@stellar-agent-services/provider-kit 0.0.0-stage → 0.1.1

package/dist/payments/onchain.js

@@ -0,0 +1,191 @@
+// Finding a job's payment on chain, for reconciliation [J13].
+//
+// A payment is one signed Soroban authorization: the payer's auth entry, with a nonce, for exactly one
+// SAC transfer(payer, payTo, amount) (payments/payload-checks.ts). Soroban accepts an (address, nonce)
+// pair once, so the successful transaction that carries the payer's auth entry with the job's nonce IS
+// the job's payment. Any other transfer between the same accounts, for the same amount, belongs to
+// another job. The lookup goes by that binding, never by recipient and amount alone:
+//
+// 1. the transaction the facilitator named, if any;
+// 2. otherwise, or if that one failed, the asset's `transfer` events from the payer in every ledger the
+//    payment could have landed in, and the transactions behind them.
+//
+// "not_settled" needs proof of absence: the RPC searched every ledger up to the payment's expiration
+// ledger, that ledger has closed, and none of them carried the payment. After it the signature is void,
+// so the payment can never land. Anything less is "undecided" and the job stays payment_uncertain: a
+// ledger still to come, a window older than the RPC's history, an RPC error, or a transaction that used
+// the payment but shows no matching transfer. Nothing is decided from a guess.
+import { Address, rpc, scValToNative, StrKey, xdr } from "@stellar/stellar-sdk";
+import { addressCredentials } from "./payload-checks.js";
+/**
+ * How far before its expiration ledger a payment can land. The provider (http/router.ts) and the
+ * facilitator both refuse a signature that expires more than maxTimeoutSeconds (at most 300, §4.1) of
+ * ledgers after the payment is verified, counting a ledger as at least one second (they take about
+ * five), and a payment lands after its verification. So this window holds every ledger it could have
+ * landed in, with room to spare.
+ */
+export const SEARCH_WINDOW_LEDGERS = 320;
+/** Ledgers beyond the latest that a signature may expire in, on top of maxTimeoutSeconds. */
+export const EXPIRATION_TOLERANCE_LEDGERS = 10;
+const PAGE_SIZE = 100;
+/** A payer with more transfers than this in one window is checked by hand. */
+const MAX_PAGES = 10;
+/**
+ * Looks for the payment `claim` describes. `known` is a transaction the facilitator named. `health` is
+ * a recent getHealth() answer, to share one across many lookups; it is read when not given.
+ */
+export async function findPayment(claim, known, search, health) {
+    const { chain } = search;
+    const checked = new Set();
+    const check = async (hash) => {
+        if (checked.has(hash))
+            return undefined;
+        checked.add(hash);
+        return paymentIn(await chain.getTransaction(hash), hash, claim, search);
+    };
+    try {
+        if (known !== undefined) {
+            const found = await check(known);
+            if (found !== undefined)
+                return found;
+        }
+        const range = health ?? (await chain.getHealth());
+        const end = claim.expirationLedger;
+        const from = Math.max(1, end - SEARCH_WINDOW_LEDGERS);
+        const start = Math.max(from, range.oldestLedger);
+        // The lowest latest ledger any answer reported: with several RPC nodes behind one URL, the search
+        // has covered no more than the least advanced of them had seen.
+        let latest = range.latestLedger;
+        if (start <= Math.min(end, latest)) {
+            const filters = transferFilters(search.asset, claim.payer);
+            let request = { filters, startLedger: start, endLedger: Math.min(end, latest) + 1, limit: PAGE_SIZE };
+            for (let page = 0;; page++) {
+                if (page === MAX_PAGES)
+                    return undecided(`${claim.payer} made more transfers than reconciliation searches; check its transfers with nonce ${claim.nonce} by hand`);
+                const response = await chain.getEvents(request);
+                latest = Math.min(latest, response.latestLedger);
+                let past = false;
+                for (const event of response.events) {
+                    if (event.ledger > end) {
+                        past = true;
+                        break;
+                    }
+                    // The transaction's own status decides, not the event's: current RPCs leave the deprecated
+                    // inSuccessfulContractCall unset.
+                    const found = await check(event.txHash);
+                    if (found !== undefined)
+                        return found;
+                }
+                if (past || response.events.length < PAGE_SIZE)
+                    break;
+                request = { filters, cursor: response.cursor, limit: PAGE_SIZE };
+            }
+        }
+        if (latest <= end)
+            return undecided(`the payment can still land until ledger ${end} closes (the latest is ${latest})`);
+        if (start > from) {
+            return undecided(`ledgers ${from}–${start - 1} are older than the RPC's history; look for a transfer from ${claim.payer} with nonce ${claim.nonce} in an archive`);
+        }
+        return { outcome: "not_settled", reason: `no transaction used the payment before it expired at ledger ${end}` };
+    }
+    catch (error) {
+        return undecided(`the chain could not be read: ${error.message}`);
+    }
+}
+/** Whether a transaction is the claim's payment: settled, undecided, or undefined when it isn't the payment. */
+function paymentIn(transaction, hash, claim, search) {
+    if (transaction.status !== rpc.Api.GetTransactionStatus.SUCCESS)
+        return undefined;
+    const signed = signedTransfer(transaction.envelopeXdr, claim, search.asset);
+    if (signed === undefined)
+        return undefined;
+    // It used the payer's auth entry, so the signed transfer ran. Its event must say so too [J16].
+    const moved = transfersFrom(transaction.events.contractEventsXdr.flat(), search.asset, claim.payer);
+    if (!moved.some((transfer) => transfer.to === signed.to && transfer.amount === signed.amount)) {
+        return undecided(`transaction ${hash} used the payment, but its events show no transfer of ${signed.amount} to ${signed.to}`);
+    }
+    return {
+        outcome: "settled",
+        receipt: {
+            network: search.network,
+            asset: search.asset,
+            amount: signed.amount,
+            payTo: signed.to,
+            payer: claim.payer,
+            transaction: hash,
+            settledAt: new Date(transaction.createdAt * 1000).toISOString(),
+        },
+    };
+}
+/**
+ * The transfer the payer's auth entry with the claim's nonce authorizes, if the transaction carries it.
+ * An entry with that nonce for anything else means the nonce was spent elsewhere: not this payment.
+ */
+function signedTransfer(envelope, claim, asset) {
+    for (const operation of operationsOf(envelope)) {
+        if (operation.body().switch() !== xdr.OperationType.invokeHostFunction())
+            continue;
+        for (const entry of operation.body().invokeHostFunctionOp().auth()) {
+            const credentials = addressCredentials(entry.credentials());
+            if (credentials === undefined)
+                continue;
+            if (Address.fromScAddress(credentials.address()).toString() !== claim.payer || credentials.nonce().toString() !== claim.nonce)
+                continue;
+            const authorized = entry.rootInvocation().function();
+            if (authorized.switch() !== xdr.SorobanAuthorizedFunctionType.sorobanAuthorizedFunctionTypeContractFn())
+                return undefined;
+            const call = authorized.contractFn();
+            if (Address.fromScAddress(call.contractAddress()).toString() !== asset || call.functionName().toString() !== "transfer")
+                return undefined;
+            const [from, to, amount] = call.args().map((arg) => scValToNative(arg));
+            if (from !== claim.payer || typeof to !== "string" || typeof amount !== "bigint")
+                return undefined;
+            return { to, amount: amount.toString() };
+        }
+    }
+    return undefined;
+}
+function operationsOf(envelope) {
+    switch (envelope.switch()) {
+        // The facilitator may wrap its transaction in a fee bump.
+        case xdr.EnvelopeType.envelopeTypeTxFeeBump():
+            return envelope.feeBump().tx().innerTx().v1().tx().operations();
+        case xdr.EnvelopeType.envelopeTypeTx():
+            return envelope.v1().tx().operations();
+        default:
+            return envelope.v0().tx().operations();
+    }
+}
+/** The asset's transfer events from `payer`. */
+function transfersFrom(events, asset, payer) {
+    return events.flatMap((event) => {
+        const contractId = event.contractId();
+        // Typed as Opaque[], but the SDK's own Buffer at runtime.
+        if (contractId === null || StrKey.encodeContract(contractId) !== asset)
+            return [];
+        const topics = event.body().v0().topics().map((topic) => scValToNative(topic));
+        if (topics[0] !== "transfer" || topics[1] !== payer)
+            return [];
+        return [{ to: topics[2], amount: transferAmount(event.body().v0().data())?.toString() }];
+    });
+}
+// The data is an i128, or a map with `amount` when the payee is a muxed account (CAP-67).
+function transferAmount(data) {
+    const value = scValToNative(data);
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "object" && value !== null && typeof value.amount === "bigint") {
+        return value.amount;
+    }
+    return undefined;
+}
+/** Transfer events from `payer`: a SAC's have a fourth topic, the asset's name; other SEP-41 tokens' have three. */
+function transferFilters(asset, payer) {
+    const transfer = xdr.ScVal.scvSymbol("transfer").toXDR("base64");
+    const from = Address.fromString(payer).toScVal().toXDR("base64");
+    return [{ type: "contract", contractIds: [asset], topics: [[transfer, from, "*", "*"], [transfer, from, "*"]] }];
+}
+function undecided(reason) {
+    return { outcome: "undecided", reason };
+}
+//# sourceMappingURL=onchain.js.map

package/dist/payments/onchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain.js","sourceRoot":"","sources":["../../src/payments/onchain.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,uGAAuG;AACvG,uGAAuG;AACvG,uGAAuG;AACvG,mGAAmG;AACnG,qFAAqF;AACrF,EAAE;AACF,oDAAoD;AACpD,wGAAwG;AACxG,qEAAqE;AACrE,EAAE;AACF,qGAAqG;AACrG,wGAAwG;AACxG,qGAAqG;AACrG,wGAAwG;AACxG,+EAA+E;AAG/E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAczD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,8EAA8E;AAC9E,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAmB,EACnB,KAAyB,EACzB,MAAqB,EACrB,MAAkC;IAElC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAsC,EAAE;QACvE,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,qBAAqB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,kGAAkG;QAClG,gEAAgE;QAChE,IAAI,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QAChC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,OAAO,GAA6B,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAChI,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;gBAC5B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,qFAAqF,KAAK,CAAC,KAAK,UAAU,CAAC,CAAC;gBACnK,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACjD,IAAI,IAAI,GAAG,KAAK,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACpC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;wBACvB,IAAI,GAAG,IAAI,CAAC;wBACZ,MAAM;oBACR,CAAC;oBACD,2FAA2F;oBAC3F,kCAAkC;oBAClC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACxC,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;gBACxC,CAAC;gBACD,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM;gBACtD,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC,2CAA2C,GAAG,0BAA0B,MAAM,GAAG,CAAC,CAAC;QACvH,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,WAAW,IAAI,IAAI,KAAK,GAAG,CAAC,+DAA+D,KAAK,CAAC,KAAK,eAAe,KAAK,CAAC,KAAK,gBAAgB,CAAC,CAAC;QACrK,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,+DAA+D,GAAG,EAAE,EAAE,CAAC;IAClH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,gCAAiC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,gHAAgH;AAChH,SAAS,SAAS,CAAC,WAA2C,EAAE,IAAY,EAAE,KAAmB,EAAE,MAAqB;IACtH,IAAI,WAAW,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,+FAA+F;IAC/F,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC,eAAe,IAAI,yDAAyD,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAChE;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,QAAiC,EAAE,KAAmB,EAAE,KAAa;IAC3F,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,aAAa,CAAC,kBAAkB,EAAE;YAAE,SAAS;QACnF,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5D,IAAI,WAAW,KAAK,SAAS;gBAAE,SAAS;YACxC,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,KAAK;gBAAE,SAAS;YACxI,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC;YACrD,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,6BAA6B,CAAC,uCAAuC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC1H,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,UAAU;gBAAE,OAAO,SAAS,CAAC;YAC1I,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAY,CAAC,CAAC;YACnF,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACnG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,QAAiC;IACrD,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1B,0DAA0D;QAC1D,KAAK,GAAG,CAAC,YAAY,CAAC,qBAAqB,EAAE;YAC3C,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;QAClE,KAAK,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE;YACpC,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;QACzC;YACE,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,SAAS,aAAa,CAAC,MAAoC,EAAE,KAAa,EAAE,KAAa;IACvF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACtC,0DAA0D;QAC1D,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,UAA+B,CAAC,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QACvG,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAY,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAC/D,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,IAAe;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAY,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9G,OAAQ,KAA4B,CAAC,MAAM,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oHAAoH;AACpH,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/payments/payload-checks.d.ts

@@ -0,0 +1,22 @@
+import { xdr } from "@stellar/stellar-sdk";
+import type { PaymentPayload, PaymentRequirements } from "@x402/core/types";
+/** What the checks learned about a payment that passed them. */
+export interface CheckedPayment {
+    payer: string;
+    /** The payer's auth-entry nonce, as a decimal string. */
+    nonce: string;
+    /** The last ledger at which the payer's signature is valid. Reconciliation needs it. */
+    expirationLedger: number;
+    /** sha256(JCS({ network, payer, nonce })): one per signed payment [P9]. */
+    fingerprint: string;
+}
+/** A refused payment: an x402 error reason for the 402 (§4.3). */
+export interface RefusedPayment {
+    reason: string;
+}
+/** Checks a decoded x402 payload against the requirements this provider issued. */
+export declare function checkPayment(payload: PaymentPayload, requirements: PaymentRequirements): Promise<CheckedPayment | RefusedPayment>;
+export declare function isRefused(result: CheckedPayment | RefusedPayment): result is RefusedPayment;
+/** Address credentials, in either encoding the x402 facilitator accepts. */
+export declare function addressCredentials(credentials: xdr.SorobanCredentials): xdr.SorobanAddressCredentials | undefined;
+//# sourceMappingURL=payload-checks.d.ts.map

package/dist/payments/payload-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-checks.d.ts","sourceRoot":"","sources":["../../src/payments/payload-checks.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAiD,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAYD,mFAAmF;AACnF,wBAAsB,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,GAAG,cAAc,CAAC,CA0DvI;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,GAAG,MAAM,IAAI,cAAc,CAE3F;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC,yBAAyB,GAAG,SAAS,CASjH"}

package/dist/payments/payload-checks.js

@@ -0,0 +1,113 @@
+// Local payment checks, run BEFORE the facilitator sees the payment.
+//
+// An x402 `exact` payment on Stellar is an unsigned Soroban transaction with one invokeHostFunction:
+// the USDC SAC `transfer(payer, payTo, amount)`, authorized by the payer's signed auth entry. The
+// facilitator checks it too, but the provider does not have to trust that: a payment that would pay
+// someone else, another amount or another asset is refused here with a 402.
+//
+// What these checks can't see is left to the facilitator, which simulates the transaction: whether the
+// signature is valid, for this network, under the payer's account signers or smart-wallet contract.
+//
+// The checks also read the payer's auth-entry nonce. Soroban accepts one (address, nonce) once, so
+// the payment fingerprint is sha256(JCS({ network, payer, nonce })): re-wrapping the same signed auth
+// entry in another transaction still gives the same fingerprint, and the job store refuses a second
+// job for it [P9].
+import { canonicalSha256 } from "@stellar-agent-services/protocol";
+import { Address, Networks, scValToNative, Transaction, xdr } from "@stellar/stellar-sdk";
+const PASSPHRASES = {
+    "stellar:testnet": Networks.TESTNET,
+    "stellar:pubnet": Networks.PUBLIC,
+};
+/** A signed transfer is about 1 KiB; anything far larger is not one. */
+const MAX_TRANSACTION_BASE64_LENGTH = 16 * 1024;
+const refused = (reason) => ({ reason: `invalid_exact_stellar_payload_${reason}` });
+/** Checks a decoded x402 payload against the requirements this provider issued. */
+export async function checkPayment(payload, requirements) {
+    const network = requirements.network;
+    const passphrase = PASSPHRASES[network];
+    if (passphrase === undefined)
+        return { reason: "invalid_network" };
+    const encoded = payload.payload?.transaction;
+    if (typeof encoded !== "string" || encoded.length > MAX_TRANSACTION_BASE64_LENGTH)
+        return refused("malformed");
+    let transaction;
+    try {
+        transaction = new Transaction(encoded, passphrase);
+    }
+    catch {
+        return refused("malformed");
+    }
+    // One operation: invokeHostFunction calling the asset's contract.
+    if (transaction.operations.length !== 1)
+        return refused("wrong_operation");
+    const operation = transaction.operations[0];
+    if (operation.type !== "invokeHostFunction")
+        return refused("wrong_operation");
+    if (operation.func.switch() !== xdr.HostFunctionType.hostFunctionTypeInvokeContract())
+        return refused("wrong_operation");
+    const call = operation.func.invokeContract();
+    // transfer(payer, payTo, amount) on the USDC contract, for exactly the price.
+    let from;
+    let to;
+    let amount;
+    try {
+        if (Address.fromScAddress(call.contractAddress()).toString() !== requirements.asset)
+            return refused("wrong_asset");
+        if (call.functionName().toString() !== "transfer" || call.args().length !== 3)
+            return refused("wrong_function_name");
+        [from, to, amount] = call.args().map((arg) => scValToNative(arg));
+    }
+    catch {
+        return refused("malformed");
+    }
+    if (to !== requirements.payTo)
+        return refused("wrong_recipient");
+    if (typeof amount !== "bigint" || amount !== BigInt(requirements.amount))
+        return refused("wrong_amount");
+    if (from === requirements.payTo)
+        return refused("wrong_payer");
+    // Exactly one auth entry: the payer's signature over this same transfer and nothing else.
+    const auth = operation.auth ?? [];
+    if (auth.length === 0)
+        return refused("no_auth_entries");
+    if (auth.length > 1)
+        return refused("multiple_auth_entries");
+    const entry = auth[0];
+    const credentials = addressCredentials(entry.credentials());
+    if (credentials === undefined)
+        return refused("unsupported_credential_type");
+    if (Address.fromScAddress(credentials.address()).toString() !== from)
+        return refused("auth_not_by_payer");
+    if (credentials.signature().switch() === xdr.ScValType.scvVoid())
+        return refused("missing_payer_signature");
+    const root = entry.rootInvocation();
+    if (root.subInvocations().length > 0)
+        return refused("has_subinvocations");
+    const authorized = root.function();
+    if (authorized.switch() !== xdr.SorobanAuthorizedFunctionType.sorobanAuthorizedFunctionTypeContractFn())
+        return refused("auth_mismatch");
+    if (!authorized.contractFn().toXDR().equals(call.toXDR()))
+        return refused("auth_mismatch");
+    const nonce = credentials.nonce().toString();
+    return {
+        payer: from,
+        nonce,
+        expirationLedger: credentials.signatureExpirationLedger(),
+        fingerprint: await canonicalSha256({ network, payer: from, nonce }),
+    };
+}
+export function isRefused(result) {
+    return "reason" in result;
+}
+/** Address credentials, in either encoding the x402 facilitator accepts. */
+export function addressCredentials(credentials) {
+    switch (credentials.switch()) {
+        case xdr.SorobanCredentialsType.sorobanCredentialsAddress():
+            return credentials.address();
+        case xdr.SorobanCredentialsType.sorobanCredentialsAddressV2():
+            return credentials.addressV2();
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=payload-checks.js.map

package/dist/payments/payload-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-checks.js","sourceRoot":"","sources":["../../src/payments/payload-checks.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,uGAAuG;AACvG,oGAAoG;AACpG,EAAE;AACF,mGAAmG;AACnG,sGAAsG;AACtG,oGAAoG;AACpG,mBAAmB;AAEnB,OAAO,EAAE,eAAe,EAAuB,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAmB1F,MAAM,WAAW,GAA6C;IAC5D,iBAAiB,EAAE,QAAQ,CAAC,OAAO;IACnC,gBAAgB,EAAE,QAAQ,CAAC,MAAM;CAClC,CAAC;AAEF,wEAAwE;AACxE,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE5G,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAuB,EAAE,YAAiC;IAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,OAAyB,CAAC;IACvD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACnE,MAAM,OAAO,GAAI,OAAO,CAAC,OAAiD,EAAE,WAAW,CAAC;IACxF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,6BAA6B;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAE/G,IAAI,WAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED,kEAAkE;IAClE,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;IAC7C,IAAI,SAAS,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,gBAAgB,CAAC,8BAA8B,EAAE;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IAE7C,8EAA8E;IAC9E,IAAI,IAAY,CAAC;IACjB,IAAI,EAAU,CAAC;IACf,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,YAAY,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;QACnH,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACrH,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAA8B,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,EAAE,KAAK,YAAY,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC;IACzG,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;IAE/D,0FAA0F;IAC1F,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACvB,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1G,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,6BAA6B,CAAC,uCAAuC,EAAE;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACzI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAE3F,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,IAAI;QACX,KAAK;QACL,gBAAgB,EAAE,WAAW,CAAC,yBAAyB,EAAE;QACzD,WAAW,EAAE,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAuC;IAC/D,OAAO,QAAQ,IAAI,MAAM,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,WAAmC;IACpE,QAAQ,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7B,KAAK,GAAG,CAAC,sBAAsB,CAAC,yBAAyB,EAAE;YACzD,OAAO,WAAW,CAAC,OAAO,EAAE,CAAC;QAC/B,KAAK,GAAG,CAAC,sBAAsB,CAAC,2BAA2B,EAAE;YAC3D,OAAO,WAAW,CAAC,SAAS,EAAE,CAAC;QACjC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/payments/settlement.d.ts

@@ -0,0 +1,22 @@
+import type { PaymentReceipt } from "@stellar-agent-services/protocol";
+import type { PaymentPayload, PaymentRequirements, SettleResponse } from "@x402/core/types";
+import type { Facilitator } from "./facilitator.js";
+export type Settlement = {
+    outcome: "settled";
+    receipt: PaymentReceipt;
+    response: SettleResponse;
+} | {
+    outcome: "failed";
+    reason: string;
+}
+/** `transaction`: a hash the facilitator named, which reconciliation checks first. */
+ | {
+    outcome: "uncertain";
+    reason: string;
+    transaction?: string;
+};
+/** Whether a settle error reason means the transaction was never submitted. */
+export declare function neverSubmitted(reason: string): boolean;
+/** Settles once. `payer` is the address the provider's own payment checks found. */
+export declare function settle(facilitator: Facilitator, payload: PaymentPayload, requirements: PaymentRequirements, payer: string): Promise<Settlement>;
+//# sourceMappingURL=settlement.d.ts.map

package/dist/payments/settlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../../src/payments/settlement.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,GACzE;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACvC,sFAAsF;GACpF;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBnE,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAID,oFAAoF;AACpF,wBAAsB,MAAM,CAC1B,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CA+BrB"}

package/dist/payments/settlement.js

@@ -0,0 +1,65 @@
+// Classifies the settlement outcome. This is the core of "never charge twice, never lose a payment".
+//
+// - "settled": success with a transaction hash, for the payer and network the provider checked.
+// - "failed": ONLY when the facilitator answered success: false, with no transaction hash, for a
+//   reason that means the transaction was never submitted (NOT_SUBMITTED). The user is not charged.
+// - "uncertain": everything else: timeouts, 5xx, thrown errors, unknown reasons, a transaction hash
+//   without success, or a success that names another payer or network. The job becomes
+//   payment_uncertain and is decided from on-chain data, never by charging again [J13].
+/**
+ * Reasons the @x402/stellar facilitator gives before it submits anything: its settle() verifies the
+ * payment again first, and these are its verify and pre-submission failures. Any reason starting with
+ * "invalid_" is a verify failure too. A reason not listed here is treated as uncertain, so a
+ * facilitator with other wording never makes the kit drop a payment that may have landed.
+ */
+const NOT_SUBMITTED = new Set([
+    "unsupported_scheme",
+    "network_mismatch",
+    "verification_failed",
+    "unexpected_verify_error",
+    "settle_exact_stellar_signer_selection_failed",
+    "settle_exact_stellar_transaction_signing_failed",
+    "settle_exact_stellar_fee_bump_signing_failed",
+    // sendTransaction did not accept it (ERROR, TRY_AGAIN_LATER): it never reached a ledger.
+    "settle_exact_stellar_transaction_submission_failed",
+]);
+/** Whether a settle error reason means the transaction was never submitted. */
+export function neverSubmitted(reason) {
+    return reason.startsWith("invalid_") || NOT_SUBMITTED.has(reason);
+}
+const TRANSACTION_HASH = /^[0-9a-f]{64}$/;
+/** Settles once. `payer` is the address the provider's own payment checks found. */
+export async function settle(facilitator, payload, requirements, payer) {
+    let response;
+    try {
+        response = await facilitator.settle(payload, requirements);
+    }
+    catch (error) {
+        return { outcome: "uncertain", reason: error instanceof Error ? `${error.name}: ${error.message}` : String(error) };
+    }
+    const transaction = typeof response.transaction === "string" ? response.transaction.toLowerCase() : "";
+    const uncertain = (reason) => TRANSACTION_HASH.test(transaction) ? { outcome: "uncertain", reason, transaction } : { outcome: "uncertain", reason };
+    if (response.success === true) {
+        if (!TRANSACTION_HASH.test(transaction))
+            return uncertain("settled without a transaction hash");
+        if (response.payer !== undefined && response.payer !== payer)
+            return uncertain("the facilitator named another payer");
+        if (response.network !== requirements.network)
+            return uncertain("the facilitator named another network");
+        const receipt = {
+            network: requirements.network,
+            asset: requirements.asset,
+            amount: requirements.amount,
+            payTo: requirements.payTo,
+            payer,
+            transaction,
+            settledAt: new Date().toISOString(),
+        };
+        return { outcome: "settled", receipt, response };
+    }
+    const reason = response.errorReason ?? "settlement failed";
+    if (transaction === "" && neverSubmitted(reason))
+        return { outcome: "failed", reason };
+    return uncertain(reason);
+}
+//# sourceMappingURL=settlement.js.map

package/dist/payments/settlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.js","sourceRoot":"","sources":["../../src/payments/settlement.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,oGAAoG;AACpG,oGAAoG;AACpG,uFAAuF;AACvF,wFAAwF;AAYxF;;;;;GAKG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,oBAAoB;IACpB,kBAAkB;IAClB,qBAAqB;IACrB,yBAAyB;IACzB,8CAA8C;IAC9C,iDAAiD;IACjD,8CAA8C;IAC9C,yFAAyF;IACzF,oDAAoD;CACrD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,WAAwB,EACxB,OAAuB,EACvB,YAAiC,EACjC,KAAa;IAEb,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACtH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvG,MAAM,SAAS,GAAG,CAAC,MAAc,EAAc,EAAE,CAC/C,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAExH,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAChG,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACtH,IAAI,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACzG,MAAM,OAAO,GAAmB;YAC9B,OAAO,EAAE,YAAY,CAAC,OAAyB;YAC/C,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,KAAK;YACL,WAAW;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAC3D,IAAI,WAAW,KAAK,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACvF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/payments/x402-server.d.ts

@@ -0,0 +1,8 @@
+import { type ProviderManifest } from "@stellar-agent-services/protocol";
+import type { PaymentPayload, PaymentRequired, PaymentRequirements } from "@x402/core/types";
+import type { Service } from "../define-service.js";
+export declare function paymentRequirements(manifest: ProviderManifest, service: Service): PaymentRequirements;
+export declare function paymentRequired(manifest: ProviderManifest, service: Service, error?: string): PaymentRequired;
+/** Decodes PAYMENT-SIGNATURE. Returns undefined for a header that isn't a v2 payload for these requirements. */
+export declare function readPayment(header: string, requirements: PaymentRequirements): PaymentPayload | undefined;
+//# sourceMappingURL=x402-server.d.ts.map

package/dist/payments/x402-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-server.d.ts","sourceRoot":"","sources":["../../src/payments/x402-server.ts"],"names":[],"mappings":"AAOA,OAAO,EAAiC,KAAK,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAExG,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAKpD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAGrG;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAS7G;AAoCD,gHAAgH;AAChH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,mBAAmB,GAAG,cAAc,GAAG,SAAS,CAWzG"}

package/dist/payments/x402-server.js

@@ -0,0 +1,74 @@
+// x402 resource server side: the 402 challenge and reading the paid request.
+//
+// The challenge is built from the manifest [P4]: exactly one `accepts` entry equal to the manifest's
+// payment option plus `amount` = the service price, and resource.url is the create-job URL [P5]. It
+// carries x402's Bazaar discovery extension, built from the service's schemas and first example [P6],
+// unless that would make the PAYMENT-REQUIRED header too large for common HTTP clients.
+import { createJobUrl } from "@stellar-agent-services/protocol";
+import { decodePaymentSignatureHeader, encodePaymentRequiredHeader } from "@x402/core/http";
+/** Many HTTP stacks cap all headers together at 8–16 KiB, so the extension is left out above this. */
+const MAX_CHALLENGE_HEADER_BYTES = 8 * 1024;
+export function paymentRequirements(manifest, service) {
+    const { scheme, network, asset, payTo, maxTimeoutSeconds, extra } = manifest.payment.accepts[0];
+    return { scheme, network, asset, amount: service.amount, payTo, maxTimeoutSeconds, extra };
+}
+export function paymentRequired(manifest, service, error) {
+    const challenge = {
+        x402Version: 2,
+        resource: { url: createJobUrl(manifest.baseUrl, service.name), description: service.description, mimeType: "application/json" },
+        accepts: [paymentRequirements(manifest, service)],
+    };
+    if (error !== undefined)
+        challenge.error = error;
+    const discoverable = { ...challenge, extensions: { bazaar: bazaar(service) } };
+    return encodePaymentRequiredHeader(discoverable).length <= MAX_CHALLENGE_HEADER_BYTES ? discoverable : challenge;
+}
+/**
+ * The Bazaar discovery extension (x402 `extensions.bazaar`, HTTP body form): an example request and
+ * response, and a schema whose `body` is the service's inputSchema.
+ */
+function bazaar(service) {
+    const example = service.examples?.[0];
+    const info = { input: { type: "http", method: "POST", bodyType: "json", body: example?.input ?? {} } };
+    const properties = {
+        input: {
+            type: "object",
+            properties: {
+                type: { type: "string", const: "http" },
+                method: { type: "string", enum: ["POST"] },
+                bodyType: { type: "string", enum: ["json"] },
+                body: service.inputSchema,
+            },
+            required: ["type", "method", "bodyType", "body"],
+            additionalProperties: false,
+        },
+    };
+    if (example !== undefined) {
+        info["output"] = { type: "json", example: example.output };
+        properties["output"] = {
+            type: "object",
+            properties: { type: { type: "string" }, example: service.outputSchema },
+            required: ["type"],
+        };
+    }
+    return {
+        info,
+        schema: { $schema: "https://json-schema.org/draft/2020-12/schema", type: "object", properties, required: ["input"] },
+    };
+}
+/** Decodes PAYMENT-SIGNATURE. Returns undefined for a header that isn't a v2 payload for these requirements. */
+export function readPayment(header, requirements) {
+    let payload;
+    try {
+        payload = decodePaymentSignatureHeader(header);
+    }
+    catch {
+        return undefined;
+    }
+    const accepted = payload.accepted;
+    const fields = ["scheme", "network", "asset", "amount", "payTo"];
+    if (payload.x402Version !== 2 || accepted === undefined)
+        return undefined;
+    return fields.every((field) => accepted[field] === requirements[field]) ? payload : undefined;
+}
+//# sourceMappingURL=x402-server.js.map

package/dist/payments/x402-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-server.js","sourceRoot":"","sources":["../../src/payments/x402-server.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,sGAAsG;AACtG,wFAAwF;AAExF,OAAO,EAAE,YAAY,EAA0C,MAAM,kCAAkC,CAAC;AACxG,OAAO,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAI5F,sGAAsG;AACtG,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,CAAC;AAE5C,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,OAAgB;IAC9E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA0B,EAAE,OAAgB,EAAE,KAAc;IAC1F,MAAM,SAAS,GAAoB;QACjC,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE;QAC/H,OAAO,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KAClD,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;IACjD,MAAM,YAAY,GAAoB,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAChG,OAAO,2BAA2B,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,0BAA0B,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACnH,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,OAAgB;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAe,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC;IACnH,MAAM,UAAU,GAAe;QAC7B,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;gBACvC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;gBAC5C,IAAI,EAAE,OAAO,CAAC,WAAW;aAC1B;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;YAChD,oBAAoB,EAAE,KAAK;SAC5B;KACF,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3D,UAAU,CAAC,QAAQ,CAAC,GAAG;YACrB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;YACvE,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;KACrH,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,YAAiC;IAC3E,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAoD,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;IAC1E,IAAI,OAAO,CAAC,WAAW,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAChG,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,63 @@
+import { type ProviderInfo, type ProviderManifest, type StellarNetwork } from "@stellar-agent-services/protocol";
+import type { Service } from "./define-service.js";
+import { type RateLimitConfig } from "./http/rate-limit.js";
+import type { JobStore } from "./jobs/store.js";
+import { type ChainReader } from "./payments/chain.js";
+import { type Facilitator } from "./payments/facilitator.js";
+export interface ProviderConfig {
+    /** Public HTTPS URL that job paths are relative to. http://localhost only with `dev`. */
+    baseUrl: string;
+    network: StellarNetwork;
+    /** The address that receives payments. Public, never a secret key. */
+    payTo: string;
+    provider: ProviderInfo;
+    services: Service[];
+    /** A facilitator URL, or a client: httpFacilitator(url, options) for API-key headers, a fake in tests. */
+    facilitator: string | Facilitator;
+    /** Default: memoryStore(), which loses jobs on restart. Use sqliteStore(path) in production. */
+    store?: JobStore;
+    /**
+     * The Soroban RPC to read the chain with: a URL, or a ChainReader (a fake one in tests). It decides
+     * payment_uncertain jobs and times on-success jobs by ledger. Default: the public RPC on testnet.
+     * pubnet has no public one, so pass your own. false: no chain reads, and payment_uncertain jobs wait
+     * for `provider-kit reconcile`.
+     */
+    rpc?: string | ChainReader | false;
+    /** How long a signed payment is valid, 30–300 (§4.1). Default 60. */
+    maxTimeoutSeconds?: number;
+    /**
+     * How long a settlement may take before the job is payment_uncertain. Default maxTimeoutSeconds + 30,
+     * since the facilitator waits for the transaction's ledger. A later answer is still recorded.
+     */
+    settleTimeoutSeconds?: number;
+    /** How long finished jobs stay retrievable [J15]. At least 3600; default 86400. */
+    retentionSeconds?: number;
+    /** Default /.well-known/stellar-agent-services.json on the baseUrl origin. */
+    manifestPath?: string;
+    /** How long create-job waits before answering 202. Default and maximum 30 [J9]. */
+    holdSeconds?: number;
+    /** Per-caller limit on create-job requests (429). Default: none. Capacity is set per service. */
+    rateLimit?: RateLimitConfig;
+    /**
+     * Whether this process runs queued upfront jobs. Default true. Set false on HTTP-only instances when
+     * separate worker processes, with the same services and store, run them.
+     */
+    runQueuedJobs?: boolean;
+    /** How long a worker's claim on a running upfront job lasts without renewal. Default 30. */
+    leaseSeconds?: number;
+    /** Allows an http://localhost baseUrl and facilitator for local development [M6]. */
+    dev?: boolean;
+    /** Test-only response-loss drill (docs/job-recovery.md). Never enable in production. */
+    loseCreateJobResponse?: boolean;
+}
+export interface Provider {
+    manifest: ProviderManifest;
+    manifestUrl: string;
+    fetch(request: Request): Promise<Response>;
+    /** Startup checks, recovery and workers. Call it before serving; it throws if payments can't work. */
+    ready(): Promise<void>;
+    /** Stops the workers and timers and closes the store. Jobs in progress are resumed by the next start. */
+    close(): Promise<void>;
+}
+export declare function createProvider(config: ProviderConfig): Provider;
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAwE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvL,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAOzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAA2D,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEtH,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;IACxB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,0GAA0G;IAC1G,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC;IAClC,gGAAgG;IAChG,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,KAAK,CAAC;IACnC,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wFAAwF;IACxF,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,sGAAsG;IACtG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,yGAAyG;IACzG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAyI/D"}