@usesigil/kit 0.1.0

package/dist/x402/codec.d.ts

@@ -0,0 +1,26 @@
+/**
+ * x402 Codec — Kit-native
+ *
+ * Base64 encode/decode and header parse/encode with schema validation.
+ * Zero external dependencies.
+ */
+import type { PaymentRequired, PaymentPayload, SettleResponse } from "./types.js";
+/** Base64 encode a JSON/ASCII string. Platform-agnostic (no Buffer dependency). */
+export declare function base64Encode(data: string): string;
+/** Base64 decode to a JSON/ASCII string. Platform-agnostic (no Buffer dependency). */
+export declare function base64Decode(encoded: string): string;
+/**
+ * Decode a base64-encoded PAYMENT-REQUIRED header value.
+ * Validates schema: x402Version is number, accepts is non-empty array,
+ * each entry has required fields.
+ */
+export declare function decodePaymentRequiredHeader(header: string): PaymentRequired;
+/**
+ * Encode a PaymentPayload as a base64 string for PAYMENT-SIGNATURE header.
+ */
+export declare function encodePaymentSignatureHeader(payload: PaymentPayload): string;
+/**
+ * Decode a base64-encoded PAYMENT-RESPONSE header value.
+ */
+export declare function decodePaymentResponseHeader(header: string): SettleResponse;
+//# sourceMappingURL=codec.d.ts.map

package/dist/x402/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/x402/codec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CA+D3E;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAE5E;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAS1E"}

package/dist/x402/codec.js

@@ -0,0 +1,95 @@
+/**
+ * x402 Codec — Kit-native
+ *
+ * Base64 encode/decode and header parse/encode with schema validation.
+ * Zero external dependencies.
+ */
+import { X402ParseError } from "./errors.js";
+import { U64_MAX } from "../types.js";
+// ─── Base64 Helpers ─────────────────────────────────────────────────────────
+/** Base64 encode a JSON/ASCII string. Platform-agnostic (no Buffer dependency). */
+export function base64Encode(data) {
+    return btoa(data);
+}
+/** Base64 decode to a JSON/ASCII string. Platform-agnostic (no Buffer dependency). */
+export function base64Decode(encoded) {
+    return atob(encoded);
+}
+// ─── Header Decode/Encode ───────────────────────────────────────────────────
+/**
+ * Decode a base64-encoded PAYMENT-REQUIRED header value.
+ * Validates schema: x402Version is number, accepts is non-empty array,
+ * each entry has required fields.
+ */
+export function decodePaymentRequiredHeader(header) {
+    let parsed;
+    try {
+        const json = base64Decode(header);
+        parsed = JSON.parse(json);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new X402ParseError(`Failed to decode PAYMENT-REQUIRED header: ${msg}`);
+    }
+    const obj = parsed;
+    // Schema validation
+    if (typeof obj.x402Version !== "number") {
+        throw new X402ParseError("x402Version must be a number");
+    }
+    if (!Array.isArray(obj.accepts) || obj.accepts.length === 0) {
+        throw new X402ParseError("accepts must be a non-empty array");
+    }
+    for (let i = 0; i < obj.accepts.length; i++) {
+        const entry = obj.accepts[i];
+        if (typeof entry.scheme !== "string") {
+            throw new X402ParseError(`accepts[${i}].scheme must be a string`);
+        }
+        if (typeof entry.network !== "string") {
+            throw new X402ParseError(`accepts[${i}].network must be a string`);
+        }
+        if (typeof entry.asset !== "string") {
+            throw new X402ParseError(`accepts[${i}].asset must be a string`);
+        }
+        if (typeof entry.amount !== "string" || entry.amount.length === 0) {
+            throw new X402ParseError(`accepts[${i}].amount must be a non-empty string`);
+        }
+        // Validate amount is a valid non-negative integer string (BUG-7/BUG-15: use BigInt to avoid precision loss)
+        try {
+            const parsed = BigInt(entry.amount);
+            if (parsed < 0n) {
+                throw new X402ParseError(`accepts[${i}].amount must be non-negative (got: "${entry.amount}")`);
+            }
+            if (parsed > U64_MAX) {
+                throw new X402ParseError(`accepts[${i}].amount exceeds u64 max (got: "${entry.amount}")`);
+            }
+        }
+        catch (e) {
+            if (e instanceof X402ParseError)
+                throw e;
+            throw new X402ParseError(`accepts[${i}].amount must be a valid integer string (got: "${entry.amount}")`);
+        }
+        if (typeof entry.payTo !== "string") {
+            throw new X402ParseError(`accepts[${i}].payTo must be a string`);
+        }
+    }
+    return parsed;
+}
+/**
+ * Encode a PaymentPayload as a base64 string for PAYMENT-SIGNATURE header.
+ */
+export function encodePaymentSignatureHeader(payload) {
+    return base64Encode(JSON.stringify(payload));
+}
+/**
+ * Decode a base64-encoded PAYMENT-RESPONSE header value.
+ */
+export function decodePaymentResponseHeader(header) {
+    try {
+        return JSON.parse(base64Decode(header));
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new X402ParseError(`Failed to decode PAYMENT-RESPONSE header: ${msg}`);
+    }
+}
+//# sourceMappingURL=codec.js.map

package/dist/x402/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/x402/codec.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,+EAA+E;AAE/E,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,cAAc,CACtB,6CAA6C,GAAG,EAAE,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,oBAAoB;IACpB,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,cAAc,CAAC,8BAA8B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,cAAc,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAA4B,CAAC;QACxD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,cAAc,CACtB,WAAW,CAAC,qCAAqC,CAClD,CAAC;QACJ,CAAC;QACD,4GAA4G;QAC5G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,cAAc,CACtB,WAAW,CAAC,wCAAwC,KAAK,CAAC,MAAM,IAAI,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,cAAc,CACtB,WAAW,CAAC,mCAAmC,KAAK,CAAC,MAAM,IAAI,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,cAAc;gBAAE,MAAM,CAAC,CAAC;YACzC,MAAM,IAAI,cAAc,CACtB,WAAW,CAAC,kDAAkD,KAAK,CAAC,MAAM,IAAI,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO,MAAyB,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAuB;IAClE,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAmB,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,cAAc,CACtB,6CAA6C,GAAG,EAAE,CACnD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/x402/errors.d.ts

@@ -0,0 +1,34 @@
+/**
+ * x402 Error Classes — Kit-native
+ *
+ * Five distinct error types for x402 payment handling.
+ * Each maps to a specific SDK error code (7024-7030).
+ */
+/** Malformed PAYMENT-REQUIRED header (code 7024). */
+export declare class X402ParseError extends Error {
+    readonly code = 7024;
+    constructor(message: string);
+}
+/** General x402 payment failure (code 7025). */
+export declare class X402PaymentError extends Error {
+    readonly code = 7025;
+    constructor(message: string);
+}
+/** No compatible Solana payment option (code 7026). */
+export declare class X402UnsupportedError extends Error {
+    readonly code = 7026;
+    constructor(message: string);
+}
+/** payTo address not in destination allowlist (code 7027). */
+export declare class X402DestinationBlockedError extends Error {
+    readonly payTo: string;
+    readonly code = 7027;
+    constructor(payTo: string, message?: string);
+}
+/** Duplicate payment detected within replay window (code 7028). */
+export declare class X402ReplayError extends Error {
+    readonly nonceKey: string;
+    readonly code = 7028;
+    constructor(nonceKey: string, message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/x402/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/x402/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qDAAqD;AACrD,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,QAAQ;gBACT,OAAO,EAAE,MAAM;CAI5B;AAED,gDAAgD;AAChD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,QAAQ;gBACT,OAAO,EAAE,MAAM;CAI5B;AAED,uDAAuD;AACvD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,QAAQ;gBACT,OAAO,EAAE,MAAM;CAI5B;AAED,8DAA8D;AAC9D,qBAAa,2BAA4B,SAAQ,KAAK;aAGlC,KAAK,EAAE,MAAM;IAF/B,QAAQ,CAAC,IAAI,QAAQ;gBAEH,KAAK,EAAE,MAAM,EAC7B,OAAO,CAAC,EAAE,MAAM;CAQnB;AAED,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,QAAQ,EAAE,MAAM;IAFlC,QAAQ,CAAC,IAAI,QAAQ;gBAEH,QAAQ,EAAE,MAAM,EAChC,OAAO,CAAC,EAAE,MAAM;CAQnB"}

package/dist/x402/errors.js

@@ -0,0 +1,53 @@
+/**
+ * x402 Error Classes — Kit-native
+ *
+ * Five distinct error types for x402 payment handling.
+ * Each maps to a specific SDK error code (7024-7030).
+ */
+/** Malformed PAYMENT-REQUIRED header (code 7024). */
+export class X402ParseError extends Error {
+    code = 7024;
+    constructor(message) {
+        super(`x402 parse error: ${message}`);
+        this.name = "X402ParseError";
+    }
+}
+/** General x402 payment failure (code 7025). */
+export class X402PaymentError extends Error {
+    code = 7025;
+    constructor(message) {
+        super(`x402 payment error: ${message}`);
+        this.name = "X402PaymentError";
+    }
+}
+/** No compatible Solana payment option (code 7026). */
+export class X402UnsupportedError extends Error {
+    code = 7026;
+    constructor(message) {
+        super(`x402 unsupported: ${message}`);
+        this.name = "X402UnsupportedError";
+    }
+}
+/** payTo address not in destination allowlist (code 7027). */
+export class X402DestinationBlockedError extends Error {
+    payTo;
+    code = 7027;
+    constructor(payTo, message) {
+        super(message ??
+            `x402 destination blocked: payTo ${payTo} is not in the allowed destinations list`);
+        this.payTo = payTo;
+        this.name = "X402DestinationBlockedError";
+    }
+}
+/** Duplicate payment detected within replay window (code 7028). */
+export class X402ReplayError extends Error {
+    nonceKey;
+    code = 7028;
+    constructor(nonceKey, message) {
+        super(message ??
+            `x402 replay detected: duplicate payment for nonce ${nonceKey}`);
+        this.nonceKey = nonceKey;
+        this.name = "X402ReplayError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/x402/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/x402/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qDAAqD;AACrD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,GAAG,IAAI,CAAC;IACrB,YAAY,OAAe;QACzB,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,gDAAgD;AAChD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,IAAI,CAAC;IACrB,YAAY,OAAe;QACzB,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,IAAI,CAAC;IACrB,YAAY,OAAe;QACzB,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAGlC;IAFT,IAAI,GAAG,IAAI,CAAC;IACrB,YACkB,KAAa,EAC7B,OAAgB;QAEhB,KAAK,CACH,OAAO;YACL,mCAAmC,KAAK,0CAA0C,CACrF,CAAC;QANc,UAAK,GAAL,KAAK,CAAQ;QAO7B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB;IAFT,IAAI,GAAG,IAAI,CAAC;IACrB,YACkB,QAAgB,EAChC,OAAgB;QAEhB,KAAK,CACH,OAAO;YACL,qDAAqD,QAAQ,EAAE,CAClE,CAAC;QANc,aAAQ,GAAR,QAAQ,CAAQ;QAOhC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/dist/x402/facilitator-verify.d.ts

@@ -0,0 +1,24 @@
+/**
+ * x402 Facilitator Verification — Kit-native
+ *
+ * Validates settlement responses from x402 facilitators.
+ * Non-fatal — logs warnings on suspicious responses.
+ */
+import type { Rpc, SolanaRpcApi } from "@solana/kit";
+import type { SettleResponse } from "./types.js";
+export interface FacilitatorVerifyResult {
+    valid: boolean;
+    warnings: string[];
+}
+/**
+ * Validate a settlement response from the x402 facilitator.
+ *
+ * Checks:
+ * 1. success: true must include a transaction signature
+ * 2. Transaction signature must be valid base58 (64-88 chars)
+ * 3. Network field matches expected (if provided)
+ * 4. Failed settlement
+ * 5. On-chain confirmation (when rpc provided)
+ */
+export declare function validateSettlement(settlement: SettleResponse, expectedNetwork?: string, rpc?: Rpc<SolanaRpcApi>, timeoutMs?: number): Promise<FacilitatorVerifyResult>;
+//# sourceMappingURL=facilitator-verify.d.ts.map

package/dist/x402/facilitator-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facilitator-verify.d.ts","sourceRoot":"","sources":["../../src/x402/facilitator-verify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,cAAc,EAC1B,eAAe,CAAC,EAAE,MAAM,EACxB,GAAG,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EACvB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,uBAAuB,CAAC,CA2DlC"}

package/dist/x402/facilitator-verify.js

@@ -0,0 +1,74 @@
+/**
+ * x402 Facilitator Verification — Kit-native
+ *
+ * Validates settlement responses from x402 facilitators.
+ * Non-fatal — logs warnings on suspicious responses.
+ */
+/** Base58 character set for validation */
+const BASE58_REGEX = /^[1-9A-HJ-NP-Za-km-z]{64,88}$/;
+/**
+ * Validate a settlement response from the x402 facilitator.
+ *
+ * Checks:
+ * 1. success: true must include a transaction signature
+ * 2. Transaction signature must be valid base58 (64-88 chars)
+ * 3. Network field matches expected (if provided)
+ * 4. Failed settlement
+ * 5. On-chain confirmation (when rpc provided)
+ */
+export async function validateSettlement(settlement, expectedNetwork, rpc, timeoutMs) {
+    const warnings = [];
+    // 1. Successful settlement must include tx signature
+    if (settlement.success && !settlement.transaction) {
+        warnings.push("Settlement reports success but has no transaction signature");
+        return { valid: false, warnings };
+    }
+    // 2. Validate tx signature format (base58, 64-88 chars)
+    if (settlement.transaction && !BASE58_REGEX.test(settlement.transaction)) {
+        warnings.push(`Settlement transaction signature has invalid format: "${settlement.transaction.slice(0, 20)}..."`);
+        return { valid: false, warnings };
+    }
+    // 3. Network mismatch check
+    if (expectedNetwork &&
+        settlement.network &&
+        settlement.network !== expectedNetwork) {
+        warnings.push(`Settlement network "${settlement.network}" does not match expected "${expectedNetwork}"`);
+    }
+    // 4. Failed settlement
+    if (!settlement.success) {
+        warnings.push(`Settlement failed: ${settlement.errorReason ?? "unknown reason"}`);
+        return { valid: false, warnings };
+    }
+    // 5. On-chain confirmation (when rpc provided and transaction exists)
+    if (rpc && settlement.transaction) {
+        try {
+            const confirmed = await pollSignatureStatus(rpc, settlement.transaction, timeoutMs ?? 10_000);
+            if (!confirmed) {
+                warnings.push(`Settlement TX ${settlement.transaction.slice(0, 12)}... not confirmed on-chain within ${timeoutMs ?? 10_000}ms`);
+            }
+        }
+        catch {
+            warnings.push(`Failed to verify settlement TX on-chain: ${settlement.transaction.slice(0, 12)}...`);
+        }
+    }
+    return { valid: true, warnings };
+}
+async function pollSignatureStatus(rpc, signature, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    let delay = 500;
+    while (Date.now() < deadline) {
+        const result = await rpc.getSignatureStatuses([signature]).send();
+        const statuses = result.value;
+        if (statuses?.[0]) {
+            if (statuses[0].err)
+                return false;
+            const level = statuses[0].confirmationStatus;
+            if (level === "confirmed" || level === "finalized")
+                return true;
+        }
+        await new Promise(r => setTimeout(r, delay));
+        delay = Math.min(delay * 1.5, 2_000);
+    }
+    return false;
+}
+//# sourceMappingURL=facilitator-verify.js.map

package/dist/x402/facilitator-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facilitator-verify.js","sourceRoot":"","sources":["../../src/x402/facilitator-verify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,0CAA0C;AAC1C,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAOrD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA0B,EAC1B,eAAwB,EACxB,GAAuB,EACvB,SAAkB;IAElB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,qDAAqD;IACrD,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CACX,6DAA6D,CAC9D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,wDAAwD;IACxD,IAAI,UAAU,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CACX,yDAAyD,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CACnG,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,4BAA4B;IAC5B,IACE,eAAe;QACf,UAAU,CAAC,OAAO;QAClB,UAAU,CAAC,OAAO,KAAK,eAAe,EACtC,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,uBAAuB,UAAU,CAAC,OAAO,8BAA8B,eAAe,GAAG,CAC1F,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CACX,sBAAsB,UAAU,CAAC,WAAW,IAAI,gBAAgB,EAAE,CACnE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,sEAAsE;IACtE,IAAI,GAAG,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CACzC,GAAG,EACH,UAAU,CAAC,WAAW,EACtB,SAAS,IAAI,MAAM,CACpB,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CACX,iBAAiB,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,SAAS,IAAI,MAAM,IAAI,CACjH,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CACX,4CAA4C,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,GAAsB,EACtB,SAAiB,EACjB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC,SAAyE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClI,MAAM,QAAQ,GAAI,MAAiG,CAAC,KAAK,CAAC;QAC1H,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC7C,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/x402/index.d.ts

@@ -0,0 +1,14 @@
+export type { PaymentRequired, PaymentRequirements, ResourceInfo, PaymentPayload, SettleResponse, X402Config, ShieldedFetchOptions, ShieldedFetchResponse, X402PaymentResult, X402PaymentEvent, } from "./types.js";
+export { X402ParseError, X402PaymentError, X402UnsupportedError, X402DestinationBlockedError, X402ReplayError, } from "./errors.js";
+export { decodePaymentRequiredHeader, encodePaymentSignatureHeader, decodePaymentResponseHeader, base64Encode, base64Decode, } from "./codec.js";
+export { selectPaymentOption } from "./payment-selector.js";
+export { buildX402TransferInstruction, deriveAta, transferToInspectable, TOKEN_PROGRAM_ID as X402_TOKEN_PROGRAM_ID, ATA_PROGRAM_ID as X402_ATA_PROGRAM_ID, } from "./transfer-builder.js";
+export { NonceTracker } from "./nonce-tracker.js";
+export type { NonceStorage } from "./nonce-tracker.js";
+export { validatePaymentAmount, recordPaymentAmount, resetPaymentHistory, } from "./amount-guard.js";
+export { evaluateX402Payment, recordX402Spend } from "./policy-bridge.js";
+export { validateSettlement } from "./facilitator-verify.js";
+export type { FacilitatorVerifyResult } from "./facilitator-verify.js";
+export { emitPaymentEvent, createPaymentEvent } from "./audit-trail.js";
+export { shieldedFetch, createShieldedFetch } from "./shielded-fetch.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/x402/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/x402/index.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,cAAc,EACd,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,GAChB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,YAAY,EACZ,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,qBAAqB,EACrB,gBAAgB,IAAI,qBAAqB,EACzC,cAAc,IAAI,mBAAmB,GACtC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGxE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/x402/index.js

@@ -0,0 +1,23 @@
+// x402 — Kit-native HTTP 402 Payment Required support
+// Barrel exports
+// Errors
+export { X402ParseError, X402PaymentError, X402UnsupportedError, X402DestinationBlockedError, X402ReplayError, } from "./errors.js";
+// Codec
+export { decodePaymentRequiredHeader, encodePaymentSignatureHeader, decodePaymentResponseHeader, base64Encode, base64Decode, } from "./codec.js";
+// Payment Selector
+export { selectPaymentOption } from "./payment-selector.js";
+// Transfer Builder
+export { buildX402TransferInstruction, deriveAta, transferToInspectable, TOKEN_PROGRAM_ID as X402_TOKEN_PROGRAM_ID, ATA_PROGRAM_ID as X402_ATA_PROGRAM_ID, } from "./transfer-builder.js";
+// Nonce Tracker
+export { NonceTracker } from "./nonce-tracker.js";
+// Amount Guard
+export { validatePaymentAmount, recordPaymentAmount, resetPaymentHistory, } from "./amount-guard.js";
+// Policy Bridge
+export { evaluateX402Payment, recordX402Spend } from "./policy-bridge.js";
+// Facilitator Verification
+export { validateSettlement } from "./facilitator-verify.js";
+// Audit Trail
+export { emitPaymentEvent, createPaymentEvent } from "./audit-trail.js";
+// Core: shieldedFetch
+export { shieldedFetch, createShieldedFetch } from "./shielded-fetch.js";
+//# sourceMappingURL=index.js.map

package/dist/x402/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/x402/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,iBAAiB;AAgBjB,SAAS;AACT,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,QAAQ;AACR,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,YAAY,EACZ,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,mBAAmB;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,mBAAmB;AACnB,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,qBAAqB,EACrB,gBAAgB,IAAI,qBAAqB,EACzC,cAAc,IAAI,mBAAmB,GACtC,MAAM,uBAAuB,CAAC;AAE/B,gBAAgB;AAChB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,eAAe;AACf,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,gBAAgB;AAChB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1E,2BAA2B;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,cAAc;AACd,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,sBAAsB;AACtB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/x402/nonce-tracker.d.ts

@@ -0,0 +1,65 @@
+/**
+ * x402 Nonce Tracker — Kit-native
+ *
+ * Replay prevention via resource+payTo+amount deduplication.
+ * Simple string-key dedup with configurable TTL, no crypto dependencies.
+ */
+/**
+ * Pluggable storage backend for NonceTracker persistence.
+ * Default: in-memory Map (lost on restart).
+ * Production: implement with Redis, SQLite, or file-based storage.
+ */
+export interface NonceStorage {
+    has(key: string): Promise<boolean> | boolean;
+    set(key: string, expiresAt: number): Promise<void> | void;
+    delete(key: string): Promise<void> | void;
+}
+/**
+ * Tracks x402 payment nonces to prevent duplicate payments.
+ *
+ * Dedup key: `url|payTo|amount` — same payment to same destination
+ * for same resource within window = replay.
+ *
+ * Pass a `NonceStorage` implementation for persistence across restarts.
+ * Without it, replay protection is lost on process restart.
+ */
+export declare class NonceTracker {
+    private readonly storage;
+    private readonly externalStorage;
+    private readonly ttlMs;
+    constructor(options?: {
+        ttlMs?: number;
+        storage?: NonceStorage;
+    });
+    /**
+     * Build the dedup key from payment parameters.
+     */
+    static buildKey(url: string, payTo: string, amount: string): string;
+    /**
+     * Check if a payment is a duplicate.
+     * Does NOT record — call record() after successful payment.
+     */
+    isDuplicate(url: string, payTo: string, amount: string): Promise<boolean>;
+    /**
+     * Check and throw if duplicate.
+     * @throws X402ReplayError if the payment was already seen
+     */
+    checkOrThrow(url: string, payTo: string, amount: string): Promise<void>;
+    /**
+     * Record a successful payment to prevent replays.
+     */
+    record(url: string, payTo: string, amount: string): Promise<void>;
+    /**
+     * Number of active (non-expired) in-memory entries.
+     */
+    get size(): number;
+    /**
+     * Clear all in-memory entries.
+     */
+    clear(): void;
+    /**
+     * Garbage collect expired in-memory entries.
+     */
+    private gc;
+}
+//# sourceMappingURL=nonce-tracker.d.ts.map

package/dist/x402/nonce-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-tracker.d.ts","sourceRoot":"","sources":["../../src/x402/nonce-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3C;AAgCD;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE;IAMhE;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAYnE;;;OAGG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ/E;;;OAGG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7E;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAGjB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,OAAO,CAAC,EAAE;CAQX"}

package/dist/x402/nonce-tracker.js

@@ -0,0 +1,123 @@
+/**
+ * x402 Nonce Tracker — Kit-native
+ *
+ * Replay prevention via resource+payTo+amount deduplication.
+ * Simple string-key dedup with configurable TTL, no crypto dependencies.
+ */
+import { X402ReplayError } from "./errors.js";
+/** Default nonce window: 5 minutes */
+const DEFAULT_TTL_MS = 5 * 60 * 1000;
+/** Default in-memory storage — no persistence across restarts. */
+class InMemoryNonceStorage {
+    entries = new Map();
+    has(key) {
+        return this.entries.has(key);
+    }
+    set(key, expiresAt) {
+        this.entries.set(key, { timestamp: expiresAt });
+    }
+    delete(key) {
+        this.entries.delete(key);
+    }
+    /** Expose entries for GC iteration */
+    [Symbol.iterator]() {
+        return this.entries[Symbol.iterator]();
+    }
+    get size() {
+        return this.entries.size;
+    }
+    clear() {
+        this.entries.clear();
+    }
+}
+/**
+ * Tracks x402 payment nonces to prevent duplicate payments.
+ *
+ * Dedup key: `url|payTo|amount` — same payment to same destination
+ * for same resource within window = replay.
+ *
+ * Pass a `NonceStorage` implementation for persistence across restarts.
+ * Without it, replay protection is lost on process restart.
+ */
+export class NonceTracker {
+    storage;
+    externalStorage;
+    ttlMs;
+    constructor(options) {
+        this.ttlMs = options?.ttlMs ?? DEFAULT_TTL_MS;
+        this.storage = new InMemoryNonceStorage();
+        this.externalStorage = options?.storage ?? null;
+    }
+    /**
+     * Build the dedup key from payment parameters.
+     */
+    static buildKey(url, payTo, amount) {
+        let normalizedUrl;
+        try {
+            const parsed = new URL(url);
+            parsed.search = "";
+            normalizedUrl = parsed.toString().replace(/\/$/, "");
+        }
+        catch {
+            normalizedUrl = url;
+        }
+        return `${normalizedUrl}|${payTo}|${amount}`;
+    }
+    /**
+     * Check if a payment is a duplicate.
+     * Does NOT record — call record() after successful payment.
+     */
+    async isDuplicate(url, payTo, amount) {
+        this.gc();
+        const key = NonceTracker.buildKey(url, payTo, amount);
+        if (this.storage.has(key))
+            return true;
+        if (this.externalStorage)
+            return this.externalStorage.has(key);
+        return false;
+    }
+    /**
+     * Check and throw if duplicate.
+     * @throws X402ReplayError if the payment was already seen
+     */
+    async checkOrThrow(url, payTo, amount) {
+        if (await this.isDuplicate(url, payTo, amount)) {
+            throw new X402ReplayError(NonceTracker.buildKey(url, payTo, amount));
+        }
+    }
+    /**
+     * Record a successful payment to prevent replays.
+     */
+    async record(url, payTo, amount) {
+        const key = NonceTracker.buildKey(url, payTo, amount);
+        const expiresAt = Date.now() + this.ttlMs;
+        this.storage.set(key, expiresAt);
+        if (this.externalStorage)
+            await this.externalStorage.set(key, expiresAt);
+    }
+    /**
+     * Number of active (non-expired) in-memory entries.
+     */
+    get size() {
+        this.gc();
+        return this.storage.size;
+    }
+    /**
+     * Clear all in-memory entries.
+     */
+    clear() {
+        this.storage.clear();
+    }
+    /**
+     * Garbage collect expired in-memory entries.
+     */
+    gc() {
+        const cutoff = Date.now();
+        for (const [key, entry] of this.storage) {
+            if (entry.timestamp < cutoff) {
+                this.storage.delete(key);
+            }
+        }
+    }
+}
+//# sourceMappingURL=nonce-tracker.js.map

package/dist/x402/nonce-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-tracker.js","sourceRoot":"","sources":["../../src/x402/nonce-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,sCAAsC;AACtC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAiBrC,kEAAkE;AAClE,MAAM,oBAAoB;IACP,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,SAAiB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,sCAAsC;IACtC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,CAAuB;IAC9B,eAAe,CAAsB;IACrC,KAAK,CAAS;IAE/B,YAAY,OAAoD;QAC9D,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,cAAc,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;QACxD,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YACnB,aAAa,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,GAAG,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,aAAa,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;QAC1D,IAAI,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;QAC3D,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;QACrD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,IAAI,CAAC,EAAE,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,EAAE;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/x402/payment-selector.d.ts

@@ -0,0 +1,20 @@
+/**
+ * x402 Payment Option Selector — Kit-native
+ *
+ * Selects a Solana-compatible payment option from the accepts array.
+ * Includes SECURITY-CRITICAL payTo destination allowlisting.
+ */
+import type { PaymentRequired, PaymentRequirements, X402Config } from "./types.js";
+/**
+ * Select a Solana-compatible payment option from the accepts array.
+ *
+ * Filtering order:
+ * 1. Network: must start with "solana:" (CAIP-2 format)
+ * 2. Token allowlist: asset must be in config.allowedTokens (if set)
+ * 3. payTo allowlist: destination must be in config.allowedDestinations (if set) — SECURITY-CRITICAL
+ *
+ * @throws X402DestinationBlockedError if Solana options exist but all destinations are blocked
+ * @throws X402UnsupportedError if no compatible Solana option found
+ */
+export declare function selectPaymentOption(paymentRequired: PaymentRequired, config?: X402Config): PaymentRequirements;
+//# sourceMappingURL=payment-selector.d.ts.map

package/dist/x402/payment-selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-selector.d.ts","sourceRoot":"","sources":["../../src/x402/payment-selector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,UAAU,EACX,MAAM,YAAY,CAAC;AAGpB;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,eAAe,EAChC,MAAM,CAAC,EAAE,UAAU,GAClB,mBAAmB,CA6CrB"}