocol MPP (Machine Payments Protocol) merchant middleware — the Payment HTTP auth-scheme dance (402 challenge → credential → receipt) over the facilitator's /mpp endpoints",
 	"author": "Parallel Protocol <contact@parallel.best>",
 	"repository": "github:parallel-protocol/sdk-merchant",
@@ -109,6 +109,7 @@
 	"devDependencies": {
 		"@types/express": "^5.0.1",
 		"@types/node": "^22.0.0",
+		"express": "^5.3.0",
 		"fastify": "^5.12.7",
 		"hono": "^4.0.0",
 		"next": "^15.0.0",