cspr402 0.4.7

package/dist/index.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCredentials = exports.saveCards402Config = exports.loadCards402Config = exports.ResumableError = exports.WaitTimeoutError = exports.OrderFailedError = exports.AuthError = exports.InvalidAmountError = exports.PriceUnavailableError = exports.ServiceUnavailableError = exports.RateLimitError = exports.SpendLimitError = exports.Cards402Error = exports.CSPR402Client = exports.Cards402Client = void 0;
+var client_1 = require("./client");
+Object.defineProperty(exports, "Cards402Client", { enumerable: true, get: function () { return client_1.Cards402Client; } });
+Object.defineProperty(exports, "CSPR402Client", { enumerable: true, get: function () { return client_1.CSPR402Client; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "Cards402Error", { enumerable: true, get: function () { return errors_1.Cards402Error; } });
+Object.defineProperty(exports, "SpendLimitError", { enumerable: true, get: function () { return errors_1.SpendLimitError; } });
+Object.defineProperty(exports, "RateLimitError", { enumerable: true, get: function () { return errors_1.RateLimitError; } });
+Object.defineProperty(exports, "ServiceUnavailableError", { enumerable: true, get: function () { return errors_1.ServiceUnavailableError; } });
+Object.defineProperty(exports, "PriceUnavailableError", { enumerable: true, get: function () { return errors_1.PriceUnavailableError; } });
+Object.defineProperty(exports, "InvalidAmountError", { enumerable: true, get: function () { return errors_1.InvalidAmountError; } });
+Object.defineProperty(exports, "AuthError", { enumerable: true, get: function () { return errors_1.AuthError; } });
+Object.defineProperty(exports, "OrderFailedError", { enumerable: true, get: function () { return errors_1.OrderFailedError; } });
+Object.defineProperty(exports, "WaitTimeoutError", { enumerable: true, get: function () { return errors_1.WaitTimeoutError; } });
+Object.defineProperty(exports, "ResumableError", { enumerable: true, get: function () { return errors_1.ResumableError; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "loadCards402Config", { enumerable: true, get: function () { return config_1.loadCards402Config; } });
+Object.defineProperty(exports, "saveCards402Config", { enumerable: true, get: function () { return config_1.saveCards402Config; } });
+Object.defineProperty(exports, "resolveCredentials", { enumerable: true, get: function () { return config_1.resolveCredentials; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAAyD;AAAhD,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAoBtC,mCAWkB;AAVhB,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AACf,wGAAA,cAAc,OAAA;AACd,iHAAA,uBAAuB,OAAA;AACvB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,mGAAA,SAAS,OAAA;AACT,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,wGAAA,cAAc,OAAA;AAGhB,mCAAsF;AAA7E,4GAAA,kBAAkB,OAAA;AAAE,4GAAA,kBAAkB,OAAA;AAAE,4GAAA,kBAAkB,OAAA"}

package/dist/mcp.d.ts

@@ -0,0 +1,2 @@
+export declare function startMcpServer(): Promise<void>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AA6VA,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAGpD"}

package/dist/mcp.js

@@ -0,0 +1,337 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startMcpServer = startMcpServer;
+// MCP server entry. Exposed via `cspr402 mcp` and dispatched through ./cli.
+// The server is intentionally Casper-native: it creates/verifies CSPR402
+// orders, but it does not read wallet private keys or sign transactions.
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const client_1 = require("./client");
+const config_1 = require("./config");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const PKG_VERSION = require('../package.json').version;
+const CASPER_PUBLIC_KEY_RE = /^(01[0-9a-f]{64}|02[0-9a-f]{66})$/i;
+const DEPLOY_HASH_RE = /^[0-9a-fA-F]{64}$/;
+const ORDER_ID_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+function normalizePublicKey(value, label = 'public key') {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const normalized = String(value).trim().toLowerCase();
+    if (!CASPER_PUBLIC_KEY_RE.test(normalized)) {
+        throw new Error(`${label} must be a Casper public key hex string.`);
+    }
+    return normalized;
+}
+function parseAmount(value) {
+    const amount = String(value ?? '').trim();
+    if (!/^\d+(\.\d{1,2})?$/.test(amount)) {
+        throw new Error("amount_usdc must be a decimal string like '25.00'.");
+    }
+    const cents = Math.round(Number(amount) * 100);
+    if (!Number.isFinite(cents) || cents < 1)
+        throw new Error('amount_usdc must be at least 0.01.');
+    if (cents > 1_000_000)
+        throw new Error('amount_usdc cannot exceed 10000.00.');
+    return amount;
+}
+function parseOrderId(value) {
+    const orderId = String(value ?? '').trim();
+    if (!ORDER_ID_RE.test(orderId))
+        throw new Error('order_id is invalid.');
+    return orderId;
+}
+function parseDeployHash(value) {
+    const deployHash = String(value ?? '')
+        .trim()
+        .toLowerCase();
+    if (!DEPLOY_HASH_RE.test(deployHash))
+        throw new Error('deploy_hash must be a 64-character Casper deploy hash.');
+    return deployHash;
+}
+function configuredPublicKey() {
+    return normalizePublicKey(process.env.CSPR402_CASPER_PUBLIC_KEY || (0, config_1.loadCards402Config)()?.casper_public_key, 'configured Casper public key');
+}
+function client() {
+    return new client_1.CSPR402Client();
+}
+function safeMessage(err, fallback) {
+    return err instanceof Error ? err.message.slice(0, 240) : fallback;
+}
+function paymentText(payment) {
+    if (payment.type === 'casper_cspr_transfer') {
+        return [
+            'Payment rail: Casper testnet CSPR',
+            `chain_name: ${payment.chain_name}`,
+            `recipient: ${payment.recipient}`,
+            payment.sender_public_key
+                ? `sender_public_key: ${payment.sender_public_key}`
+                : 'sender_public_key: not bound',
+            `amount_cspr: ${payment.amount_cspr}`,
+            `amount_motes: ${payment.amount_motes}`,
+            `transfer_id: ${payment.transfer_id}`,
+            `expires_at: ${payment.expires_at}`,
+        ];
+    }
+    if (payment.type === 'casper_cep18_transfer') {
+        return [
+            'Payment rail: mockUSDC CEP-18',
+            `chain_name: ${payment.chain_name}`,
+            `contract_package_hash: ${payment.contract_package_hash}`,
+            payment.contract_hash
+                ? `contract_hash: ${payment.contract_hash}`
+                : 'contract_hash: not configured',
+            `sender_public_key: ${payment.sender_public_key}`,
+            `recipient_public_key: ${payment.recipient_public_key}`,
+            `amount: ${payment.amount} mockUSDC`,
+            `amount_base_units: ${payment.amount_base_units}`,
+            `expires_at: ${payment.expires_at}`,
+        ];
+    }
+    return [`Unsupported legacy payment instruction: ${payment.type}`];
+}
+function toolArgs(input) {
+    return (input && typeof input === 'object' ? input : {});
+}
+const server = new index_js_1.Server({ name: 'cspr402', version: PKG_VERSION }, { capabilities: { tools: {} } });
+server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: 'purchase_vcc',
+            description: 'Create a CSPR402 mock virtual card order and return Casper testnet payment instructions. The agent must pay externally, then call verify_payment.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    amount_usdc: {
+                        type: 'string',
+                        pattern: '^\\d+(\\.\\d{1,2})?$',
+                        description: "Mock card value in USD, for example '25.00'.",
+                    },
+                    payment_asset: {
+                        type: 'string',
+                        enum: ['cspr_casper', 'mock_usdc_cep18'],
+                        description: 'Payment rail. Default is cspr_casper.',
+                    },
+                    payer_public_key: {
+                        type: 'string',
+                        description: 'Casper testnet public key to bind the order to a sender.',
+                    },
+                },
+                required: ['amount_usdc'],
+            },
+        },
+        {
+            name: 'verify_payment',
+            description: 'Verify a finalized Casper testnet deploy hash for an existing CSPR402 order.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    order_id: { type: 'string', description: 'CSPR402 order id' },
+                    deploy_hash: { type: 'string', description: '64-character Casper deploy hash' },
+                    sender_public_key: { type: 'string', description: 'Casper sender public key' },
+                },
+                required: ['order_id', 'deploy_hash'],
+            },
+        },
+        {
+            name: 'check_order',
+            description: 'Check the status of a CSPR402 order.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    order_id: { type: 'string', description: 'CSPR402 order id' },
+                },
+                required: ['order_id'],
+            },
+        },
+        {
+            name: 'check_budget',
+            description: 'Check this agent API key spend summary and remaining budget.',
+            inputSchema: { type: 'object', properties: {}, required: [] },
+        },
+        {
+            name: 'setup_wallet',
+            description: 'Inspect the configured Casper public key/key path. This tool is read-only and never reads private key material.',
+            inputSchema: { type: 'object', properties: {}, required: [] },
+        },
+    ],
+}));
+server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
+    const name = request.params.name;
+    const args = toolArgs(request.params.arguments);
+    if (name === 'setup_wallet') {
+        try {
+            const config = (0, config_1.loadCards402Config)();
+            const publicKey = configuredPublicKey();
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: [
+                            'CSPR402 wallet context',
+                            '',
+                            `Casper public key: ${publicKey || 'not configured'}`,
+                            `Key-file path:     ${config?.casper_key_path || process.env.CSPR402_CASPER_KEY_PATH || 'not configured'}`,
+                            `API URL:           ${config?.api_url || process.env.CSPR402_BASE_URL || 'not configured'}`,
+                            '',
+                            'To finish setup, run:',
+                            '  cspr402 onboard --claim <claim_code> --casper-public-key <hex>',
+                            '',
+                            'This MCP server does not sign transfers. Pay through Casper Wallet/CSPR.click or your own signer, then call verify_payment.',
+                        ].join('\n'),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Error reading wallet context: ${safeMessage(err, 'setup failed')}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+    if (name === 'purchase_vcc') {
+        try {
+            const amount_usdc = parseAmount(args.amount_usdc);
+            const payment_asset = args.payment_asset === 'mock_usdc_cep18' ? 'mock_usdc_cep18' : 'cspr_casper';
+            const payer_public_key = normalizePublicKey(args.payer_public_key, 'payer_public_key') || configuredPublicKey();
+            if (payment_asset === 'mock_usdc_cep18' && !payer_public_key) {
+                throw new Error('mock_usdc_cep18 requires payer_public_key.');
+            }
+            const order = await client().createOrder({
+                amount_usdc,
+                payment_asset,
+                ...(payer_public_key ? { payer_public_key } : {}),
+            });
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: [
+                            `Order: ${order.order_id}`,
+                            `Status: ${order.status}`,
+                            '',
+                            ...paymentText(order.payment),
+                            '',
+                            'After the Casper transfer finalizes, call:',
+                            `verify_payment { order_id: "${order.order_id}", deploy_hash: "<hash>" }`,
+                        ].join('\n'),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Error creating CSPR402 order: ${safeMessage(err, 'create failed')}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+    if (name === 'verify_payment') {
+        try {
+            const orderId = parseOrderId(args.order_id);
+            const deployHash = parseDeployHash(args.deploy_hash);
+            const senderPublicKey = normalizePublicKey(args.sender_public_key, 'sender_public_key') || configuredPublicKey();
+            const verified = await client().verifyCasperPayment(orderId, deployHash, {
+                ...(senderPublicKey ? { senderPublicKey } : {}),
+            });
+            const lines = [
+                `Verified: ${verified.ok}`,
+                verified.note ? `Note: ${verified.note}` : null,
+                `Order: ${verified.order.order_id}`,
+                `Status: ${verified.order.status} (phase: ${verified.order.phase})`,
+                `Receipt: ${verified.receipt.type}`,
+                `Deploy: ${verified.receipt.deploy_hash}`,
+                verified.order.card
+                    ? `Mock card: ${verified.order.card.brand || 'Mock Virtual Card'}`
+                    : null,
+            ].filter(Boolean);
+            return { content: [{ type: 'text', text: lines.join('\n') }] };
+        }
+        catch (err) {
+            return {
+                content: [
+                    { type: 'text', text: `Error verifying payment: ${safeMessage(err, 'verify failed')}` },
+                ],
+                isError: true,
+            };
+        }
+    }
+    if (name === 'check_order') {
+        try {
+            const order = await client().getOrder(parseOrderId(args.order_id));
+            const lines = [
+                `Order: ${order.order_id}`,
+                `Status: ${order.status} (phase: ${order.phase})`,
+                `Amount: $${order.amount_usdc}`,
+                `Payment asset: ${order.payment_asset}`,
+                `Created: ${order.created_at}`,
+                `Updated: ${order.updated_at}`,
+            ];
+            if (order.receipt) {
+                lines.push(`Receipt: ${order.receipt.type}`);
+                lines.push(`Deploy: ${order.receipt.deploy_hash}`);
+            }
+            if (order.card)
+                lines.push(`Mock card: ${order.card.brand || 'Mock Virtual Card'}`);
+            if (order.error)
+                lines.push(`Error: ${order.error}`);
+            if (order.note)
+                lines.push(`Note: ${order.note}`);
+            return { content: [{ type: 'text', text: lines.join('\n') }] };
+        }
+        catch (err) {
+            return {
+                content: [
+                    { type: 'text', text: `Error checking order: ${safeMessage(err, 'check failed')}` },
+                ],
+                isError: true,
+            };
+        }
+    }
+    if (name === 'check_budget') {
+        try {
+            const usage = await client().getUsage();
+            const { budget, orders, label } = usage;
+            const lines = [
+                `Budget summary${label ? ` for "${label}"` : ''}`,
+                '',
+                `Spent:     $${budget.spent_usdc}`,
+                budget.limit_usdc ? `Limit:     $${budget.limit_usdc}` : 'Limit:     unlimited',
+                budget.remaining_usdc !== null
+                    ? `Remaining: $${budget.remaining_usdc}`
+                    : 'Remaining: unlimited',
+                '',
+                `Orders: total ${orders.total}, delivered ${orders.delivered}, failed ${orders.failed}, in progress ${orders.in_progress}`,
+            ];
+            return { content: [{ type: 'text', text: lines.join('\n') }] };
+        }
+        catch (err) {
+            return {
+                content: [
+                    { type: 'text', text: `Error checking budget: ${safeMessage(err, 'budget failed')}` },
+                ],
+                isError: true,
+            };
+        }
+    }
+    return {
+        content: [{ type: 'text', text: `Unknown tool: ${name}` }],
+        isError: true,
+    };
+});
+async function startMcpServer() {
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":";;AA6VA,wCAGC;AAhWD,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,wEAAmE;AACnE,wEAAiF;AACjF,iEAAmG;AACnG,qCAAmE;AACnE,qCAA8C;AAE9C,iEAAiE;AACjE,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAiB,CAAC;AAEjE,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAClE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAK,GAAG,YAAY;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChG,IAAI,KAAK,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACnC,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,kBAAkB,CACvB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAA,2BAAkB,GAAE,EAAE,iBAAiB,EAChF,8BAA8B,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,sBAAa,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,QAAgB;IACjD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,OAA4B;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAC5C,OAAO;YACL,mCAAmC;YACnC,eAAe,OAAO,CAAC,UAAU,EAAE;YACnC,cAAc,OAAO,CAAC,SAAS,EAAE;YACjC,OAAO,CAAC,iBAAiB;gBACvB,CAAC,CAAC,sBAAsB,OAAO,CAAC,iBAAiB,EAAE;gBACnD,CAAC,CAAC,8BAA8B;YAClC,gBAAgB,OAAO,CAAC,WAAW,EAAE;YACrC,iBAAiB,OAAO,CAAC,YAAY,EAAE;YACvC,gBAAgB,OAAO,CAAC,WAAW,EAAE;YACrC,eAAe,OAAO,CAAC,UAAU,EAAE;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7C,OAAO;YACL,+BAA+B;YAC/B,eAAe,OAAO,CAAC,UAAU,EAAE;YACnC,0BAA0B,OAAO,CAAC,qBAAqB,EAAE;YACzD,OAAO,CAAC,aAAa;gBACnB,CAAC,CAAC,kBAAkB,OAAO,CAAC,aAAa,EAAE;gBAC3C,CAAC,CAAC,+BAA+B;YACnC,sBAAsB,OAAO,CAAC,iBAAiB,EAAE;YACjD,yBAAyB,OAAO,CAAC,oBAAoB,EAAE;YACvD,WAAW,OAAO,CAAC,MAAM,WAAW;YACpC,sBAAsB,OAAO,CAAC,iBAAiB,EAAE;YACjD,eAAe,OAAO,CAAC,UAAU,EAAE;SACpC,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,2CAA2C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;AACtF,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,EACzC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,mJAAmJ;YACrJ,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,sBAAsB;wBAC/B,WAAW,EAAE,8CAA8C;qBAC5D;oBACD,aAAa,EAAE;wBACb,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;wBACxC,WAAW,EAAE,uCAAuC;qBACrD;oBACD,gBAAgB,EAAE;wBAChB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,0DAA0D;qBACxE;iBACF;gBACD,QAAQ,EAAE,CAAC,aAAa,CAAC;aAC1B;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,8EAA8E;YAC3F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;oBAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBAC/E,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;iBAC/E;gBACD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;aACtC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,sCAAsC;YACnD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;iBAC9D;gBACD,QAAQ,EAAE,CAAC,UAAU,CAAC;aACvB;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,8DAA8D;YAC3E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC9D;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,iHAAiH;YACnH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC9D;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,2BAAkB,GAAE,CAAC;YACpC,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE;4BACJ,wBAAwB;4BACxB,EAAE;4BACF,sBAAsB,SAAS,IAAI,gBAAgB,EAAE;4BACrD,sBAAsB,MAAM,EAAE,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,gBAAgB,EAAE;4BAC1G,sBAAsB,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,EAAE;4BAC3F,EAAE;4BACF,uBAAuB;4BACvB,kEAAkE;4BAClE,EAAE;4BACF,6HAA6H;yBAC9H,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iCAAiC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE;qBAC1E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClD,MAAM,aAAa,GACjB,IAAI,CAAC,aAAa,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/E,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACzF,IAAI,aAAa,KAAK,iBAAiB,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC;gBACvC,WAAW;gBACX,aAAa;gBACb,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE;4BACJ,UAAU,KAAK,CAAC,QAAQ,EAAE;4BAC1B,WAAW,KAAK,CAAC,MAAM,EAAE;4BACzB,EAAE;4BACF,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;4BAC7B,EAAE;4BACF,4CAA4C;4BAC5C,+BAA+B,KAAK,CAAC,QAAQ,4BAA4B;yBAC1E,CAAC,IAAI,CAAC,IAAI,CAAC;qBACb;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iCAAiC,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE;qBAC3E;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrD,MAAM,eAAe,GACnB,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,IAAI,mBAAmB,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,UAAU,EAAE;gBACvE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,aAAa,QAAQ,CAAC,EAAE,EAAE;gBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC/C,UAAU,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACnC,WAAW,QAAQ,CAAC,KAAK,CAAC,MAAM,YAAY,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG;gBACnE,YAAY,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;gBACnC,WAAW,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE;gBACzC,QAAQ,CAAC,KAAK,CAAC,IAAI;oBACjB,CAAC,CAAC,cAAc,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,EAAE;oBAClE,CAAC,CAAC,IAAI;aACT,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE;iBACxF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG;gBACZ,UAAU,KAAK,CAAC,QAAQ,EAAE;gBAC1B,WAAW,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,KAAK,GAAG;gBACjD,YAAY,KAAK,CAAC,WAAW,EAAE;gBAC/B,kBAAkB,KAAK,CAAC,aAAa,EAAE;gBACvC,YAAY,KAAK,CAAC,UAAU,EAAE;gBAC9B,YAAY,KAAK,CAAC,UAAU,EAAE;aAC/B,CAAC;YACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAAC;YACpF,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,EAAE;iBACpF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;YACxC,MAAM,KAAK,GAAG;gBACZ,iBAAiB,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjD,EAAE;gBACF,eAAe,MAAM,CAAC,UAAU,EAAE;gBAClC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,sBAAsB;gBAC/E,MAAM,CAAC,cAAc,KAAK,IAAI;oBAC5B,CAAC,CAAC,eAAe,MAAM,CAAC,cAAc,EAAE;oBACxC,CAAC,CAAC,sBAAsB;gBAC1B,EAAE;gBACF,iBAAiB,MAAM,CAAC,KAAK,eAAe,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,iBAAiB,MAAM,CAAC,WAAW,EAAE;aAC3H,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE;iBACtF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC,CAAC,CAAC;AAEI,KAAK,UAAU,cAAc;IAClC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/mpp.d.ts

@@ -0,0 +1,57 @@
+import type { CardDetails } from './client';
+import { payViaContractOWS, type PayViaContractOwsDeps } from './ows';
+export interface MppChargeOpts {
+    /**
+     * The full MPP resource URL. E.g. 'https://api.cards402.com/v1/cards/visa/10.00'.
+     * This is the standards-compliant mode — works against any MPP server.
+     */
+    url?: string;
+    /**
+     * Convenience: build the URL from the cards402 base URL + USD amount.
+     * Only one of `url` or `{baseUrl, amountUsdc}` is required.
+     */
+    baseUrl?: string;
+    amountUsdc?: string;
+    /** OWS wallet name to pay from. */
+    walletName: string;
+    passphrase?: string;
+    vaultPath?: string;
+    /** Force a specific asset. If unset, the first advertised method is used. */
+    paymentAsset?: 'usdc' | 'xlm';
+    /** Override the network passphrase (defaults to Stellar mainnet). */
+    networkPassphrase?: string;
+    /** Override the Soroban RPC URL. Defaults based on networkPassphrase. */
+    sorobanRpcUrl?: string;
+    /**
+     * Maximum seconds to poll the 202 receipt URL before giving up. The
+     * receipt polling kicks in only when the server returned 202 (card
+     * fulfillment took longer than the server's sync wait). Default: 120s.
+     */
+    pollTimeoutMs?: number;
+    /**
+     * Injectable deps for testing. Mirrors PayViaContractOwsDeps so tests
+     * don't need to touch real Soroban / wallet infrastructure.
+     */
+    _deps?: {
+        fetch?: typeof fetch;
+        payViaContractOWS?: typeof payViaContractOWS;
+        payViaContractOwsDeps?: PayViaContractOwsDeps;
+        sleep?: (ms: number) => Promise<void>;
+    };
+}
+export interface MppChargeResult {
+    /** The card details, once fulfillment completes. */
+    card: CardDetails;
+    /** Backend order id. Useful for cross-referencing with dashboards. */
+    orderId: string;
+    /** MPP challenge id that paid for this card. */
+    challengeId: string;
+    /** Stellar transaction hash that redeemed the challenge. */
+    txHash: string;
+    /** Receipt URL (may be useful for re-polling if the caller wants to persist it). */
+    receiptUrl?: string;
+    /** How the card was delivered — 'sync' on 200, 'async' on 202-then-poll. */
+    delivery: 'sync' | 'async';
+}
+export declare function mppCharge(opts: MppChargeOpts): Promise<MppChargeResult>;
+//# sourceMappingURL=mpp.d.ts.map

package/dist/mpp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.d.ts","sourceRoot":"","sources":["../src/mpp.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAuB,WAAW,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAE9B,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QACrB,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;QAC7C,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;QAC9C,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,IAAI,EAAE,WAAW,CAAC;IAClB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AA2BD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CA6G7E"}

package/dist/mpp.js

@@ -0,0 +1,165 @@
+"use strict";
+// Machine Payments Protocol (MPP) client helper.
+//
+// Entry point for agents that want to transact via MPP rather than the
+// legacy /v1/orders flow. Semantics mirror any spec-compliant MPP
+// client: GET the resource, read the 402 challenge, pay via the
+// declared method, retry with an Authorization: Payment credential,
+// collect the resource from the 200 (or poll the 202 Location).
+//
+// For cards402 specifically, the challenge's Stellar method maps onto
+// the SDK's existing payViaContractOWS helper — so the OWS wallet,
+// fee-retry logic, and on-chain confirmation all come for free.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mppCharge = mppCharge;
+const ows_1 = require("./ows");
+const DEFAULT_POLL_TIMEOUT_MS = 120_000;
+const POLL_INTERVAL_MS = 1_000;
+async function mppCharge(opts) {
+    const url = resolveUrl(opts);
+    const fetchImpl = opts._deps?.fetch ?? fetch;
+    const sleep = opts._deps?.sleep ?? defaultSleep;
+    const payFn = opts._deps?.payViaContractOWS ?? ows_1.payViaContractOWS;
+    // ── Step 1: hit the resource, expect 402. ───────────────────────────
+    const challengeRes = await fetchImpl(url, { method: 'GET' });
+    if (challengeRes.status !== 402) {
+        throw new Error(`mppCharge: expected 402 challenge from ${url}, got ${challengeRes.status}. ` +
+            `Body: ${await safeText(challengeRes)}`);
+    }
+    const challenge = (await challengeRes.json());
+    if (challenge.protocol !== 'mpp/1.0') {
+        throw new Error(`mppCharge: unsupported MPP protocol ${challenge.protocol}`);
+    }
+    // ── Step 2: pick a method. ──────────────────────────────────────────
+    const method = pickMethod(challenge.methods, opts.paymentAsset);
+    if (!method) {
+        throw new Error(`mppCharge: no supported payment method in challenge`);
+    }
+    if (method.scheme !== 'stellar' || method.kind !== 'soroban_contract') {
+        throw new Error(`mppCharge: only soroban_contract stellar methods supported; got ${method.scheme}/${method.kind}`);
+    }
+    // ── Step 3: pay via the Soroban receiver contract. ──────────────────
+    //
+    // Translate the MPP method into the PaymentInstructions shape that
+    // payViaContractOWS already understands. Tiny adapter — keeps ows.ts
+    // independent of MPP wire details.
+    const paymentAsset = method.function === 'pay_xlm' ? 'xlm' : 'usdc';
+    const paymentInstructions = {
+        type: 'soroban_contract',
+        contract_id: method.contract_id,
+        order_id: method.memo_value ?? challenge.challenge_id,
+        usdc: {
+            amount: paymentAsset === 'usdc' ? method.amount : challenge.amount.value,
+            asset: paymentAsset === 'usdc' ? method.asset : '',
+        },
+        ...(paymentAsset === 'xlm' && { xlm: { amount: method.amount } }),
+    };
+    const txHash = await payFn({
+        walletName: opts.walletName,
+        payment: paymentInstructions,
+        paymentAsset,
+        passphrase: opts.passphrase,
+        vaultPath: opts.vaultPath,
+        networkPassphrase: opts.networkPassphrase,
+        sorobanRpcUrl: opts.sorobanRpcUrl,
+    }, opts._deps?.payViaContractOwsDeps ?? {});
+    // ── Step 4: retry the resource with Authorization: Payment. ─────────
+    const authHeader = `Payment scheme="stellar", challenge="${challenge.challenge_id}", tx_hash="${txHash}"`;
+    const retryRes = await fetchImpl(url, {
+        method: 'GET',
+        headers: { Authorization: authHeader },
+    });
+    if (retryRes.status === 200) {
+        const body = (await retryRes.json());
+        return {
+            card: body.card,
+            orderId: body.order_id,
+            challengeId: body.challenge_id,
+            txHash: body.tx_hash,
+            delivery: 'sync',
+        };
+    }
+    if (retryRes.status === 202) {
+        const body = (await retryRes.json());
+        const pollUrl = resolvePollUrl(url, body.poll_url);
+        const final = await pollReceipt({
+            url: pollUrl,
+            fetchImpl,
+            sleep,
+            timeoutMs: opts.pollTimeoutMs ?? DEFAULT_POLL_TIMEOUT_MS,
+        });
+        return {
+            card: final.card,
+            orderId: body.order_id,
+            challengeId: challenge.challenge_id,
+            txHash,
+            receiptUrl: pollUrl,
+            delivery: 'async',
+        };
+    }
+    throw new Error(`mppCharge: unexpected retry status ${retryRes.status}. Body: ${await safeText(retryRes)}`);
+}
+async function pollReceipt({ url, fetchImpl, sleep, timeoutMs, }) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const res = await fetchImpl(url, { method: 'GET' });
+        if (res.status === 200) {
+            const body = (await res.json());
+            return { card: body.card };
+        }
+        if (res.status === 202) {
+            await sleep(POLL_INTERVAL_MS);
+            continue;
+        }
+        if (res.status === 502) {
+            const body = (await res.json().catch(() => ({})));
+            throw new Error(`mppCharge: fulfillment failed — ${body.message ?? 'unknown reason'}`);
+        }
+        throw new Error(`mppCharge: unexpected receipt status ${res.status}. Body: ${await safeText(res)}`);
+    }
+    throw new Error(`mppCharge: timed out polling receipt URL after ${timeoutMs}ms`);
+}
+function resolveUrl(opts) {
+    if (opts.url)
+        return opts.url;
+    if (!opts.baseUrl || !opts.amountUsdc) {
+        throw new Error('mppCharge: either `url`, or both `baseUrl` and `amountUsdc`, must be provided');
+    }
+    const base = opts.baseUrl.replace(/\/$/, '');
+    return `${base}/cards/visa/${opts.amountUsdc}`;
+}
+function pickMethod(methods, preferred) {
+    if (preferred === 'xlm') {
+        return methods.find((m) => m.function === 'pay_xlm') ?? null;
+    }
+    if (preferred === 'usdc') {
+        return methods.find((m) => m.function === 'pay_usdc') ?? null;
+    }
+    // No preference — prefer USDC (stable), fall back to XLM.
+    return (methods.find((m) => m.function === 'pay_usdc') ??
+        methods.find((m) => m.function === 'pay_xlm') ??
+        null);
+}
+function resolvePollUrl(originalUrl, pollUrl) {
+    if (/^https?:\/\//.test(pollUrl))
+        return pollUrl;
+    try {
+        return new URL(pollUrl, originalUrl).toString();
+    }
+    catch {
+        return pollUrl;
+    }
+}
+async function safeText(res) {
+    try {
+        const t = await res.text();
+        return t.slice(0, 500);
+    }
+    catch {
+        return '<unreadable>';
+    }
+}
+function defaultSleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=mpp.js.map

package/dist/mpp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.js","sourceRoot":"","sources":["../src/mpp.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,gEAAgE;AAChE,oEAAoE;AACpE,gEAAgE;AAChE,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,gEAAgE;;AA2FhE,8BA6GC;AArMD,+BAAsE;AAqFtE,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAExB,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAiB,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,YAAY,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,iBAAiB,IAAI,uBAAiB,CAAC;IAEjE,uEAAuE;IACvE,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,SAAS,YAAY,CAAC,MAAM,IAAI;YAC3E,SAAS,MAAM,QAAQ,CAAC,YAAY,CAAC,EAAE,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAqB,CAAC;IAClE,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,uEAAuE;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,mEAAmE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAClG,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,EAAE;IACF,mEAAmE;IACnE,qEAAqE;IACrE,mCAAmC;IACnC,MAAM,YAAY,GAAmB,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACpF,MAAM,mBAAmB,GAAwB;QAC/C,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,YAAY;QACrD,IAAI,EAAE;YACJ,MAAM,EAAE,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK;YACxE,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACnD;QACD,GAAG,CAAC,YAAY,KAAK,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB;QACE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,mBAAmB;QAC5B,YAAY;QACZ,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,EACD,IAAI,CAAC,KAAK,EAAE,qBAAqB,IAAI,EAAE,CACxC,CAAC;IAEF,uEAAuE;IACvE,MAAM,UAAU,GAAG,wCAAwC,SAAS,CAAC,YAAY,eAAe,MAAM,GAAG,CAAC;IAC1G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;KACvC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;QACF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,QAAQ,EAAE,MAAM;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAC9B,GAAG,EAAE,OAAO;YACZ,SAAS;YACT,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,aAAa,IAAI,uBAAuB;SACzD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,WAAW,EAAE,SAAS,CAAC,YAAY;YACnC,MAAM;YACN,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,OAAO;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,WAAW,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,EACzB,GAAG,EACH,SAAS,EACT,KAAK,EACL,SAAS,GAMV;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACzD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAyB,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wCAAwC,GAAG,CAAC,MAAM,WAAW,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,IAAmB;IACrC,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,GAAG,IAAI,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CACjB,OAA6B,EAC7B,SAA0B;IAE1B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;IAChE,CAAC;IACD,0DAA0D;IAC1D,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC7C,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,OAAe;IAC1D,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}