@t2000/sdk 10.13.2 → 10.13.3

package/dist/index.cjs

@@ -1151,8 +1151,9 @@ async function payWithMpp(args) {
   if (probe.status !== 402) {
     return finalize(probe, { paid: false });
   }
-  const requirements = await pickSuiExactRequirements(probe, client.network);
-  if (requirements) {
+  const pick = await pickSuiExactRequirements(probe, client.network);
+  if (pick.kind === "payable") {
+    const requirements = pick.requirements;
     const { isX402EscrowRequirements } = await import('@suimpp/mpp/x402');
     if (isX402EscrowRequirements(requirements)) {
       const escrow = requirements.extra.escrow;
@@ -1185,6 +1186,13 @@ async function payWithMpp(args) {
     await reportDirectPayment(result, options.url);
     return result;
   }
+  if (pick.kind === "incomplete") {
+    throw new exports.T2000Error(
+      "FACILITATOR_REJECTION",
+      "Seller's x402 challenge is incomplete (missing extra.suimpp) \u2014 nothing was paid. The 402 advertises an exact/sui entry but carries no settlement challenge to bind a payment to; the seller must emit the createX402Requirements shape to be x402-payable.",
+      { reason: "incomplete-x402-accepts" }
+    );
+  }
   throw new exports.T2000Error(
     "FACILITATOR_REJECTION",
     `Endpoint returned 402 without an x402 'exact' / sui:${client.network} requirement in the body or an MPP 'sui' challenge in WWW-Authenticate. Nothing this SDK can pay.`
@@ -1223,17 +1231,34 @@ async function parseMppSuiChallenge(response) {
     return void 0;
   }
 }
+function hasCompleteSuimppChallenge(entry) {
+  const s = entry.extra?.suimpp;
+  return !!s && typeof s.challengeId === "string" && s.challengeId.length > 0 && typeof s.nonce === "number" && typeof s.chain === "string" && s.chain.length > 0 && typeof s.minEpoch === "string" && typeof s.maxEpoch === "string";
+}
 async function pickSuiExactRequirements(response, network) {
   try {
     const body2 = await response.clone().json();
     const want = `sui:${network === "testnet" ? "testnet" : "mainnet"}`;
-    return body2.accepts?.find((a) => a.scheme === "exact" && a.network === want);
+    const entry = body2.accepts?.find((a) => a.scheme === "exact" && a.network === want);
+    if (!entry) return { kind: "none" };
+    const { isX402EscrowRequirements } = await import('@suimpp/mpp/x402');
+    if (hasCompleteSuimppChallenge(entry) || isX402EscrowRequirements(entry)) {
+      return { kind: "payable", requirements: entry };
+    }
+    return { kind: "incomplete" };
   } catch {
-    return void 0;
+    return { kind: "none" };
   }
 }
 async function payViaX402(args) {
   const { signer, client, options, reqInit, requirements } = args;
+  if (!hasCompleteSuimppChallenge(requirements)) {
+    throw new exports.T2000Error(
+      "FACILITATOR_REJECTION",
+      "Seller's x402 challenge is incomplete (missing extra.suimpp) \u2014 nothing was paid.",
+      { reason: "incomplete-x402-accepts" }
+    );
+  }
   const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import('@suimpp/mpp/x402');
   const amountRaw = BigInt(requirements.maxAmountRequired);
   assertWithinMaxPrice(atomicToHuman(amountRaw, await assetDecimals(requirements.asset)), options.maxPrice);