@xona-labs/xpay 0.2.26 → 0.2.27

package/CHANGELOG.md

@@ -6,6 +6,47 @@ versioning follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.2.27] – 2026-08-18
+
+### Added
+- **Tempo wallet.** New `tempo` network (eip155:4217, Stripe/Paradigm
+  payments L1, `rpc.tempo.xyz`), settling USDC.e (TIP-20, 6 decimals,
+  `0x20C0...8b50`). Registered unconditionally from any profile like
+  Robinhood and Stable, so existing wallets get a Tempo address without
+  re-running `xpay init`; `xpay balance` includes it. Tempo has no native
+  gas token - fees are paid in stablecoins, and MPP challenges are
+  fee-sponsored by the server anyway.
+- **MPP tempo/charge settlement.** `use()`/`useByUrl()` settle `tempo`
+  method challenges by signing a pull-mode Tempo transaction (TIP-20
+  `transferWithMemo` with the MPP attribution memo binding the challenge
+  id, expiring nonce, fee-payer sponsorship when offered) via viem's tempo
+  extensions - the server broadcasts, so no gas is needed client-side.
+  Verified end to end against mpp.dev's paid ping endpoint on Moderato:
+  a faucet-funded wallet paid through `useByUrl()` and got the settlement
+  tx hash back from the `Payment-Receipt` header. Adds `viem` as a
+  dependency (Tempo's transaction type needs it; ethers stays for
+  everything else).
+- **MPP (Machine Payments Protocol) charge support.** `use()` and `useByUrl()`
+  now settle against MPP servers (the Stripe + Tempo open 402 standard,
+  mpp.dev) in addition to x402. When a 402 carries `WWW-Authenticate: Payment`
+  challenges, xpay picks a fundable option, signs an EIP-3009
+  `transferWithAuthorization` bound to the challenge id (gasless, server
+  broadcasts), retries with `Authorization: Payment <credential>`, and reads
+  the settlement tx hash from the `Payment-Receipt` header. Hybrid servers
+  fall back to the x402 flow for any method xpay cannot settle as MPP yet.
+  Settleable today: `evm`/`charge` paying a known EIP-3009 stablecoin (USDC
+  on Base, Ethereum, Arbitrum, Optimism, Base Sepolia). `tempo` and `solana`
+  methods land with their chain support. Wire format cross-validated against
+  the official `mppx` client: credentials deserialize cleanly and pass the
+  server-side HMAC challenge-id check.
+
+## [0.2.26] – 2026-08-12
+
+### Added
+- **MCP tool annotations.** Every MCP tool now carries behavior hints
+  (`readOnlyHint`, `openWorldHint`, `destructiveHint`) for the ChatGPT Apps
+  submission and other MCP clients that surface them.
+
 ## [0.2.25] – 2026-08-07
 
 ### Changed

package/dist/cli/balance.js

@@ -21,7 +21,7 @@ export async function runBalance(opts) {
     const configured = profile.config.networks;
     const networks = opts.network
         ? [opts.network]
-        : [...configured, ...["robinhood", "stable"].filter((n) => !configured.includes(n))];
+        : [...configured, ...["robinhood", "stable", "tempo"].filter((n) => !configured.includes(n))];
     console.log("");
     console.log(chalk.bold(`Profile "${name}"`));
     console.log("");

package/dist/cli/balance.js.map

@@ -1 +1 @@
-{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/cli/balance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;QAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,iBAAiB,GAAG,IAAI,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAElE,IAAI,OAAQ,MAAc,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAO,MAAc,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,kEAAkE;YAClE,6DAA6D;YAC7D,IAAI,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAI,GAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzD,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;gBACrF,kEAAkE;gBAClE,qDAAqD;gBACrD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;oBAAE,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC/F,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;oBAAE,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC;;oBACpD,iBAAiB,GAAG,KAAK,CAAC;YACjC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sBAAsB;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,SAAS,IAAI,GAAG,CAAC;YACjB,YAAY,IAAI,GAAG,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC;IAClH,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,EAAE,CACtI,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/cli/balance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;QAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,iBAAiB,GAAG,IAAI,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAElE,IAAI,OAAQ,MAAc,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAO,MAAc,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,kEAAkE;YAClE,6DAA6D;YAC7D,IAAI,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAI,GAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzD,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;gBACrF,kEAAkE;gBAClE,qDAAqD;gBACrD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;oBAAE,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC/F,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;oBAAE,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC;;oBACpD,iBAAiB,GAAG,KAAK,CAAC;YACjC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sBAAsB;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,SAAS,IAAI,GAAG,CAAC;YACjB,YAAY,IAAI,GAAG,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE,CAAC,CAAC;IAClH,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,EAAE,CACtI,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/mpp/challenge.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Parse MPP (Machine Payments Protocol) challenges from a 402 response.
+ *
+ * MPP is the Stripe + Tempo open standard for HTTP 402 (spec: mpp.dev /
+ * paymentauth.org). Unlike x402's custom headers, the challenge rides the
+ * standard auth header:
+ *
+ *   WWW-Authenticate: Payment id="...", realm="...", method="evm",
+ *       intent="charge", request="<base64url JSON>", expires="..."
+ *
+ * A server may offer several payment methods; fetch() merges the multiple
+ * WWW-Authenticate headers into one comma-separated value, so the parser
+ * splits on `Payment ` scheme boundaries outside quoted strings (RFC 9110
+ * 11.6.1), then reads auth-params with quoted-string escape handling.
+ *
+ * The raw base64url `request` and `opaque` values are kept verbatim: the
+ * server HMAC-binds the challenge `id` to their exact encoding, so the
+ * credential must echo them unmodified.
+ */
+import type { PaymentRequirement } from "../types.js";
+export interface MppChallenge {
+    id: string;
+    realm: string;
+    /** Payment method, e.g. "evm", "tempo", "solana", "stripe". */
+    method: string;
+    /** Intent, e.g. "charge", "session", "subscription". */
+    intent: string;
+    /** Decoded method-specific request payload. */
+    request: Record<string, unknown>;
+    /** Raw base64url `request` exactly as received - echo verbatim in the credential. */
+    requestRaw: string;
+    description?: string;
+    digest?: string;
+    expires?: string;
+    /** Raw base64url server correlation data - clients MUST NOT modify. */
+    opaque?: string;
+}
+/** One settleable payment option: the challenge plus its derived requirement. */
+export interface MppOption {
+    challenge: MppChallenge;
+    requirement: PaymentRequirement;
+}
+/**
+ * Extract every MPP `Payment` challenge from a 402 response's headers.
+ * Returns [] when the header is absent or carries no Payment scheme, so
+ * callers can cheaply detect "is this an MPP server at all".
+ */
+export declare function parseMppChallenges(headers: Headers): MppChallenge[];
+/**
+ * Filter challenges down to the options this wallet stack can actually
+ * settle today, mapped into {@link PaymentRequirement} so balance-aware
+ * picking and the guardrail reuse the x402 machinery unchanged.
+ *
+ * Currently settleable:
+ *   - `evm`/`charge` paying a known EIP-3009 token (signed
+ *     transferWithAuthorization, server broadcasts)
+ *   - `tempo`/`charge` (signed pull-mode Tempo transaction, server
+ *     broadcasts; fee-sponsored when the challenge offers feePayer)
+ * `solana` uses signed-transaction payloads and lands with its chain
+ * support, not here.
+ */
+export declare function settleableMppOptions(challenges: MppChallenge[]): MppOption[];
+//# sourceMappingURL=challenge.d.ts.map

package/dist/mpp/challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../src/mpp/challenge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAUnE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,CAQ5E"}

package/dist/mpp/challenge.js

@@ -0,0 +1,257 @@
+/**
+ * Parse MPP (Machine Payments Protocol) challenges from a 402 response.
+ *
+ * MPP is the Stripe + Tempo open standard for HTTP 402 (spec: mpp.dev /
+ * paymentauth.org). Unlike x402's custom headers, the challenge rides the
+ * standard auth header:
+ *
+ *   WWW-Authenticate: Payment id="...", realm="...", method="evm",
+ *       intent="charge", request="<base64url JSON>", expires="..."
+ *
+ * A server may offer several payment methods; fetch() merges the multiple
+ * WWW-Authenticate headers into one comma-separated value, so the parser
+ * splits on `Payment ` scheme boundaries outside quoted strings (RFC 9110
+ * 11.6.1), then reads auth-params with quoted-string escape handling.
+ *
+ * The raw base64url `request` and `opaque` values are kept verbatim: the
+ * server HMAC-binds the challenge `id` to their exact encoding, so the
+ * credential must echo them unmodified.
+ */
+/**
+ * Extract every MPP `Payment` challenge from a 402 response's headers.
+ * Returns [] when the header is absent or carries no Payment scheme, so
+ * callers can cheaply detect "is this an MPP server at all".
+ */
+export function parseMppChallenges(headers) {
+    const header = headers.get("www-authenticate");
+    if (!header)
+        return [];
+    const out = [];
+    for (const chunk of splitPaymentSchemes(header)) {
+        const ch = parseOne(chunk);
+        if (ch)
+            out.push(ch);
+    }
+    return out;
+}
+/**
+ * Filter challenges down to the options this wallet stack can actually
+ * settle today, mapped into {@link PaymentRequirement} so balance-aware
+ * picking and the guardrail reuse the x402 machinery unchanged.
+ *
+ * Currently settleable:
+ *   - `evm`/`charge` paying a known EIP-3009 token (signed
+ *     transferWithAuthorization, server broadcasts)
+ *   - `tempo`/`charge` (signed pull-mode Tempo transaction, server
+ *     broadcasts; fee-sponsored when the challenge offers feePayer)
+ * `solana` uses signed-transaction payloads and lands with its chain
+ * support, not here.
+ */
+export function settleableMppOptions(challenges) {
+    const out = [];
+    for (const ch of challenges) {
+        if (ch.intent !== "charge" || (ch.method !== "evm" && ch.method !== "tempo"))
+            continue;
+        const req = ch.method === "tempo" ? tempoChargeToRequirement(ch) : evmChargeToRequirement(ch);
+        if (req)
+            out.push({ challenge: ch, requirement: req });
+    }
+    return out;
+}
+/**
+ * Map an MPP tempo/charge request into our PaymentRequirement shape.
+ * Tempo requests look like EVM ones (amount/currency/recipient +
+ * methodDetails.chainId) but settle via signed Tempo transactions, and the
+ * chainId may be omitted (mainnet, 4217).
+ */
+function tempoChargeToRequirement(ch) {
+    const r = ch.request;
+    const details = isObj(r.methodDetails) ? r.methodDetails : {};
+    const chainId = typeof details.chainId === "number" ? details.chainId : 4217;
+    if (typeof r.currency !== "string" || typeof r.recipient !== "string")
+        return null;
+    // xpay signs pull-mode (sign, server broadcasts) - skip push-only challenges.
+    const modes = details.supportedModes;
+    if (Array.isArray(modes) && !modes.includes("pull"))
+        return null;
+    return {
+        scheme: "exact",
+        network: `eip155:${chainId}`,
+        payTo: r.recipient,
+        asset: r.currency,
+        amount: typeof r.amount === "string" ? r.amount : undefined,
+        maxTimeoutSeconds: secondsUntil(ch.expires),
+    };
+}
+/** Map an MPP evm/charge request into our PaymentRequirement shape. */
+function evmChargeToRequirement(ch) {
+    const r = ch.request;
+    const details = isObj(r.methodDetails) ? r.methodDetails : {};
+    const chainId = details.chainId;
+    if (typeof chainId !== "number" || !Number.isInteger(chainId) || chainId <= 0)
+        return null;
+    if (typeof r.currency !== "string" || typeof r.recipient !== "string")
+        return null;
+    // credentialTypes, when present, must include the one payload we sign.
+    const types = details.credentialTypes;
+    if (Array.isArray(types) && !types.includes("authorization"))
+        return null;
+    // Split payouts need multiple transfers - a single EIP-3009 signature can't.
+    if (Array.isArray(details.splits) && details.splits.length > 0)
+        return null;
+    return {
+        scheme: "exact",
+        network: `eip155:${chainId}`,
+        payTo: r.recipient,
+        asset: r.currency,
+        amount: typeof r.amount === "string" ? r.amount : undefined,
+        maxTimeoutSeconds: secondsUntil(ch.expires),
+    };
+}
+function secondsUntil(expires) {
+    if (!expires)
+        return undefined;
+    const ms = Date.parse(expires) - Date.now();
+    return Number.isFinite(ms) && ms > 0 ? Math.floor(ms / 1000) : undefined;
+}
+/**
+ * Split a (possibly merged) WWW-Authenticate value into `Payment ...` chunks,
+ * ignoring scheme-like tokens inside quoted strings. Non-Payment schemes
+ * (Bearer, Basic, ...) are dropped.
+ */
+function splitPaymentSchemes(header) {
+    const starts = [];
+    let inQuotes = false;
+    let escaped = false;
+    for (let i = 0; i < header.length; i++) {
+        const c = header[i];
+        if (inQuotes) {
+            if (escaped)
+                escaped = false;
+            else if (c === "\\")
+                escaped = true;
+            else if (c === '"')
+                inQuotes = false;
+            continue;
+        }
+        if (c === '"') {
+            inQuotes = true;
+            continue;
+        }
+        if (!isPaymentSchemeAt(header, i))
+            continue;
+        // A scheme may only start at the beginning or after a comma (RFC 9110).
+        let b = i - 1;
+        while (b >= 0 && /\s/.test(header[b]))
+            b--;
+        if (b >= 0 && header[b] !== ",")
+            continue;
+        starts.push(i);
+    }
+    return starts.map((start, i) => {
+        const end = i + 1 < starts.length ? starts[i + 1] : header.length;
+        return header
+            .slice(start + "payment".length, end)
+            .replace(/,\s*$/, "")
+            .trim();
+    });
+}
+function isPaymentSchemeAt(header, i) {
+    if (header.slice(i, i + 7).toLowerCase() !== "payment")
+        return false;
+    const next = header[i + 7];
+    return Boolean(next && /\s/.test(next));
+}
+/** Parse one scheme chunk's auth-params into a challenge. null when malformed. */
+function parseOne(chunk) {
+    let params;
+    try {
+        params = parseAuthParams(chunk);
+    }
+    catch {
+        return null;
+    }
+    const { id, realm, method, intent, request } = params;
+    if (!id || !realm || !method || !intent || !request)
+        return null;
+    let decoded;
+    try {
+        decoded = JSON.parse(Buffer.from(request, "base64url").toString("utf8"));
+    }
+    catch {
+        return null;
+    }
+    if (!isObj(decoded))
+        return null;
+    return {
+        id,
+        realm,
+        method,
+        intent,
+        request: decoded,
+        requestRaw: request,
+        description: params.description,
+        digest: params.digest,
+        expires: params.expires,
+        opaque: params.opaque,
+    };
+}
+/** Auth-param parser with escaped quoted-string support. */
+function parseAuthParams(input) {
+    const result = {};
+    let i = 0;
+    while (i < input.length) {
+        while (i < input.length && /[\s,]/.test(input[i]))
+            i++;
+        if (i >= input.length)
+            break;
+        const keyStart = i;
+        while (i < input.length && /[A-Za-z0-9_-]/.test(input[i]))
+            i++;
+        const key = input.slice(keyStart, i);
+        if (!key)
+            throw new Error("malformed auth-param");
+        while (i < input.length && /\s/.test(input[i]))
+            i++;
+        if (input[i] !== "=")
+            break; // token without '=': likely another scheme
+        i++;
+        while (i < input.length && /\s/.test(input[i]))
+            i++;
+        let value;
+        if (input[i] === '"') {
+            [value, i] = readQuoted(input, i + 1);
+        }
+        else {
+            const start = i;
+            while (i < input.length && input[i] !== ",")
+                i++;
+            value = input.slice(start, i).trim();
+        }
+        result[key] = value;
+    }
+    return result;
+}
+function readQuoted(input, start) {
+    let out = "";
+    let i = start;
+    while (i < input.length) {
+        const c = input[i];
+        i++;
+        if (c === "\\") {
+            if (i >= input.length)
+                break;
+            out += input[i];
+            i++;
+            continue;
+        }
+        if (c === '"')
+            return [out, i];
+        out += c;
+    }
+    throw new Error("unterminated quoted-string");
+}
+function isObj(v) {
+    return Boolean(v) && typeof v === "object" && !Array.isArray(v);
+}
+//# sourceMappingURL=challenge.js.map

package/dist/mpp/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/mpp/challenge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA4BH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAA0B;IAC7D,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC;YAAE,SAAS;QACvF,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,EAAgB;IAChD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnF,8EAA8E;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,UAAU,OAAO,EAAE;QAC5B,KAAK,EAAE,CAAC,CAAC,SAAS;QAClB,KAAK,EAAE,CAAC,CAAC,QAAQ;QACjB,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC3D,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,sBAAsB,CAAC,EAAgB;IAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnF,uEAAuE;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,6EAA6E;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,UAAU,OAAO,EAAE;QAC5B,KAAK,EAAE,CAAC,CAAC,SAAS;QAClB,KAAK,EAAE,CAAC,CAAC,QAAQ;QACjB,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC3D,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAC/B,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;YAAE,SAAS;QAC5C,wEAAwE;QACxE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,OAAO,MAAM;aACV,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC;aACpC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,CAAS;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACtD,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEjE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjC,OAAO;QACL,EAAE;QACF,KAAK;QACL,MAAM;QACN,MAAM;QACN,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM;QAE7B,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAElD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,MAAM,CAAC,2CAA2C;QACxE,CAAC,EAAE,CAAC;QACJ,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,CAAC,EAAE,CAAC;QAErD,IAAI,KAAa,CAAC;QAClB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACpB,CAAC,EAAE,CAAC;QACJ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM;YAC7B,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/mpp/credential.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Build the MPP `Authorization: Payment <base64url JSON>` credential and read
+ * back the `Payment-Receipt` header.
+ *
+ * Credential wire shape (mirrors mppx's Credential.serialize):
+ *
+ *   {
+ *     "challenge": { id, realm, method, intent,
+ *                    request: "<raw base64url from the 402>",
+ *                    expires?, digest?, description?, opaque? },
+ *     "payload":   { ...method-specific proof... },
+ *     "source":    "did:pkh:eip155:8453:0x..."   // payer identity, optional
+ *   }
+ *
+ * The challenge fields (and especially the raw `request` / `opaque` strings)
+ * must round-trip byte-identical: the server recomputes the HMAC-bound `id`
+ * over them and rejects the credential on any drift.
+ */
+import type { MppChallenge } from "./challenge.js";
+export interface BuildCredentialArgs {
+    challenge: MppChallenge;
+    /** Method-specific proof, e.g. the signed EIP-3009 authorization. */
+    payload: Record<string, unknown>;
+    /** Payer identity (did:pkh form). */
+    source?: string;
+}
+/** Serialize a credential to the `Authorization` header value. */
+export declare function buildMppAuthorizationHeader(args: BuildCredentialArgs): string;
+/**
+ * Settlement receipt from the `Payment-Receipt` response header.
+ * `reference` is the method-specific settlement handle - for on-chain
+ * methods, the transaction hash.
+ */
+export interface MppReceipt {
+    method: string;
+    reference: string;
+    /** Always "success" on the happy path - failures come back as 402 + Problem Details. */
+    status: string;
+    /** RFC 3339 settlement timestamp. */
+    timestamp?: string;
+    [key: string]: unknown;
+}
+/** Decode the Payment-Receipt header. undefined when absent or unparseable. */
+export declare function extractMppReceipt(headers: Headers): MppReceipt | undefined;
+//# sourceMappingURL=credential.d.ts.map

package/dist/mpp/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../src/mpp/credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,YAAY,CAAC;IACxB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,kEAAkE;AAClE,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAmB7E;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAgB1E"}

package/dist/mpp/credential.js

@@ -0,0 +1,58 @@
+/**
+ * Build the MPP `Authorization: Payment <base64url JSON>` credential and read
+ * back the `Payment-Receipt` header.
+ *
+ * Credential wire shape (mirrors mppx's Credential.serialize):
+ *
+ *   {
+ *     "challenge": { id, realm, method, intent,
+ *                    request: "<raw base64url from the 402>",
+ *                    expires?, digest?, description?, opaque? },
+ *     "payload":   { ...method-specific proof... },
+ *     "source":    "did:pkh:eip155:8453:0x..."   // payer identity, optional
+ *   }
+ *
+ * The challenge fields (and especially the raw `request` / `opaque` strings)
+ * must round-trip byte-identical: the server recomputes the HMAC-bound `id`
+ * over them and rejects the credential on any drift.
+ */
+/** Serialize a credential to the `Authorization` header value. */
+export function buildMppAuthorizationHeader(args) {
+    const c = args.challenge;
+    const wire = {
+        challenge: {
+            id: c.id,
+            realm: c.realm,
+            method: c.method,
+            intent: c.intent,
+            request: c.requestRaw,
+            ...(c.description !== undefined && { description: c.description }),
+            ...(c.digest !== undefined && { digest: c.digest }),
+            ...(c.expires !== undefined && { expires: c.expires }),
+            ...(c.opaque !== undefined && { opaque: c.opaque }),
+        },
+        payload: args.payload,
+        ...(args.source && { source: args.source }),
+    };
+    const encoded = Buffer.from(JSON.stringify(wire), "utf8").toString("base64url");
+    return `Payment ${encoded}`;
+}
+/** Decode the Payment-Receipt header. undefined when absent or unparseable. */
+export function extractMppReceipt(headers) {
+    const raw = headers.get("payment-receipt");
+    if (!raw)
+        return undefined;
+    try {
+        const decoded = JSON.parse(Buffer.from(raw, "base64url").toString("utf8"));
+        if (decoded &&
+            typeof decoded === "object" &&
+            typeof decoded.reference === "string") {
+            return decoded;
+        }
+    }
+    catch {
+        /* tolerate junk headers */
+    }
+    return undefined;
+}
+//# sourceMappingURL=credential.js.map

package/dist/mpp/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../src/mpp/credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,kEAAkE;AAClE,MAAM,UAAU,2BAA2B,CAAC,IAAyB;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzB,MAAM,IAAI,GAAG;QACX,SAAS,EAAE;YACT,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,UAAU;YACrB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAClE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACnD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SACpD;QACD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChF,OAAO,WAAW,OAAO,EAAE,CAAC;AAC9B,CAAC;AAiBD,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpF,IACE,OAAO;YACP,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAQ,OAAsB,CAAC,SAAS,KAAK,QAAQ,EACrD,CAAC;YACD,OAAO,OAAqB,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/mpp/evm-charge.d.ts

@@ -0,0 +1,37 @@
+/**
+ * MPP evm/charge credential payload: a signed EIP-3009
+ * `TransferWithAuthorization` - the same gasless primitive our x402 v2 EVM
+ * path uses, with two MPP-specific twists (mirroring mppx's evm client):
+ *
+ *   nonce       = keccak256(utf8(challenge.id + challenge.realm))
+ *                 - binds the signature to this exact challenge, and makes
+ *                   replays collide on-chain (EIP-3009 nonces are single-use)
+ *   validBefore = challenge.expires (epoch secs), falling back to now+300
+ *
+ * The EIP-712 domain name/version are NOT in the challenge - MPP assumes the
+ * client knows its tokens. We resolve them from a registry of known EIP-3009
+ * stablecoins on the chains xpay ships signers for.
+ */
+import type { MppChallenge } from "./challenge.js";
+export interface BuildMppEvmAuthorizationArgs {
+    /** Payer address (the EVM signer's wallet address). */
+    address: string;
+    /** EIP-712 typed-data signer - from `signer.signEvmTypedData`. */
+    signTypedData: (typedData: {
+        domain: Record<string, unknown>;
+        types: Record<string, Array<{
+            name: string;
+            type: string;
+        }>>;
+        message: Record<string, unknown>;
+    }) => Promise<string>;
+    challenge: MppChallenge;
+}
+export interface MppEvmAuthorization {
+    /** Credential `payload` - the signed authorization. */
+    payload: Record<string, unknown>;
+    /** Credential `source` - payer identity in did:pkh form. */
+    source: string;
+}
+export declare function buildMppEvmAuthorization(args: BuildMppEvmAuthorizationArgs): Promise<MppEvmAuthorization>;
+//# sourceMappingURL=evm-charge.d.ts.map

package/dist/mpp/evm-charge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-charge.d.ts","sourceRoot":"","sources":["../../src/mpp/evm-charge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA2BnD,MAAM,WAAW,4BAA4B;IAC3C,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,aAAa,EAAE,CAAC,SAAS,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}