@x402api/agent-wallet-core 0.1.0

package/dist/protocol/external-recipient.js

@@ -0,0 +1,149 @@
+import { canonicalJson, } from "./http.js";
+export const EXTERNAL_RECIPIENT_EXTENSION = "com.k1hub.external-recipient";
+const SHA256 = /^sha256:[0-9a-f]{64}$/;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const CANONICAL_UTC = /^(?:[0-9]{4})-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12][0-9]|3[01])T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](?:\.[0-9]{1,6})?Z$/;
+function object(value, field) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error(`${field} is malformed`);
+    }
+    return value;
+}
+function exact(value, keys, field) {
+    const result = object(value, field);
+    if (Object.keys(result).sort().join(",") !== [...keys].sort().join(",")) {
+        throw new Error(`${field} contains missing or unknown fields`);
+    }
+    return result;
+}
+function canonicalTimestamp(value, field) {
+    if (typeof value !== "string" ||
+        !CANONICAL_UTC.test(value) ||
+        !Number.isFinite(Date.parse(value))) {
+        throw new Error(`${field} is not a canonical UTC timestamp`);
+    }
+}
+function validateDescriptor(value, recipient) {
+    const candidate = object(value, "external recipient descriptor");
+    const type = candidate.type;
+    const rotation = type === "com.k1hub.external-receiving-address-rotation.v1";
+    const descriptor = exact(candidate, rotation
+        ? [
+            "type",
+            "tenantId",
+            "network",
+            "address",
+            "controlChallengeDigest",
+            "replacesWalletVersionId",
+            "reason",
+            "coolingOffEndsAt",
+        ]
+        : ["type", "tenantId", "network", "address", "controlChallengeDigest"], "external recipient descriptor");
+    if ((!rotation &&
+        descriptor.type !== "com.k1hub.external-receiving-address.v1") ||
+        typeof descriptor.tenantId !== "string" ||
+        !UUID.test(descriptor.tenantId) ||
+        descriptor.network !== recipient.network ||
+        descriptor.address !== recipient.payTo ||
+        typeof descriptor.controlChallengeDigest !== "string" ||
+        !SHA256.test(descriptor.controlChallengeDigest)) {
+        throw new Error("external recipient descriptor does not match the payment recipient");
+    }
+    if (rotation) {
+        if (typeof descriptor.replacesWalletVersionId !== "string" ||
+            !UUID.test(descriptor.replacesWalletVersionId) ||
+            typeof descriptor.reason !== "string" ||
+            descriptor.reason.trim() !== descriptor.reason ||
+            descriptor.reason.length < 1 ||
+            descriptor.reason.length > 1_024) {
+            throw new Error("external recipient rotation descriptor is malformed");
+        }
+        canonicalTimestamp(descriptor.coolingOffEndsAt, "external recipient coolingOffEndsAt");
+    }
+    return descriptor;
+}
+function utf8(value) {
+    return new TextEncoder().encode(value);
+}
+function arrayBuffer(value) {
+    return value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength);
+}
+function hex(value) {
+    return [...new Uint8Array(value)]
+        .map((byte) => byte.toString(16).padStart(2, "0"))
+        .join("");
+}
+async function digest(value) {
+    return `sha256:${hex(await crypto.subtle.digest("SHA-256", arrayBuffer(utf8(canonicalJson(value)))))}`;
+}
+/**
+ * Verify the immutable address-only recipient declaration before a browser
+ * asks any wallet for accounts, signatures, or a transaction.
+ *
+ * This declaration is intentionally separate from the dormant managed-wallet
+ * manifest protocol. Its digest binds the exact receiving-address descriptor
+ * whose signed-nonce proof of control was admitted by K1Hub.
+ */
+export async function verifyExternalRecipientDeclaration(options) {
+    const extensions = options.paymentRequired.extensions ?? {};
+    if (extensions["com.k1hub.wallet-manifest"] !== undefined) {
+        throw new Error("external payment challenge must not contain a managed wallet manifest");
+    }
+    const declaration = extensions[EXTERNAL_RECIPIENT_EXTENSION];
+    const info = exact(declaration?.info, ["version", "recipients"], "external-recipient info");
+    if (info.version !== 1 || !Array.isArray(info.recipients)) {
+        throw new Error("unsupported external-recipient declaration version");
+    }
+    if (info.recipients.length < 1 || info.recipients.length > 32) {
+        throw new Error("external-recipient list is outside the supported bound");
+    }
+    const verified = [];
+    const identities = new Set();
+    for (const value of info.recipients) {
+        const entry = exact(value, [
+            "network",
+            "asset",
+            "payTo",
+            "recipientDescriptorDigest",
+            "recipientDescriptor",
+        ], "external recipient");
+        if (typeof entry.network !== "string" ||
+            typeof entry.asset !== "string" ||
+            typeof entry.payTo !== "string" ||
+            typeof entry.recipientDescriptorDigest !== "string" ||
+            !SHA256.test(entry.recipientDescriptorDigest)) {
+            throw new Error("external recipient declaration is malformed");
+        }
+        const descriptor = validateDescriptor(entry.recipientDescriptor, {
+            network: entry.network,
+            payTo: entry.payTo,
+        });
+        if ((await digest(descriptor)) !== entry.recipientDescriptorDigest) {
+            throw new Error("external recipient descriptor digest is invalid");
+        }
+        const identity = canonicalJson({
+            network: entry.network,
+            asset: entry.asset,
+            payTo: entry.payTo,
+        });
+        if (identities.has(identity)) {
+            throw new Error("external recipient declaration contains a duplicate");
+        }
+        identities.add(identity);
+        verified.push({
+            network: entry.network,
+            asset: entry.asset,
+            payTo: entry.payTo,
+            recipientDescriptorDigest: entry.recipientDescriptorDigest,
+            recipientDescriptor: descriptor,
+        });
+    }
+    const matches = verified.filter((entry) => entry.network === options.accepted.network &&
+        entry.asset === options.accepted.asset &&
+        entry.payTo === options.accepted.payTo);
+    if (matches.length !== 1) {
+        throw new Error("accepted requirement has no unique external recipient declaration");
+    }
+    return matches[0];
+}
+//# sourceMappingURL=external-recipient.js.map

package/dist/protocol/external-recipient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-recipient.js","sourceRoot":"","sources":["../../src/protocol/external-recipient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAId,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAE3E,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,IAAI,GACR,2EAA2E,CAAC;AAC9E,MAAM,aAAa,GACjB,0HAA0H,CAAC;AAU7H,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CACZ,KAAc,EACd,IAAuB,EACvB,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,SAGC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,KAAK,kDAAkD,CAAC;IAC7E,MAAM,UAAU,GAAG,KAAK,CACtB,SAAS,EACT,QAAQ;QACN,CAAC,CAAC;YACE,MAAM;YACN,UAAU;YACV,SAAS;YACT,SAAS;YACT,wBAAwB;YACxB,yBAAyB;YACzB,QAAQ;YACR,kBAAkB;SACnB;QACH,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,wBAAwB,CAAC,EACxE,+BAA+B,CAChC,CAAC;IACF,IACE,CAAC,CAAC,QAAQ;QACR,UAAU,CAAC,IAAI,KAAK,yCAAyC,CAAC;QAChE,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;QACvC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC/B,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QACxC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK;QACtC,OAAO,UAAU,CAAC,sBAAsB,KAAK,QAAQ;QACrD,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IACE,OAAO,UAAU,CAAC,uBAAuB,KAAK,QAAQ;YACtD,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC;YAC9C,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ;YACrC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,MAAM;YAC9C,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC5B,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,kBAAkB,CAChB,UAAU,CAAC,gBAAgB,EAC3B,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,UAAwB,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CACrB,CAAC;AACnB,CAAC;AAED,SAAS,GAAG,CAAC,KAAkB;IAC7B,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;SAC9B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAiB;IACrC,OAAO,UAAU,GAAG,CAClB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxB,SAAS,EACT,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CACxC,CACF,EAAE,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,OAGxD;IACC,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5D,IAAI,UAAU,CAAC,2BAA2B,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,4BAA4B,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAChB,WAAW,EAAE,IAAI,EACjB,CAAC,SAAS,EAAE,YAAY,CAAC,EACzB,yBAAyB,CAC1B,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CACjB,KAAK,EACL;YACE,SAAS;YACT,OAAO;YACP,OAAO;YACP,2BAA2B;YAC3B,qBAAqB;SACtB,EACD,oBAAoB,CACrB,CAAC;QACF,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,OAAO,KAAK,CAAC,yBAAyB,KAAK,QAAQ;YACnD,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,EAAE;YAC/D,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,CAAC,yBAAyB,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,mBAAmB,EAAE,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,OAAO;QAC1C,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK;QACtC,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK,CACzC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;AACrB,CAAC"}

package/dist/protocol/http.d.ts

@@ -0,0 +1,52 @@
+export type JsonScalar = string | number | boolean | null;
+export type JsonValue = JsonScalar | JsonObject | JsonValue[];
+export type JsonObject = {
+    [key: string]: JsonValue;
+};
+export type PaymentRequirement = {
+    scheme: string;
+    network: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    maxTimeoutSeconds: number;
+    extra: JsonObject;
+};
+export type ResourceInfo = {
+    url: string;
+    description?: string;
+    mimeType?: string;
+    serviceName?: string;
+    tags?: string[];
+    iconUrl?: string;
+};
+export type PaymentRequired = {
+    x402Version: 2;
+    error?: string;
+    resource: ResourceInfo;
+    accepts: PaymentRequirement[];
+    extensions?: Record<string, ExtensionDeclaration>;
+};
+export type ExtensionDeclaration = {
+    info: JsonObject;
+    schema?: JsonObject;
+};
+export type PaymentPayload = {
+    x402Version: 2;
+    accepted: PaymentRequirement;
+    payload: JsonObject;
+    extensions: Record<string, ExtensionDeclaration>;
+    resource?: PaymentRequired["resource"];
+};
+export declare function canonicalJson(value: JsonValue): string;
+export declare function decodePaymentRequiredHeader(value: string): PaymentRequired;
+export declare function encodePaymentRequiredHeader(value: PaymentRequired): string;
+export declare function createPaymentPayload(options: {
+    paymentRequired: PaymentRequired;
+    accepted: PaymentRequirement;
+    schemePayload: JsonObject;
+    paymentIdentifier?: string;
+}): PaymentPayload;
+export declare function encodePaymentSignature(value: PaymentPayload): string;
+export declare function decodePaymentSignature(value: string): PaymentPayload;
+//# sourceMappingURL=http.d.ts.map

package/dist/protocol/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/protocol/http.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC1D,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,UAAU,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,CAAC,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,UAAU,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;CACxC,CAAC;AAuCF,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAYtD;AAyID,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAgD1E;AACD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAE1E;AAcD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,aAAa,EAAE,UAAU,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,cAAc,CA0BjB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAgCpE"}

package/dist/protocol/http.js

@@ -0,0 +1,283 @@
+const MAX_HEADER_BYTES = 64 * 1024;
+const MAX_SIGNATURE_BYTES = 512 * 1024;
+const DECIMAL = /^(?:0|[1-9][0-9]{0,77})$/;
+const CAIP2_NETWORK = /^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}$/;
+const PAYMENT_IDENTIFIER = /^[A-Za-z0-9_-]{16,128}$/;
+const BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+const PRINTABLE_ASCII = /^[\x20-\x7e]+$/;
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function assertJsonValue(value) {
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean") {
+        return;
+    }
+    if (typeof value === "number") {
+        if (!Number.isSafeInteger(value)) {
+            throw new Error("cryptographic JSON numbers must be safe integers");
+        }
+        return;
+    }
+    if (Array.isArray(value)) {
+        value.forEach(assertJsonValue);
+        return;
+    }
+    if (isObject(value)) {
+        Object.values(value).forEach(assertJsonValue);
+        return;
+    }
+    throw new Error("value is not JSON");
+}
+export function canonicalJson(value) {
+    assertJsonValue(value);
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((item) => canonicalJson(item)).join(",")}]`;
+    }
+    return `{${Object.keys(value)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+        .join(",")}}`;
+}
+function decodeBase64Json(value, maximumBytes) {
+    if (value.length === 0 || value.length > maximumBytes || !BASE64.test(value)) {
+        throw new Error("x402 header is not canonical base64");
+    }
+    let bytes;
+    try {
+        const binary = atob(value);
+        if (btoa(binary) !== value)
+            throw new Error("non-canonical base64");
+        bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    }
+    catch {
+        throw new Error("x402 header is not valid base64");
+    }
+    if (bytes.byteLength > maximumBytes) {
+        throw new Error("x402 header exceeds the maximum size");
+    }
+    try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new Error("x402 header is not UTF-8 JSON");
+    }
+}
+function encodeBase64Json(value, maximumBytes) {
+    const bytes = new TextEncoder().encode(canonicalJson(value));
+    if (bytes.byteLength > maximumBytes) {
+        throw new Error("x402 value exceeds the maximum size");
+    }
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    const encoded = btoa(binary);
+    if (encoded.length > maximumBytes) {
+        throw new Error("x402 header exceeds the maximum size");
+    }
+    return encoded;
+}
+function requirement(value) {
+    if (!isObject(value))
+        throw new Error("payment requirement is not an object");
+    const allowed = new Set([
+        "scheme",
+        "network",
+        "amount",
+        "asset",
+        "payTo",
+        "maxTimeoutSeconds",
+        "extra",
+    ]);
+    if (Object.keys(value).some((key) => !allowed.has(key))) {
+        throw new Error("payment requirement has unknown fields");
+    }
+    if (typeof value.scheme !== "string" ||
+        typeof value.network !== "string" ||
+        !CAIP2_NETWORK.test(value.network) ||
+        typeof value.amount !== "string" ||
+        !DECIMAL.test(value.amount) ||
+        value.amount === "0" ||
+        typeof value.asset !== "string" ||
+        typeof value.payTo !== "string" ||
+        !Number.isSafeInteger(value.maxTimeoutSeconds) ||
+        value.maxTimeoutSeconds < 1 ||
+        !isObject(value.extra)) {
+        throw new Error("payment requirement is malformed");
+    }
+    assertJsonValue(value.extra);
+    return value;
+}
+function optionalString(value) {
+    return value === undefined || typeof value === "string";
+}
+function resource(value) {
+    const allowed = new Set([
+        "url",
+        "description",
+        "mimeType",
+        "serviceName",
+        "tags",
+        "iconUrl",
+    ]);
+    if (!isObject(value) ||
+        Object.keys(value).some((key) => !allowed.has(key)) ||
+        typeof value.url !== "string" ||
+        !optionalString(value.description) ||
+        !optionalString(value.mimeType) ||
+        !optionalString(value.serviceName) ||
+        (value.serviceName !== undefined &&
+            (value.serviceName.length < 1 ||
+                value.serviceName.length > 32 ||
+                !PRINTABLE_ASCII.test(value.serviceName))) ||
+        (value.tags !== undefined &&
+            (!Array.isArray(value.tags) ||
+                value.tags.length > 5 ||
+                value.tags.some((tag) => typeof tag !== "string" ||
+                    tag.length < 1 ||
+                    tag.length > 32 ||
+                    !PRINTABLE_ASCII.test(tag)))) ||
+        !optionalString(value.iconUrl)) {
+        throw new Error("payment resource is malformed");
+    }
+    return value;
+}
+function paymentPayloadExtensions(value) {
+    if (!isObject(value)) {
+        throw new Error("payment payload extensions are malformed");
+    }
+    const extensions = {};
+    for (const [name, declaration] of Object.entries(value)) {
+        if (!isObject(declaration) ||
+            Object.keys(declaration).some((key) => key !== "info" && key !== "schema") ||
+            !isObject(declaration.info) ||
+            (declaration.schema !== undefined && !isObject(declaration.schema))) {
+            throw new Error(`payment payload extension ${name} is malformed`);
+        }
+        assertJsonValue(declaration.info);
+        if (declaration.schema !== undefined)
+            assertJsonValue(declaration.schema);
+        extensions[name] = declaration;
+    }
+    return extensions;
+}
+export function decodePaymentRequiredHeader(value) {
+    const parsed = decodeBase64Json(value, MAX_HEADER_BYTES);
+    if (!isObject(parsed))
+        throw new Error("PAYMENT-REQUIRED is not an object");
+    const allowed = new Set([
+        "x402Version",
+        "error",
+        "resource",
+        "accepts",
+        "extensions",
+    ]);
+    if (Object.keys(parsed).some((key) => !allowed.has(key))) {
+        throw new Error("PAYMENT-REQUIRED has unknown fields");
+    }
+    if (parsed.x402Version !== 2 ||
+        (parsed.error !== undefined && typeof parsed.error !== "string") ||
+        !Array.isArray(parsed.accepts) ||
+        parsed.accepts.length < 1 ||
+        (parsed.extensions !== undefined && !isObject(parsed.extensions))) {
+        throw new Error("PAYMENT-REQUIRED is malformed");
+    }
+    const accepts = parsed.accepts.map(requirement);
+    const extensions = {};
+    if (isObject(parsed.extensions)) {
+        for (const [name, declaration] of Object.entries(parsed.extensions)) {
+            if (!isObject(declaration) ||
+                Object.keys(declaration).some((key) => key !== "info" && key !== "schema") ||
+                !isObject(declaration.info) ||
+                (declaration.schema !== undefined && !isObject(declaration.schema))) {
+                throw new Error(`extension ${name} is malformed`);
+            }
+            assertJsonValue(declaration.info);
+            if (declaration.schema !== undefined)
+                assertJsonValue(declaration.schema);
+            extensions[name] = declaration;
+        }
+    }
+    return {
+        x402Version: 2,
+        ...(parsed.error === undefined ? {} : { error: parsed.error }),
+        resource: resource(parsed.resource),
+        accepts,
+        ...(Object.keys(extensions).length > 0 ? { extensions } : {}),
+    };
+}
+export function encodePaymentRequiredHeader(value) {
+    return encodeBase64Json(value, MAX_HEADER_BYTES);
+}
+function copiedExtensionInfo(declarations) {
+    const result = {};
+    for (const [name, declaration] of Object.entries(declarations ?? {})) {
+        result[name] = JSON.parse(canonicalJson(declaration));
+    }
+    return result;
+}
+export function createPaymentPayload(options) {
+    const { paymentRequired, accepted, schemePayload, paymentIdentifier } = options;
+    const advertised = paymentRequired.accepts.some((candidate) => canonicalJson(candidate) ===
+        canonicalJson(accepted));
+    if (!advertised)
+        throw new Error("accepted requirement was not advertised");
+    assertJsonValue(schemePayload);
+    const extensions = copiedExtensionInfo(paymentRequired.extensions);
+    const identifier = extensions["payment-identifier"];
+    if (identifier) {
+        if (!paymentIdentifier || !PAYMENT_IDENTIFIER.test(paymentIdentifier)) {
+            throw new Error("a valid buyer payment identifier is required");
+        }
+        identifier.info.id = paymentIdentifier;
+    }
+    else if (paymentIdentifier !== undefined) {
+        throw new Error("server did not declare the payment-identifier extension");
+    }
+    return {
+        x402Version: 2,
+        resource: paymentRequired.resource,
+        accepted,
+        payload: schemePayload,
+        extensions,
+    };
+}
+export function encodePaymentSignature(value) {
+    return encodeBase64Json(value, MAX_SIGNATURE_BYTES);
+}
+export function decodePaymentSignature(value) {
+    const parsed = decodeBase64Json(value, MAX_SIGNATURE_BYTES);
+    if (!isObject(parsed)) {
+        throw new Error("PAYMENT-SIGNATURE is not an object");
+    }
+    const allowed = new Set([
+        "x402Version",
+        "accepted",
+        "payload",
+        "extensions",
+        "resource",
+    ]);
+    if (Object.keys(parsed).some((key) => !allowed.has(key))) {
+        throw new Error("PAYMENT-SIGNATURE has unknown fields");
+    }
+    if (parsed.x402Version !== 2 ||
+        !isObject(parsed.payload) ||
+        !isObject(parsed.extensions)) {
+        throw new Error("PAYMENT-SIGNATURE is malformed");
+    }
+    assertJsonValue(parsed.payload);
+    return {
+        x402Version: 2,
+        accepted: requirement(parsed.accepted),
+        payload: parsed.payload,
+        extensions: paymentPayloadExtensions(parsed.extensions),
+        ...(parsed.resource === undefined
+            ? {}
+            : { resource: resource(parsed.resource) }),
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/protocol/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/protocol/http.ts"],"names":[],"mappings":"AA4CA,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AACvC,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,aAAa,GAAG,sCAAsC,CAAC;AAC7D,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AACrD,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAClF,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAgB;IAC5C,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,YAAoB;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACpE,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB,EAAE,YAAoB;IAC9D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,OAAO;QACP,OAAO;QACP,mBAAmB;QACnB,OAAO;KACR,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAClC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,KAAK,CAAC,MAAM,KAAK,GAAG;QACpB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC7C,KAAK,CAAC,iBAA4B,GAAG,CAAC;QACvC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,KAAK;QACL,aAAa;QACb,UAAU;QACV,aAAa;QACb,MAAM;QACN,SAAS;KACV,CAAC,CAAC;IACH,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/B,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YAC9B,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBAC3B,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;gBAC7B,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CACb,CAAC,GAAG,EAAE,EAAE,CACN,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,CAAC,MAAM,GAAG,CAAC;oBACd,GAAG,CAAC,MAAM,GAAG,EAAE;oBACf,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7B,CAAC,CAAC;QACP,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAoC,CAAC;AAC9C,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAyC,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IACE,CAAC,QAAQ,CAAC,WAAW,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,CAC5C;YACD,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;YAC3B,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EACnE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,eAAe,CAAC,CAAC;QACpE,CAAC;QACD,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS;YAAE,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,WAAmC,CAAC;IACzD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,aAAa;QACb,OAAO;QACP,UAAU;QACV,SAAS;QACT,YAAY;KACb,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IACE,MAAM,CAAC,WAAW,KAAK,CAAC;QACxB,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;QAChE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACzB,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,UAAU,GAAyC,EAAE,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,IACE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,CAC5C;gBACD,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC3B,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,eAAe,CAAC,CAAC;YACpD,CAAC;YACD,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS;gBAAE,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,WAAmC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnC,OAAO;QACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,KAAsB;IAChE,OAAO,gBAAgB,CAAC,KAA8B,EAAE,gBAAgB,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAA8D;IAE9D,MAAM,MAAM,GAAyC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CACvB,aAAa,CAAC,WAAoC,CAAC,CAC5B,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAKpC;IACC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAChF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAC7C,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,SAAkC,CAAC;QACjD,aAAa,CAAC,QAAiC,CAAC,CACnD,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5E,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,mBAAmB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,iBAAiB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,iBAAiB,CAAC;IACzC,CAAC;SAAM,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,eAAe,CAAC,QAAQ;QAClC,QAAQ;QACR,OAAO,EAAE,aAAa;QACtB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,OAAO,gBAAgB,CAAC,KAA8B,EAAE,mBAAmB,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,aAAa;QACb,UAAU;QACV,SAAS;QACT,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,MAAM,CAAC,WAAW,KAAK,CAAC;QACxB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QACzB,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO;QACL,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC,OAAqB;QACrC,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/protocol/solana.d.ts

@@ -0,0 +1,147 @@
+import { type PaymentPayload, type PaymentRequired, type PaymentRequirement } from "./http.js";
+export declare const SOLANA_MAINNET_NETWORK = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+export declare const SOLANA_USDC_MAINNET_MINT = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
+export declare const SOLANA_USDT_MAINNET_MINT = "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB";
+export declare const SOLANA_TOKEN_PROGRAM = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+export declare const SOLANA_ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+export declare const SOLANA_COMPUTE_BUDGET_PROGRAM = "ComputeBudget111111111111111111111111111111";
+export declare const SOLANA_MEMO_PROGRAM = "MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr";
+export declare const SOLANA_USDT_BUYER_FUNDED_PROFILE = "com.k1hub.x402.solana-buyer-funded.v1";
+export interface SolanaRpc {
+    latestBlockhash(): Promise<string>;
+}
+export interface SolanaWalletTransport {
+    connect(network: typeof SOLANA_MAINNET_NETWORK): Promise<string>;
+    signTransaction(options: {
+        network: typeof SOLANA_MAINNET_NETWORK;
+        transactionBase64: string;
+    }): Promise<string>;
+}
+export interface SolanaWalletRpcProvider {
+    request(args: {
+        method: string;
+        params?: Record<string, unknown>;
+    }, chain?: string): Promise<unknown>;
+}
+export interface InjectedSolanaProvider {
+    connect(): Promise<{
+        publicKey: {
+            toString(): string;
+        };
+    }>;
+    signTransaction(transaction: RawSolanaVersionedTransaction): Promise<{
+        serialize(): Uint8Array;
+    }>;
+}
+export declare function decodeSolanaBase58(value: string): Uint8Array;
+export declare function encodeSolanaBase58(value: Uint8Array): string;
+export declare function solanaAssociatedTokenAddress(options: {
+    owner: string;
+    mint: string;
+}): Promise<string>;
+export declare class RawSolanaVersionedTransaction {
+    private readonly messageBytes;
+    readonly version = 0;
+    readonly message: {
+        version: 0;
+        serialize(): Uint8Array;
+    };
+    signatures: Uint8Array[];
+    constructor(messageBytes: Uint8Array, signatures?: Uint8Array[]);
+    serialize(): Uint8Array;
+}
+export declare class InjectedSolanaWalletTransport implements SolanaWalletTransport {
+    private readonly provider;
+    private payer;
+    constructor(provider: InjectedSolanaProvider);
+    connect(network: typeof SOLANA_MAINNET_NETWORK): Promise<string>;
+    signTransaction(options: {
+        network: typeof SOLANA_MAINNET_NETWORK;
+        transactionBase64: string;
+    }): Promise<string>;
+}
+/**
+ * Build the dormant tenant-sponsored Solana transaction profile.
+ *
+ * @deprecated V1 uses `buildBuyerFundedSolanaUsdtTransaction`. This helper is
+ * retained only for managed-wallet regression and the isolated payment lab.
+ */
+export declare function buildSolanaUsdtTransaction(options: {
+    accepted: PaymentRequirement;
+    payer: string;
+    recentBlockhash: string;
+    computeUnitLimit?: number;
+    computeUnitPriceMicroLamports?: number;
+}): Promise<{
+    message: Uint8Array;
+    transaction: Uint8Array;
+}>;
+/**
+ * Build an exact V1 buyer-funded issuer-native Solana stablecoin transaction.
+ *
+ * The connected buyer is both the SPL token authority and the only transaction
+ * signer/fee payer. The frozen v0 message contains exactly two compute-budget
+ * instructions, one `TransferChecked`, and the challenge memo.
+ */
+export declare function buildBuyerFundedSolanaPayment(options: {
+    accepted: PaymentRequirement;
+    payer: string;
+    recentBlockhash: string;
+    computeUnitLimit?: number;
+    computeUnitPriceMicroLamports?: number;
+}): Promise<{
+    message: Uint8Array;
+    transaction: Uint8Array;
+}>;
+/** @deprecated Use `buildBuyerFundedSolanaPayment`; retained for compatibility. */
+export declare const buildBuyerFundedSolanaUsdtTransaction: typeof buildBuyerFundedSolanaPayment;
+export declare class ConnectedSolanaWalletRpcTransport implements SolanaWalletTransport {
+    private readonly provider;
+    private readonly account;
+    constructor(provider: SolanaWalletRpcProvider, account: () => Promise<string>);
+    connect(network: typeof SOLANA_MAINNET_NETWORK): Promise<string>;
+    signTransaction(options: {
+        network: typeof SOLANA_MAINNET_NETWORK;
+        transactionBase64: string;
+    }): Promise<string>;
+}
+export declare class SolanaJsonRpc implements SolanaRpc {
+    private readonly endpoint;
+    constructor(endpoint: string);
+    latestBlockhash(): Promise<string>;
+}
+export declare function createSolanaPayment(options: {
+    rpc: SolanaRpc;
+    wallet: SolanaWalletTransport;
+    paymentRequired: PaymentRequired;
+    accepted: PaymentRequirement;
+    buyerPaymentIdentifier: string;
+    now?: Date;
+}): Promise<PaymentPayload>;
+export declare const createSolanaUsdcPayment: typeof createSolanaPayment;
+export declare const createSolanaUsdtPayment: typeof createSolanaPayment;
+export declare const createBuyerFundedSolanaPayment: typeof createSolanaPayment;
+export declare const createBuyerFundedSolanaUsdtPayment: typeof createSolanaPayment;
+export type SponsoredSolanaPaymentLabAdmission = {
+    kind: "tenant-sponsored-solana-payment-lab-v1";
+    payer: string;
+    recipient: string;
+    asset: typeof SOLANA_USDT_MAINNET_MINT;
+    amountAtomic: string;
+    resourceUrl: string;
+    expiresAt: string;
+};
+/**
+ * @deprecated Isolated tenant-sponsored payment-lab helper. It is not part of
+ * the external-wallet V1 product path.
+ */
+export declare function createSolanaUsdtLabPayment(options: {
+    rpc: SolanaRpc;
+    wallet: SolanaWalletTransport;
+    paymentRequired: PaymentRequired;
+    accepted: PaymentRequirement;
+    buyerPaymentIdentifier: string;
+    admission: SponsoredSolanaPaymentLabAdmission;
+    now?: Date;
+}): Promise<PaymentPayload>;
+//# sourceMappingURL=solana.d.ts.map