@reapp-sdk/express-middleware 0.1.0 → 0.2.0

package/dist/bound-store.js

@@ -0,0 +1,62 @@
+function freezeResponse(response) {
+    return Object.freeze({ ...response });
+}
+function freezeExecuting(record, executionId, startedAt) {
+    return Object.freeze({
+        key: record.key,
+        proofDigest: record.proofDigest,
+        payment: Object.freeze({ ...record.payment }),
+        executionId,
+        startedAt,
+        state: "executing",
+    });
+}
+/** Process-local reference store. Production and restart drills need a durable shared store. */
+export class InMemoryBoundRedemptionStore {
+    records = new Map();
+    lookup(key, proofDigest) {
+        const record = this.records.get(key);
+        if (!record)
+            return { kind: "missing" };
+        if (record.proofDigest !== proofDigest)
+            return { kind: "conflict" };
+        return { kind: record.state, record };
+    }
+    claim(record, executionId, startedAt) {
+        const existing = this.records.get(record.key);
+        if (existing) {
+            if (existing.proofDigest !== record.proofDigest)
+                return { kind: "conflict" };
+            return { kind: existing.state, record: existing };
+        }
+        const claimed = freezeExecuting(record, executionId, startedAt);
+        this.records.set(record.key, claimed);
+        return { kind: "claimed", record: claimed };
+    }
+    complete(completion) {
+        const existing = this.records.get(completion.key);
+        if (!existing
+            || existing.proofDigest !== completion.proofDigest
+            || existing.executionId !== completion.executionId) {
+            return { kind: "conflict" };
+        }
+        if (existing.state === "completed") {
+            const same = existing.response.status === completion.response.status
+                && existing.response.contentType === completion.response.contentType
+                && existing.response.bodyBase64 === completion.response.bodyBase64
+                && existing.response.bodySha256 === completion.response.bodySha256;
+            return same ? { kind: "completed", record: existing } : { kind: "conflict" };
+        }
+        const completed = Object.freeze({
+            ...existing,
+            state: "completed",
+            response: freezeResponse(completion.response),
+        });
+        this.records.set(completion.key, completed);
+        return { kind: "completed", record: completed };
+    }
+    get(key) {
+        return this.records.get(key);
+    }
+}
+//# sourceMappingURL=bound-store.js.map

package/dist/bound-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bound-store.js","sourceRoot":"","sources":["../src/bound-store.ts"],"names":[],"mappings":"AAkEA,SAAS,cAAc,CAAC,QAA2C;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CACtB,MAAuC,EACvC,WAAmB,EACnB,SAAiB;IAEjB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7C,WAAW;QACX,SAAS;QACT,KAAK,EAAE,WAAoB;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,4BAA4B;IACtB,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE5E,MAAM,CAAC,GAAW,EAAE,WAAmB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CACH,MAAuC,EACvC,WAAmB,EACnB,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED,QAAQ,CAAC,UAA+C;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClD,IACE,CAAC,QAAQ;eACN,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW;eAC/C,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,EAClD,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,MAAM;mBAC/D,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,UAAU,CAAC,QAAQ,CAAC,WAAW;mBACjE,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,QAAQ,CAAC,UAAU;mBAC/D,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,SAAS,GAAkC,MAAM,CAAC,MAAM,CAAC;YAC7D,GAAG,QAAQ;YACX,KAAK,EAAE,WAAoB;YAC3B,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/bound.d.ts

@@ -0,0 +1,66 @@
+import { BOUND_PAYMENT_SCHEME, type BoundPaymentChallengeV2 } from "@reapp-sdk/core";
+import { type NetworkConfig } from "@reapp-sdk/stellar";
+import type { RequestHandler, Response } from "express";
+import type { BoundDeliveryRecord, BoundRedemptionStore } from "./bound-store.js";
+import type { PaymentVerifier, RequestValue } from "./types.js";
+export interface BoundReappPaymentMiddlewareOptions {
+    /** Merchant address that must receive the contract-authorized transfer. */
+    merchant: string;
+    /** Price as a human decimal string, or a request-specific resolver. */
+    amount: RequestValue;
+    /** Exact public HTTP(S) origin configured by the merchant; never Host-derived. */
+    audience: RequestValue;
+    /** At least 32 bytes. Keep stable across restarts and never expose it to clients. */
+    challengeSecret: string | Uint8Array;
+    /** Atomic transaction-to-proof binding. Must be durable and shared in production. */
+    redemptionStore: BoundRedemptionStore;
+    /** Exact path + query resolver. Defaults to request.originalUrl. */
+    resource?: RequestValue;
+    /** SEP-41 asset contract. Defaults to networkConfig.nativeSac. */
+    asset?: string;
+    /** Contract/RPC configuration. Defaults to REAPP testnet. */
+    networkConfig?: NetworkConfig;
+    /** x402 network label. Defaults to stellar-testnet. */
+    network?: string;
+    /** Asset decimals. Defaults to 7. */
+    decimals?: number;
+    /** Funded G-address used only for read-only contract simulations. */
+    sourceAccount?: string;
+    /** Optional verifier injection for tests or alternate trusted RPC infrastructure. */
+    verifier?: PaymentVerifier;
+    pollAttempts?: number;
+    pollIntervalMs?: number;
+    maxProofAgeLedgers?: number;
+    maxHeaderBytes?: number;
+    allowHttpRpc?: boolean;
+    /** Bound challenge lifetime in seconds. Defaults to 900. */
+    challengeTtlSeconds?: number;
+    /** Deterministic test hook. Must return safe whole Unix seconds. */
+    now?: () => number;
+    /** Deterministic test hook. Production uses node:crypto randomBytes. */
+    randomBytes?: (size: number) => Uint8Array;
+}
+export interface BoundX402Challenge {
+    x402Version: 1;
+    accepts: Array<{
+        scheme: typeof BOUND_PAYMENT_SCHEME;
+        network: string;
+        maxAmountRequired: string;
+        asset: string;
+        payTo: string;
+        resource: string;
+        extra: {
+            contract: string;
+            reappProofVersion: 2;
+            challenge: BoundPaymentChallengeV2;
+        };
+    }>;
+}
+export declare const REAPP_BOUND_DELIVERY_LOCALS_KEY = "reappBoundDelivery";
+export interface BoundDeliveryContext {
+    kind: "claimed" | "completed";
+    record: Readonly<BoundDeliveryRecord>;
+}
+export declare function getBoundDeliveryContext(response: Response): BoundDeliveryContext | undefined;
+export declare function createBoundReappPaymentMiddleware(options: BoundReappPaymentMiddlewareOptions): RequestHandler;
+//# sourceMappingURL=bound.d.ts.map

package/dist/bound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bound.d.ts","sourceRoot":"","sources":["../src/bound.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,oBAAoB,EASpB,KAAK,uBAAuB,EAE7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAW,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAyB,cAAc,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAM/E,OAAO,KAAK,EACV,mBAAmB,EAInB,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAEV,eAAe,EACf,YAAY,EAEb,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,kCAAkC;IACjD,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,EAAE,YAAY,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,YAAY,CAAC;IACvB,qFAAqF;IACrF,eAAe,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,qFAAqF;IACrF,eAAe,EAAE,oBAAoB,CAAC;IACtC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wEAAwE;IACxE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,OAAO,oBAAoB,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;YACjB,iBAAiB,EAAE,CAAC,CAAC;YACrB,SAAS,EAAE,uBAAuB,CAAC;SACpC,CAAC;KACH,CAAC,CAAC;CACJ;AAED,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;CACvC;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,oBAAoB,GAAG,SAAS,CAE5F;AAmGD,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,cAAc,CAwXhB"}

package/dist/bound.js

@@ -0,0 +1,447 @@
+import { createHash, createHmac, randomBytes as secureRandomBytes, randomUUID, timingSafeEqual, } from "node:crypto";
+import { Buffer } from "buffer";
+import { Address, StrKey } from "@stellar/stellar-sdk";
+import { BOUND_PAYMENT_CAPABILITY, BOUND_PAYMENT_SCHEME, REAPP_PAYMENT_CAPABILITIES_HEADER, X_PAYMENT_HEADER, boundChallengeAuthorizationBytes, canonicalPaymentOrigin, decodePaymentProof, isBoundPaymentProof, toStroops, verifyBoundPaymentProofSignature, } from "@reapp-sdk/core";
+import { TESTNET } from "@reapp-sdk/stellar";
+import { createStellarPaymentVerifier } from "./verification.js";
+import { REAPP_PAYMENT_LOCALS_KEY, createRedemptionKey, } from "./middleware.js";
+export const REAPP_BOUND_DELIVERY_LOCALS_KEY = "reappBoundDelivery";
+export function getBoundDeliveryContext(response) {
+    return response.locals[REAPP_BOUND_DELIVERY_LOCALS_KEY];
+}
+const DEFAULT_MAX_HEADER_BYTES = 8_192;
+const DEFAULT_MAX_PROOF_AGE_LEDGERS = 120;
+const DEFAULT_CHALLENGE_TTL_SECONDS = 900;
+function exactText(label, value) {
+    if (typeof value !== "string" || value.length === 0 || value.trim() !== value) {
+        throw new Error(`${label} must be a non-empty exact string.`);
+    }
+    return value;
+}
+function stellarAddress(label, value) {
+    const address = exactText(label, value);
+    try {
+        Address.fromString(address);
+    }
+    catch {
+        throw new Error(`${label} must be a valid Stellar address.`);
+    }
+    return address;
+}
+function resolveRequestValue(label, value, request) {
+    return exactText(label, typeof value === "function" ? value(request) : value);
+}
+function setPrivateResponseHeaders(response) {
+    response.set("cache-control", "private, no-store");
+    response.vary("X-PAYMENT");
+    response.vary("REAPP-PAYMENT-CAPABILITIES");
+}
+function json(response, status, body, retryAfter) {
+    setPrivateResponseHeaders(response);
+    response.status(status);
+    if (retryAfter)
+        response.set("retry-after", retryAfter);
+    response.json(body);
+}
+function oneRawHeader(request, name, maxBytes) {
+    const values = [];
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        const headerName = request.rawHeaders[index];
+        const value = request.rawHeaders[index + 1];
+        if (headerName?.toLowerCase() === name && value !== undefined)
+            values.push(value);
+    }
+    if (values.length === 0)
+        return undefined;
+    if (values.length !== 1)
+        throw new Error(`multiple ${name} headers are not allowed`);
+    const header = values[0];
+    if (Buffer.byteLength(header, "utf8") > maxBytes) {
+        throw new Error(`${name} header exceeds the configured size limit`);
+    }
+    return header;
+}
+function canonicalPaymentHeader(request, maxBytes) {
+    const header = oneRawHeader(request, X_PAYMENT_HEADER, maxBytes);
+    if (header === undefined)
+        return undefined;
+    if (header.length === 0
+        || header.includes(",")
+        || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(header)
+        || Buffer.from(header, "base64").toString("base64") !== header) {
+        throw new Error("X-PAYMENT header is not canonical base64");
+    }
+    return header;
+}
+function captureNow(now) {
+    const value = now();
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new Error("payment middleware clock must return safe whole Unix seconds");
+    }
+    return value;
+}
+function authenticateChallenge(unsigned, secret) {
+    const mac = createHmac("sha256", secret)
+        .update(boundChallengeAuthorizationBytes(unsigned))
+        .digest("base64");
+    return Object.freeze({
+        ...unsigned,
+        authorization: Object.freeze({ algorithm: "hmac-sha256", mac }),
+    });
+}
+function challengeMacIsValid(challenge, secret) {
+    const expected = createHmac("sha256", secret)
+        .update(boundChallengeAuthorizationBytes(challenge))
+        .digest();
+    const actual = Buffer.from(challenge.authorization.mac, "base64");
+    return actual.length === expected.length && timingSafeEqual(actual, expected);
+}
+export function createBoundReappPaymentMiddleware(options) {
+    if (!options || typeof options !== "object") {
+        throw new Error("REAPP bound payment middleware options are required.");
+    }
+    if (!options.redemptionStore
+        || typeof options.redemptionStore.lookup !== "function"
+        || typeof options.redemptionStore.claim !== "function"
+        || typeof options.redemptionStore.complete !== "function") {
+        throw new Error("redemptionStore with atomic lookup, claim, and complete operations is required.");
+    }
+    const networkConfig = options.networkConfig ?? TESTNET;
+    const merchant = stellarAddress("merchant", options.merchant);
+    const registryId = exactText("networkConfig.mandateRegistryId", networkConfig.mandateRegistryId);
+    if (!StrKey.isValidContract(registryId)) {
+        throw new Error("networkConfig.mandateRegistryId must be a valid Stellar contract address.");
+    }
+    const asset = exactText("asset", options.asset ?? networkConfig.nativeSac);
+    if (!StrKey.isValidContract(asset))
+        throw new Error("asset must be a valid Stellar contract address.");
+    if (typeof options.audience === "string")
+        canonicalPaymentOrigin(options.audience, "audience");
+    const network = exactText("network", options.network ?? "stellar-testnet");
+    const decimals = options.decimals ?? 7;
+    const maxHeaderBytes = options.maxHeaderBytes ?? DEFAULT_MAX_HEADER_BYTES;
+    const maxProofAgeLedgers = options.maxProofAgeLedgers ?? DEFAULT_MAX_PROOF_AGE_LEDGERS;
+    const challengeTtlSeconds = options.challengeTtlSeconds ?? DEFAULT_CHALLENGE_TTL_SECONDS;
+    const now = options.now ?? (() => Math.floor(Date.now() / 1_000));
+    const randomBytes = options.randomBytes ?? secureRandomBytes;
+    const challengeSecret = Buffer.from(typeof options.challengeSecret === "string"
+        ? Buffer.from(options.challengeSecret, "utf8")
+        : options.challengeSecret);
+    if (challengeSecret.length < 32 || challengeSecret.length > 4_096) {
+        throw new Error("challengeSecret must contain 32 through 4096 bytes.");
+    }
+    if (!Number.isInteger(decimals) || decimals < 0 || decimals > 38) {
+        throw new Error("decimals must be an integer from 0 through 38.");
+    }
+    if (!Number.isInteger(maxHeaderBytes) || maxHeaderBytes < 256 || maxHeaderBytes > 65_536) {
+        throw new Error("maxHeaderBytes must be an integer from 256 through 65536.");
+    }
+    if (!Number.isInteger(maxProofAgeLedgers) || maxProofAgeLedgers < 0 || maxProofAgeLedgers > 1_000_000) {
+        throw new Error("maxProofAgeLedgers must be an integer from 0 through 1000000.");
+    }
+    if (!Number.isInteger(challengeTtlSeconds) || challengeTtlSeconds < 30 || challengeTtlSeconds > 3_600) {
+        throw new Error("challengeTtlSeconds must be an integer from 30 through 3600.");
+    }
+    if (typeof options.amount === "string") {
+        const staticAmount = toStroops(exactText("amount", options.amount), decimals);
+        if (staticAmount <= 0n)
+            throw new Error("amount must be greater than zero.");
+    }
+    if (typeof options.resource === "string")
+        exactText("resource", options.resource);
+    const networkId = createHash("sha256")
+        .update(networkConfig.networkPassphrase, "utf8")
+        .digest("hex");
+    const verifier = options.verifier ?? createStellarPaymentVerifier({
+        networkConfig,
+        sourceAccount: options.sourceAccount ?? merchant,
+        pollAttempts: options.pollAttempts,
+        pollIntervalMs: options.pollIntervalMs,
+        maxProofAgeLedgers,
+        allowHttpRpc: options.allowHttpRpc,
+    });
+    function requirementFor(request) {
+        const amount = resolveRequestValue("amount", options.amount, request);
+        const amountStroops = toStroops(amount, decimals);
+        if (amountStroops <= 0n)
+            throw new Error("amount must be greater than zero.");
+        const resource = options.resource === undefined
+            ? exactText("resource", request.originalUrl || request.url)
+            : resolveRequestValue("resource", options.resource, request);
+        return Object.freeze({
+            scheme: BOUND_PAYMENT_SCHEME,
+            network,
+            resource,
+            merchant,
+            asset,
+            amount,
+            amountStroops,
+            registryId,
+            decimals,
+        });
+    }
+    function challengeFor(request, requirement, capturedNow, audience) {
+        const entropy = Buffer.from(randomBytes(32));
+        if (entropy.length !== 32)
+            throw new Error("randomBytes must return exactly the requested bytes");
+        const unsigned = {
+            proofVersion: 2,
+            challengeId: entropy.toString("base64url"),
+            audience,
+            scheme: BOUND_PAYMENT_SCHEME,
+            method: request.method.toUpperCase(),
+            resource: requirement.resource,
+            bodySha256: null,
+            network,
+            networkId,
+            registryId,
+            merchant,
+            asset,
+            amountStroops: requirement.amountStroops.toString(),
+            decimals,
+            issuedAt: capturedNow,
+            expiresAt: capturedNow + challengeTtlSeconds,
+        };
+        const challenge = authenticateChallenge(unsigned, challengeSecret);
+        return {
+            x402Version: 1,
+            accepts: [{
+                    scheme: BOUND_PAYMENT_SCHEME,
+                    network,
+                    maxAmountRequired: requirement.amount,
+                    asset,
+                    payTo: merchant,
+                    resource: requirement.resource,
+                    extra: { contract: registryId, reappProofVersion: 2, challenge },
+                }],
+        };
+    }
+    const handle = async (request, response, next) => {
+        const method = request.method.toUpperCase();
+        if (method !== "GET") {
+            response.set("allow", "GET");
+            json(response, 405, { error: "bound payment routes permit only GET requests" });
+            return;
+        }
+        let requirement;
+        let audience;
+        let capturedNow;
+        try {
+            requirement = requirementFor(request);
+            audience = canonicalPaymentOrigin(resolveRequestValue("audience", options.audience, request), "audience");
+            capturedNow = captureNow(now);
+        }
+        catch {
+            json(response, 500, { error: "payment middleware configuration failed closed" });
+            return;
+        }
+        let capability;
+        try {
+            capability = oneRawHeader(request, REAPP_PAYMENT_CAPABILITIES_HEADER, 256);
+        }
+        catch {
+            json(response, 426, {
+                error: "a single canonical REAPP payment capability is required",
+                requiredCapability: BOUND_PAYMENT_CAPABILITY,
+            });
+            return;
+        }
+        if (capability !== BOUND_PAYMENT_CAPABILITY) {
+            response.set("upgrade", BOUND_PAYMENT_CAPABILITY);
+            json(response, 426, {
+                error: "this route requires an agent-bound payment proof",
+                requiredCapability: BOUND_PAYMENT_CAPABILITY,
+            });
+            return;
+        }
+        let challengeBody;
+        try {
+            challengeBody = challengeFor(request, requirement, capturedNow, audience);
+        }
+        catch {
+            json(response, 500, { error: "payment challenge generation failed closed" });
+            return;
+        }
+        let header;
+        try {
+            header = canonicalPaymentHeader(request, maxHeaderBytes);
+        }
+        catch {
+            json(response, 402, { error: "malformed X-PAYMENT proof", ...challengeBody });
+            return;
+        }
+        if (!header) {
+            json(response, 402, challengeBody);
+            return;
+        }
+        let proof;
+        try {
+            proof = decodePaymentProof(header);
+        }
+        catch {
+            json(response, 402, { error: "malformed X-PAYMENT proof", ...challengeBody });
+            return;
+        }
+        if (!isBoundPaymentProof(proof)) {
+            json(response, 402, { error: "a bound-v2 proof is required", ...challengeBody });
+            return;
+        }
+        const challenge = proof.challenge;
+        const exactChallenge = challenge.proofVersion === 2
+            && challenge.audience === audience
+            && challenge.scheme === BOUND_PAYMENT_SCHEME
+            && challenge.method === method
+            && challenge.resource === requirement.resource
+            && challenge.bodySha256 === null
+            && challenge.network === network
+            && challenge.networkId === networkId
+            && challenge.registryId === registryId
+            && challenge.merchant === merchant
+            && challenge.asset === asset
+            && challenge.amountStroops === requirement.amountStroops.toString()
+            && challenge.decimals === decimals
+            && challenge.expiresAt - challenge.issuedAt === challengeTtlSeconds
+            && challenge.authorization.algorithm === "hmac-sha256"
+            && challengeMacIsValid(challenge, challengeSecret)
+            && proof.scheme === BOUND_PAYMENT_SCHEME
+            && proof.network === network;
+        if (!exactChallenge) {
+            json(response, 402, { error: "payment proof is not bound to this exact request", ...challengeBody });
+            return;
+        }
+        const proofDigest = createHash("sha256")
+            .update(JSON.stringify(proof), "utf8")
+            .digest("hex");
+        const redemptionKey = createRedemptionKey(networkConfig.networkPassphrase, registryId, proof.txHash);
+        const paymentMatchesProof = (payment) => payment.txHash === proof.txHash
+            && payment.mandateId === proof.mandateId
+            && payment.amountStroops === requirement.amountStroops
+            && payment.merchant === merchant
+            && payment.asset === asset
+            && payment.registryId === registryId
+            && payment.scheme === BOUND_PAYMENT_SCHEME
+            && payment.network === network
+            && verifyBoundPaymentProofSignature(proof, payment.agent);
+        let existing;
+        try {
+            existing = await options.redemptionStore.lookup(redemptionKey, proofDigest);
+            if (!existing || !["missing", "executing", "completed", "conflict"].includes(existing.kind)) {
+                throw new Error("redemption store returned an unsupported lookup result");
+            }
+        }
+        catch {
+            json(response, 503, {
+                error: "payment redemption store is unavailable; retry with the same proof",
+                retryable: true,
+            }, "1");
+            return;
+        }
+        if (existing.kind === "conflict") {
+            json(response, 409, { error: "this settlement transaction is already bound to another request" });
+            return;
+        }
+        if (existing.kind === "executing") {
+            json(response, 503, {
+                error: "paid fulfillment is still pending; retry the same proof",
+                retryable: true,
+            }, "1");
+            return;
+        }
+        if (existing.kind === "completed") {
+            if (existing.record.key !== redemptionKey
+                || existing.record.proofDigest !== proofDigest
+                || !paymentMatchesProof(existing.record.payment)) {
+                json(response, 503, { error: "stored payment recovery evidence failed closed" }, "1");
+                return;
+            }
+            response.locals[REAPP_PAYMENT_LOCALS_KEY] = existing.record.payment;
+            response.locals[REAPP_BOUND_DELIVERY_LOCALS_KEY] = Object.freeze({
+                kind: "completed",
+                record: existing.record,
+            });
+            setPrivateResponseHeaders(response);
+            next();
+            return;
+        }
+        if (challenge.issuedAt > capturedNow + 60 || challenge.expiresAt <= capturedNow) {
+            json(response, 402, { error: "payment challenge is expired or not yet valid", ...challengeBody });
+            return;
+        }
+        let verdict;
+        try {
+            verdict = await verifier.verify(proof.txHash, requirement);
+        }
+        catch {
+            json(response, 503, {
+                error: "payment verification is temporarily unavailable; retry with the same proof",
+                retryable: true,
+            }, "1");
+            return;
+        }
+        if (!verdict.ok) {
+            if (verdict.kind === "unavailable") {
+                json(response, 503, {
+                    error: `payment verification unavailable: ${verdict.reason}`,
+                    retryable: true,
+                }, "1");
+            }
+            else {
+                json(response, 402, { error: `payment not verified on-chain: ${verdict.reason}`, ...challengeBody });
+            }
+            return;
+        }
+        const payment = verdict.payment;
+        if (!paymentMatchesProof(payment)) {
+            json(response, 402, { error: "payment authorization did not match verified chain evidence", ...challengeBody });
+            return;
+        }
+        const record = Object.freeze({
+            key: redemptionKey,
+            proofDigest,
+            payment: Object.freeze({ ...payment }),
+        });
+        let claimed;
+        try {
+            claimed = await options.redemptionStore.claim(record, randomUUID(), capturedNow);
+            if (!claimed
+                || !["claimed", "executing", "completed", "conflict"].includes(claimed.kind)) {
+                throw new Error("redemption store returned an unsupported claim result");
+            }
+        }
+        catch {
+            json(response, 503, {
+                error: "payment redemption store is unavailable; retry with the same proof",
+                retryable: true,
+            }, "1");
+            return;
+        }
+        if (claimed.kind === "conflict") {
+            json(response, 409, { error: "this settlement transaction is already bound to another request" });
+            return;
+        }
+        if (claimed.kind === "executing") {
+            json(response, 503, {
+                error: "paid fulfillment is still pending; retry the same proof",
+                retryable: true,
+            }, "1");
+            return;
+        }
+        if (claimed.record.key !== redemptionKey
+            || claimed.record.proofDigest !== proofDigest
+            || !paymentMatchesProof(claimed.record.payment)) {
+            json(response, 503, { error: "stored payment redemption evidence failed closed" }, "1");
+            return;
+        }
+        response.locals[REAPP_PAYMENT_LOCALS_KEY] = claimed.record.payment;
+        response.locals[REAPP_BOUND_DELIVERY_LOCALS_KEY] = Object.freeze({
+            kind: claimed.kind,
+            record: claimed.record,
+        });
+        setPrivateResponseHeaders(response);
+        next();
+    };
+    return (request, response, next) => {
+        void handle(request, response, next).catch(next);
+    };
+}
+//# sourceMappingURL=bound.js.map

package/dist/bound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bound.js","sourceRoot":"","sources":["../src/bound.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,WAAW,IAAI,iBAAiB,EAChC,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,iCAAiC,EACjC,gBAAgB,EAChB,gCAAgC,EAChC,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,gCAAgC,GAGjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAsB,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAsEzB,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAOpE,MAAM,UAAU,uBAAuB,CAAC,QAAkB;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,+BAA+B,CAAqC,CAAC;AAC9F,CAAC;AAED,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAE1C,SAAS,SAAS,CAAC,KAAa,EAAE,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAmB,EAAE,OAAgB;IAC/E,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAkB;IACnD,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,IAAI,CAAC,QAAkB,EAAE,MAAc,EAAE,IAAa,EAAE,UAAmB;IAClF,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,UAAU;QAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,IAAY,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,UAAU,EAAE,WAAW,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB,EAAE,QAAgB;IAChE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;WAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;WACpB,CAAC,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC;WAChF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,GAAiB;IACnC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAyC,EACzC,MAAc;IAEd,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SACrC,MAAM,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC;SAClD,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,QAAQ;QACX,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAsB,EAAE,GAAG,EAAE,CAAC;KACzE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAkC,EAAE,MAAc;IAC7E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC1C,MAAM,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;SACnD,MAAM,EAAE,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAA2C;IAE3C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,CAAC,OAAO,CAAC,eAAe;WACrB,OAAO,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,UAAU;WACpD,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,KAAK,UAAU;WACnD,OAAO,OAAO,CAAC,eAAe,CAAC,QAAQ,KAAK,UAAU,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,iCAAiC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvG,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IACvF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC7D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CACjC,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;QACzC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,eAAe,CAC5B,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,GAAG,EAAE,IAAI,eAAe,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,GAAG,IAAI,cAAc,GAAG,MAAM,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC,IAAI,kBAAkB,GAAG,SAAS,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,GAAG,EAAE,IAAI,mBAAmB,GAAG,KAAK,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,YAAY,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC;SACnC,MAAM,CAAC,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC;QAChE,aAAa;QACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;QAChD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,kBAAkB;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,SAAS,cAAc,CAAC,OAAgB;QACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,aAAa,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS;YAC7C,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;YAC3D,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,oBAAoB;YAC5B,OAAO;YACP,QAAQ;YACR,QAAQ;YACR,KAAK;YACL,MAAM;YACN,aAAa;YACb,UAAU;YACV,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,SAAS,YAAY,CACnB,OAAgB,EAChB,WAA+B,EAC/B,WAAmB,EACnB,QAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAoC;YAChD,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1C,QAAQ;YACR,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,OAAO;YACP,SAAS;YACT,UAAU;YACV,QAAQ;YACR,KAAK;YACL,aAAa,EAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;YACnD,QAAQ;YACR,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW,GAAG,mBAAmB;SAC7C,CAAC;QACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACnE,OAAO;YACL,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;oBACR,MAAM,EAAE,oBAAoB;oBAC5B,OAAO;oBACP,iBAAiB,EAAE,WAAW,CAAC,MAAM;oBACrC,KAAK;oBACL,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE;iBACjE,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,OAAgB,EAAE,QAAkB,EAAE,IAAkB,EAAiB,EAAE;QAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,QAAgB,CAAC;QACrB,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACtC,QAAQ,GAAG,sBAAsB,CAC/B,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC1D,UAAU,CACX,CAAC;YACF,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,YAAY,CAAC,OAAO,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,yDAAyD;gBAChE,kBAAkB,EAAE,wBAAwB;aAC7C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,UAAU,KAAK,wBAAwB,EAAE,CAAC;YAC5C,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,kDAAkD;gBACzD,kBAAkB,EAAE,wBAAwB;aAC7C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC;YACH,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,MAAM,cAAc,GAClB,SAAS,CAAC,YAAY,KAAK,CAAC;eACzB,SAAS,CAAC,QAAQ,KAAK,QAAQ;eAC/B,SAAS,CAAC,MAAM,KAAK,oBAAoB;eACzC,SAAS,CAAC,MAAM,KAAK,MAAM;eAC3B,SAAS,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;eAC3C,SAAS,CAAC,UAAU,KAAK,IAAI;eAC7B,SAAS,CAAC,OAAO,KAAK,OAAO;eAC7B,SAAS,CAAC,SAAS,KAAK,SAAS;eACjC,SAAS,CAAC,UAAU,KAAK,UAAU;eACnC,SAAS,CAAC,QAAQ,KAAK,QAAQ;eAC/B,SAAS,CAAC,KAAK,KAAK,KAAK;eACzB,SAAS,CAAC,aAAa,KAAK,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;eAChE,SAAS,CAAC,QAAQ,KAAK,QAAQ;eAC/B,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,KAAK,mBAAmB;eAChE,SAAS,CAAC,aAAa,CAAC,SAAS,KAAK,aAAa;eACnD,mBAAmB,CAAC,SAAS,EAAE,eAAe,CAAC;eAC/C,KAAK,CAAC,MAAM,KAAK,oBAAoB;eACrC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;QAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;aACrC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;aACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,aAAa,GAAG,mBAAmB,CACvC,aAAa,CAAC,iBAAiB,EAC/B,UAAU,EACV,KAAK,CAAC,MAAM,CACb,CAAC;QACF,MAAM,mBAAmB,GAAG,CAAC,OAAkC,EAAW,EAAE,CAC1E,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;eAC5B,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eACrC,OAAO,CAAC,aAAa,KAAK,WAAW,CAAC,aAAa;eACnD,OAAO,CAAC,QAAQ,KAAK,QAAQ;eAC7B,OAAO,CAAC,KAAK,KAAK,KAAK;eACvB,OAAO,CAAC,UAAU,KAAK,UAAU;eACjC,OAAO,CAAC,MAAM,KAAK,oBAAoB;eACvC,OAAO,CAAC,OAAO,KAAK,OAAO;eAC3B,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAC5E,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,oEAAoE;gBAC3E,SAAS,EAAE,IAAI;aAChB,EAAE,GAAG,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,yDAAyD;gBAChE,SAAS,EAAE,IAAI;aAChB,EAAE,GAAG,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,IACE,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa;mBAClC,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW;mBAC3C,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAChD,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,GAAG,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;YACpE,QAAQ,CAAC,MAAM,CAAC,+BAA+B,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/D,IAAI,EAAE,WAAoB;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,GAAG,WAAW,GAAG,EAAE,IAAI,SAAS,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;YAChF,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,4EAA4E;gBACnF,SAAS,EAAE,IAAI;aAChB,EAAE,GAAG,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;oBAClB,KAAK,EAAE,qCAAqC,OAAO,CAAC,MAAM,EAAE;oBAC5D,SAAS,EAAE,IAAI;iBAChB,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6DAA6D,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YAChH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAoC,MAAM,CAAC,MAAM,CAAC;YAC5D,GAAG,EAAE,aAAa;YAClB,WAAW;YACX,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,OAA6B,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAC3C,MAAM,EACN,UAAU,EAAE,EACZ,WAAW,CACZ,CAAC;YACF,IACE,CAAC,OAAO;mBACL,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAC5E,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,oEAAoE;gBAC3E,SAAS,EAAE,IAAI;aAChB,EAAE,GAAG,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,yDAAyD;gBAChE,SAAS,EAAE,IAAI;aAChB,EAAE,GAAG,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,IACE,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa;eACjC,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW;eAC1C,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAC/C,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,QAAQ,CAAC,MAAM,CAAC,+BAA+B,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAQ,EAAE;QACvC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,4 +2,7 @@ export * from "./types.js";
 export * from "./proof-store.js";
 export * from "./verification.js";
 export * from "./middleware.js";
+export type { BoundReappPaymentMiddlewareOptions, BoundX402Challenge, } from "./bound.js";
+export * from "./bound-route.js";
+export * from "./bound-store.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,YAAY,EACV,kCAAkC,EAClC,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -2,4 +2,6 @@ export * from "./types.js";
 export * from "./proof-store.js";
 export * from "./verification.js";
 export * from "./middleware.js";
+export * from "./bound-route.js";
+export * from "./bound-store.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAKhC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}