@wtflabs/x402 0.0.1-beta.3 → 0.0.1-beta.5

package/dist/esm/chunk-TAYXZJPR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/schemes/exact/index.ts","../../src/schemes/exact/evm/index.ts","../../src/schemes/exact/evm/eip3009/facilitator.ts","../../src/schemes/exact/evm/permit/facilitator.ts","../../src/schemes/exact/evm/permit/sign.ts","../../src/types/shared/evm/permitProxyABI.ts","../../src/schemes/exact/evm/permit2/facilitator.ts","../../src/schemes/exact/evm/eip3009/index.ts","../../src/schemes/exact/evm/permit/index.ts","../../src/schemes/exact/evm/permit/client.ts","../../src/schemes/exact/evm/permit2/index.ts","../../src/schemes/exact/evm/permit2/sign.ts","../../src/schemes/exact/evm/permit2/client.ts","../../src/schemes/exact/svm/index.ts","../../src/schemes/exact/svm/facilitator/settle.ts","../../src/schemes/exact/svm/facilitator/verify.ts"],"sourcesContent":["export * as evm from \"./evm\";\nexport * as svm from \"./svm\";\n\nexport const SCHEME = \"exact\";\n","import { Account, Chain, Transport } from \"viem\";\nimport { ConnectedClient, SignerWallet } from \"../../../types/shared/evm\";\nimport {\n  PaymentPayload,\n  PaymentRequirements,\n  SettleResponse,\n  VerifyResponse,\n  ExactEvmPayload,\n  Eip3009PaymentPayload,\n  PermitPaymentPayload,\n  Permit2PaymentPayload,\n} from \"../../../types/verify\";\nimport * as eip3009Facilitator from \"./eip3009/facilitator\";\nimport * as permitFacilitator from \"./permit/facilitator\";\nimport * as permit2Facilitator from \"./permit2/facilitator\";\n\n// Export all three authorization types\nexport * as eip3009 from \"./eip3009\";\nexport * as permit from \"./permit\";\nexport * as permit2 from \"./permit2\";\n\n// Export utilities\nexport * from \"./utils/paymentUtils\";\n\n/**\n * Unified verify function that routes to the appropriate authorization type handler\n *\n * @param client - The public client used for blockchain interactions\n * @param payload - The signed payment payload\n * @param paymentRequirements - The payment requirements that the payload must satisfy\n * @returns A VerifyResponse indicating if the payment is valid\n */\nexport async function verify<\n  transport extends Transport,\n  chain extends Chain,\n  account extends Account | undefined,\n>(\n  client: ConnectedClient<transport, chain, account>,\n  payload: PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<VerifyResponse> {\n  const exactEvmPayload = payload.payload as ExactEvmPayload;\n\n  // Route to appropriate verification based on authorization type\n  switch (exactEvmPayload.authorizationType) {\n    case \"eip3009\":\n      return eip3009Facilitator.verify(\n        client,\n        payload as Eip3009PaymentPayload,\n        paymentRequirements,\n      );\n\n    case \"permit\":\n      return permitFacilitator.verify(client, payload as PermitPaymentPayload, paymentRequirements);\n\n    case \"permit2\":\n      return permit2Facilitator.verify(\n        client,\n        payload as Permit2PaymentPayload,\n        paymentRequirements,\n      );\n\n    default:\n      return {\n        isValid: false,\n        invalidReason: \"unsupported_authorization_type\",\n        payer: \"\",\n      };\n  }\n}\n\n/**\n * Unified settle function that routes to the appropriate authorization type handler\n *\n * @param wallet - The facilitator wallet that will execute the transaction\n * @param paymentPayload - The signed payment payload\n * @param paymentRequirements - The payment requirements\n * @returns A SettleResponse containing the transaction status and hash\n */\nexport async function settle<transport extends Transport, chain extends Chain>(\n  wallet: SignerWallet<chain, transport>,\n  paymentPayload: PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<SettleResponse> {\n  const payload = paymentPayload.payload as ExactEvmPayload;\n\n  // Route to appropriate settlement based on authorization type\n  switch (payload.authorizationType) {\n    case \"eip3009\":\n      return eip3009Facilitator.settle(\n        wallet,\n        paymentPayload as Eip3009PaymentPayload,\n        paymentRequirements,\n      );\n\n    case \"permit\":\n      return permitFacilitator.settle(\n        wallet,\n        paymentPayload as PermitPaymentPayload,\n        paymentRequirements,\n      );\n\n    case \"permit2\":\n      return permit2Facilitator.settle(\n        wallet,\n        paymentPayload as Permit2PaymentPayload,\n        paymentRequirements,\n      );\n\n    default:\n      return {\n        success: false,\n        errorReason: \"unsupported_authorization_type\",\n        transaction: \"\",\n        network: paymentPayload.network,\n        payer: \"\",\n      };\n  }\n}\n","import { Account, Address, Chain, getAddress, Hex, parseErc6492Signature, Transport } from \"viem\";\nimport { getNetworkId } from \"../../../../shared\";\nimport { getVersion, getERC20Balance } from \"../../../../shared/evm\";\nimport {\n  usdcABI as abi,\n  authorizationTypes,\n  config,\n  ConnectedClient,\n  SignerWallet,\n} from \"../../../../types/shared/evm\";\nimport {\n  PaymentRequirements,\n  SettleResponse,\n  VerifyResponse,\n  ExactEvmPayload,\n  Eip3009PaymentPayload,\n} from \"../../../../types/verify\";\nimport { SCHEME } from \"../../../exact\";\n\n/**\n * Verifies an EIP-3009 payment payload against the required payment details\n *\n * This function performs several verification steps:\n * - Verifies protocol version compatibility\n * - Validates the permit signature\n * - Confirms USDC contract address is correct for the chain\n * - Checks permit deadline is sufficiently in the future\n * - Verifies client has sufficient USDC balance\n * - Ensures payment amount meets required minimum\n *\n * @param client - The public client used for blockchain interactions\n * @param payload - The signed payment payload containing transfer parameters and signature\n * @param paymentRequirements - The payment requirements that the payload must satisfy\n * @returns A ValidPaymentRequest indicating if the payment is valid and any invalidation reason\n */\nexport async function verify<\n  transport extends Transport,\n  chain extends Chain,\n  account extends Account | undefined,\n>(\n  client: ConnectedClient<transport, chain, account>,\n  payload: Eip3009PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<VerifyResponse> {\n  const exactEvmPayload = payload.payload as ExactEvmPayload;\n\n  // Verify this is EIP-3009\n  if (exactEvmPayload.authorizationType !== \"eip3009\") {\n    return {\n      isValid: false,\n      invalidReason: \"unsupported_authorization_type\",\n      payer: \"\",\n    };\n  }\n\n  /* TODO: work with security team on brainstorming more verification steps\n  verification steps for EIP-3009:\n    - ✅ verify payload version\n    - ✅ verify usdc address is correct for the chain\n    - ✅ verify permit signature\n    - ✅ verify deadline\n    - verify nonce is current\n    - ✅ verify client has enough funds to cover paymentRequirements.maxAmountRequired\n    - ✅ verify value in payload is enough to cover paymentRequirements.maxAmountRequired\n    - check min amount is above some threshold we think is reasonable for covering gas\n    - verify resource is not already paid for (next version)\n    */\n\n  // Verify payload version\n  if (payload.scheme !== SCHEME || paymentRequirements.scheme !== SCHEME) {\n    return {\n      isValid: false,\n      invalidReason: `unsupported_scheme`,\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n\n  let name: string;\n  let chainId: number;\n  let erc20Address: Address;\n  let version: string;\n  try {\n    chainId = getNetworkId(payload.network);\n    name = paymentRequirements.extra?.name ?? config[chainId.toString()].usdcName;\n    erc20Address = paymentRequirements.asset as Address;\n    version = paymentRequirements.extra?.version ?? (await getVersion(client, erc20Address));\n  } catch {\n    return {\n      isValid: false,\n      invalidReason: `invalid_network`,\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n  // Verify permit signature is recoverable for the owner address\n  const permitTypedData = {\n    types: authorizationTypes,\n    primaryType: \"TransferWithAuthorization\" as const,\n    domain: {\n      name,\n      version,\n      chainId,\n      verifyingContract: erc20Address,\n    },\n    message: {\n      from: exactEvmPayload.authorization.from,\n      to: exactEvmPayload.authorization.to,\n      value: exactEvmPayload.authorization.value,\n      validAfter: exactEvmPayload.authorization.validAfter,\n      validBefore: exactEvmPayload.authorization.validBefore,\n      nonce: exactEvmPayload.authorization.nonce,\n    },\n  };\n  const recoveredAddress = await client.verifyTypedData({\n    address: exactEvmPayload.authorization.from as Address,\n    ...permitTypedData,\n    signature: exactEvmPayload.signature as Hex,\n  });\n  if (!recoveredAddress) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_signature\", //\"Invalid permit signature\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n\n  // Verify that payment was made to the correct address\n  if (getAddress(exactEvmPayload.authorization.to) !== getAddress(paymentRequirements.payTo)) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_recipient_mismatch\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n\n  // Verify deadline is not yet expired\n  // Pad 3 block to account for round tripping\n  if (\n    BigInt(exactEvmPayload.authorization.validBefore) < BigInt(Math.floor(Date.now() / 1000) + 6)\n  ) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_authorization_valid_before\", //\"Deadline on permit isn't far enough in the future\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n  // Verify deadline is not yet valid\n  if (BigInt(exactEvmPayload.authorization.validAfter) > BigInt(Math.floor(Date.now() / 1000))) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_authorization_valid_after\", //\"Deadline on permit is in the future\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n  // Verify client has enough funds to cover paymentRequirements.maxAmountRequired\n  const balance = await getERC20Balance(\n    client,\n    erc20Address,\n    exactEvmPayload.authorization.from as Address,\n  );\n  if (balance < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"insufficient_funds\", //\"Client does not have enough funds\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n  // Verify value in payload is enough to cover paymentRequirements.maxAmountRequired\n  if (BigInt(exactEvmPayload.authorization.value) < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_authorization_value\", //\"Value in payload is not enough to cover paymentRequirements.maxAmountRequired\",\n      payer: exactEvmPayload.authorization.from,\n    };\n  }\n  return {\n    isValid: true,\n    invalidReason: undefined,\n    payer: exactEvmPayload.authorization.from,\n  };\n}\n\n/**\n * Settles an EIP-3009 payment by executing a USDC transferWithAuthorization transaction\n *\n * This function executes the actual USDC transfer using the signed authorization from the user.\n * The facilitator wallet submits the transaction but does not need to hold or transfer any tokens itself.\n *\n * @param wallet - The facilitator wallet that will submit the transaction\n * @param paymentPayload - The signed payment payload containing the transfer parameters and signature\n * @param paymentRequirements - The original payment details that were used to create the payload\n * @returns A PaymentExecutionResponse containing the transaction status and hash\n */\nexport async function settle<transport extends Transport, chain extends Chain>(\n  wallet: SignerWallet<chain, transport>,\n  paymentPayload: Eip3009PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<SettleResponse> {\n  const payload = paymentPayload.payload as ExactEvmPayload;\n\n  // Verify this is EIP-3009\n  if (payload.authorizationType !== \"eip3009\") {\n    return {\n      success: false,\n      errorReason: \"unsupported_authorization_type\",\n      transaction: \"\",\n      network: paymentPayload.network,\n      payer: \"\",\n    };\n  }\n\n  // re-verify to ensure the payment is still valid\n  const valid = await verify(wallet, paymentPayload, paymentRequirements);\n\n  if (!valid.isValid) {\n    return {\n      success: false,\n      network: paymentPayload.network,\n      transaction: \"\",\n      errorReason: valid.invalidReason ?? \"invalid_scheme\", //`Payment is no longer valid: ${valid.invalidReason}`,\n      payer: payload.authorization.from,\n    };\n  }\n\n  // Returns the original signature (no-op) if the signature is not a 6492 signature\n  const { signature } = parseErc6492Signature(payload.signature as Hex);\n\n  const tx = await wallet.writeContract({\n    address: paymentRequirements.asset as Address,\n    abi,\n    functionName: \"transferWithAuthorization\" as const,\n    args: [\n      payload.authorization.from as Address,\n      payload.authorization.to as Address,\n      BigInt(payload.authorization.value),\n      BigInt(payload.authorization.validAfter),\n      BigInt(payload.authorization.validBefore),\n      payload.authorization.nonce as Hex,\n      signature,\n    ],\n    chain: wallet.chain as Chain,\n  });\n\n  const receipt = await wallet.waitForTransactionReceipt({ hash: tx });\n\n  if (receipt.status !== \"success\") {\n    return {\n      success: false,\n      errorReason: \"invalid_transaction_state\", //`Transaction failed`,\n      transaction: tx,\n      network: paymentPayload.network,\n      payer: payload.authorization.from,\n    };\n  }\n\n  return {\n    success: true,\n    transaction: tx,\n    network: paymentPayload.network,\n    payer: payload.authorization.from,\n  };\n}\n","import { Account, Address, Chain, getAddress, Hex, Transport } from \"viem\";\nimport { getNetworkId } from \"../../../../shared\";\nimport { getERC20Balance, getVersion } from \"../../../../shared/evm\";\nimport {\n  permitTypes,\n  erc20PermitABI,\n  ConnectedClient,\n  SignerWallet,\n} from \"../../../../types/shared/evm\";\nimport {\n  PaymentRequirements,\n  PermitPaymentPayload,\n  SettleResponse,\n  VerifyResponse,\n} from \"../../../../types/verify\";\nimport { SCHEME } from \"../../../exact\";\nimport { splitSignature } from \"./sign\";\nimport { permitProxyContractABI } from \"../../../../types/shared/evm/permitProxyABI\";\n\n/**\n * Verifies an EIP-2612 Permit payment payload\n *\n * @param client - The public client used for blockchain interactions\n * @param payload - The signed payment payload containing permit parameters and signature\n * @param paymentRequirements - The payment requirements that the payload must satisfy\n * @returns A VerifyResponse indicating if the payment is valid and any invalidation reason\n */\nexport async function verify<\n  transport extends Transport,\n  chain extends Chain,\n  account extends Account | undefined,\n>(\n  client: ConnectedClient<transport, chain, account>,\n  payload: PermitPaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<VerifyResponse> {\n  // Validate payload has correct authorizationType\n  if (\n    payload.payload.authorizationType !== \"permit\" ||\n    payload.scheme !== SCHEME ||\n    paymentRequirements.scheme !== SCHEME\n  ) {\n    return {\n      isValid: false,\n      invalidReason: \"unsupported_scheme\",\n    };\n  }\n\n  const permitPayload = payload.payload;\n  const { owner, spender, value, deadline, nonce } = permitPayload.authorization;\n\n  // Get token name for EIP-712 domain\n  let name: string;\n  let version: string;\n  let erc20Address: Address;\n  let chainId: number;\n\n  try {\n    chainId = getNetworkId(payload.network);\n    erc20Address = paymentRequirements.asset as Address;\n    name =\n      paymentRequirements.extra?.name ??\n      ((await client.readContract({\n        address: erc20Address,\n        abi: erc20PermitABI,\n        functionName: \"name\",\n      })) as string);\n    version = paymentRequirements.extra?.version ?? (await getVersion(client, erc20Address));\n  } catch {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_network\",\n      payer: owner,\n    };\n  }\n\n  // Verify permit signature\n  const permitTypedData = {\n    types: permitTypes,\n    domain: {\n      name: name,\n      version: version,\n      chainId,\n      verifyingContract: erc20Address,\n    },\n    primaryType: \"Permit\" as const,\n    message: {\n      owner: getAddress(owner),\n      spender: getAddress(spender),\n      value: value,\n      nonce: nonce,\n      deadline: deadline,\n    },\n  };\n\n  const recoveredAddress = await client.verifyTypedData({\n    address: owner as Address,\n    ...permitTypedData,\n    signature: permitPayload.signature as Hex,\n  });\n\n  if (!recoveredAddress) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_permit_signature\",\n      payer: owner,\n    };\n  }\n\n  // Verify deadline hasn't passed\n  const now = Math.floor(Date.now() / 1000);\n  if (BigInt(deadline) < now) {\n    return {\n      isValid: false,\n      invalidReason: \"permit_expired\",\n      payer: owner,\n    };\n  }\n\n  // Verify spender matches the facilitator's wallet address or proxy executor\n  // In x402, the facilitator acts as the spender to execute transferFrom\n  // The client must authorize the facilitator's wallet address as the spender\n  // If proxy is used, verify the spender matches the proxy executor\n  if (paymentRequirements.extra?.proxyAddress) {\n    // When using proxy, the spender should be the proxy executor\n    if (getAddress(spender) !== getAddress(paymentRequirements.extra?.proxyAddress)) {\n      return {\n        isValid: false,\n        invalidReason: \"invalid_spender_address\",\n        payer: owner,\n      };\n    }\n  } else {\n    // When not using proxy, the spender should be the facilitator's wallet\n    if (client.account && getAddress(spender) !== getAddress(client.account.address)) {\n      return {\n        isValid: false,\n        invalidReason: \"invalid_spender_address\",\n        payer: owner,\n      };\n    }\n  }\n\n  // Verify owner has sufficient balance\n  const balance = await getERC20Balance(client, erc20Address, owner as Address);\n  if (balance < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"insufficient_funds\",\n      payer: owner,\n    };\n  }\n\n  // Verify value meets the required amount\n  if (BigInt(value) < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_authorization_value\",\n      payer: owner,\n    };\n  }\n\n  return {\n    isValid: true,\n    payer: owner,\n  };\n}\n\n/**\n * Settles an EIP-2612 Permit payment by calling permit() then transferFrom()\n *\n * @param wallet - The facilitator wallet that will execute the permit and transfer\n * @param paymentPayload - The signed payment payload containing permit parameters and signature\n * @param paymentRequirements - The payment requirements\n * @returns A SettleResponse containing the transaction status and hash\n */\nexport async function settle<transport extends Transport, chain extends Chain>(\n  wallet: SignerWallet<chain, transport>,\n  paymentPayload: PermitPaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<SettleResponse> {\n  const permitPayload = paymentPayload.payload;\n\n  if (permitPayload.authorizationType !== \"permit\") {\n    return {\n      success: false,\n      errorReason: \"invalid_authorization_type\",\n      transaction: \"\",\n      network: paymentPayload.network,\n      payer: \"\",\n    };\n  }\n\n  // Re-verify to ensure the payment is still valid\n  const valid = await verify(wallet, paymentPayload, paymentRequirements);\n\n  if (!valid.isValid) {\n    return {\n      success: false,\n      network: paymentPayload.network,\n      transaction: \"\",\n      errorReason: valid.invalidReason ?? \"invalid_payment\",\n      payer: permitPayload.authorization.owner,\n    };\n  }\n\n  const { owner, spender, value, deadline } = permitPayload.authorization;\n  const { v, r, s } = splitSignature(permitPayload.signature as Hex);\n  const tokenAddress = paymentRequirements.asset as Address;\n\n  // 获取 facilitator 的当前 nonce\n  const txNonce = await wallet.getTransactionCount({\n    address: wallet.account.address,\n  });\n\n  let transactionHash: Hex;\n\n  if (paymentRequirements.extra?.proxyAddress) {\n    // 使用 proxy 合约执行 permit + transfer\n    transactionHash = await wallet.writeContract({\n      address: paymentRequirements.extra.proxyAddress as Address,\n      abi: permitProxyContractABI,\n      functionName: \"permitAndTransfer\",\n      args: [\n        tokenAddress,\n        owner as Address,\n        spender as Address,\n        BigInt(value),\n        BigInt(deadline),\n        v,\n        r,\n        s,\n        paymentRequirements.payTo as Address,\n      ],\n      chain: wallet.chain as Chain,\n      nonce: txNonce,\n    });\n\n    // 等待交易确认\n    const receipt = await wallet.waitForTransactionReceipt({ hash: transactionHash });\n\n    if (receipt.status !== \"success\") {\n      return {\n        success: false,\n        errorReason: \"transaction_failed\",\n        transaction: transactionHash,\n        network: paymentPayload.network,\n        payer: owner,\n      };\n    }\n  } else {\n    // 原有的 permit + transferFrom 逻辑\n    const [permitTx, transferTx] = await Promise.all([\n      // Call permit to approve the spender\n      wallet.writeContract({\n        address: tokenAddress,\n        abi: erc20PermitABI,\n        functionName: \"permit\",\n        args: [owner as Address, spender as Address, BigInt(value), BigInt(deadline), v, r, s],\n        chain: wallet.chain as Chain,\n        nonce: txNonce,\n      }),\n      // Call transferFrom to transfer tokens to payTo address\n      wallet.writeContract({\n        address: tokenAddress,\n        abi: erc20PermitABI,\n        functionName: \"transferFrom\",\n        args: [owner as Address, paymentRequirements.payTo as Address, BigInt(value)],\n        chain: wallet.chain as Chain,\n        nonce: txNonce + 1,\n      }),\n    ]);\n\n    // 等待两笔交易都确认\n    const [, receipt] = await Promise.all([\n      wallet.waitForTransactionReceipt({ hash: permitTx }),\n      wallet.waitForTransactionReceipt({ hash: transferTx }),\n    ]);\n\n    if (receipt.status !== \"success\") {\n      return {\n        success: false,\n        errorReason: \"transaction_failed\",\n        transaction: transferTx,\n        network: paymentPayload.network,\n        payer: owner,\n      };\n    }\n\n    transactionHash = transferTx;\n  }\n\n  return {\n    success: true,\n    transaction: transactionHash,\n    network: paymentPayload.network,\n    payer: owner,\n  };\n}\n","import { Chain, getAddress, Hex, LocalAccount, Transport } from \"viem\";\nimport { getNetworkId } from \"../../../../shared\";\nimport {\n  permitTypes,\n  erc20PermitABI,\n  isSignerWallet,\n  SignerWallet,\n} from \"../../../../types/shared/evm\";\nimport { PermitEvmPayloadAuthorization, PaymentRequirements } from \"../../../../types/verify\";\nimport { getVersion } from \"../../../../shared/evm/usdc\";\n\n/**\n * Signs an EIP-2612 Permit authorization for ERC20 approval\n *\n * @param walletClient - The wallet client that will sign the permit\n * @param params - The permit parameters\n * @param params.owner - The address of the token owner\n * @param params.spender - The address authorized to spend tokens\n * @param params.value - The amount of tokens to approve (in base units)\n * @param params.deadline - Unix timestamp after which the permit is no longer valid\n * @param paymentRequirements - The payment requirements containing asset and network information\n * @param paymentRequirements.asset - The address of the ERC20 token contract\n * @param paymentRequirements.network - The network where the token exists\n * @returns The signature and nonce for the permit\n */\nexport async function signPermit<transport extends Transport, chain extends Chain>(\n  walletClient: SignerWallet<chain, transport> | LocalAccount,\n  { owner, spender, value, deadline }: Omit<PermitEvmPayloadAuthorization, \"nonce\">,\n  { asset, network }: PaymentRequirements,\n): Promise<{ signature: Hex; nonce: string }> {\n  const chainId = getNetworkId(network);\n  const tokenAddress = getAddress(asset);\n\n  // Get the current nonce for the owner\n  let nonce: bigint;\n  let name: string;\n  let version: string;\n\n  if (isSignerWallet(walletClient)) {\n    // Get nonce, name, and version in parallel\n    [nonce, name, version] = await Promise.all([\n      walletClient.readContract({\n        address: tokenAddress,\n        abi: erc20PermitABI,\n        functionName: \"nonces\",\n        args: [getAddress(owner)],\n      }) as Promise<bigint>,\n      walletClient.readContract({\n        address: tokenAddress,\n        abi: erc20PermitABI,\n        functionName: \"name\",\n      }) as Promise<string>,\n      getVersion(walletClient, tokenAddress),\n    ]);\n  } else {\n    throw new Error(\"Local account signing for permit requires a connected client\");\n  }\n\n  const data = {\n    types: permitTypes,\n    domain: {\n      name,\n      version,\n      chainId,\n      verifyingContract: tokenAddress,\n    },\n    primaryType: \"Permit\" as const,\n    message: {\n      owner: getAddress(owner),\n      spender: getAddress(spender),\n      value,\n      nonce,\n      deadline,\n    },\n  };\n\n  if (isSignerWallet(walletClient)) {\n    const signature = await walletClient.signTypedData(data);\n    return {\n      signature,\n      nonce: nonce.toString(),\n    };\n  }\n\n  // LocalAccount with signTypedData\n  const account = walletClient as LocalAccount;\n  if (account.signTypedData) {\n    const signature = await account.signTypedData(data);\n    return {\n      signature,\n      nonce: nonce.toString(),\n    };\n  }\n\n  throw new Error(\"Invalid wallet client provided does not support signTypedData\");\n}\n\n/**\n * Helper function to split signature into v, r, s components\n * Required for calling the permit function on-chain\n *\n * @param signature - The signature to split\n * @returns The v, r, s components of the signature\n */\nexport function splitSignature(signature: Hex): { v: number; r: Hex; s: Hex } {\n  const sig = signature.slice(2); // Remove 0x prefix\n  const r = `0x${sig.slice(0, 64)}` as Hex;\n  const s = `0x${sig.slice(64, 128)}` as Hex;\n  let v = parseInt(sig.slice(128, 130), 16);\n\n  // Handle legacy v values\n  if (v < 27) {\n    v += 27;\n  }\n\n  return { v, r, s };\n}\n","export const permitProxyContractABI = [\n  {\n    inputs: [\n      {\n        internalType: \"address\",\n        name: \"token\",\n        type: \"address\",\n      },\n      {\n        internalType: \"address\",\n        name: \"owner\",\n        type: \"address\",\n      },\n      {\n        internalType: \"address\",\n        name: \"spender\",\n        type: \"address\",\n      },\n      {\n        internalType: \"uint256\",\n        name: \"value\",\n        type: \"uint256\",\n      },\n      {\n        internalType: \"uint256\",\n        name: \"deadline\",\n        type: \"uint256\",\n      },\n      {\n        internalType: \"uint8\",\n        name: \"v\",\n        type: \"uint8\",\n      },\n      {\n        internalType: \"bytes32\",\n        name: \"r\",\n        type: \"bytes32\",\n      },\n      {\n        internalType: \"bytes32\",\n        name: \"s\",\n        type: \"bytes32\",\n      },\n      {\n        internalType: \"address\",\n        name: \"to\",\n        type: \"address\",\n      },\n    ],\n    name: \"permitAndTransfer\",\n    outputs: [],\n    stateMutability: \"nonpayable\",\n    type: \"function\",\n  },\n] as const;\n","import {\n  Account,\n  Address,\n  Chain,\n  encodeAbiParameters,\n  getAddress,\n  Hex,\n  keccak256,\n  Transport,\n} from \"viem\";\nimport { getNetworkId } from \"../../../../shared\";\nimport { getERC20Balance, getERC20Allowance } from \"../../../../shared/evm\";\nimport {\n  permit2Types,\n  permit2WitnessTypes,\n  permit2ABI,\n  PERMIT2_ADDRESS,\n  WITNESS_TYPE_STRING,\n  ConnectedClient,\n  SignerWallet,\n} from \"../../../../types/shared/evm\";\nimport {\n  PaymentRequirements,\n  Permit2PaymentPayload,\n  SettleResponse,\n  VerifyResponse,\n} from \"../../../../types/verify\";\nimport { SCHEME } from \"../../../exact\";\n\n/**\n * Verifies a Permit2 payment payload (with or without witness)\n *\n * Supports both witness and non-witness modes:\n * - Witness mode: Verifies that the recipient address is bound to the signature\n * - Non-witness mode: Uses standard PermitTransferFrom verification\n *\n * @param client - The public client used for blockchain interactions\n * @param payload - The signed payment payload containing permit2 parameters and signature\n * @param paymentRequirements - The payment requirements that the payload must satisfy\n * @returns A VerifyResponse indicating if the payment is valid and any invalidation reason\n */\nexport async function verify<\n  transport extends Transport,\n  chain extends Chain,\n  account extends Account | undefined,\n>(\n  client: ConnectedClient<transport, chain, account>,\n  payload: Permit2PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<VerifyResponse> {\n  // Validate payload has correct authorizationType\n  if (\n    payload.payload.authorizationType !== \"permit2\" ||\n    payload.scheme !== SCHEME ||\n    paymentRequirements.scheme !== SCHEME\n  ) {\n    return {\n      isValid: false,\n      invalidReason: \"unsupported_scheme\",\n    };\n  }\n\n  const permit2Payload = payload.payload;\n  const { owner, spender, token, amount, deadline, nonce, to } = permit2Payload.authorization;\n\n  const chainId = getNetworkId(payload.network);\n  const tokenAddress = getAddress(token);\n  const ownerAddress = getAddress(owner);\n\n  // Detect witness mode based on the presence of the `to` field\n  const hasWitness = !!to;\n\n  // If witness mode is enabled, verify that `to` matches `payTo`\n  if (hasWitness) {\n    if (getAddress(to!) !== getAddress(paymentRequirements.payTo as string)) {\n      return {\n        isValid: false,\n        invalidReason: \"witness_recipient_mismatch\",\n        payer: owner,\n      };\n    }\n  }\n\n  // Verify permit2 signature (witness or non-witness)\n  const permit2TypedData = hasWitness\n    ? {\n      types: permit2WitnessTypes,\n      domain: {\n        name: \"Permit2\",\n        chainId,\n        verifyingContract: PERMIT2_ADDRESS,\n      },\n      primaryType: \"PermitWitnessTransferFrom\" as const,\n      message: {\n        permitted: {\n          token: tokenAddress,\n          amount,\n        },\n        spender: getAddress(spender),\n        nonce,\n        deadline,\n        witness: {\n          to: getAddress(to!),\n        },\n      },\n    }\n    : {\n      types: permit2Types,\n      domain: {\n        name: \"Permit2\",\n        chainId,\n        verifyingContract: PERMIT2_ADDRESS,\n      },\n      primaryType: \"PermitTransferFrom\" as const,\n      message: {\n        permitted: {\n          token: tokenAddress,\n          amount,\n        },\n        spender: getAddress(spender),\n        nonce,\n        deadline,\n      },\n    };\n\n  const recoveredAddress = await client.verifyTypedData({\n    address: ownerAddress,\n    ...permit2TypedData,\n    signature: permit2Payload.signature as Hex,\n  });\n\n  if (!recoveredAddress) {\n    return {\n      isValid: false,\n      invalidReason: hasWitness ? \"invalid_permit2_witness_signature\" : \"invalid_permit2_signature\",\n      payer: owner,\n    };\n  }\n\n  // Verify deadline hasn't passed\n  const now = Math.floor(Date.now() / 1000);\n  if (BigInt(deadline) < now) {\n    return {\n      isValid: false,\n      invalidReason: \"permit2_expired\",\n      payer: owner,\n    };\n  }\n\n  // Verify spender matches the facilitator's wallet address\n  // In x402, the facilitator acts as the spender to execute permitTransferFrom\n  // The client must authorize the facilitator's wallet address as the spender\n  if (client.account && getAddress(spender) !== getAddress(client.account.address)) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_spender_address\",\n      payer: owner,\n    };\n  }\n\n  // Verify token address matches payment requirements\n  if (tokenAddress.toLowerCase() !== (paymentRequirements.asset as string).toLowerCase()) {\n    return {\n      isValid: false,\n      invalidReason: \"token_mismatch\",\n      payer: owner,\n    };\n  }\n\n  // Verify owner has approved Permit2 contract\n  // This is a critical check - users must approve Uniswap Permit2 once before using it\n  const allowance = await getERC20Allowance(client, tokenAddress, ownerAddress, PERMIT2_ADDRESS);\n  if (allowance < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"permit2_not_approved\",\n      payer: owner,\n    };\n  }\n\n  // Verify owner has sufficient token balance\n  const balance = await getERC20Balance(client, tokenAddress, ownerAddress);\n  if (balance < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"insufficient_funds\",\n      payer: owner,\n    };\n  }\n\n  // Verify amount meets the required amount\n  if (BigInt(amount) < BigInt(paymentRequirements.maxAmountRequired)) {\n    return {\n      isValid: false,\n      invalidReason: \"invalid_exact_evm_payload_authorization_value\",\n      payer: owner,\n    };\n  }\n\n  return {\n    isValid: true,\n    payer: owner,\n  };\n}\n\n/**\n * Settles a Permit2 payment by calling permitTransferFrom() or permitWitnessTransferFrom()\n *\n * Automatically selects the appropriate function based on whether the payment includes\n * a witness (recipient address binding).\n *\n * @param wallet - The facilitator wallet that will execute the permit transfer\n * @param paymentPayload - The signed payment payload containing permit2 parameters and signature\n * @param paymentRequirements - The payment requirements\n * @returns A SettleResponse containing the transaction status and hash\n */\nexport async function settle<transport extends Transport, chain extends Chain>(\n  wallet: SignerWallet<chain, transport>,\n  paymentPayload: Permit2PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): Promise<SettleResponse> {\n  const permit2Payload = paymentPayload.payload;\n\n  if (permit2Payload.authorizationType !== \"permit2\") {\n    return {\n      success: false,\n      errorReason: \"invalid_authorization_type\",\n      transaction: \"\",\n      network: paymentPayload.network,\n      payer: \"\",\n    };\n  }\n\n  // Re-verify to ensure the payment is still valid\n  const valid = await verify(wallet, paymentPayload, paymentRequirements);\n\n  if (!valid.isValid) {\n    return {\n      success: false,\n      network: paymentPayload.network,\n      transaction: \"\",\n      errorReason: valid.invalidReason ?? \"invalid_payment\",\n      payer: permit2Payload.authorization.owner,\n    };\n  }\n\n  const { owner, token, amount, deadline, nonce, to } = permit2Payload.authorization;\n  const tokenAddress = getAddress(token);\n  const ownerAddress = getAddress(owner);\n\n  // Detect witness mode\n  const hasWitness = !!to;\n\n  // Call permitTransferFrom or permitWitnessTransferFrom on Permit2 contract\n  const tx = hasWitness\n    ? await wallet.writeContract({\n      address: PERMIT2_ADDRESS,\n      abi: permit2ABI,\n      functionName: \"permitWitnessTransferFrom\",\n      args: [\n        {\n          permitted: {\n            token: tokenAddress,\n            amount: BigInt(amount),\n          },\n          nonce: BigInt(nonce),\n          deadline: BigInt(deadline),\n        },\n        {\n          to: paymentRequirements.payTo as Address,\n          requestedAmount: BigInt(amount),\n        },\n        ownerAddress,\n        keccak256(encodeAbiParameters([{ type: \"address\", name: \"to\" }], [getAddress(to!)])),\n        WITNESS_TYPE_STRING,\n        permit2Payload.signature as Hex,\n      ],\n      chain: wallet.chain as Chain,\n    })\n    : await wallet.writeContract({\n      address: PERMIT2_ADDRESS,\n      abi: permit2ABI,\n      functionName: \"permitTransferFrom\",\n      args: [\n        {\n          permitted: {\n            token: tokenAddress,\n            amount: BigInt(amount),\n          },\n          nonce: BigInt(nonce),\n          deadline: BigInt(deadline),\n        },\n        {\n          to: paymentRequirements.payTo as Address,\n          requestedAmount: BigInt(amount),\n        },\n        ownerAddress,\n        permit2Payload.signature as Hex,\n      ],\n      chain: wallet.chain as Chain,\n    });\n\n  const receipt = await wallet.waitForTransactionReceipt({ hash: tx });\n\n  if (receipt.status !== \"success\") {\n    return {\n      success: false,\n      errorReason: \"transaction_failed\",\n      transaction: tx,\n      network: paymentPayload.network,\n      payer: owner,\n    };\n  }\n\n  return {\n    success: true,\n    transaction: tx,\n    network: paymentPayload.network,\n    payer: owner,\n  };\n}\n","export * from \"./client\";\nexport * from \"./sign\";\nexport * from \"./facilitator\";\n","export * from \"./client\";\nexport * from \"./sign\";\nexport * from \"./facilitator\";\n","import { Address, Chain, LocalAccount, Transport } from \"viem\";\nimport { isSignerWallet, SignerWallet } from \"../../../../types/shared/evm\";\nimport {\n  PaymentRequirements,\n  UnsignedPermitPaymentPayload,\n  PermitPaymentPayload,\n} from \"../../../../types/verify\";\nimport { signPermit } from \"./sign\";\nimport { encodePayment } from \"../utils/paymentUtils\";\n\n/**\n * Prepares an unsigned EIP-2612 Permit payment header\n *\n * @param from - The token owner's address\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns An unsigned Permit payment payload containing permit authorization details\n */\nexport function preparePaymentHeader(\n  from: Address,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): UnsignedPermitPaymentPayload {\n  const deadline = BigInt(\n    Math.floor(Date.now() / 1000 + paymentRequirements.maxTimeoutSeconds),\n  ).toString();\n\n  return {\n    x402Version,\n    scheme: paymentRequirements.scheme,\n    network: paymentRequirements.network,\n    payload: {\n      authorizationType: \"permit\" as const,\n      signature: undefined,\n      authorization: {\n        owner: from,\n        spender: paymentRequirements.extra?.relayer as Address,\n        value: paymentRequirements.maxAmountRequired,\n        deadline,\n      },\n    },\n  };\n}\n\n/**\n * Signs a Permit payment header using the provided client and payment requirements.\n *\n * @param client - The signer wallet instance used to sign the permit\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @param unsignedPaymentHeader - The unsigned Permit payment payload to be signed\n * @returns A promise that resolves to the signed Permit payment payload\n */\nexport async function signPaymentHeader<transport extends Transport, chain extends Chain>(\n  client: SignerWallet<chain, transport> | LocalAccount,\n  paymentRequirements: PaymentRequirements,\n  unsignedPaymentHeader: UnsignedPermitPaymentPayload,\n): Promise<PermitPaymentPayload> {\n  const { owner, spender, value, deadline } = unsignedPaymentHeader.payload.authorization;\n\n  const { signature, nonce } = await signPermit(\n    client,\n    { owner, spender, value, deadline },\n    paymentRequirements,\n  );\n\n  return {\n    ...unsignedPaymentHeader,\n    payload: {\n      authorizationType: \"permit\",\n      signature,\n      authorization: {\n        owner,\n        spender,\n        value,\n        deadline,\n        nonce: nonce.toString(),\n      },\n    },\n  };\n}\n\n/**\n * Creates a complete Permit payment payload by preparing and signing a payment header.\n *\n * @param client - The signer wallet instance used to create and sign the payment\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns A promise that resolves to the complete signed Permit payment payload\n */\nexport async function createPayment<transport extends Transport, chain extends Chain>(\n  client: SignerWallet<chain, transport> | LocalAccount,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): Promise<PermitPaymentPayload> {\n  const from = isSignerWallet(client) ? client.account!.address : client.address;\n  const unsignedPaymentHeader = preparePaymentHeader(from, x402Version, paymentRequirements);\n  return signPaymentHeader(client, paymentRequirements, unsignedPaymentHeader);\n}\n\n/**\n * Creates and encodes a Permit payment header for the given client and payment requirements.\n *\n * @param client - The signer wallet instance used to create the payment header\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns A promise that resolves to the encoded payment header string\n */\nexport async function createPaymentHeader(\n  client: SignerWallet | LocalAccount,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): Promise<string> {\n  const payment = await createPayment(client, x402Version, paymentRequirements);\n  return encodePayment(payment);\n}\n","export * from \"./client\";\nexport * from \"./sign\";\nexport * from \"./facilitator\";\n","import { Chain, getAddress, Hex, keccak256, LocalAccount, toHex, Transport } from \"viem\";\nimport { getNetworkId } from \"../../../../shared\";\nimport {\n  permit2Types,\n  permit2WitnessTypes,\n  permit2ABI,\n  PERMIT2_ADDRESS,\n  WITNESS_TYPE_STRING,\n  isSignerWallet,\n  SignerWallet,\n} from \"../../../../types/shared/evm\";\nimport { Permit2EvmPayloadAuthorization, PaymentRequirements } from \"../../../../types/verify\";\n\n/**\n * Signs a Permit2 authorization (PermitTransferFrom or PermitWitnessTransferFrom)\n *\n * Automatically detects witness mode based on the presence of the `to` field.\n * - If `to` is provided: Uses PermitWitnessTransferFrom (binds recipient to signature)\n * - If `to` is omitted: Uses PermitTransferFrom (legacy mode)\n *\n * @param walletClient - The wallet client that will sign the permit\n * @param params - The permit2 parameters\n * @param params.owner - The address of the token owner\n * @param params.spender - The address authorized to transfer tokens\n * @param params.token - The address of the token to transfer\n * @param params.amount - The amount of tokens to transfer (in base units)\n * @param params.deadline - Unix timestamp after which the permit is no longer valid\n * @param params.to - Optional recipient address for witness mode\n * @param paymentRequirements - The payment requirements containing network information\n * @param paymentRequirements.network - The network where the token exists\n * @returns The signature and nonce for the permit2\n */\nexport async function signPermit2<transport extends Transport, chain extends Chain>(\n  walletClient: SignerWallet<chain, transport> | LocalAccount,\n  { owner, spender, token, amount, deadline, to }: Omit<Permit2EvmPayloadAuthorization, \"nonce\">,\n  { network }: PaymentRequirements,\n): Promise<{ signature: Hex; nonce: string }> {\n  const chainId = getNetworkId(network);\n  const tokenAddress = getAddress(token);\n  const ownerAddress = getAddress(owner);\n  const spenderAddress = getAddress(spender);\n\n  // Generate a unique nonce for Permit2 SignatureTransfer\n  const nonce = await createPermit2Nonce(walletClient, ownerAddress);\n\n  // Detect witness mode based on the presence of the `to` field\n  const hasWitness = !!to;\n\n  const data = hasWitness\n    ? {\n      types: permit2WitnessTypes,\n      domain: {\n        name: \"Permit2\",\n        chainId,\n        verifyingContract: PERMIT2_ADDRESS,\n      },\n      primaryType: \"PermitWitnessTransferFrom\" as const,\n      message: {\n        permitted: {\n          token: tokenAddress,\n          amount: BigInt(amount),\n        },\n        spender: spenderAddress,\n        nonce,\n        deadline: BigInt(deadline),\n        witness: {\n          to: getAddress(to!),\n        },\n      },\n    }\n    : {\n      types: permit2Types,\n      domain: {\n        name: \"Permit2\",\n        chainId,\n        verifyingContract: PERMIT2_ADDRESS,\n      },\n      primaryType: \"PermitTransferFrom\" as const,\n      message: {\n        permitted: {\n          token: tokenAddress,\n          amount: BigInt(amount),\n        },\n        spender: spenderAddress,\n        nonce,\n        deadline: BigInt(deadline),\n      },\n    };\n\n  if (isSignerWallet(walletClient)) {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const signature = await walletClient.signTypedData(data as any);\n    return {\n      signature,\n      nonce: nonce.toString(),\n    };\n  }\n\n  // LocalAccount with signTypedData\n  const account = walletClient as LocalAccount;\n  if (account.signTypedData) {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const signature = await account.signTypedData(data as any);\n    return {\n      signature,\n      nonce: nonce.toString(),\n    };\n  }\n\n  throw new Error(\"Invalid wallet client provided does not support signTypedData\");\n}\n\n/**\n * Generates a unique nonce for Permit2 SignatureTransfer\n * Uses timestamp-based approach with nonceBitmap verification\n *\n * @param walletClient - The wallet client used to check nonce bitmap\n * @param ownerAddress - The address of the token owner\n * @returns A unique nonce for the permit2 authorization\n */\nexport async function createPermit2Nonce<transport extends Transport, chain extends Chain>(\n  walletClient: SignerWallet<chain, transport> | LocalAccount,\n  ownerAddress: `0x${string}`,\n): Promise<bigint> {\n  if (!isSignerWallet(walletClient)) {\n    throw new Error(\"Local account signing for permit2 requires a connected client\");\n  }\n\n  // Generate a timestamp-based nonce for uniqueness\n  // This ensures each permit has a unique nonce without requiring sequential ordering\n  const timestamp = BigInt(Math.floor(Date.now() / 1000));\n  const randomOffset = BigInt(Math.floor(Math.random() * 1000)); // Add some randomness\n  let nonce = timestamp * 1000n + randomOffset;\n\n  // Optional: Check if this nonce is already used (though unlikely with timestamp-based approach)\n  // This is more for demonstration - in practice, timestamp-based nonces are very unlikely to collide\n  try {\n    const wordPos = nonce / 256n;\n    const bitIndex = nonce % 256n;\n    const bitmap = await walletClient.readContract({\n      address: PERMIT2_ADDRESS,\n      abi: permit2ABI,\n      functionName: \"nonceBitmap\",\n      args: [ownerAddress, wordPos],\n    });\n\n    // Check if the specific bit is set (nonce is used)\n    const used = ((bitmap as bigint) >> bitIndex) & 1n;\n    if (used === 1n) {\n      // If nonce is used, add a small increment to make it unique\n      nonce += 1n;\n    }\n  } catch (error) {\n    // If we can't check the bitmap, continue with the timestamp-based nonce\n    // This is acceptable since timestamp-based nonces are very unlikely to collide\n    console.warn(\"Could not check nonce bitmap, using timestamp-based nonce:\", error);\n  }\n\n  return nonce;\n}\n","import { Address, Chain, LocalAccount, Transport } from \"viem\";\nimport { isSignerWallet, SignerWallet } from \"../../../../types/shared/evm\";\nimport {\n  PaymentRequirements,\n  UnsignedPermit2PaymentPayload,\n  Permit2PaymentPayload,\n} from \"../../../../types/verify\";\nimport { signPermit2 } from \"./sign\";\nimport { encodePayment } from \"../utils/paymentUtils\";\n\n/**\n * Prepares an unsigned Permit2 payment header with witness support\n *\n * By default, this function enables witness mode which binds the recipient address\n * to the signature, preventing the facilitator from changing the payment destination.\n *\n * @param from - The token owner's address\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns An unsigned Permit2 payment payload containing permit2 authorization details with witness\n */\nexport function preparePaymentHeader(\n  from: Address,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): UnsignedPermit2PaymentPayload {\n  const deadline = BigInt(\n    Math.floor(Date.now() / 1000 + paymentRequirements.maxTimeoutSeconds),\n  ).toString();\n\n  return {\n    x402Version,\n    scheme: paymentRequirements.scheme,\n    network: paymentRequirements.network,\n    payload: {\n      authorizationType: \"permit2\" as const,\n      signature: undefined,\n      authorization: {\n        owner: from,\n        spender: paymentRequirements.payTo as Address,\n        token: paymentRequirements.asset as Address,\n        amount: paymentRequirements.maxAmountRequired,\n        deadline,\n        to: paymentRequirements.payTo as Address, // Witness: bind recipient to signature\n      },\n    },\n  };\n}\n\n/**\n * Signs a Permit2 payment header using the provided client and payment requirements.\n *\n * Supports both witness and non-witness modes based on the presence of the `to` field\n * in the unsigned payment header.\n *\n * @param client - The signer wallet instance used to sign the permit2\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @param unsignedPaymentHeader - The unsigned Permit2 payment payload to be signed\n * @returns A promise that resolves to the signed Permit2 payment payload\n */\nexport async function signPaymentHeader<transport extends Transport, chain extends Chain>(\n  client: SignerWallet<chain, transport> | LocalAccount,\n  paymentRequirements: PaymentRequirements,\n  unsignedPaymentHeader: UnsignedPermit2PaymentPayload,\n): Promise<Permit2PaymentPayload> {\n  const { owner, spender, token, amount, deadline, to } = unsignedPaymentHeader.payload.authorization;\n\n  const { signature, nonce } = await signPermit2(\n    client,\n    { owner, spender, token, amount, deadline, to },\n    paymentRequirements,\n  );\n\n  return {\n    ...unsignedPaymentHeader,\n    payload: {\n      authorizationType: \"permit2\",\n      signature,\n      authorization: {\n        owner,\n        spender,\n        token,\n        amount,\n        deadline,\n        nonce,\n        ...(to ? { to } : {}), // Include `to` field if present (witness mode)\n      },\n    },\n  };\n}\n\n/**\n * Creates a complete Permit2 payment payload by preparing and signing a payment header.\n *\n * @param client - The signer wallet instance used to create and sign the payment\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns A promise that resolves to the complete signed Permit2 payment payload\n */\nexport async function createPayment<transport extends Transport, chain extends Chain>(\n  client: SignerWallet<chain, transport> | LocalAccount,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): Promise<Permit2PaymentPayload> {\n  const from = isSignerWallet(client) ? client.account!.address : client.address;\n  const unsignedPaymentHeader = preparePaymentHeader(from, x402Version, paymentRequirements);\n  return signPaymentHeader(client, paymentRequirements, unsignedPaymentHeader);\n}\n\n/**\n * Creates and encodes a Permit2 payment header for the given client and payment requirements.\n *\n * @param client - The signer wallet instance used to create the payment header\n * @param x402Version - The version of the X402 protocol to use\n * @param paymentRequirements - The payment requirements containing scheme and network information\n * @returns A promise that resolves to the encoded payment header string\n */\nexport async function createPaymentHeader(\n  client: SignerWallet | LocalAccount,\n  x402Version: number,\n  paymentRequirements: PaymentRequirements,\n): Promise<string> {\n  const payment = await createPayment(client, x402Version, paymentRequirements);\n  return encodePayment(payment);\n}\n","export * from \"./facilitator/index\";\nexport * from \"./client\";\n","import {\n  SettleResponse,\n  PaymentPayload,\n  PaymentRequirements,\n  ExactSvmPayload,\n  ErrorReasons,\n} from \"../../../../types/verify\";\nimport { X402Config } from \"../../../../types/config\";\nimport {\n  assertIsTransactionMessageWithBlockhashLifetime,\n  Commitment,\n  decompileTransactionMessageFetchingLookupTables,\n  getBase64EncodedWireTransaction,\n  getCompiledTransactionMessageDecoder,\n  getSignatureFromTransaction,\n  isSolanaError,\n  KeyPairSigner,\n  SendTransactionApi,\n  signTransaction,\n  SOLANA_ERROR__BLOCK_HEIGHT_EXCEEDED,\n  SolanaRpcApiDevnet,\n  SolanaRpcApiMainnet,\n  RpcDevnet,\n  RpcMainnet,\n} from \"@solana/kit\";\nimport { decodeTransactionFromPayload, getTokenPayerFromTransaction } from \"../../../../shared/svm\";\nimport { getRpcClient, getRpcSubscriptions } from \"../../../../shared/svm/rpc\";\nimport {\n  createBlockHeightExceedencePromiseFactory,\n  waitForRecentTransactionConfirmation,\n  createRecentSignatureConfirmationPromiseFactory,\n} from \"@solana/transaction-confirmation\";\nimport { verify } from \"./verify\";\n\n/**\n * Settle the payment payload against the payment requirements.\n * TODO: handle durable nonce lifetime transactions\n *\n * @param signer - The signer that will sign the transaction\n * @param payload - The payment payload to settle\n * @param paymentRequirements - The payment requirements to settle against\n * @param config - Optional configuration for X402 operations (e.g., custom RPC URLs)\n * @returns A SettleResponse indicating if the payment is settled and any error reason\n */\nexport async function settle(\n  signer: KeyPairSigner,\n  payload: PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n  config?: X402Config,\n): Promise<SettleResponse> {\n  const verifyResponse = await verify(signer, payload, paymentRequirements, config);\n  if (!verifyResponse.isValid) {\n    return {\n      success: false,\n      errorReason: verifyResponse.invalidReason,\n      network: payload.network,\n      transaction: \"\",\n    };\n  }\n\n  const svmPayload = payload.payload as ExactSvmPayload;\n  const decodedTransaction = decodeTransactionFromPayload(svmPayload);\n  const signedTransaction = await signTransaction([signer.keyPair], decodedTransaction);\n  const payer = getTokenPayerFromTransaction(decodedTransaction);\n\n  const rpc = getRpcClient(paymentRequirements.network, config?.svmConfig?.rpcUrl);\n  const rpcSubscriptions = getRpcSubscriptions(\n    paymentRequirements.network,\n    config?.svmConfig?.rpcUrl,\n  );\n\n  try {\n    const { success, errorReason, signature } = await sendAndConfirmSignedTransaction(\n      signedTransaction,\n      rpc,\n      rpcSubscriptions,\n    );\n\n    return {\n      success,\n      errorReason,\n      payer,\n      transaction: signature,\n      network: payload.network,\n    };\n  } catch (error) {\n    console.error(\"Unexpected error during transaction settlement:\", error);\n    return {\n      success: false,\n      errorReason: \"unexpected_settle_error\",\n      network: payload.network,\n      transaction: getSignatureFromTransaction(signedTransaction),\n      payer,\n    };\n  }\n}\n\n/**\n * Send a signed transaction to the RPC.\n * TODO: should this be moved to the shared/svm/rpc.ts file?\n *\n * @param signedTransaction - The signed transaction to send\n * @param rpc - The RPC client to use to send the transaction\n * @param sendTxConfig - The configuration for the transaction send\n * @returns The signature of the sent transaction\n */\nexport async function sendSignedTransaction(\n  signedTransaction: Awaited<ReturnType<typeof signTransaction>>,\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n  sendTxConfig: Parameters<SendTransactionApi[\"sendTransaction\"]>[1] = {\n    skipPreflight: true,\n    encoding: \"base64\",\n  },\n): Promise<string> {\n  const base64EncodedTransaction = getBase64EncodedWireTransaction(signedTransaction);\n  return await rpc.sendTransaction(base64EncodedTransaction, sendTxConfig).send();\n}\n\n/**\n * Confirm a signed transaction.\n * TODO: can some of this be refactored to be moved to the shared/svm/rpc.ts file?\n * TODO: should the commitment and the timeout be passed in as parameters?\n *\n * @param signedTransaction - The signed transaction to confirm\n * @param rpc - The RPC client to use to confirm the transaction\n * @param rpcSubscriptions - The RPC subscriptions to use to confirm the transaction\n * @returns The success and signature of the confirmed transaction\n */\nexport async function confirmSignedTransaction(\n  signedTransaction: Awaited<ReturnType<typeof signTransaction>>,\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n  rpcSubscriptions: ReturnType<typeof getRpcSubscriptions>,\n): Promise<{ success: boolean; errorReason?: (typeof ErrorReasons)[number]; signature: string }> {\n  // get the signature from the signed transaction\n  const signature = getSignatureFromTransaction(signedTransaction);\n\n  // set a timeout for the transaction confirmation\n  const abortController = new AbortController();\n  const timeout = setTimeout(() => {\n    abortController.abort(\"Transaction confirmation timed out after 60 seconds\");\n  }, 60000);\n\n  try {\n    // decompile the transaction message to get the blockhash lifetime\n    const compiledTransactionMessage = getCompiledTransactionMessageDecoder().decode(\n      signedTransaction.messageBytes,\n    );\n    const decompiledTransactionMessage = await decompileTransactionMessageFetchingLookupTables(\n      compiledTransactionMessage,\n      rpc,\n    );\n    assertIsTransactionMessageWithBlockhashLifetime(decompiledTransactionMessage);\n\n    // add the blockhash lifetime to the signed transaction\n    const signedTransactionWithBlockhashLifetime = {\n      ...signedTransaction,\n      lifetimeConstraint: decompiledTransactionMessage.lifetimeConstraint,\n    };\n\n    // create the config for the transaction confirmation\n    const commitment: Commitment = \"confirmed\";\n\n    const getRecentSignatureConfirmationPromise = createRecentSignatureConfirmationPromiseFactory({\n      rpc,\n      rpcSubscriptions,\n    } as Parameters<typeof createRecentSignatureConfirmationPromiseFactory>[0]);\n\n    const getBlockHeightExceedencePromise = createBlockHeightExceedencePromiseFactory({\n      rpc,\n      rpcSubscriptions,\n    } as Parameters<typeof createBlockHeightExceedencePromiseFactory>[0]);\n\n    const config = {\n      abortSignal: abortController.signal,\n      commitment,\n      getBlockHeightExceedencePromise,\n      getRecentSignatureConfirmationPromise,\n    };\n\n    // wait for the transaction to be confirmed\n    await waitForRecentTransactionConfirmation({\n      ...config,\n      transaction: signedTransactionWithBlockhashLifetime,\n    });\n\n    // return the success and signature\n    return {\n      success: true,\n      signature,\n    };\n  } catch (error) {\n    console.error(error);\n\n    // block height exceeded error\n    if (isSolanaError(error, SOLANA_ERROR__BLOCK_HEIGHT_EXCEEDED)) {\n      return {\n        success: false,\n        errorReason: \"settle_exact_svm_block_height_exceeded\",\n        signature,\n      };\n    }\n    // transaction confirmation timed out error\n    else if (error instanceof DOMException && error.name === \"AbortError\") {\n      return {\n        success: false,\n        errorReason: \"settle_exact_svm_transaction_confirmation_timed_out\",\n        signature,\n      };\n    }\n    // unexpected error\n    else {\n      throw error;\n    }\n  } finally {\n    // clear the timeout\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Send and confirm a signed transaction.\n *\n * @param signedTransaction - The signed transaction to send and confirm\n * @param rpc - The RPC client to use to send and confirm the transaction\n * @param rpcSubscriptions - The RPC subscriptions to use to send and confirm the transaction\n * @returns The success and signature of the confirmed transaction\n */\nexport async function sendAndConfirmSignedTransaction(\n  signedTransaction: Awaited<ReturnType<typeof signTransaction>>,\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n  rpcSubscriptions: ReturnType<typeof getRpcSubscriptions>,\n): Promise<{ success: boolean; errorReason?: (typeof ErrorReasons)[number]; signature: string }> {\n  await sendSignedTransaction(signedTransaction, rpc);\n  return await confirmSignedTransaction(signedTransaction, rpc, rpcSubscriptions);\n}\n","import {\n  VerifyResponse,\n  PaymentPayload,\n  PaymentRequirements,\n  ExactSvmPayload,\n  ErrorReasons,\n} from \"../../../../types/verify\";\nimport { SupportedSVMNetworks } from \"../../../../types/shared\";\nimport { X402Config } from \"../../../../types/config\";\nimport {\n  Address,\n  assertIsInstructionWithAccounts,\n  assertIsInstructionWithData,\n  CompilableTransactionMessage,\n  decompileTransactionMessage,\n  fetchEncodedAccounts,\n  getCompiledTransactionMessageDecoder,\n  KeyPairSigner,\n  SolanaRpcApiDevnet,\n  SolanaRpcApiMainnet,\n  RpcDevnet,\n  RpcMainnet,\n  Instruction,\n  AccountLookupMeta,\n  AccountMeta,\n  InstructionWithData,\n} from \"@solana/kit\";\nimport {\n  parseSetComputeUnitLimitInstruction,\n  parseSetComputeUnitPriceInstruction,\n  COMPUTE_BUDGET_PROGRAM_ADDRESS,\n} from \"@solana-program/compute-budget\";\nimport {\n  findAssociatedTokenPda,\n  identifyToken2022Instruction,\n  parseCreateAssociatedTokenInstruction,\n  parseTransferCheckedInstruction as parseTransferCheckedInstruction2022,\n  Token2022Instruction,\n  TOKEN_2022_PROGRAM_ADDRESS,\n} from \"@solana-program/token-2022\";\nimport {\n  identifyTokenInstruction,\n  parseTransferCheckedInstruction as parseTransferCheckedInstructionToken,\n  TOKEN_PROGRAM_ADDRESS,\n  TokenInstruction,\n} from \"@solana-program/token\";\nimport {\n  decodeTransactionFromPayload,\n  signAndSimulateTransaction,\n  getTokenPayerFromTransaction,\n} from \"../../../../shared/svm\";\nimport { getRpcClient } from \"../../../../shared/svm/rpc\";\nimport { SCHEME } from \"../../\";\n\n/**\n * Verify the payment payload against the payment requirements.\n *\n * @param signer - The signer that will sign and simulate the transaction\n * @param payload - The payment payload to verify\n * @param paymentRequirements - The payment requirements to verify against\n * @param config - Optional configuration for X402 operations (e.g., custom RPC URLs)\n * @returns A VerifyResponse indicating if the payment is valid and any invalidation reason\n */\nexport async function verify(\n  signer: KeyPairSigner,\n  payload: PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n  config?: X402Config,\n): Promise<VerifyResponse> {\n  try {\n    // verify that the scheme and network are supported\n    verifySchemesAndNetworks(payload, paymentRequirements);\n\n    // decode the base64 encoded transaction\n    const svmPayload = payload.payload as ExactSvmPayload;\n    const decodedTransaction = decodeTransactionFromPayload(svmPayload);\n    const rpc = getRpcClient(paymentRequirements.network, config?.svmConfig?.rpcUrl);\n\n    // perform transaction introspection to validate the transaction structure and details\n    await transactionIntrospection(svmPayload, paymentRequirements, config);\n\n    // simulate the transaction to ensure it will execute successfully\n    const simulateResult = await signAndSimulateTransaction(signer, decodedTransaction, rpc);\n    if (simulateResult.value?.err) {\n      throw new Error(`invalid_exact_svm_payload_transaction_simulation_failed`);\n    }\n\n    return {\n      isValid: true,\n      invalidReason: undefined,\n      payer: getTokenPayerFromTransaction(decodedTransaction),\n    };\n  } catch (error) {\n    // if the error is one of the known error reasons, return the error reason\n    if (error instanceof Error) {\n      if (ErrorReasons.includes(error.message as (typeof ErrorReasons)[number])) {\n        return {\n          isValid: false,\n          invalidReason: error.message as (typeof ErrorReasons)[number],\n          payer: (() => {\n            try {\n              const tx = decodeTransactionFromPayload(payload.payload as ExactSvmPayload);\n              return getTokenPayerFromTransaction(tx);\n            } catch {\n              return undefined;\n            }\n          })(),\n        };\n      }\n    }\n\n    // if the error is not one of the known error reasons, return an unexpected error reason\n    console.error(error);\n    return {\n      isValid: false,\n      invalidReason: \"unexpected_verify_error\",\n      payer: (() => {\n        try {\n          const tx = decodeTransactionFromPayload(payload.payload as ExactSvmPayload);\n          return getTokenPayerFromTransaction(tx);\n        } catch {\n          return undefined;\n        }\n      })(),\n    };\n  }\n}\n\n/**\n * Verify that the scheme and network are supported.\n *\n * @param payload - The payment payload to verify\n * @param paymentRequirements - The payment requirements to verify against\n */\nexport function verifySchemesAndNetworks(\n  payload: PaymentPayload,\n  paymentRequirements: PaymentRequirements,\n): void {\n  if (payload.scheme !== SCHEME || paymentRequirements.scheme !== SCHEME) {\n    throw new Error(\"unsupported_scheme\");\n  }\n\n  if (\n    payload.network !== paymentRequirements.network ||\n    !SupportedSVMNetworks.includes(paymentRequirements.network)\n  ) {\n    throw new Error(\"invalid_network\");\n  }\n}\n\n/**\n * Perform transaction introspection to validate the transaction structure and transfer details.\n * This function handles decoding the transaction, validating the transfer instruction,\n * and verifying all transfer details against the payment requirements.\n *\n * @param svmPayload - The SVM payload containing the transaction\n * @param paymentRequirements - The payment requirements to verify against\n * @param config - Optional configuration for X402 operations (e.g., custom RPC URLs)\n */\nexport async function transactionIntrospection(\n  svmPayload: ExactSvmPayload,\n  paymentRequirements: PaymentRequirements,\n  config?: X402Config,\n): Promise<void> {\n  const rpc = getRpcClient(paymentRequirements.network, config?.svmConfig?.rpcUrl);\n  const decodedTransaction = decodeTransactionFromPayload(svmPayload);\n  const compiledTransactionMessage = getCompiledTransactionMessageDecoder().decode(\n    decodedTransaction.messageBytes,\n  );\n  const transactionMessage: CompilableTransactionMessage = decompileTransactionMessage(\n    compiledTransactionMessage,\n  );\n\n  await verifyTransactionInstructions(transactionMessage, paymentRequirements, rpc);\n}\n\n/**\n * Verify that the transaction contains the expected instructions.\n *\n * @param transactionMessage - The transaction message to verify\n * @param paymentRequirements - The payment requirements to verify against\n * @param rpc - The RPC client to use for verifying account existence\n * @throws Error if the transaction does not contain the expected instructions\n */\nexport async function verifyTransactionInstructions(\n  transactionMessage: CompilableTransactionMessage,\n  paymentRequirements: PaymentRequirements,\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n) {\n  // validate the number of expected instructions\n  if (\n    transactionMessage.instructions.length !== 3 &&\n    transactionMessage.instructions.length !== 4\n  ) {\n    throw new Error(`invalid_exact_svm_payload_transaction_instructions_length`);\n  }\n\n  // verify that the compute limit and price instructions are valid\n  verifyComputeLimitInstruction(transactionMessage.instructions[0]);\n  verifyComputePriceInstruction(transactionMessage.instructions[1]);\n\n  // verify that the transfer instruction is valid\n  // this expects the destination ATA to already exist\n  if (transactionMessage.instructions.length === 3) {\n    await verifyTransferInstruction(\n      transactionMessage.instructions[2],\n      paymentRequirements,\n      {\n        txHasCreateDestATAInstruction: false,\n      },\n      rpc,\n    );\n  }\n\n  // verify that the transfer instruction is valid\n  // this expects the destination ATA to be created in the same transaction\n  else {\n    verifyCreateATAInstruction(transactionMessage.instructions[2], paymentRequirements);\n    await verifyTransferInstruction(\n      transactionMessage.instructions[3],\n      paymentRequirements,\n      {\n        txHasCreateDestATAInstruction: true,\n      },\n      rpc,\n    );\n  }\n}\n\n/**\n * Verify that the compute limit instruction is valid.\n *\n * @param instruction - The compute limit instruction to verify\n * @throws Error if the compute limit instruction is invalid\n */\nexport function verifyComputeLimitInstruction(\n  instruction: Instruction<\n    string,\n    readonly (AccountLookupMeta<string, string> | AccountMeta<string>)[]\n  >,\n) {\n  try {\n    if (\n      instruction.programAddress.toString() !== COMPUTE_BUDGET_PROGRAM_ADDRESS.toString() ||\n      instruction.data?.[0] !== 2 // discriminator of set compute unit limit instruction\n    ) {\n      throw new Error(\n        `invalid_exact_svm_payload_transaction_instructions_compute_limit_instruction`,\n      );\n    }\n    parseSetComputeUnitLimitInstruction(\n      instruction as InstructionWithData<Uint8Array<ArrayBufferLike>>,\n    );\n  } catch (error) {\n    console.error(error);\n    throw new Error(`invalid_exact_svm_payload_transaction_instructions_compute_limit_instruction`);\n  }\n}\n\n/**\n * Verify that the compute price instruction is valid.\n * This function throws an error if the compute unit price is greater than 5 lamports,\n * to protect the facilitator against gas fee abuse from the client.\n *\n * @param instruction - The compute price instruction to verify\n * @throws Error if the compute price instruction is invalid\n */\nexport function verifyComputePriceInstruction(\n  instruction: Instruction<\n    string,\n    readonly (AccountLookupMeta<string, string> | AccountMeta<string>)[]\n  >,\n) {\n  if (\n    instruction.programAddress.toString() !== COMPUTE_BUDGET_PROGRAM_ADDRESS.toString() ||\n    instruction.data?.[0] !== 3 // discriminator of set compute unit price instruction\n  ) {\n    throw new Error(`invalid_exact_svm_payload_transaction_instructions_compute_price_instruction`);\n  }\n  const parsedInstruction = parseSetComputeUnitPriceInstruction(\n    instruction as InstructionWithData<Uint8Array<ArrayBufferLike>>,\n  );\n\n  // TODO: allow the facilitator to pass in an optional max compute unit price\n  if (parsedInstruction.data.microLamports > 5 * 1_000_000) {\n    throw new Error(\n      `invalid_exact_svm_payload_transaction_instructions_compute_price_instruction_too_high`,\n    );\n  }\n}\n\n/**\n * Verify that the create ATA instruction is valid.\n *\n * @param instruction - The create ATA instruction to verify\n * @param paymentRequirements - The payment requirements to verify against\n * @throws Error if the create ATA instruction is invalid\n */\nexport function verifyCreateATAInstruction(\n  instruction: Instruction<\n    string,\n    readonly (AccountLookupMeta<string, string> | AccountMeta<string>)[]\n  >,\n  paymentRequirements: PaymentRequirements,\n) {\n  let createATAInstruction: ReturnType<typeof parseCreateAssociatedTokenInstruction>;\n\n  // validate and refine the type of the create ATA instruction\n  try {\n    assertIsInstructionWithAccounts(instruction);\n    assertIsInstructionWithData(instruction);\n\n    // parse the create ATA instruction\n    createATAInstruction = parseCreateAssociatedTokenInstruction({\n      ...instruction,\n      data: new Uint8Array(instruction.data),\n    });\n  } catch (error) {\n    console.error(error);\n    throw new Error(`invalid_exact_svm_payload_transaction_create_ata_instruction`);\n  }\n\n  // verify that the ATA is created for the expected payee\n  if (createATAInstruction.accounts.owner.address !== paymentRequirements.payTo) {\n    throw new Error(`invalid_exact_svm_payload_transaction_create_ata_instruction_incorrect_payee`);\n  }\n\n  // verify that the ATA is created for the expected asset\n  if (createATAInstruction.accounts.mint.address !== paymentRequirements.asset) {\n    throw new Error(`invalid_exact_svm_payload_transaction_create_ata_instruction_incorrect_asset`);\n  }\n}\n\n/**\n * Verify that the transfer instruction is valid.\n *\n * @param instruction - The transfer instruction to verify\n * @param paymentRequirements - The payment requirements to verify against\n * @param {object} options - The options for the verification of the transfer instruction\n * @param {boolean} options.txHasCreateDestATAInstruction - Whether the transaction has a create destination ATA instruction\n * @param rpc - The RPC client to use for verifying account existence\n * @throws Error if the transfer instruction is invalid\n */\nexport async function verifyTransferInstruction(\n  instruction: Instruction<\n    string,\n    readonly (AccountLookupMeta<string, string> | AccountMeta<string>)[]\n  >,\n  paymentRequirements: PaymentRequirements,\n  { txHasCreateDestATAInstruction }: { txHasCreateDestATAInstruction: boolean },\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n) {\n  // get a validated and parsed transferChecked instruction\n  const tokenInstruction = getValidatedTransferCheckedInstruction(instruction);\n  await verifyTransferCheckedInstruction(\n    tokenInstruction,\n    paymentRequirements,\n    {\n      txHasCreateDestATAInstruction,\n    },\n    rpc,\n  );\n}\n\n/**\n * Verify that the transfer checked instruction is valid.\n *\n * @param parsedInstruction - The parsed transfer checked instruction to verify\n * @param paymentRequirements - The payment requirements to verify against\n * @param {object} options - The options for the verification of the transfer checked instruction\n * @param {boolean} options.txHasCreateDestATAInstruction - Whether the transaction has a create destination ATA instruction\n * @param rpc - The RPC client to use for verifying account existence\n * @throws Error if the transfer checked instruction is invalid\n */\nexport async function verifyTransferCheckedInstruction(\n  parsedInstruction: ReturnType<typeof parseTransferCheckedInstruction2022>,\n  paymentRequirements: PaymentRequirements,\n  { txHasCreateDestATAInstruction }: { txHasCreateDestATAInstruction: boolean },\n  rpc: RpcDevnet<SolanaRpcApiDevnet> | RpcMainnet<SolanaRpcApiMainnet>,\n) {\n  // get the token program address\n  const tokenProgramAddress =\n    parsedInstruction.programAddress.toString() === TOKEN_PROGRAM_ADDRESS.toString()\n      ? TOKEN_PROGRAM_ADDRESS\n      : TOKEN_2022_PROGRAM_ADDRESS;\n\n  // get the expected receiver's ATA\n  const payToATA = await findAssociatedTokenPda({\n    mint: paymentRequirements.asset as Address,\n    owner: paymentRequirements.payTo as Address,\n    tokenProgram: tokenProgramAddress,\n  });\n\n  // verify that the transfer is to the expected ATA\n  if (parsedInstruction.accounts.destination.address !== payToATA[0]) {\n    throw new Error(`invalid_exact_svm_payload_transaction_transfer_to_incorrect_ata`);\n  }\n\n  // verify that the source and destination ATAs exist\n  const addresses = [parsedInstruction.accounts.source.address, payToATA[0]];\n  const maybeAccounts = await fetchEncodedAccounts(rpc, addresses);\n  const missingAccounts = maybeAccounts.filter(a => !a.exists);\n  for (const missingAccount of missingAccounts) {\n    if (missingAccount.address === parsedInstruction.accounts.source.address) {\n      throw new Error(`invalid_exact_svm_payload_transaction_sender_ata_not_found`);\n    }\n    if (missingAccount.address === payToATA[0] && !txHasCreateDestATAInstruction) {\n      throw new Error(`invalid_exact_svm_payload_transaction_receiver_ata_not_found`);\n    }\n  }\n\n  // verify that the amount is correct\n  const instructionAmount = parsedInstruction.data.amount;\n  const paymentRequirementsAmount = BigInt(paymentRequirements.maxAmountRequired);\n  if (instructionAmount !== paymentRequirementsAmount) {\n    throw new Error(`invalid_exact_svm_payload_transaction_amount_mismatch`);\n  }\n}\n\n/**\n * Inspect the decompiled transaction message to make sure that it is a valid\n * transfer instruction.\n *\n * @param instruction - The instruction to get the transfer instruction from\n * @returns The validated transfer instruction\n * @throws Error if the instruction is not a valid transfer checked instruction\n */\nexport function getValidatedTransferCheckedInstruction(\n  instruction: Instruction<\n    string,\n    readonly (AccountLookupMeta<string, string> | AccountMeta<string>)[]\n  >,\n) {\n  try {\n    assertIsInstructionWithData(instruction);\n    assertIsInstructionWithAccounts(instruction);\n  } catch (error) {\n    console.error(error);\n    throw new Error(`invalid_exact_svm_payload_transaction_instructions`);\n  }\n\n  let tokenInstruction;\n\n  // spl-token program\n  if (instruction.programAddress.toString() === TOKEN_PROGRAM_ADDRESS.toString()) {\n    const identifiedInstruction = identifyTokenInstruction(instruction);\n    if (identifiedInstruction !== TokenInstruction.TransferChecked) {\n      throw new Error(\n        `invalid_exact_svm_payload_transaction_instruction_not_spl_token_transfer_checked`,\n      );\n    }\n    tokenInstruction = parseTransferCheckedInstructionToken({\n      ...instruction,\n      data: new Uint8Array(instruction.data),\n    });\n  }\n  // token-2022 program\n  else if (instruction.programAddress.toString() === TOKEN_2022_PROGRAM_ADDRESS.toString()) {\n    const identifiedInstruction = identifyToken2022Instruction(instruction);\n    if (identifiedInstruction !== Token2022Instruction.TransferChecked) {\n      throw new Error(\n        `invalid_exact_svm_payload_transaction_instruction_not_token_2022_transfer_checked`,\n      );\n    }\n    tokenInstruction = parseTransferCheckedInstruction2022({\n      ...instruction,\n      data: new Uint8Array(instruction.data),\n    });\n  }\n  // invalid instruction\n  else {\n    throw new Error(`invalid_exact_svm_payload_transaction_not_a_transfer_instruction`);\n  }\n\n  return tokenInstruction;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAAA;AAAA,EAAA,cAAAC;AAAA;;;ACAA,SAAkC,YAAiB,6BAAwC;AAmC3F,eAAsB,OAKpB,QACA,SACA,qBACyB;AACzB,QAAM,kBAAkB,QAAQ;AAGhC,MAAI,gBAAgB,sBAAsB,WAAW;AACnD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAgBA,MAAI,QAAQ,WAAW,UAAU,oBAAoB,WAAW,QAAQ;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,cAAU,aAAa,QAAQ,OAAO;AACtC,WAAO,oBAAoB,OAAO,QAAQ,OAAO,QAAQ,SAAS,CAAC,EAAE;AACrE,mBAAe,oBAAoB;AACnC,cAAU,oBAAoB,OAAO,WAAY,MAAM,WAAW,QAAQ,YAAY;AAAA,EACxF,QAAQ;AACN,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAEA,QAAM,kBAAkB;AAAA,IACtB,OAAO;AAAA,IACP,aAAa;AAAA,IACb,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,SAAS;AAAA,MACP,MAAM,gBAAgB,cAAc;AAAA,MACpC,IAAI,gBAAgB,cAAc;AAAA,MAClC,OAAO,gBAAgB,cAAc;AAAA,MACrC,YAAY,gBAAgB,cAAc;AAAA,MAC1C,aAAa,gBAAgB,cAAc;AAAA,MAC3C,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AACA,QAAM,mBAAmB,MAAM,OAAO,gBAAgB;AAAA,IACpD,SAAS,gBAAgB,cAAc;AAAA,IACvC,GAAG;AAAA,IACH,WAAW,gBAAgB;AAAA,EAC7B,CAAC;AACD,MAAI,CAAC,kBAAkB;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAGA,MAAI,WAAW,gBAAgB,cAAc,EAAE,MAAM,WAAW,oBAAoB,KAAK,GAAG;AAC1F,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAIA,MACE,OAAO,gBAAgB,cAAc,WAAW,IAAI,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,CAAC,GAC5F;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAEA,MAAI,OAAO,gBAAgB,cAAc,UAAU,IAAI,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC,GAAG;AAC5F,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAEA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA,gBAAgB,cAAc;AAAA,EAChC;AACA,MAAI,UAAU,OAAO,oBAAoB,iBAAiB,GAAG;AAC3D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AAEA,MAAI,OAAO,gBAAgB,cAAc,KAAK,IAAI,OAAO,oBAAoB,iBAAiB,GAAG;AAC/F,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA;AAAA,MACf,OAAO,gBAAgB,cAAc;AAAA,IACvC;AAAA,EACF;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,eAAe;AAAA,IACf,OAAO,gBAAgB,cAAc;AAAA,EACvC;AACF;AAaA,eAAsB,OACpB,QACA,gBACA,qBACyB;AACzB,QAAM,UAAU,eAAe;AAG/B,MAAI,QAAQ,sBAAsB,WAAW;AAC3C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,MACb,SAAS,eAAe;AAAA,MACxB,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,QAAQ,MAAM,OAAO,QAAQ,gBAAgB,mBAAmB;AAEtE,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,eAAe;AAAA,MACxB,aAAa;AAAA,MACb,aAAa,MAAM,iBAAiB;AAAA;AAAA,MACpC,OAAO,QAAQ,cAAc;AAAA,IAC/B;AAAA,EACF;AAGA,QAAM,EAAE,UAAU,IAAI,sBAAsB,QAAQ,SAAgB;AAEpE,QAAM,KAAK,MAAM,OAAO,cAAc;AAAA,IACpC,SAAS,oBAAoB;AAAA,IAC7B;AAAA,IACA,cAAc;AAAA,IACd,MAAM;AAAA,MACJ,QAAQ,cAAc;AAAA,MACtB,QAAQ,cAAc;AAAA,MACtB,OAAO,QAAQ,cAAc,KAAK;AAAA,MAClC,OAAO,QAAQ,cAAc,UAAU;AAAA,MACvC,OAAO,QAAQ,cAAc,WAAW;AAAA,MACxC,QAAQ,cAAc;AAAA,MACtB;AAAA,IACF;AAAA,IACA,OAAO,OAAO;AAAA,EAChB,CAAC;AAED,QAAM,UAAU,MAAM,OAAO,0BAA0B,EAAE,MAAM,GAAG,CAAC;AAEnE,MAAI,QAAQ,WAAW,WAAW;AAChC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA;AAAA,MACb,aAAa;AAAA,MACb,SAAS,eAAe;AAAA,MACxB,OAAO,QAAQ,cAAc;AAAA,IAC/B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,aAAa;AAAA,IACb,SAAS,eAAe;AAAA,IACxB,OAAO,QAAQ,cAAc;AAAA,EAC/B;AACF;;;ACpQA,SAAkC,cAAAC,mBAAkC;;;ACApE,SAAgB,cAAAC,mBAAgD;AAyBhE,eAAsB,WACpB,cACA,EAAE,OAAO,SAAS,OAAO,SAAS,GAClC,EAAE,OAAO,QAAQ,GAC2B;AAC5C,QAAM,UAAU,aAAa,OAAO;AACpC,QAAM,eAAeC,YAAW,KAAK;AAGrC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,eAAe,YAAY,GAAG;AAEhC,KAAC,OAAO,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACzC,aAAa,aAAa;AAAA,QACxB,SAAS;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAACA,YAAW,KAAK,CAAC;AAAA,MAC1B,CAAC;AAAA,MACD,aAAa,aAAa;AAAA,QACxB,SAAS;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,MAChB,CAAC;AAAA,MACD,WAAW,cAAc,YAAY;AAAA,IACvC,CAAC;AAAA,EACH,OAAO;AACL,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AAEA,QAAM,OAAO;AAAA,IACX,OAAO;AAAA,IACP,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,OAAOA,YAAW,KAAK;AAAA,MACvB,SAASA,YAAW,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,eAAe,YAAY,GAAG;AAChC,UAAM,YAAY,MAAM,aAAa,cAAc,IAAI;AACvD,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,IACxB;AAAA,EACF;AAGA,QAAM,UAAU;AAChB,MAAI,QAAQ,eAAe;AACzB,UAAM,YAAY,MAAM,QAAQ,cAAc,IAAI;AAClD,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,IACxB;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,+DAA+D;AACjF;AASO,SAAS,eAAe,WAA+C;AAC5E,QAAM,MAAM,UAAU,MAAM,CAAC;AAC7B,QAAM,IAAI,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC;AAC/B,QAAM,IAAI,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC;AACjC,MAAI,IAAI,SAAS,IAAI,MAAM,KAAK,GAAG,GAAG,EAAE;AAGxC,MAAI,IAAI,IAAI;AACV,SAAK;AAAA,EACP;AAEA,SAAO,EAAE,GAAG,GAAG,EAAE;AACnB;;;ACpHO,IAAM,yBAAyB;AAAA,EACpC;AAAA,IACE,QAAQ;AAAA,MACN;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,MACA;AAAA,QACE,cAAc;AAAA,QACd,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,MAAM;AAAA,IACN,SAAS,CAAC;AAAA,IACV,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;;;AF3BA,eAAsBC,QAKpB,QACA,SACA,qBACyB;AAEzB,MACE,QAAQ,QAAQ,sBAAsB,YACtC,QAAQ,WAAW,UACnB,oBAAoB,WAAW,QAC/B;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,gBAAgB,QAAQ;AAC9B,QAAM,EAAE,OAAO,SAAS,OAAO,UAAU,MAAM,IAAI,cAAc;AAGjE,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI;AACF,cAAU,aAAa,QAAQ,OAAO;AACtC,mBAAe,oBAAoB;AACnC,WACE,oBAAoB,OAAO,QACzB,MAAM,OAAO,aAAa;AAAA,MAC1B,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,IAChB,CAAC;AACH,cAAU,oBAAoB,OAAO,WAAY,MAAM,WAAW,QAAQ,YAAY;AAAA,EACxF,QAAQ;AACN,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,kBAAkB;AAAA,IACtB,OAAO;AAAA,IACP,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,OAAOC,YAAW,KAAK;AAAA,MACvB,SAASA,YAAW,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM,OAAO,gBAAgB;AAAA,IACpD,SAAS;AAAA,IACT,GAAG;AAAA,IACH,WAAW,cAAc;AAAA,EAC3B,CAAC;AAED,MAAI,CAAC,kBAAkB;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,MAAI,OAAO,QAAQ,IAAI,KAAK;AAC1B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAMA,MAAI,oBAAoB,OAAO,cAAc;AAE3C,QAAIA,YAAW,OAAO,MAAMA,YAAW,oBAAoB,OAAO,YAAY,GAAG;AAC/E,aAAO;AAAA,QACL,SAAS;AAAA,QACT,eAAe;AAAA,QACf,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF,OAAO;AAEL,QAAI,OAAO,WAAWA,YAAW,OAAO,MAAMA,YAAW,OAAO,QAAQ,OAAO,GAAG;AAChF,aAAO;AAAA,QACL,SAAS;AAAA,QACT,eAAe;AAAA,QACf,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAGA,QAAM,UAAU,MAAM,gBAAgB,QAAQ,cAAc,KAAgB;AAC5E,MAAI,UAAU,OAAO,oBAAoB,iBAAiB,GAAG;AAC3D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,IAAI,OAAO,oBAAoB,iBAAiB,GAAG;AACjE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF;AAUA,eAAsBC,QACpB,QACA,gBACA,qBACyB;AACzB,QAAM,gBAAgB,eAAe;AAErC,MAAI,cAAc,sBAAsB,UAAU;AAChD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,MACb,SAAS,eAAe;AAAA,MACxB,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,QAAQ,MAAMF,QAAO,QAAQ,gBAAgB,mBAAmB;AAEtE,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,eAAe;AAAA,MACxB,aAAa;AAAA,MACb,aAAa,MAAM,iBAAiB;AAAA,MACpC,OAAO,cAAc,cAAc;AAAA,IACrC;AAAA,EACF;AAEA,QAAM,EAAE,OAAO,SAAS,OAAO,SAAS,IAAI,cAAc;AAC1D,QAAM,EAAE,GAAG,GAAG,EAAE,IAAI,eAAe,cAAc,SAAgB;AACjE,QAAM,eAAe,oBAAoB;AAGzC,QAAM,UAAU,MAAM,OAAO,oBAAoB;AAAA,IAC/C,SAAS,OAAO,QAAQ;AAAA,EAC1B,CAAC;AAED,MAAI;AAEJ,MAAI,oBAAoB,OAAO,cAAc;AAE3C,sBAAkB,MAAM,OAAO,cAAc;AAAA,MAC3C,SAAS,oBAAoB,MAAM;AAAA,MACnC,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,KAAK;AAAA,QACZ,OAAO,QAAQ;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB;AAAA,MACtB;AAAA,MACA,OAAO,OAAO;AAAA,MACd,OAAO;AAAA,IACT,CAAC;AAGD,UAAM,UAAU,MAAM,OAAO,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAEhF,QAAI,QAAQ,WAAW,WAAW;AAChC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa;AAAA,QACb,SAAS,eAAe;AAAA,QACxB,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF,OAAO;AAEL,UAAM,CAAC,UAAU,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA;AAAA,MAE/C,OAAO,cAAc;AAAA,QACnB,SAAS;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAAC,OAAkB,SAAoB,OAAO,KAAK,GAAG,OAAO,QAAQ,GAAG,GAAG,GAAG,CAAC;AAAA,QACrF,OAAO,OAAO;AAAA,QACd,OAAO;AAAA,MACT,CAAC;AAAA;AAAA,MAED,OAAO,cAAc;AAAA,QACnB,SAAS;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAAC,OAAkB,oBAAoB,OAAkB,OAAO,KAAK,CAAC;AAAA,QAC5E,OAAO,OAAO;AAAA,QACd,OAAO,UAAU;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAGD,UAAM,CAAC,EAAE,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpC,OAAO,0BAA0B,EAAE,MAAM,SAAS,CAAC;AAAA,MACnD,OAAO,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAAA,IACvD,CAAC;AAED,QAAI,QAAQ,WAAW,WAAW;AAChC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa;AAAA,QACb,SAAS,eAAe;AAAA,QACxB,OAAO;AAAA,MACT;AAAA,IACF;AAEA,sBAAkB;AAAA,EACpB;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,aAAa;AAAA,IACb,SAAS,eAAe;AAAA,IACxB,OAAO;AAAA,EACT;AACF;;;AG1SA;AAAA,EAIE;AAAA,EACA,cAAAG;AAAA,EAEA;AAAA,OAEK;AAgCP,eAAsBC,QAKpB,QACA,SACA,qBACyB;AAEzB,MACE,QAAQ,QAAQ,sBAAsB,aACtC,QAAQ,WAAW,UACnB,oBAAoB,WAAW,QAC/B;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,iBAAiB,QAAQ;AAC/B,QAAM,EAAE,OAAO,SAAS,OAAO,QAAQ,UAAU,OAAO,GAAG,IAAI,eAAe;AAE9E,QAAM,UAAU,aAAa,QAAQ,OAAO;AAC5C,QAAM,eAAeC,YAAW,KAAK;AACrC,QAAM,eAAeA,YAAW,KAAK;AAGrC,QAAM,aAAa,CAAC,CAAC;AAGrB,MAAI,YAAY;AACd,QAAIA,YAAW,EAAG,MAAMA,YAAW,oBAAoB,KAAe,GAAG;AACvE,aAAO;AAAA,QACL,SAAS;AAAA,QACT,eAAe;AAAA,QACf,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAGA,QAAM,mBAAmB,aACrB;AAAA,IACA,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,WAAW;AAAA,QACT,OAAO;AAAA,QACP;AAAA,MACF;AAAA,MACA,SAASA,YAAW,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,SAAS;AAAA,QACP,IAAIA,YAAW,EAAG;AAAA,MACpB;AAAA,IACF;AAAA,EACF,IACE;AAAA,IACA,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,WAAW;AAAA,QACT,OAAO;AAAA,QACP;AAAA,MACF;AAAA,MACA,SAASA,YAAW,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEF,QAAM,mBAAmB,MAAM,OAAO,gBAAgB;AAAA,IACpD,SAAS;AAAA,IACT,GAAG;AAAA,IACH,WAAW,eAAe;AAAA,EAC5B,CAAC;AAED,MAAI,CAAC,kBAAkB;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe,aAAa,sCAAsC;AAAA,MAClE,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,MAAI,OAAO,QAAQ,IAAI,KAAK;AAC1B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAKA,MAAI,OAAO,WAAWA,YAAW,OAAO,MAAMA,YAAW,OAAO,QAAQ,OAAO,GAAG;AAChF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,aAAa,YAAY,MAAO,oBAAoB,MAAiB,YAAY,GAAG;AACtF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAIA,QAAM,YAAY,MAAM,kBAAkB,QAAQ,cAAc,cAAc,eAAe;AAC7F,MAAI,YAAY,OAAO,oBAAoB,iBAAiB,GAAG;AAC7D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,UAAU,MAAM,gBAAgB,QAAQ,cAAc,YAAY;AACxE,MAAI,UAAU,OAAO,oBAAoB,iBAAiB,GAAG;AAC3D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,OAAO,MAAM,IAAI,OAAO,oBAAoB,iBAAiB,GAAG;AAClE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,EACT;AACF;AAaA,eAAsBC,QACpB,QACA,gBACA,qBACyB;AACzB,QAAM,iBAAiB,eAAe;AAEtC,MAAI,eAAe,sBAAsB,WAAW;AAClD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,MACb,SAAS,eAAe;AAAA,MACxB,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,QAAQ,MAAMF,QAAO,QAAQ,gBAAgB,mBAAmB;AAEtE,MAAI,CAAC,MAAM,SAAS;AAClB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,eAAe;AAAA,MACxB,aAAa;AAAA,MACb,aAAa,MAAM,iBAAiB;AAAA,MACpC,OAAO,eAAe,cAAc;AAAA,IACtC;AAAA,EACF;AAEA,QAAM,EAAE,OAAO,OAAO,QAAQ,UAAU,OAAO,GAAG,IAAI,eAAe;AACrE,QAAM,eAAeC,YAAW,KAAK;AACrC,QAAM,eAAeA,YAAW,KAAK;AAGrC,QAAM,aAAa,CAAC,CAAC;AAGrB,QAAM,KAAK,aACP,MAAM,OAAO,cAAc;AAAA,IAC3B,SAAS;AAAA,IACT,KAAK;AAAA,IACL,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,WAAW;AAAA,UACT,OAAO;AAAA,UACP,QAAQ,OAAO,MAAM;AAAA,QACvB;AAAA,QACA,OAAO,OAAO,KAAK;AAAA,QACnB,UAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,IAAI,oBAAoB;AAAA,QACxB,iBAAiB,OAAO,MAAM;AAAA,MAChC;AAAA,MACA;AAAA,MACA,UAAU,oBAAoB,CAAC,EAAE,MAAM,WAAW,MAAM,KAAK,CAAC,GAAG,CAACA,YAAW,EAAG,CAAC,CAAC,CAAC;AAAA,MACnF;AAAA,MACA,eAAe;AAAA,IACjB;AAAA,IACA,OAAO,OAAO;AAAA,EAChB,CAAC,IACC,MAAM,OAAO,cAAc;AAAA,IAC3B,SAAS;AAAA,IACT,KAAK;AAAA,IACL,cAAc;AAAA,IACd,MAAM;AAAA,MACJ;AAAA,QACE,WAAW;AAAA,UACT,OAAO;AAAA,UACP,QAAQ,OAAO,MAAM;AAAA,QACvB;AAAA,QACA,OAAO,OAAO,KAAK;AAAA,QACnB,UAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,IAAI,oBAAoB;AAAA,QACxB,iBAAiB,OAAO,MAAM;AAAA,MAChC;AAAA,MACA;AAAA,MACA,eAAe;AAAA,IACjB;AAAA,IACA,OAAO,OAAO;AAAA,EAChB,CAAC;AAEH,QAAM,UAAU,MAAM,OAAO,0BAA0B,EAAE,MAAM,GAAG,CAAC;AAEnE,MAAI,QAAQ,WAAW,WAAW;AAChC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,MACb,SAAS,eAAe;AAAA,MACxB,OAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,aAAa;AAAA,IACb,SAAS,eAAe;AAAA,IACxB,OAAO;AAAA,EACT;AACF;;;AChUA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA,uBAAAE;AAAA,EAAA,2BAAAC;AAAA,EAAA,4BAAAC;AAAA,EAAA,cAAAC;AAAA,EAAA,yBAAAC;AAAA,EAAA;AAAA;AAAA,gBAAAC;AAAA;;;ACkBO,SAASC,sBACd,MACA,aACA,qBAC8B;AAC9B,QAAM,WAAW;AAAA,IACf,KAAK,MAAM,KAAK,IAAI,IAAI,MAAO,oBAAoB,iBAAiB;AAAA,EACtE,EAAE,SAAS;AAEX,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,oBAAoB;AAAA,IAC5B,SAAS,oBAAoB;AAAA,IAC7B,SAAS;AAAA,MACP,mBAAmB;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,QACb,OAAO;AAAA,QACP,SAAS,oBAAoB,OAAO;AAAA,QACpC,OAAO,oBAAoB;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAUA,eAAsBC,mBACpB,QACA,qBACA,uBAC+B;AAC/B,QAAM,EAAE,OAAO,SAAS,OAAO,SAAS,IAAI,sBAAsB,QAAQ;AAE1E,QAAM,EAAE,WAAW,MAAM,IAAI,MAAM;AAAA,IACjC;AAAA,IACA,EAAE,OAAO,SAAS,OAAO,SAAS;AAAA,IAClC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,mBAAmB;AAAA,MACnB;AAAA,MACA,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,MAAM,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AACF;AAUA,eAAsBC,eACpB,QACA,aACA,qBAC+B;AAC/B,QAAM,OAAO,eAAe,MAAM,IAAI,OAAO,QAAS,UAAU,OAAO;AACvE,QAAM,wBAAwBF,sBAAqB,MAAM,aAAa,mBAAmB;AACzF,SAAOC,mBAAkB,QAAQ,qBAAqB,qBAAqB;AAC7E;AAUA,eAAsBE,qBACpB,QACA,aACA,qBACiB;AACjB,QAAM,UAAU,MAAMD,eAAc,QAAQ,aAAa,mBAAmB;AAC5E,SAAO,cAAc,OAAO;AAC9B;;;AClHA;AAAA;AAAA,uBAAAE;AAAA,EAAA,2BAAAC;AAAA,EAAA;AAAA,8BAAAC;AAAA,EAAA,cAAAC;AAAA,EAAA,yBAAAC;AAAA,EAAA;AAAA,gBAAAC;AAAA;;;ACAA,SAAgB,cAAAC,mBAAkE;AAgClF,eAAsB,YACpB,cACA,EAAE,OAAO,SAAS,OAAO,QAAQ,UAAU,GAAG,GAC9C,EAAE,QAAQ,GACkC;AAC5C,QAAM,UAAU,aAAa,OAAO;AACpC,QAAM,eAAeC,YAAW,KAAK;AACrC,QAAM,eAAeA,YAAW,KAAK;AACrC,QAAM,iBAAiBA,YAAW,OAAO;AAGzC,QAAM,QAAQ,MAAM,mBAAmB,cAAc,YAAY;AAGjE,QAAM,aAAa,CAAC,CAAC;AAErB,QAAM,OAAO,aACT;AAAA,IACA,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,WAAW;AAAA,QACT,OAAO;AAAA,QACP,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA,UAAU,OAAO,QAAQ;AAAA,MACzB,SAAS;AAAA,QACP,IAAIA,YAAW,EAAG;AAAA,MACpB;AAAA,IACF;AAAA,EACF,IACE;AAAA,IACA,OAAO;AAAA,IACP,QAAQ;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,MACP,WAAW;AAAA,QACT,OAAO;AAAA,QACP,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,MACA,SAAS;AAAA,MACT;AAAA,MACA,UAAU,OAAO,QAAQ;AAAA,IAC3B;AAAA,EACF;AAEF,MAAI,eAAe,YAAY,GAAG;AAEhC,UAAM,YAAY,MAAM,aAAa,cAAc,IAAW;AAC9D,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,IACxB;AAAA,EACF;AAGA,QAAM,UAAU;AAChB,MAAI,QAAQ,eAAe;AAEzB,UAAM,YAAY,MAAM,QAAQ,cAAc,IAAW;AACzD,WAAO;AAAA,MACL;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,IACxB;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,+DAA+D;AACjF;AAUA,eAAsB,mBACpB,cACA,cACiB;AACjB,MAAI,CAAC,eAAe,YAAY,GAAG;AACjC,UAAM,IAAI,MAAM,+DAA+D;AAAA,EACjF;AAIA,QAAM,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AACtD,QAAM,eAAe,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,GAAI,CAAC;AAC5D,MAAI,QAAQ,YAAY,QAAQ;AAIhC,MAAI;AACF,UAAM,UAAU,QAAQ;AACxB,UAAM,WAAW,QAAQ;AACzB,UAAM,SAAS,MAAM,aAAa,aAAa;AAAA,MAC7C,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAAC,cAAc,OAAO;AAAA,IAC9B,CAAC;AAGD,UAAM,OAAS,UAAqB,WAAY;AAChD,QAAI,SAAS,IAAI;AAEf,eAAS;AAAA,IACX;AAAA,EACF,SAAS,OAAO;AAGd,YAAQ,KAAK,8DAA8D,KAAK;AAAA,EAClF;AAEA,SAAO;AACT;;;AC1IO,SAASC,sBACd,MACA,aACA,qBAC+B;AAC/B,QAAM,WAAW;AAAA,IACf,KAAK,MAAM,KAAK,IAAI,IAAI,MAAO,oBAAoB,iBAAiB;AAAA,EACtE,EAAE,SAAS;AAEX,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,oBAAoB;AAAA,IAC5B,SAAS,oBAAoB;AAAA,IAC7B,SAAS;AAAA,MACP,mBAAmB;AAAA,MACnB,WAAW;AAAA,MACX,eAAe;AAAA,QACb,OAAO;AAAA,QACP,SAAS,oBAAoB;AAAA,QAC7B,OAAO,oBAAoB;AAAA,QAC3B,QAAQ,oBAAoB;AAAA,QAC5B;AAAA,QACA,IAAI,oBAAoB;AAAA;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACF;AAaA,eAAsBC,mBACpB,QACA,qBACA,uBACgC;AAChC,QAAM,EAAE,OAAO,SAAS,OAAO,QAAQ,UAAU,GAAG,IAAI,sBAAsB,QAAQ;AAEtF,QAAM,EAAE,WAAW,MAAM,IAAI,MAAM;AAAA,IACjC;AAAA,IACA,EAAE,OAAO,SAAS,OAAO,QAAQ,UAAU,GAAG;AAAA,IAC9C;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,MACP,mBAAmB;AAAA,MACnB;AAAA,MACA,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC;AAAA;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACF;AAUA,eAAsBC,eACpB,QACA,aACA,qBACgC;AAChC,QAAM,OAAO,eAAe,MAAM,IAAI,OAAO,QAAS,UAAU,OAAO;AACvE,QAAM,wBAAwBF,sBAAqB,MAAM,aAAa,mBAAmB;AACzF,SAAOC,mBAAkB,QAAQ,qBAAqB,qBAAqB;AAC7E;AAUA,eAAsBE,qBACpB,QACA,aACA,qBACiB;AACjB,QAAM,UAAU,MAAMD,eAAc,QAAQ,aAAa,mBAAmB;AAC5E,SAAO,cAAc,OAAO;AAC9B;;;AX5FA,eAAsBE,QAKpB,QACA,SACA,qBACyB;AACzB,QAAM,kBAAkB,QAAQ;AAGhC,UAAQ,gBAAgB,mBAAmB;AAAA,IACzC,KAAK;AACH,aAA0B;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAyBA,QAAO,QAAQ,SAAiC,mBAAmB;AAAA,IAE9F,KAAK;AACH,aAA0BA;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IAEF;AACE,aAAO;AAAA,QACL,SAAS;AAAA,QACT,eAAe;AAAA,QACf,OAAO;AAAA,MACT;AAAA,EACJ;AACF;AAUA,eAAsBC,QACpB,QACA,gBACA,qBACyB;AACzB,QAAM,UAAU,eAAe;AAG/B,UAAQ,QAAQ,mBAAmB;AAAA,IACjC,KAAK;AACH,aAA0B;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAyBA;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAA0BA;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IAEF;AACE,aAAO;AAAA,QACL,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa;AAAA,QACb,SAAS,eAAe;AAAA,QACxB,OAAO;AAAA,MACT;AAAA,EACJ;AACF;;;AYtHA;AAAA;AAAA;AAAA;AAAA,6BAAAC;AAAA,EAAA;AAAA;AAAA;AAAA,gBAAAC;AAAA,EAAA;AAAA,gBAAAC;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQA;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA,wCAAAC;AAAA,EACA;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,OAKK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACtBP;AAAA,EAEE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OAUK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,mCAAmC;AAAA,EACnC;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA,mCAAmC;AAAA,EACnC;AAAA,EACA;AAAA,OACK;AAkBP,eAAsBC,QACpB,QACA,SACA,qBACAC,SACyB;AACzB,MAAI;AAEF,6BAAyB,SAAS,mBAAmB;AAGrD,UAAM,aAAa,QAAQ;AAC3B,UAAM,qBAAqB,6BAA6B,UAAU;AAClE,UAAM,MAAM,aAAa,oBAAoB,SAASA,SAAQ,WAAW,MAAM;AAG/E,UAAM,yBAAyB,YAAY,qBAAqBA,OAAM;AAGtE,UAAM,iBAAiB,MAAM,2BAA2B,QAAQ,oBAAoB,GAAG;AACvF,QAAI,eAAe,OAAO,KAAK;AAC7B,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,OAAO,6BAA6B,kBAAkB;AAAA,IACxD;AAAA,EACF,SAAS,OAAO;AAEd,QAAI,iBAAiB,OAAO;AAC1B,UAAI,aAAa,SAAS,MAAM,OAAwC,GAAG;AACzE,eAAO;AAAA,UACL,SAAS;AAAA,UACT,eAAe,MAAM;AAAA,UACrB,QAAQ,MAAM;AACZ,gBAAI;AACF,oBAAM,KAAK,6BAA6B,QAAQ,OAA0B;AAC1E,qBAAO,6BAA6B,EAAE;AAAA,YACxC,QAAQ;AACN,qBAAO;AAAA,YACT;AAAA,UACF,GAAG;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAGA,YAAQ,MAAM,KAAK;AACnB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,eAAe;AAAA,MACf,QAAQ,MAAM;AACZ,YAAI;AACF,gBAAM,KAAK,6BAA6B,QAAQ,OAA0B;AAC1E,iBAAO,6BAA6B,EAAE;AAAA,QACxC,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF,GAAG;AAAA,IACL;AAAA,EACF;AACF;AAQO,SAAS,yBACd,SACA,qBACM;AACN,MAAI,QAAQ,WAAW,UAAU,oBAAoB,WAAW,QAAQ;AACtE,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,MACE,QAAQ,YAAY,oBAAoB,WACxC,CAAC,qBAAqB,SAAS,oBAAoB,OAAO,GAC1D;AACA,UAAM,IAAI,MAAM,iBAAiB;AAAA,EACnC;AACF;AAWA,eAAsB,yBACpB,YACA,qBACAA,SACe;AACf,QAAM,MAAM,aAAa,oBAAoB,SAASA,SAAQ,WAAW,MAAM;AAC/E,QAAM,qBAAqB,6BAA6B,UAAU;AAClE,QAAM,6BAA6B,qCAAqC,EAAE;AAAA,IACxE,mBAAmB;AAAA,EACrB;AACA,QAAM,qBAAmD;AAAA,IACvD;AAAA,EACF;AAEA,QAAM,8BAA8B,oBAAoB,qBAAqB,GAAG;AAClF;AAUA,eAAsB,8BACpB,oBACA,qBACA,KACA;AAEA,MACE,mBAAmB,aAAa,WAAW,KAC3C,mBAAmB,aAAa,WAAW,GAC3C;AACA,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AAGA,gCAA8B,mBAAmB,aAAa,CAAC,CAAC;AAChE,gCAA8B,mBAAmB,aAAa,CAAC,CAAC;AAIhE,MAAI,mBAAmB,aAAa,WAAW,GAAG;AAChD,UAAM;AAAA,MACJ,mBAAmB,aAAa,CAAC;AAAA,MACjC;AAAA,MACA;AAAA,QACE,+BAA+B;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAIK;AACH,+BAA2B,mBAAmB,aAAa,CAAC,GAAG,mBAAmB;AAClF,UAAM;AAAA,MACJ,mBAAmB,aAAa,CAAC;AAAA,MACjC;AAAA,MACA;AAAA,QACE,+BAA+B;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAQO,SAAS,8BACd,aAIA;AACA,MAAI;AACF,QACE,YAAY,eAAe,SAAS,MAAM,+BAA+B,SAAS,KAClF,YAAY,OAAO,CAAC,MAAM,GAC1B;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA;AAAA,MACE;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,KAAK;AACnB,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACF;AAUO,SAAS,8BACd,aAIA;AACA,MACE,YAAY,eAAe,SAAS,MAAM,+BAA+B,SAAS,KAClF,YAAY,OAAO,CAAC,MAAM,GAC1B;AACA,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACA,QAAM,oBAAoB;AAAA,IACxB;AAAA,EACF;AAGA,MAAI,kBAAkB,KAAK,gBAAgB,IAAI,KAAW;AACxD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AASO,SAAS,2BACd,aAIA,qBACA;AACA,MAAI;AAGJ,MAAI;AACF,oCAAgC,WAAW;AAC3C,gCAA4B,WAAW;AAGvC,2BAAuB,sCAAsC;AAAA,MAC3D,GAAG;AAAA,MACH,MAAM,IAAI,WAAW,YAAY,IAAI;AAAA,IACvC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,KAAK;AACnB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AAGA,MAAI,qBAAqB,SAAS,MAAM,YAAY,oBAAoB,OAAO;AAC7E,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AAGA,MAAI,qBAAqB,SAAS,KAAK,YAAY,oBAAoB,OAAO;AAC5E,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACF;AAYA,eAAsB,0BACpB,aAIA,qBACA,EAAE,8BAA8B,GAChC,KACA;AAEA,QAAM,mBAAmB,uCAAuC,WAAW;AAC3E,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAYA,eAAsB,iCACpB,mBACA,qBACA,EAAE,8BAA8B,GAChC,KACA;AAEA,QAAM,sBACJ,kBAAkB,eAAe,SAAS,MAAM,sBAAsB,SAAS,IAC3E,wBACA;AAGN,QAAM,WAAW,MAAM,uBAAuB;AAAA,IAC5C,MAAM,oBAAoB;AAAA,IAC1B,OAAO,oBAAoB;AAAA,IAC3B,cAAc;AAAA,EAChB,CAAC;AAGD,MAAI,kBAAkB,SAAS,YAAY,YAAY,SAAS,CAAC,GAAG;AAClE,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AAGA,QAAM,YAAY,CAAC,kBAAkB,SAAS,OAAO,SAAS,SAAS,CAAC,CAAC;AACzE,QAAM,gBAAgB,MAAM,qBAAqB,KAAK,SAAS;AAC/D,QAAM,kBAAkB,cAAc,OAAO,OAAK,CAAC,EAAE,MAAM;AAC3D,aAAW,kBAAkB,iBAAiB;AAC5C,QAAI,eAAe,YAAY,kBAAkB,SAAS,OAAO,SAAS;AACxE,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,QAAI,eAAe,YAAY,SAAS,CAAC,KAAK,CAAC,+BAA+B;AAC5E,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AAAA,EACF;AAGA,QAAM,oBAAoB,kBAAkB,KAAK;AACjD,QAAM,4BAA4B,OAAO,oBAAoB,iBAAiB;AAC9E,MAAI,sBAAsB,2BAA2B;AACnD,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACF;AAUO,SAAS,uCACd,aAIA;AACA,MAAI;AACF,gCAA4B,WAAW;AACvC,oCAAgC,WAAW;AAAA,EAC7C,SAAS,OAAO;AACd,YAAQ,MAAM,KAAK;AACnB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,MAAI;AAGJ,MAAI,YAAY,eAAe,SAAS,MAAM,sBAAsB,SAAS,GAAG;AAC9E,UAAM,wBAAwB,yBAAyB,WAAW;AAClE,QAAI,0BAA0B,iBAAiB,iBAAiB;AAC9D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,uBAAmB,qCAAqC;AAAA,MACtD,GAAG;AAAA,MACH,MAAM,IAAI,WAAW,YAAY,IAAI;AAAA,IACvC,CAAC;AAAA,EACH,WAES,YAAY,eAAe,SAAS,MAAM,2BAA2B,SAAS,GAAG;AACxF,UAAM,wBAAwB,6BAA6B,WAAW;AACtE,QAAI,0BAA0B,qBAAqB,iBAAiB;AAClE,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,uBAAmB,oCAAoC;AAAA,MACrD,GAAG;AAAA,MACH,MAAM,IAAI,WAAW,YAAY,IAAI;AAAA,IACvC,CAAC;AAAA,EACH,OAEK;AACH,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AAEA,SAAO;AACT;;;AD/aA,eAAsBC,QACpB,QACA,SACA,qBACAC,SACyB;AACzB,QAAM,iBAAiB,MAAMC,QAAO,QAAQ,SAAS,qBAAqBD,OAAM;AAChF,MAAI,CAAC,eAAe,SAAS;AAC3B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa,eAAe;AAAA,MAC5B,SAAS,QAAQ;AAAA,MACjB,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,aAAa,QAAQ;AAC3B,QAAM,qBAAqB,6BAA6B,UAAU;AAClE,QAAM,oBAAoB,MAAM,gBAAgB,CAAC,OAAO,OAAO,GAAG,kBAAkB;AACpF,QAAM,QAAQ,6BAA6B,kBAAkB;AAE7D,QAAM,MAAM,aAAa,oBAAoB,SAASA,SAAQ,WAAW,MAAM;AAC/E,QAAM,mBAAmB;AAAA,IACvB,oBAAoB;AAAA,IACpBA,SAAQ,WAAW;AAAA,EACrB;AAEA,MAAI;AACF,UAAM,EAAE,SAAS,aAAa,UAAU,IAAI,MAAM;AAAA,MAChD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,mDAAmD,KAAK;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,aAAa,4BAA4B,iBAAiB;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AACF;AAWA,eAAsB,sBACpB,mBACA,KACA,eAAqE;AAAA,EACnE,eAAe;AAAA,EACf,UAAU;AACZ,GACiB;AACjB,QAAM,2BAA2B,gCAAgC,iBAAiB;AAClF,SAAO,MAAM,IAAI,gBAAgB,0BAA0B,YAAY,EAAE,KAAK;AAChF;AAYA,eAAsB,yBACpB,mBACA,KACA,kBAC+F;AAE/F,QAAM,YAAY,4BAA4B,iBAAiB;AAG/D,QAAM,kBAAkB,IAAI,gBAAgB;AAC5C,QAAM,UAAU,WAAW,MAAM;AAC/B,oBAAgB,MAAM,qDAAqD;AAAA,EAC7E,GAAG,GAAK;AAER,MAAI;AAEF,UAAM,6BAA6BE,sCAAqC,EAAE;AAAA,MACxE,kBAAkB;AAAA,IACpB;AACA,UAAM,+BAA+B,MAAM;AAAA,MACzC;AAAA,MACA;AAAA,IACF;AACA,oDAAgD,4BAA4B;AAG5E,UAAM,yCAAyC;AAAA,MAC7C,GAAG;AAAA,MACH,oBAAoB,6BAA6B;AAAA,IACnD;AAGA,UAAM,aAAyB;AAE/B,UAAM,wCAAwC,gDAAgD;AAAA,MAC5F;AAAA,MACA;AAAA,IACF,CAA0E;AAE1E,UAAM,kCAAkC,0CAA0C;AAAA,MAChF;AAAA,MACA;AAAA,IACF,CAAoE;AAEpE,UAAMF,UAAS;AAAA,MACb,aAAa,gBAAgB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAGA,UAAM,qCAAqC;AAAA,MACzC,GAAGA;AAAA,MACH,aAAa;AAAA,IACf,CAAC;AAGD,WAAO;AAAA,MACL,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,KAAK;AAGnB,QAAI,cAAc,OAAO,mCAAmC,GAAG;AAC7D,aAAO;AAAA,QACL,SAAS;AAAA,QACT,aAAa;AAAA,QACb;AAAA,MACF;AAAA,IACF,WAES,iBAAiB,gBAAgB,MAAM,SAAS,cAAc;AACrE,aAAO;AAAA,QACL,SAAS;AAAA,QACT,aAAa;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAEK;AACH,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AAEA,iBAAa,OAAO;AAAA,EACtB;AACF;AAUA,eAAsB,gCACpB,mBACA,KACA,kBAC+F;AAC/F,QAAM,sBAAsB,mBAAmB,GAAG;AAClD,SAAO,MAAM,yBAAyB,mBAAmB,KAAK,gBAAgB;AAChF;;;AdvOO,IAAM,SAAS;","names":["settle","verify","getAddress","getAddress","getAddress","verify","getAddress","settle","getAddress","verify","getAddress","settle","createPayment","createPaymentHeader","preparePaymentHeader","settle","signPaymentHeader","verify","preparePaymentHeader","signPaymentHeader","createPayment","createPaymentHeader","createPayment","createPaymentHeader","preparePaymentHeader","settle","signPaymentHeader","verify","getAddress","getAddress","preparePaymentHeader","signPaymentHeader","createPayment","createPaymentHeader","verify","settle","createPaymentHeader","settle","verify","getCompiledTransactionMessageDecoder","verify","config","settle","config","verify","getCompiledTransactionMessageDecoder"]}

package/dist/esm/{chunk-CJV3GAPG.mjs → chunk-URGZOTVQ.mjs}

@@ -3,11 +3,11 @@ import {
   settle2,
   verify,
   verify2
-} from "./chunk-ZEZOGZ3K.mjs";
+} from "./chunk-TAYXZJPR.mjs";
 import {
   SupportedEVMNetworks,
   SupportedSVMNetworks
-} from "./chunk-UCBE7FDY.mjs";
+} from "./chunk-NPWDNT2P.mjs";
 
 // src/facilitator/facilitator.ts
 async function verify3(client, payload, paymentRequirements, config) {
@@ -73,4 +73,4 @@ export {
   verify3 as verify,
   settle3 as settle
 };
-//# sourceMappingURL=chunk-CJV3GAPG.mjs.map
+//# sourceMappingURL=chunk-URGZOTVQ.mjs.map

package/dist/esm/client/index.d.mts

@@ -1,5 +1,5 @@
 import { X as X402Config } from '../config-Dfuvno71.mjs';
-import { P as PaymentRequirements, p as UnsignedEip3009PaymentPayload } from '../x402Specs-CYq5tSY1.mjs';
+import { P as PaymentRequirements, p as UnsignedEip3009PaymentPayload } from '../x402Specs-BtRXj67U.mjs';
 import { S as Signer, M as MultiNetworkSigner } from '../wallet-KorGgbAj.mjs';
 import { Address } from 'viem';
 import { N as Network } from '../network-FrFmmiyj.mjs';

package/dist/esm/client/index.mjs

@@ -3,9 +3,9 @@ import {
   preparePaymentHeader,
   selectPaymentRequirements,
   signPaymentHeader
-} from "../chunk-34YNR4LY.mjs";
-import "../chunk-RX2JKK4O.mjs";
-import "../chunk-UCBE7FDY.mjs";
+} from "../chunk-K5SAFQCZ.mjs";
+import "../chunk-J3FMDNC3.mjs";
+import "../chunk-NPWDNT2P.mjs";
 import "../chunk-5LTKIVOA.mjs";
 import "../chunk-AQQR4PXH.mjs";
 export {

package/dist/esm/facilitator/index.d.mts

@@ -1,6 +1,6 @@
 import { X as X402Config } from '../config-Dfuvno71.mjs';
 import { C as ConnectedClient, S as Signer } from '../wallet-KorGgbAj.mjs';
-import { a as PaymentPayload, P as PaymentRequirements, J as VerifyResponse, S as SettleResponse } from '../x402Specs-CYq5tSY1.mjs';
+import { a as PaymentPayload, P as PaymentRequirements, J as VerifyResponse, S as SettleResponse } from '../x402Specs-BtRXj67U.mjs';
 import { Transport, Chain, Account } from 'viem';
 import '../wallet-SJKJpUgQ.mjs';
 import 'viem/chains';

package/dist/esm/facilitator/index.mjs

@@ -1,10 +1,10 @@
 import {
   settle,
   verify
-} from "../chunk-CJV3GAPG.mjs";
-import "../chunk-ZEZOGZ3K.mjs";
-import "../chunk-RX2JKK4O.mjs";
-import "../chunk-UCBE7FDY.mjs";
+} from "../chunk-URGZOTVQ.mjs";
+import "../chunk-TAYXZJPR.mjs";
+import "../chunk-J3FMDNC3.mjs";
+import "../chunk-NPWDNT2P.mjs";
 import "../chunk-5LTKIVOA.mjs";
 import "../chunk-AQQR4PXH.mjs";
 export {

package/dist/esm/index.d.mts

@@ -1,7 +1,7 @@
 export { PaymentRequirementsSelector, createPaymentHeader, preparePaymentHeader, selectPaymentRequirements, signPaymentHeader } from './client/index.mjs';
 export { Supported, settle, verify } from './facilitator/index.mjs';
 import './config-Dfuvno71.mjs';
-import './x402Specs-CYq5tSY1.mjs';
+import './x402Specs-BtRXj67U.mjs';
 import 'zod';
 import './wallet-KorGgbAj.mjs';
 import './wallet-SJKJpUgQ.mjs';

package/dist/esm/index.mjs

@@ -3,14 +3,14 @@ import {
   preparePaymentHeader,
   selectPaymentRequirements,
   signPaymentHeader
-} from "./chunk-34YNR4LY.mjs";
+} from "./chunk-K5SAFQCZ.mjs";
 import {
   settle,
   verify
-} from "./chunk-CJV3GAPG.mjs";
-import "./chunk-ZEZOGZ3K.mjs";
-import "./chunk-RX2JKK4O.mjs";
-import "./chunk-UCBE7FDY.mjs";
+} from "./chunk-URGZOTVQ.mjs";
+import "./chunk-TAYXZJPR.mjs";
+import "./chunk-J3FMDNC3.mjs";
+import "./chunk-NPWDNT2P.mjs";
 import "./chunk-5LTKIVOA.mjs";
 import "./chunk-AQQR4PXH.mjs";
 

package/dist/esm/{middleware-BSjsPDKM.d.mts → middleware-DSDucaQ5.d.mts}

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { N as Network } from './network-FrFmmiyj.mjs';
 import { E as EvmSigner } from './wallet-SJKJpUgQ.mjs';
-import { a as PaymentPayload, P as PaymentRequirements, J as VerifyResponse, S as SettleResponse, X as SupportedPaymentKindsResponse, M as ListDiscoveryResourcesRequest, O as ListDiscoveryResourcesResponse, z as HTTPRequestStructure } from './x402Specs-CYq5tSY1.mjs';
+import { a as PaymentPayload, P as PaymentRequirements, J as VerifyResponse, S as SettleResponse, X as SupportedPaymentKindsResponse, M as ListDiscoveryResourcesRequest, O as ListDiscoveryResourcesResponse, z as HTTPRequestStructure } from './x402Specs-BtRXj67U.mjs';
 
 declare const moneySchema: z.ZodPipeline<z.ZodUnion<[z.ZodEffects<z.ZodString, string, string>, z.ZodNumber]>, z.ZodNumber>;
 type Money = z.input<typeof moneySchema>;

package/dist/esm/paywall/index.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentRequirements } from '../x402Specs-CYq5tSY1.mjs';
+import { P as PaymentRequirements } from '../x402Specs-BtRXj67U.mjs';
 import 'zod';
 
 interface PaywallOptions {

package/dist/esm/schemes/index.d.mts

@@ -1,6 +1,6 @@
 import { Address, Transport, Chain, LocalAccount, Hex, Account } from 'viem';
 import { S as SignerWallet, C as ConnectedClient } from '../wallet-SJKJpUgQ.mjs';
-import { P as PaymentRequirements, p as UnsignedEip3009PaymentPayload, o as Eip3009PaymentPayload, e as ExactEvmPayloadAuthorization, J as VerifyResponse, S as SettleResponse, r as UnsignedPermitPaymentPayload, q as PermitPaymentPayload, g as PermitEvmPayloadAuthorization, u as UnsignedPermit2PaymentPayload, t as Permit2PaymentPayload, i as Permit2EvmPayloadAuthorization, a as PaymentPayload, b as ErrorReasons, E as ExactSvmPayload } from '../x402Specs-CYq5tSY1.mjs';
+import { P as PaymentRequirements, p as UnsignedEip3009PaymentPayload, o as Eip3009PaymentPayload, e as ExactEvmPayloadAuthorization, J as VerifyResponse, S as SettleResponse, r as UnsignedPermitPaymentPayload, q as PermitPaymentPayload, g as PermitEvmPayloadAuthorization, u as UnsignedPermit2PaymentPayload, t as Permit2PaymentPayload, i as Permit2EvmPayloadAuthorization, a as PaymentPayload, b as ErrorReasons, E as ExactSvmPayload } from '../x402Specs-BtRXj67U.mjs';
 import { X as X402Config } from '../config-Dfuvno71.mjs';
 import { KeyPairSigner, signTransaction, RpcDevnet, SolanaRpcApiDevnet, RpcMainnet, SolanaRpcApiMainnet, SendTransactionApi, CompilableTransactionMessage, Instruction, AccountLookupMeta, AccountMeta } from '@solana/kit';
 import { b as getRpcSubscriptions } from '../rpc-DyKXu0SX.mjs';
@@ -204,17 +204,23 @@ declare namespace index$4 {
 }
 
 /**
- * Prepares an unsigned Permit2 payment header
+ * Prepares an unsigned Permit2 payment header with witness support
+ *
+ * By default, this function enables witness mode which binds the recipient address
+ * to the signature, preventing the facilitator from changing the payment destination.
  *
  * @param from - The token owner's address
  * @param x402Version - The version of the X402 protocol to use
  * @param paymentRequirements - The payment requirements containing scheme and network information
- * @returns An unsigned Permit2 payment payload containing permit2 authorization details
+ * @returns An unsigned Permit2 payment payload containing permit2 authorization details with witness
  */
 declare function preparePaymentHeader(from: Address, x402Version: number, paymentRequirements: PaymentRequirements): UnsignedPermit2PaymentPayload;
 /**
  * Signs a Permit2 payment header using the provided client and payment requirements.
  *
+ * Supports both witness and non-witness modes based on the presence of the `to` field
+ * in the unsigned payment header.
+ *
  * @param client - The signer wallet instance used to sign the permit2
  * @param paymentRequirements - The payment requirements containing scheme and network information
  * @param unsignedPaymentHeader - The unsigned Permit2 payment payload to be signed
@@ -241,7 +247,11 @@ declare function createPayment<transport extends Transport, chain extends Chain>
 declare function createPaymentHeader$1(client: SignerWallet | LocalAccount, x402Version: number, paymentRequirements: PaymentRequirements): Promise<string>;
 
 /**
- * Signs a Permit2 PermitTransferFrom authorization
+ * Signs a Permit2 authorization (PermitTransferFrom or PermitWitnessTransferFrom)
+ *
+ * Automatically detects witness mode based on the presence of the `to` field.
+ * - If `to` is provided: Uses PermitWitnessTransferFrom (binds recipient to signature)
+ * - If `to` is omitted: Uses PermitTransferFrom (legacy mode)
  *
  * @param walletClient - The wallet client that will sign the permit
  * @param params - The permit2 parameters
@@ -250,11 +260,12 @@ declare function createPaymentHeader$1(client: SignerWallet | LocalAccount, x402
  * @param params.token - The address of the token to transfer
  * @param params.amount - The amount of tokens to transfer (in base units)
  * @param params.deadline - Unix timestamp after which the permit is no longer valid
+ * @param params.to - Optional recipient address for witness mode
  * @param paymentRequirements - The payment requirements containing network information
  * @param paymentRequirements.network - The network where the token exists
  * @returns The signature and nonce for the permit2
  */
-declare function signPermit2<transport extends Transport, chain extends Chain>(walletClient: SignerWallet<chain, transport> | LocalAccount, { owner, spender, token, amount, deadline }: Omit<Permit2EvmPayloadAuthorization, "nonce">, { network }: PaymentRequirements): Promise<{
+declare function signPermit2<transport extends Transport, chain extends Chain>(walletClient: SignerWallet<chain, transport> | LocalAccount, { owner, spender, token, amount, deadline, to }: Omit<Permit2EvmPayloadAuthorization, "nonce">, { network }: PaymentRequirements): Promise<{
     signature: Hex;
     nonce: string;
 }>;
@@ -269,7 +280,11 @@ declare function signPermit2<transport extends Transport, chain extends Chain>(w
 declare function createPermit2Nonce<transport extends Transport, chain extends Chain>(walletClient: SignerWallet<chain, transport> | LocalAccount, ownerAddress: `0x${string}`): Promise<bigint>;
 
 /**
- * Verifies a Permit2 payment payload
+ * Verifies a Permit2 payment payload (with or without witness)
+ *
+ * Supports both witness and non-witness modes:
+ * - Witness mode: Verifies that the recipient address is bound to the signature
+ * - Non-witness mode: Uses standard PermitTransferFrom verification
  *
  * @param client - The public client used for blockchain interactions
  * @param payload - The signed payment payload containing permit2 parameters and signature
@@ -278,7 +293,10 @@ declare function createPermit2Nonce<transport extends Transport, chain extends C
  */
 declare function verify$2<transport extends Transport, chain extends Chain, account extends Account | undefined>(client: ConnectedClient<transport, chain, account>, payload: Permit2PaymentPayload, paymentRequirements: PaymentRequirements): Promise<VerifyResponse>;
 /**
- * Settles a Permit2 payment by calling permitTransferFrom()
+ * Settles a Permit2 payment by calling permitTransferFrom() or permitWitnessTransferFrom()
+ *
+ * Automatically selects the appropriate function based on whether the payment includes
+ * a witness (recipient address binding).
  *
  * @param wallet - The facilitator wallet that will execute the permit transfer
  * @param paymentPayload - The signed payment payload containing permit2 parameters and signature

package/dist/esm/schemes/index.mjs

@@ -1,11 +1,11 @@
 import {
   exact_exports
-} from "../chunk-ZEZOGZ3K.mjs";
+} from "../chunk-TAYXZJPR.mjs";
 import {
   decodePayment,
   encodePayment
-} from "../chunk-RX2JKK4O.mjs";
-import "../chunk-UCBE7FDY.mjs";
+} from "../chunk-J3FMDNC3.mjs";
+import "../chunk-NPWDNT2P.mjs";
 import "../chunk-5LTKIVOA.mjs";
 import "../chunk-AQQR4PXH.mjs";
 export {

package/dist/esm/shared/index.d.mts

@@ -2,8 +2,8 @@ import { N as Network } from '../network-FrFmmiyj.mjs';
 import * as _solana_kit from '@solana/kit';
 import { Transaction, KeyPairSigner, RpcDevnet, SolanaRpcApiDevnet, RpcMainnet, SolanaRpcApiMainnet } from '@solana/kit';
 import { Hex, Address } from 'viem';
-import { R as RoutesConfig, a as RoutePattern, P as Price, E as ERC20TokenAmount, S as SPLTokenAmount } from '../middleware-BSjsPDKM.mjs';
-import { P as PaymentRequirements, a as PaymentPayload, E as ExactSvmPayload } from '../x402Specs-CYq5tSY1.mjs';
+import { R as RoutesConfig, a as RoutePattern, P as Price, E as ERC20TokenAmount, S as SPLTokenAmount } from '../middleware-DSDucaQ5.mjs';
+import { P as PaymentRequirements, a as PaymentPayload, E as ExactSvmPayload } from '../x402Specs-BtRXj67U.mjs';
 import { c as createDevnetRpcClient, a as createMainnetRpcClient, g as getRpcClient, b as getRpcSubscriptions } from '../rpc-DyKXu0SX.mjs';
 import { a as SvmConnectedClient, S as SvmSigner, c as createSignerFromBase58, b as createSvmConnectedClient, i as isSignerWallet } from '../wallet-BTqCm9Zp.mjs';
 import 'zod';

package/dist/esm/shared/index.mjs

@@ -11,7 +11,7 @@ import {
   safeBase64Encode,
   svm_exports2 as svm_exports,
   toJsonSafe
-} from "../chunk-UCBE7FDY.mjs";
+} from "../chunk-NPWDNT2P.mjs";
 import "../chunk-5LTKIVOA.mjs";
 import "../chunk-AQQR4PXH.mjs";
 export {