@seedhape/core 0.1.0

package/dist/wallet/providers.d.ts

@@ -0,0 +1,107 @@
+import type { Address, Hex, SignedIntentMandate } from "../types.js";
+import type { PaymentRequirement } from "../x402/types.js";
+/** Provider families Seedhape can compose behind one payment boundary. */
+export type PaymentProviderKind = "eoa" | "metamask-erc7710" | "coinbase-spend-permission";
+/** Transfer methods advertised by an x402 merchant. */
+export type PaymentTransferMethod = "eip3009" | "erc7710" | "permit2" | "coinbase-spend-permission";
+export interface PermissionSnapshot {
+    kind: PaymentProviderKind;
+    account: Address;
+    spender?: Address;
+    token: Address;
+    network: string;
+    allowance: bigint;
+    periodSeconds: number;
+    start: number;
+    end: number;
+    revoked?: boolean;
+    reference?: Hex;
+    metadata?: Record<string, unknown>;
+}
+export interface ProviderPaymentRequest {
+    requirement: PaymentRequirement;
+    resource: string;
+}
+export interface ProviderPaymentAuthorization {
+    kind: PaymentProviderKind;
+    transferMethod: PaymentTransferMethod;
+    /** Exact EVM payload, or a provider-specific x402 payload. */
+    payload: Record<string, unknown>;
+    /** The address whose funds the merchant should receive from. */
+    payer: Address;
+}
+export interface ComposablePaymentProvider {
+    readonly kind: PaymentProviderKind;
+    readonly address: Address;
+    readonly transferMethods: readonly PaymentTransferMethod[];
+    currentPermission(): Promise<PermissionSnapshot | null>;
+    remainingAllowance(): Promise<bigint | null>;
+    createPaymentAuthorization(request: ProviderPaymentRequest): Promise<ProviderPaymentAuthorization>;
+    revokePermission(): Promise<void>;
+}
+export declare function transferMethodForRequirement(requirement: PaymentRequirement): PaymentTransferMethod;
+/** Selects a provider only from the transfer method the merchant advertised. */
+export declare function selectPaymentProvider(providers: readonly ComposablePaymentProvider[], requirement: PaymentRequirement): ComposablePaymentProvider;
+type HttpProviderConfig = {
+    baseUrl: string;
+    bearerToken: string;
+    address: Address;
+    fetchImpl?: typeof fetch;
+};
+/**
+ * Shared remote adapter for providers whose signing/delegation system lives
+ * outside the Seedhape web process. It returns delegation payloads, never
+ * private keys. The endpoint contract is intentionally provider-neutral.
+ */
+export declare class HttpDelegatedPaymentProvider implements ComposablePaymentProvider {
+    readonly kind: Exclude<PaymentProviderKind, "eoa">;
+    readonly address: Address;
+    readonly transferMethods: readonly PaymentTransferMethod[];
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    constructor(kind: Exclude<PaymentProviderKind, "eoa">, cfg: HttpProviderConfig);
+    currentPermission(): Promise<PermissionSnapshot | null>;
+    remainingAllowance(): Promise<bigint | null>;
+    createPaymentAuthorization(request: ProviderPaymentRequest): Promise<ProviderPaymentAuthorization>;
+    revokePermission(): Promise<void>;
+    private request;
+    private readonly token;
+}
+export declare class HttpMetaMaskDelegationProvider extends HttpDelegatedPaymentProvider {
+    constructor(cfg: HttpProviderConfig);
+}
+export declare class HttpCoinbaseSpendPermissionProvider extends HttpDelegatedPaymentProvider {
+    constructor(cfg: HttpProviderConfig);
+}
+/** EOA adapter hook; the existing EIP-3009 client remains responsible for signing. */
+export declare class EoaPaymentProvider implements ComposablePaymentProvider {
+    readonly address: Address;
+    private readonly createPayload;
+    private readonly permission;
+    readonly kind: "eoa";
+    readonly transferMethods: readonly ["eip3009"];
+    constructor(address: Address, createPayload: (request: ProviderPaymentRequest) => Promise<Record<string, unknown>>, permission?: () => Promise<PermissionSnapshot | null>);
+    currentPermission(): Promise<PermissionSnapshot | null>;
+    remainingAllowance(): Promise<bigint | null>;
+    createPaymentAuthorization(request: ProviderPaymentRequest): Promise<{
+        kind: "eoa";
+        transferMethod: "eip3009";
+        payload: Record<string, unknown>;
+        payer: `0x${string}`;
+    }>;
+    revokePermission(): Promise<void>;
+}
+/** Uses the ERC-7710 context saved with the active Seedhape mandate. */
+export declare class StoredMetaMaskDelegationProvider implements ComposablePaymentProvider {
+    private readonly loadMandate;
+    readonly kind: "metamask-erc7710";
+    readonly address: Address;
+    readonly transferMethods: readonly ["erc7710"];
+    constructor(address: Address, loadMandate: () => Promise<SignedIntentMandate | null>);
+    currentPermission(): Promise<PermissionSnapshot | null>;
+    remainingAllowance(): Promise<bigint | null>;
+    createPaymentAuthorization(_request: ProviderPaymentRequest): Promise<ProviderPaymentAuthorization>;
+    revokePermission(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=providers.d.ts.map

package/dist/wallet/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/wallet/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,0EAA0E;AAC1E,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,kBAAkB,GAAG,2BAA2B,CAAC;AAE3F,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,2BAA2B,CAAC;AAEpG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,EAAE,qBAAqB,CAAC;IACtC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gEAAgE;IAChE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACxD,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACnG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,kBAAkB,GAAG,qBAAqB,CAMnG;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,SAAS,yBAAyB,EAAE,EAC/C,WAAW,EAAE,kBAAkB,GAC9B,yBAAyB,CAa3B;AAED,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,yBAAyB;IAO1E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC;IANpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAGtB,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAClD,GAAG,EAAE,kBAAkB;IAWnB,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAyBvD,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM5C,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAelG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;YAIzB,OAAO;IAgBrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;CAChC;AAED,qBAAa,8BAA+B,SAAQ,4BAA4B;gBAClE,GAAG,EAAE,kBAAkB;CAGpC;AAED,qBAAa,mCAAoC,SAAQ,4BAA4B;gBACvE,GAAG,EAAE,kBAAkB;CAGpC;AAED,sFAAsF;AACtF,qBAAa,kBAAmB,YAAW,yBAAyB;IAKhE,QAAQ,CAAC,OAAO,EAAE,OAAO;IACzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,QAAQ,CAAC,eAAe,uBAAwB;gBAGrC,OAAO,EAAE,OAAO,EACR,aAAa,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACpF,UAAU,GAAE,MAAM,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAoB;IAG1F,iBAAiB;IACX,kBAAkB;IAClB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB;;;;;;IAG1D,gBAAgB;CACvB;AAED,wEAAwE;AACxE,qBAAa,gCAAiC,YAAW,yBAAyB;IAO9E,OAAO,CAAC,QAAQ,CAAC,WAAW;IAN9B,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,uBAAwB;gBAG9C,OAAO,EAAE,OAAO,EACC,WAAW,EAAE,MAAM,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAKnE,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAiBvD,kBAAkB;IAIlB,0BAA0B,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAkBnG,gBAAgB;CACvB"}

package/dist/wallet/providers.js

@@ -0,0 +1,188 @@
+export function transferMethodForRequirement(requirement) {
+    const method = requirement.extra?.assetTransferMethod;
+    // x402 v1 merchants and known USDC deployments historically omitted this
+    // field. That legacy shape is compatible with EIP-3009, never with a smart
+    // contract delegation whose payload format must be explicitly advertised.
+    return (method ?? "eip3009");
+}
+/** Selects a provider only from the transfer method the merchant advertised. */
+export function selectPaymentProvider(providers, requirement) {
+    const method = transferMethodForRequirement(requirement);
+    const provider = providers.find((candidate) => candidate.transferMethods.includes(method) &&
+        candidate.currentPermission !== undefined);
+    if (!provider) {
+        throw new Error(`No configured payment provider supports x402 transfer method ${method}. ` +
+            `Configured providers: ${providers.map((item) => `${item.kind} (${item.transferMethods.join(",")})`).join("; ") || "none"}.`);
+    }
+    return provider;
+}
+/**
+ * Shared remote adapter for providers whose signing/delegation system lives
+ * outside the Seedhape web process. It returns delegation payloads, never
+ * private keys. The endpoint contract is intentionally provider-neutral.
+ */
+export class HttpDelegatedPaymentProvider {
+    kind;
+    address;
+    transferMethods;
+    fetchImpl;
+    baseUrl;
+    constructor(kind, cfg) {
+        this.kind = kind;
+        this.address = cfg.address;
+        this.baseUrl = cfg.baseUrl.replace(/\/$/, "");
+        this.fetchImpl = cfg.fetchImpl ?? fetch;
+        this.token = cfg.bearerToken;
+        this.transferMethods = kind === "metamask-erc7710"
+            ? ["erc7710"]
+            : ["coinbase-spend-permission"];
+    }
+    async currentPermission() {
+        const body = await this.request("/grant");
+        const grant = body.grant;
+        if (!grant)
+            return null;
+        if (typeof grant.account !== "string" || typeof grant.token !== "string" ||
+            typeof grant.network !== "string" || typeof grant.allowance !== "string" && typeof grant.allowance !== "number" ||
+            typeof grant.periodSeconds !== "number" || typeof grant.start !== "number" || typeof grant.end !== "number") {
+            throw new Error(`${this.kind} provider returned an invalid permission snapshot.`);
+        }
+        return {
+            kind: this.kind,
+            account: grant.account,
+            spender: typeof grant.spender === "string" ? grant.spender : undefined,
+            token: grant.token,
+            network: grant.network,
+            allowance: BigInt(grant.allowance),
+            periodSeconds: grant.periodSeconds,
+            start: grant.start,
+            end: grant.end,
+            revoked: grant.revoked === true,
+            reference: typeof grant.reference === "string" ? grant.reference : undefined,
+            metadata: typeof grant.metadata === "object" && grant.metadata !== null ? grant.metadata : undefined,
+        };
+    }
+    async remainingAllowance() {
+        const body = await this.request("/remaining");
+        const remaining = body.remaining;
+        return remaining === null || remaining === undefined ? null : BigInt(remaining);
+    }
+    async createPaymentAuthorization(request) {
+        const body = await this.request("/payment-payload", {
+            method: "POST",
+            body: JSON.stringify({ requirement: request.requirement, resource: request.resource }),
+            headers: { "content-type": "application/json" },
+        });
+        const payload = body.payload;
+        const payer = body.payer;
+        if (!payload || typeof payload !== "object" || typeof payer !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(payer)) {
+            throw new Error(`${this.kind} provider returned an invalid x402 payment payload.`);
+        }
+        const transferMethod = this.transferMethods[0];
+        return { kind: this.kind, transferMethod, payload: payload, payer: payer };
+    }
+    async revokePermission() {
+        await this.request("/revoke", { method: "POST", body: "{}", headers: { "content-type": "application/json" } });
+    }
+    async request(path, init = {}) {
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            ...init,
+            headers: {
+                authorization: `Bearer ${this.token}`,
+                accept: "application/json",
+                ...(init.headers ?? {}),
+            },
+        });
+        const text = await response.text();
+        let body;
+        try {
+            body = text ? JSON.parse(text) : null;
+        }
+        catch {
+            body = text;
+        }
+        if (!response.ok)
+            throw new Error(`${this.kind} provider ${path} failed with ${response.status}: ${String(text)}`);
+        return body;
+    }
+    token;
+}
+export class HttpMetaMaskDelegationProvider extends HttpDelegatedPaymentProvider {
+    constructor(cfg) {
+        super("metamask-erc7710", cfg);
+    }
+}
+export class HttpCoinbaseSpendPermissionProvider extends HttpDelegatedPaymentProvider {
+    constructor(cfg) {
+        super("coinbase-spend-permission", cfg);
+    }
+}
+/** EOA adapter hook; the existing EIP-3009 client remains responsible for signing. */
+export class EoaPaymentProvider {
+    address;
+    createPayload;
+    permission;
+    kind = "eoa";
+    transferMethods = ["eip3009"];
+    constructor(address, createPayload, permission = async () => null) {
+        this.address = address;
+        this.createPayload = createPayload;
+        this.permission = permission;
+    }
+    currentPermission() { return this.permission(); }
+    async remainingAllowance() { return (await this.permission())?.allowance ?? null; }
+    async createPaymentAuthorization(request) {
+        return { kind: this.kind, transferMethod: "eip3009", payload: await this.createPayload(request), payer: this.address };
+    }
+    async revokePermission() { return; }
+}
+/** Uses the ERC-7710 context saved with the active Seedhape mandate. */
+export class StoredMetaMaskDelegationProvider {
+    loadMandate;
+    kind = "metamask-erc7710";
+    address;
+    transferMethods = ["erc7710"];
+    constructor(address, loadMandate) {
+        this.loadMandate = loadMandate;
+        this.address = address;
+    }
+    async currentPermission() {
+        const signed = await this.loadMandate();
+        const delegation = signed?.delegation;
+        if (!delegation || delegation.provider !== this.kind)
+            return null;
+        return {
+            kind: this.kind,
+            account: delegation.delegator,
+            token: signed.mandate.asset.address,
+            network: signed.mandate.asset.network,
+            allowance: delegation.allowanceAmount ?? signed.mandate.maxPerPeriod,
+            periodSeconds: signed.mandate.periodSeconds,
+            start: signed.mandate.notBefore,
+            end: delegation.expiry ?? signed.mandate.expiry,
+            reference: delegation.permissionContext,
+        };
+    }
+    async remainingAllowance() {
+        return (await this.currentPermission())?.allowance ?? null;
+    }
+    async createPaymentAuthorization(_request) {
+        const signed = await this.loadMandate();
+        const delegation = signed?.delegation;
+        if (!delegation || delegation.provider !== this.kind) {
+            throw new Error("No active MetaMask ERC-7710 delegation is attached to the mandate.");
+        }
+        return {
+            kind: this.kind,
+            transferMethod: "erc7710",
+            payer: delegation.delegator,
+            payload: {
+                delegationManager: delegation.delegationManager,
+                permissionContext: delegation.permissionContext,
+                delegator: delegation.delegator,
+            },
+        };
+    }
+    async revokePermission() { return; }
+}
+//# sourceMappingURL=providers.js.map

package/dist/wallet/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/wallet/providers.ts"],"names":[],"mappings":"AAgDA,MAAM,UAAU,4BAA4B,CAAC,WAA+B;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACtD,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,OAAO,CAAC,MAAM,IAAI,SAAS,CAA0B,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,SAA+C,EAC/C,WAA+B;IAE/B,MAAM,MAAM,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5C,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1C,SAAS,CAAC,iBAAiB,KAAK,SAAS,CAC1C,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,MAAM,IAAI;YAC1E,yBAAyB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CAC7H,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IAO5B;IANF,OAAO,CAAU;IACjB,eAAe,CAAmC;IAC1C,SAAS,CAAe;IACxB,OAAO,CAAS;IAEjC,YACW,IAAyC,EAClD,GAAuB;QADd,SAAI,GAAJ,IAAI,CAAqC;QAGlD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,KAAK,kBAAkB;YAChD,CAAC,CAAC,CAAC,SAAS,CAAC;YACb,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAI,IAAmD,CAAC,KAAK,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YACpE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAC/G,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK,CAAC,OAAkB;YACjC,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAkB,CAAC,CAAC,CAAC,SAAS;YACjF,KAAK,EAAE,KAAK,CAAC,KAAgB;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;YAC/B,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAgB,CAAC,CAAC,CAAC,SAAS;YACnF,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAmC,CAAC,CAAC,CAAC,SAAS;SAChI,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAI,IAA+C,CAAC,SAAS,CAAC;QAC7E,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAA+B;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtF,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAI,IAA+C,CAAC,OAAO,CAAC;QACzE,MAAM,KAAK,GAAI,IAA4B,CAAC,KAAK,CAAC;QAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,qDAAqD,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAkC,EAAE,KAAK,EAAE,KAAgB,EAAE,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACjH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAoB,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;aACxB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;QAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,gBAAgB,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;IAEgB,KAAK,CAAS;CAChC;AAED,MAAM,OAAO,8BAA+B,SAAQ,4BAA4B;IAC9E,YAAY,GAAuB;QACjC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,mCAAoC,SAAQ,4BAA4B;IACnF,YAAY,GAAuB;QACjC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,OAAO,kBAAkB;IAKlB;IACQ;IACA;IANV,IAAI,GAAG,KAAc,CAAC;IACtB,eAAe,GAAG,CAAC,SAAS,CAAU,CAAC;IAEhD,YACW,OAAgB,EACR,aAAoF,EACpF,aAAuD,KAAK,IAAI,EAAE,CAAC,IAAI;QAF/E,YAAO,GAAP,OAAO,CAAS;QACR,kBAAa,GAAb,aAAa,CAAuE;QACpF,eAAU,GAAV,UAAU,CAA6D;IACvF,CAAC;IAEJ,iBAAiB,KAAK,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC;IACnF,KAAK,CAAC,0BAA0B,CAAC,OAA+B;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,SAAkB,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAClI,CAAC;IACD,KAAK,CAAC,gBAAgB,KAAK,OAAO,CAAC,CAAC;CACrC;AAED,wEAAwE;AACxE,MAAM,OAAO,gCAAgC;IAOxB;IANV,IAAI,GAAG,kBAA2B,CAAC;IACnC,OAAO,CAAU;IACjB,eAAe,GAAG,CAAC,SAAS,CAAU,CAAC;IAEhD,YACE,OAAgB,EACC,WAAsD;QAAtD,gBAAW,GAAX,WAAW,CAA2C;QAEvE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAClE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,UAAU,CAAC,SAAS;YAC7B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,SAAS,EAAE,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY;YACpE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;YAC3C,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YAC/B,GAAG,EAAE,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM;YAC/C,SAAS,EAAE,UAAU,CAAC,iBAAiB;SACxC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,QAAgC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,cAAc,EAAE,SAAS;YACzB,KAAK,EAAE,UAAU,CAAC,SAAS;YAC3B,OAAO,EAAE;gBACP,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,KAAK,OAAO,CAAC,CAAC;CACrC"}

package/dist/web-bot-auth.d.ts

@@ -0,0 +1,54 @@
+import { type KeyObject } from "node:crypto";
+/** Headers used by the Web Bot Auth HTTP Message Signatures profile. */
+export type WebBotAuthHeaders = {
+    "Signature-Agent": string;
+    "Signature-Input": string;
+    Signature: string;
+};
+export type WebBotAuthSignOptions = {
+    url: string;
+    signatureAgent: string;
+    keyId: string;
+    privateKey: KeyObject | string;
+    now?: number;
+    expiresInSeconds?: number;
+    nonce?: string;
+};
+export type WebBotAuthVerifyOptions = {
+    url: string;
+    headers: Headers | Record<string, string | undefined>;
+    publicKey: KeyObject | string;
+    expectedKeyId?: string;
+    now?: number;
+    clockSkewSeconds?: number;
+    /** Maximum accepted signature lifetime, protecting against long-lived replay. */
+    maxLifetimeSeconds?: number;
+    /** Return true only when this nonce has not already been consumed. */
+    consumeNonce?: (input: {
+        keyId: string;
+        nonce: string;
+    }) => Promise<boolean> | boolean;
+};
+export type WebBotAuthDirectorySignOptions = {
+    url: string;
+    keyId: string;
+    privateKey: KeyObject | string;
+    now?: number;
+    expiresInSeconds?: number;
+    nonce?: string;
+};
+/** Create Web Bot Auth headers for an outbound HTTPS request. */
+export declare function signWebBotAuth(options: WebBotAuthSignOptions): WebBotAuthHeaders;
+/** Sign a JWKS directory response using the required directory tag/profile. */
+export declare function signWebBotAuthDirectory(options: WebBotAuthDirectorySignOptions): {
+    Signature: string;
+    "Signature-Input": string;
+};
+/** Verify Web Bot Auth headers and optionally consume their replay nonce. */
+export declare function verifyWebBotAuth(options: WebBotAuthVerifyOptions): Promise<{
+    keyId: string;
+    nonce: string;
+    created: number;
+    expires: number;
+}>;
+//# sourceMappingURL=web-bot-auth.d.ts.map

package/dist/web-bot-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-bot-auth.d.ts","sourceRoot":"","sources":["../src/web-bot-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAE3G,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACxF,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAqDF,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,iBAAiB,CAYhF;AAED,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAWjI;AAED,6EAA6E;AAC7E,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBpJ"}

package/dist/web-bot-auth.js

@@ -0,0 +1,112 @@
+import { createPrivateKey, createPublicKey, randomBytes, sign, verify } from "node:crypto";
+function header(headers, name) {
+    return headers instanceof Headers ? headers.get(name) ?? undefined : headers[name] ?? headers[name.toLowerCase()];
+}
+function authority(url) {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:")
+        throw new Error("Web Bot Auth requires an HTTPS URL.");
+    return parsed.host;
+}
+function quote(value) {
+    return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+}
+function unquote(value) {
+    if (!value.startsWith('"') || !value.endsWith('"'))
+        throw new Error("Invalid Web Bot Auth quoted parameter.");
+    return value.slice(1, -1).replaceAll('\\"', '"').replaceAll("\\\\", "\\");
+}
+function signatureBase(url, signatureAgent) {
+    return `"@authority": ${authority(url)}\n"signature-agent": ${quote(signatureAgent)}`;
+}
+function parseSignatureInput(value) {
+    const match = /^sig1=\("@authority"\s+"signature-agent"\);(.+)$/u.exec(value.trim());
+    if (!match)
+        throw new Error("Unsupported Web Bot Auth Signature-Input coverage.");
+    const params = new Map();
+    for (const part of match[1].split(";")) {
+        const separator = part.indexOf("=");
+        if (separator <= 0)
+            throw new Error("Invalid Web Bot Auth Signature-Input parameter.");
+        const key = part.slice(0, separator);
+        const raw = part.slice(separator + 1);
+        if (params.has(key))
+            throw new Error(`Duplicate Web Bot Auth Signature-Input parameter: ${key}`);
+        params.set(key, raw.startsWith('"') ? unquote(raw) : raw);
+    }
+    const keyId = params.get("keyid");
+    const alg = params.get("alg");
+    const tag = params.get("tag");
+    const nonce = params.get("nonce");
+    const created = Number(params.get("created"));
+    const expires = Number(params.get("expires"));
+    if (!keyId || alg !== "ed25519" || tag !== "web-bot-auth" || !nonce || !Number.isSafeInteger(created) || !Number.isSafeInteger(expires))
+        throw new Error("Invalid Web Bot Auth Signature-Input parameters.");
+    return { keyId, created, expires, nonce, tag, alg };
+}
+function parseSignature(value) {
+    const match = /^sig1=:([^:]+):$/u.exec(value.trim());
+    if (!match)
+        throw new Error("Invalid Web Bot Auth Signature header.");
+    return Buffer.from(match[1], "base64");
+}
+/** Create Web Bot Auth headers for an outbound HTTPS request. */
+export function signWebBotAuth(options) {
+    const now = options.now ?? Math.floor(Date.now() / 1000);
+    const lifetime = options.expiresInSeconds ?? 60;
+    if (!Number.isSafeInteger(now) || !Number.isSafeInteger(lifetime) || lifetime <= 0)
+        throw new Error("Web Bot Auth timestamps must be safe integers and expiry must be positive.");
+    const agent = new URL(options.signatureAgent);
+    if (agent.protocol !== "https:")
+        throw new Error("Web Bot Auth Signature-Agent must use HTTPS.");
+    const expires = now + lifetime;
+    const nonce = options.nonce ?? randomBytes(24).toString("base64url");
+    const input = `sig1=("@authority" "signature-agent");created=${now};keyid=${quote(options.keyId)};alg="ed25519";expires=${expires};nonce=${quote(nonce)};tag="web-bot-auth"`;
+    const key = typeof options.privateKey === "string" ? createPrivateKey(options.privateKey) : options.privateKey;
+    const signature = sign(null, Buffer.from(`${signatureBase(options.url, options.signatureAgent)}\n"@signature-params": ${input.slice("sig1=".length)}`), key).toString("base64");
+    return { "Signature-Agent": quote(options.signatureAgent), "Signature-Input": input, Signature: `sig1=:${signature}:` };
+}
+/** Sign a JWKS directory response using the required directory tag/profile. */
+export function signWebBotAuthDirectory(options) {
+    const now = options.now ?? Math.floor(Date.now() / 1000);
+    const lifetime = options.expiresInSeconds ?? 60;
+    if (!Number.isSafeInteger(now) || !Number.isSafeInteger(lifetime) || lifetime <= 0)
+        throw new Error("Web Bot Auth directory timestamps must be safe integers and expiry must be positive.");
+    const expires = now + lifetime;
+    const nonce = options.nonce ?? randomBytes(24).toString("base64url");
+    const input = `sig1=("@authority";req);created=${now};keyid=${quote(options.keyId)};alg="ed25519";expires=${expires};nonce=${quote(nonce)};tag="http-message-signatures-directory"`;
+    const key = typeof options.privateKey === "string" ? createPrivateKey(options.privateKey) : options.privateKey;
+    const base = `"@authority": ${authority(options.url)}\n"@signature-params": ${input.slice("sig1=".length)}`;
+    const signature = sign(null, Buffer.from(base), key).toString("base64");
+    return { Signature: `sig1=:${signature}:`, "Signature-Input": input };
+}
+/** Verify Web Bot Auth headers and optionally consume their replay nonce. */
+export async function verifyWebBotAuth(options) {
+    const signatureAgentRaw = header(options.headers, "Signature-Agent");
+    const signatureInput = header(options.headers, "Signature-Input");
+    const signatureRaw = header(options.headers, "Signature");
+    if (!signatureAgentRaw || !signatureInput || !signatureRaw)
+        throw new Error("Web Bot Auth requires Signature-Agent, Signature-Input, and Signature headers.");
+    const signatureAgent = unquote(signatureAgentRaw);
+    const agent = new URL(signatureAgent);
+    if (agent.protocol !== "https:")
+        throw new Error("Web Bot Auth Signature-Agent must use HTTPS.");
+    const parsed = parseSignatureInput(signatureInput);
+    if (options.expectedKeyId && options.expectedKeyId !== parsed.keyId)
+        throw new Error("Web Bot Auth key ID is not trusted.");
+    const now = options.now ?? Math.floor(Date.now() / 1000);
+    const skew = options.clockSkewSeconds ?? 5;
+    const maxLifetime = options.maxLifetimeSeconds ?? 300;
+    if (!Number.isSafeInteger(maxLifetime) || maxLifetime <= 0)
+        throw new Error("Web Bot Auth maximum lifetime must be a positive integer.");
+    if (parsed.expires <= now || parsed.created > now + skew || parsed.expires <= parsed.created || parsed.expires - parsed.created > maxLifetime)
+        throw new Error("Web Bot Auth signature is expired or has invalid timestamps.");
+    const key = typeof options.publicKey === "string" ? createPublicKey(options.publicKey) : options.publicKey;
+    const valid = verify(null, Buffer.from(`${signatureBase(options.url, signatureAgent)}\n"@signature-params": ${signatureInput.slice("sig1=".length)}`), key, parseSignature(signatureRaw));
+    if (!valid)
+        throw new Error("Web Bot Auth signature verification failed.");
+    if (options.consumeNonce && !(await options.consumeNonce({ keyId: parsed.keyId, nonce: parsed.nonce })))
+        throw new Error("Web Bot Auth nonce was already consumed.");
+    return parsed;
+}
+//# sourceMappingURL=web-bot-auth.js.map

package/dist/web-bot-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-bot-auth.js","sourceRoot":"","sources":["../src/web-bot-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAyC3G,SAAS,MAAM,CAAC,OAAqD,EAAE,IAAY;IACjF,OAAO,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,cAAsB;IACxD,OAAO,iBAAiB,SAAS,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,mDAAmD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,cAAc,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC7M,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAClL,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,iDAAiD,GAAG,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,UAAU,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC7K,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/G,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,0BAA0B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChL,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,SAAS,GAAG,EAAE,CAAC;AAC1H,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,OAAuC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC5L,MAAM,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,mCAAmC,GAAG,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,UAAU,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC;IACpL,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/G,MAAM,IAAI,GAAG,iBAAiB,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5G,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,EAAE,SAAS,EAAE,SAAS,SAAS,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC9J,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5H,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACzI,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,GAAG,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC/N,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3G,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,0BAA0B,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1L,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACrK,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/x402/client.d.ts

@@ -0,0 +1,101 @@
+/**
+ * x402 client.
+ *
+ * Flow:
+ *   1. Plain request to the resource.
+ *   2. On 402, parse the challenge and pick an acceptable requirement.
+ *   3. Hand the candidate to the caller's `authorise` hook — this is where the
+ *      AP2 policy engine runs and where a human can be asked. If it declines,
+ *      we stop. No signature is ever produced for a declined payment.
+ *   4. Build and sign the selected EVM authorization or Solana transaction.
+ *   5. Replay the request with the version-appropriate payment header.
+ *   6. Decode the settlement response and hand back the result.
+ *
+ * The client never retries a payment automatically. A failed settlement returns
+ * to the caller; an agent looping on 402s is exactly the failure mode the
+ * policy engine's burst limit exists to catch.
+ */
+import type { ClientSvmSigner } from "@x402/svm";
+import type { Address, Hex, NetworkId } from "../types.js";
+import { type OutboundRequestPolicy } from "./outbound.js";
+import { type ComposablePaymentProvider } from "../wallet/providers.js";
+import type { PaymentPayload, PaymentRequiredResponse, PaymentRequirement, SettlementResponse } from "./types.js";
+export interface Eip712Signer {
+    address: Address;
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: Record<string, unknown>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+}
+export interface AuthorisationRequest {
+    requirement: PaymentRequirement;
+    amount: bigint;
+    host: string;
+    resource: string;
+}
+export interface AuthorisationResult {
+    approved: boolean;
+    reason?: string;
+    /** Opaque handle the caller can use to correlate the ledger entry. */
+    spendId?: string;
+}
+export interface X402PaymentContext {
+    ap2?: {
+        checkoutMandate: string;
+        paymentMandate: string;
+        checkoutJwt: string;
+    };
+}
+export interface X402ClientOptions {
+    /** EVM signer. Required only when paying on an EVM network. */
+    signer?: Eip712Signer;
+    /** Solana transaction signer. Required only when paying on a Solana network. */
+    svmSigner?: ClientSvmSigner;
+    /** Optional Solana RPC used while constructing exact-SVM payments. */
+    svmRpcUrl?: string;
+    /** Runs before any signature. Return {approved:false} to abort. */
+    authorise(req: AuthorisationRequest): Promise<AuthorisationResult>;
+    /** Called after the merchant responds, whether settlement succeeded or not. */
+    onSettlement?(spendId: string | undefined, settlement: SettlementResponse | null, httpStatus: number): Promise<void>;
+    /** Networks this client will pay on. Anything else is ignored in `accepts`. */
+    allowedNetworks: NetworkId[];
+    /** Asset identifiers this client will pay with. Solana addresses are case-sensitive. */
+    allowedAssets: string[];
+    /** Hard ceiling applied regardless of mandate, as a last-resort backstop. */
+    absoluteMaxPerPayment: bigint;
+    fetchImpl?: typeof fetch;
+    outboundPolicy?: OutboundRequestPolicy;
+    /** Optional provider stack. Omit to retain the legacy EIP-3009 signer path. */
+    paymentProviders?: readonly ComposablePaymentProvider[];
+}
+export declare class PaymentDeclinedError extends Error {
+    readonly reason?: string | undefined;
+    constructor(message: string, reason?: string | undefined);
+}
+export declare class X402Client {
+    private readonly opts;
+    private readonly fetchImpl;
+    constructor(opts: X402ClientOptions);
+    /**
+     * Fetch a resource, paying if the server demands it.
+     * Returns the final Response plus settlement metadata when a payment happened.
+     */
+    fetch(input: string, init?: RequestInit, context?: X402PaymentContext): Promise<{
+        response: Response;
+        paid: boolean;
+        settlement?: SettlementResponse;
+        requirement?: PaymentRequirement;
+        amount?: bigint;
+    }>;
+    /** Probe a resource's price without paying. Used by the `quote` MCP tool. */
+    quote(input: string): Promise<PaymentRequiredResponse | null>;
+    private select;
+    private buildPayment;
+}
+export declare function normaliseNetwork(n: string): NetworkId;
+export declare function chainIdFor(network: string): number;
+export declare function encodePayment(p: PaymentPayload): string;
+export declare function decodePayment(header: string): PaymentPayload;
+//# sourceMappingURL=client.d.ts.map

package/dist/x402/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/x402/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAyB,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,KAAK,EAEV,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,IAAI,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,kBAAkB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,gFAAgF;IAChF,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,SAAS,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnE,+EAA+E;IAC/E,YAAY,CAAC,CACX,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,kBAAkB,GAAG,IAAI,EACrC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,+EAA+E;IAC/E,eAAe,EAAE,SAAS,EAAE,CAAC;IAC7B,wFAAwF;IACxF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,6EAA6E;IAC7E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAG3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED,qBAAa,UAAU;IAGT,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEZ,IAAI,EAAE,iBAAiB;IAIpD;;;OAGG;IACG,KAAK,CACT,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC;QACT,QAAQ,EAAE,QAAQ,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC;QACd,UAAU,CAAC,EAAE,kBAAkB,CAAC;QAChC,WAAW,CAAC,EAAE,kBAAkB,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IA0FF,6EAA6E;IACvE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAOnE,OAAO,CAAC,MAAM;YAeA,YAAY;CAgF3B;AAUD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAIrD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlD;AAwDD,wBAAgB,aAAa,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAEvD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAE5D"}