mppx 0.5.14 → 0.5.17

package/dist/tempo/server/internal/html.gen.js.map

@@ -1 +1 @@
-{"version":3,"file":"html.gen.js","sourceRoot":"","sources":["../../../../src/tempo/server/internal/html.gen.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,IAAI,GAAG,w91bAAw91b,CAAA"}
+{"version":3,"file":"html.gen.js","sourceRoot":"","sources":["../../../../src/tempo/server/internal/html.gen.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,IAAI,GAAG,27icAA27ic,CAAA"}

package/dist/tempo/server/internal/transport.d.ts

@@ -1,10 +1,3 @@
-/**
- * Tempo-specific SSE transport that wraps the base HTTP transport
- * with metering logic (context capture from verified credentials, per-token
- * charging via Sse.serve).
- *
- * @internal
- */
 import * as Transport from '../../../server/Transport.js';
 import * as ChannelStore from '../../session/ChannelStore.js';
 import * as Sse_core from '../../session/Sse.js';

package/dist/tempo/server/internal/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/tempo/server/internal/transport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,SAAS,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAGhD,mDAAmD;AACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AAE3D;;;;;;;;GAQG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG;IAAE,KAAK,EAAE,YAAY,CAAC,YAAY,CAAA;CAAE,GAAG,GAAG,CAmHpF;AAED,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,KAAK,OAAO,GAAG;QACb;;;;;;;;;WASG;QACH,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC1B,sDAAsD;QACtD,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACrC,CAAA;CACF;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7E,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,QAAQ,CAwBX"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/tempo/server/internal/transport.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,SAAS,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAGhD,mDAAmD;AACnD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AAE3D;;;;;;;;GAQG;AACH,wBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG;IAAE,KAAK,EAAE,YAAY,CAAC,YAAY,CAAA;CAAE,GAAG,GAAG,CAsKpF;AAED,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,KAAK,OAAO,GAAG;QACb;;;;;;;;;WASG;QACH,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC1B,sDAAsD;QACtD,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACrC,CAAA;CACF;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7E,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,QAAQ,CAwBX"}

package/dist/tempo/server/internal/transport.js

@@ -5,6 +5,8 @@
  *
  * @internal
  */
+import * as Challenge from '../../../Challenge.js';
+import * as Errors from '../../../Errors.js';
 import * as Transport from '../../../server/Transport.js';
 import * as ChannelStore from '../../session/ChannelStore.js';
 import * as Sse_core from '../../session/Sse.js';
@@ -33,6 +35,7 @@ export function sse(options) {
         name: 'sse',
         captureRequest(request) {
             return (base.captureRequest?.(request) ?? {
+                hasBody: request.body !== null,
                 headers: new Headers(request.headers),
                 method: request.method,
                 url: new URL(request.url),
@@ -52,6 +55,9 @@ export function sse(options) {
                 throw new Error('No SSE context available');
             const channelId = payload.channelId;
             const tickCost = BigInt(verifiedCredential.challenge.request.amount);
+            const unitType = typeof verifiedCredential.challenge.request.unitType === 'string'
+                ? verifiedCredential.challenge.request.unitType
+                : undefined;
             // Auto-detect upstream SSE responses and parse them into an
             // AsyncIterable so they flow through the metered pipeline.
             // This lets proxy consumers simply pass `result.withReceipt(upstreamRes)`
@@ -63,9 +69,7 @@ export function sse(options) {
                 // Pass async generator functions directly so Sse.serve gives them
                 // a SessionController for manual charge(). Pass raw AsyncIterables
                 // as-is so Sse.serve auto-charges per yielded value.
-                const generate = isAsyncGeneratorFunction(resolved)
-                    ? resolved
-                    : resolved;
+                const generate = resolveMeteredGenerate(resolved, unitType);
                 const stream = Sse_core.serve({
                     store,
                     channelId,
@@ -85,22 +89,60 @@ export function sse(options) {
                 response: response,
                 challengeId: verifiedChallengeId,
             });
+            if (!shouldChargePlainResponse(input, payload)) {
+                return baseResponse;
+            }
+            const currentReceipt = receipt;
+            const available = BigInt(currentReceipt.acceptedCumulative) - BigInt(currentReceipt.spent);
+            if (available < tickCost) {
+                const error = new Errors.InsufficientBalanceError({
+                    reason: `requested ${tickCost}, available ${available}`,
+                });
+                return new Response(JSON.stringify(error.toProblemDetails(verifiedCredential.challenge.id)), {
+                    status: error.status,
+                    headers: {
+                        'WWW-Authenticate': Challenge.serialize(verifiedCredential.challenge),
+                        'Cache-Control': 'no-store',
+                        'Content-Type': 'application/problem+json',
+                    },
+                });
+            }
+            const chargedReceipt = {
+                ...currentReceipt,
+                spent: (BigInt(currentReceipt.spent) + tickCost).toString(),
+                units: (currentReceipt.units ?? 0) + 1,
+            };
+            const chargedResponse = base.respondReceipt({
+                credential: verifiedCredential,
+                envelope,
+                input,
+                receipt: chargedReceipt,
+                response: response,
+                challengeId: verifiedChallengeId,
+            });
             // Non-SSE response (e.g. upstream returned JSON instead of event-stream).
             // Need to deduct tickCost so request isn't free.
-            // Null-body statuses (e.g. 204 from management actions) cannot carry a
-            // response body per Fetch/HTTP semantics.
-            if (isNullBodyStatus(baseResponse.status)) {
-                return baseResponse;
+            // For null-body statuses, the request shape determines whether the
+            // response is management (no charge) or plain content (charge one tick).
+            if (isNullBodyStatus(chargedResponse.status)) {
+                void ChannelStore.deductFromChannel(store, channelId, tickCost);
+                return chargedResponse;
             }
             const stream = new ReadableStream({
                 async start(controller) {
                     // deduction completes before consumer reads
-                    await ChannelStore.deductFromChannel(store, channelId, tickCost);
-                    if (!baseResponse.body) {
+                    const result = await ChannelStore.deductFromChannel(store, channelId, tickCost);
+                    if (!result.ok) {
+                        controller.error(new Errors.InsufficientBalanceError({
+                            reason: `requested ${tickCost}, available ${result.channel.highestVoucherAmount - result.channel.spent}`,
+                        }));
+                        return;
+                    }
+                    if (!chargedResponse.body) {
                         controller.close();
                         return;
                     }
-                    const reader = baseResponse.body.getReader();
+                    const reader = chargedResponse.body.getReader();
                     try {
                         while (true) {
                             const { done, value } = await reader.read();
@@ -116,9 +158,9 @@ export function sse(options) {
                 },
             });
             return new Response(stream, {
-                status: baseResponse.status,
-                statusText: baseResponse.statusText,
-                headers: baseResponse.headers,
+                status: chargedResponse.status,
+                statusText: chargedResponse.statusText,
+                headers: chargedResponse.headers,
             });
         },
     });
@@ -158,7 +200,36 @@ function isAsyncGeneratorFunction(value) {
 function isAsyncIterable(value) {
     return value !== null && typeof value === 'object' && Symbol.asyncIterator in value;
 }
+function resolveMeteredGenerate(value, unitType) {
+    if (isAsyncGeneratorFunction(value))
+        return value;
+    if (unitType !== 'request')
+        return value;
+    const iterable = value;
+    return async function* chargeOnce(stream) {
+        let charged = false;
+        for await (const chunk of iterable) {
+            if (!charged) {
+                await stream.charge();
+                charged = true;
+            }
+            yield chunk;
+        }
+    };
+}
 function isNullBodyStatus(status) {
     return [101, 204, 205, 304].includes(status);
 }
+function shouldChargePlainResponse(input, payload) {
+    if (payload.action === 'close' || payload.action === 'topUp')
+        return false;
+    if (input.method !== 'POST')
+        return true;
+    const contentLength = input.headers.get('content-length');
+    if (contentLength !== null && contentLength !== '0')
+        return true;
+    if (input.headers.has('transfer-encoding'))
+        return true;
+    return false;
+}
 //# sourceMappingURL=transport.js.map

package/dist/tempo/server/internal/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/tempo/server/internal/transport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,SAAS,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAMhD;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,CAAC,OAA2D;IAC7E,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAEzC,oEAAoE;IACpE,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,KAAK,CAAA;QAC/B,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACpD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,EAAE,CAAA;IAEJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,SAAS,CAAC,IAAI,CAAgE;QACnF,IAAI,EAAE,KAAK;QAEX,cAAc,CAAC,OAAO;YACpB,OAAO,CACL,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,IAAI;gBAChC,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;aAC1B,CACF,CAAA;QACH,CAAC;QAED,aAAa,CAAC,OAAO;YACnB,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAED,gBAAgB,CAAC,OAAO;YACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAa,CAAA;QACnD,CAAC;QAED,cAAc,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE;YAC5E,MAAM,kBAAkB,GAAG,QAAQ,EAAE,UAAU,IAAI,UAAU,CAAA;YAC7D,MAAM,mBAAmB,GAAG,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,WAAW,CAAA;YACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAA4C,CAAA;YAC/E,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAA;YAE9E,4DAA4D;YAC5D,2DAA2D;YAC3D,0EAA0E;YAC1E,4CAA4C;YAC5C,MAAM,QAAQ,GACZ,QAAQ,YAAY,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI;gBAC/E,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,CAAC,CAAC,QAAQ,CAAA;YAEd,IAAI,wBAAwB,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,kEAAkE;gBAClE,mEAAmE;gBACnE,qDAAqD;gBACrD,MAAM,QAAQ,GAAuC,wBAAwB,CAAC,QAAQ,CAAC;oBACrF,CAAC,CAAE,QAA+C;oBAClD,CAAC,CAAE,QAAkC,CAAA;gBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAC5B,KAAK;oBACL,SAAS;oBACT,WAAW,EAAE,mBAAmB;oBAChC,QAAQ;oBACR,cAAc,EAAE,eAAe;oBAC/B,QAAQ;oBACR,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAA;gBACF,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACpC,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC;gBACvC,UAAU,EAAE,kBAAkB;gBAC9B,QAAQ;gBACR,KAAK;gBACL,OAAO;gBACP,QAAQ,EAAE,QAAoB;gBAC9B,WAAW,EAAE,mBAAmB;aACjC,CAAC,CAAA;YAEF,0EAA0E;YAC1E,iDAAiD;YACjD,uEAAuE;YACvE,0CAA0C;YAC1C,IAAI,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,YAAY,CAAA;YACrB,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;gBAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;oBACpB,4CAA4C;oBAC5C,MAAM,YAAY,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;oBAChE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;wBACvB,UAAU,CAAC,KAAK,EAAE,CAAA;wBAClB,OAAM;oBACR,CAAC;oBACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;oBAC5C,IAAI,CAAC;wBACH,OAAO,IAAI,EAAE,CAAC;4BACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;4BAC3C,IAAI,IAAI;gCAAE,MAAK;4BACf,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;wBAC3B,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,WAAW,EAAE,CAAA;wBACpB,UAAU,CAAC,KAAK,EAAE,CAAA;oBACpB,CAAC;gBACH,CAAC;aACF,CAAC,CAAA;YACF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,OAAO,EAAE,YAAY,CAAC,OAAO;aAC9B,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAoBD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,OAG5B;IACC,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAA;IAChG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;QAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,KAAK,MAAM,CAAC,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IACF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE;YACP,cAAc,EAAE,kCAAkC;YAClD,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;SACzB;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,wBAAwB,CAAA;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAK,KAAgB,CAAA;AACjG,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/tempo/server/internal/transport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAA;AAC5C,OAAO,KAAK,SAAS,MAAM,8BAA8B,CAAA;AACzD,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAA;AAC7D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAMhD;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,CAAC,OAA2D;IAC7E,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAEzC,oEAAoE;IACpE,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,KAAK,CAAA;QAC/B,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACpD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,EAAE,CAAA;IAEJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,SAAS,CAAC,IAAI,CAAgE;QACnF,IAAI,EAAE,KAAK;QAEX,cAAc,CAAC,OAAO;YACpB,OAAO,CACL,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,IAAI;gBAChC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI;gBAC9B,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;aAC1B,CACF,CAAA;QACH,CAAC;QAED,aAAa,CAAC,OAAO;YACnB,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QAED,gBAAgB,CAAC,OAAO;YACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAa,CAAA;QACnD,CAAC;QAED,cAAc,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE;YAC5E,MAAM,kBAAkB,GAAG,QAAQ,EAAE,UAAU,IAAI,UAAU,CAAA;YAC7D,MAAM,mBAAmB,GAAG,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,WAAW,CAAA;YACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAA4C,CAAA;YAC/E,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAA;YAC9E,MAAM,QAAQ,GACZ,OAAO,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAC/D,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ;gBAC/C,CAAC,CAAC,SAAS,CAAA;YAEf,4DAA4D;YAC5D,2DAA2D;YAC3D,0EAA0E;YAC1E,4CAA4C;YAC5C,MAAM,QAAQ,GACZ,QAAQ,YAAY,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI;gBAC/E,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,CAAC,CAAC,QAAQ,CAAA;YAEd,IAAI,wBAAwB,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,kEAAkE;gBAClE,mEAAmE;gBACnE,qDAAqD;gBACrD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAC5B,KAAK;oBACL,SAAS;oBACT,WAAW,EAAE,mBAAmB;oBAChC,QAAQ;oBACR,cAAc,EAAE,eAAe;oBAC/B,QAAQ;oBACR,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAA;gBACF,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACpC,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC;gBACvC,UAAU,EAAE,kBAAkB;gBAC9B,QAAQ;gBACR,KAAK;gBACL,OAAO;gBACP,QAAQ,EAAE,QAAoB;gBAC9B,WAAW,EAAE,mBAAmB;aACjC,CAAC,CAAA;YAEF,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,OAAO,YAAY,CAAA;YACrB,CAAC;YAED,MAAM,cAAc,GAAG,OAAyB,CAAA;YAChD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;YAC1F,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,wBAAwB,CAAC;oBAChD,MAAM,EAAE,aAAa,QAAQ,eAAe,SAAS,EAAE;iBACxD,CAAC,CAAA;gBACF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EACvE;oBACE,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE;wBACP,kBAAkB,EAAE,SAAS,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC;wBACrE,eAAe,EAAE,UAAU;wBAC3B,cAAc,EAAE,0BAA0B;qBAC3C;iBACF,CACF,CAAA;YACH,CAAC;YAED,MAAM,cAAc,GAAmB;gBACrC,GAAG,cAAc;gBACjB,KAAK,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,EAAE;gBAC3D,KAAK,EAAE,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;aACvC,CAAA;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;gBAC1C,UAAU,EAAE,kBAAkB;gBAC9B,QAAQ;gBACR,KAAK;gBACL,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,QAAoB;gBAC9B,WAAW,EAAE,mBAAmB;aACjC,CAAC,CAAA;YAEF,0EAA0E;YAC1E,iDAAiD;YACjD,mEAAmE;YACnE,yEAAyE;YACzE,IAAI,gBAAgB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,KAAK,YAAY,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;gBAC/D,OAAO,eAAe,CAAA;YACxB,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;gBAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;oBACpB,4CAA4C;oBAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;oBAC/E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;wBACf,UAAU,CAAC,KAAK,CACd,IAAI,MAAM,CAAC,wBAAwB,CAAC;4BAClC,MAAM,EAAE,aAAa,QAAQ,eAC3B,MAAM,CAAC,OAAO,CAAC,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,KACvD,EAAE;yBACH,CAAC,CACH,CAAA;wBACD,OAAM;oBACR,CAAC;oBACD,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;wBAC1B,UAAU,CAAC,KAAK,EAAE,CAAA;wBAClB,OAAM;oBACR,CAAC;oBACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;oBAC/C,IAAI,CAAC;wBACH,OAAO,IAAI,EAAE,CAAC;4BACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;4BAC3C,IAAI,IAAI;gCAAE,MAAK;4BACf,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;wBAC3B,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,WAAW,EAAE,CAAA;wBACpB,UAAU,CAAC,KAAK,EAAE,CAAA;oBACpB,CAAC;gBACH,CAAC;aACF,CAAC,CAAA;YACF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,UAAU,EAAE,eAAe,CAAC,UAAU;gBACtC,OAAO,EAAE,eAAe,CAAC,OAAO;aACjC,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAoBD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,OAG5B;IACC,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAA;IAChG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;QAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,KAAK,MAAM,CAAC,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IACF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE;YACP,cAAc,EAAE,kCAAkC;YAClD,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;SACzB;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,wBAAwB,CAAA;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAK,KAAgB,CAAA;AACjG,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA8E,EAC9E,QAA4B;IAE5B,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,KAA2C,CAAA;IACvF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAA8B,CAAA;IAEjE,MAAM,QAAQ,GAAG,KAA8B,CAAA;IAC/C,OAAO,KAAK,SAAS,CAAC,CAAC,UAAU,CAAC,MAAM;QACtC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAc,EACd,OAA0C;IAE1C,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAExC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACzD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mppx",
   "type": "module",
-  "version": "0.5.14",
+  "version": "0.5.17",
   "main": "./dist/index.js",
   "license": "MIT",
   "files": [
@@ -123,8 +123,8 @@
     }
   },
   "dependencies": {
-    "incur": "^0.3.23",
-    "ox": "0.14.10",
+    "incur": "^0.3.25",
+    "ox": "0.14.15",
     "zod": "^4.3.6"
   },
   "repository": {

package/src/Method.ts

@@ -69,6 +69,7 @@ export type AnyClient = Client<any, any>
 
 /** Transport-captured request metadata used as the authoritative request snapshot. */
 export type CapturedRequest = {
+  readonly hasBody?: boolean | undefined
   readonly headers: Headers
   readonly method: string
   readonly url: URL
@@ -167,8 +168,10 @@ export type VerifyFn<method extends Method> = (
  * response or generator. If it returns `undefined`, the server handler
  * is expected to serve content via `withReceipt(response)`.
  *
- * **HTTP-only.** The `input` parameter is a `Request` object; MCP transports
- * do not invoke this hook.
+ * Use `parameters.envelope?.capturedRequest` for any transport-agnostic
+ * authorization, billing, or routing decisions. The raw `input` should only
+ * be used for transport-specific response shaping (for example, HTTP content
+ * negotiation).
  */
 export type RespondFn<method extends Method> = (
   parameters: RespondContext<method>,

package/src/cli/cli.test.ts

@@ -1118,6 +1118,27 @@ describe.skipIf(!!process.env.CI)('account', () => {
     expect(result.stdout).toContain('not found')
   })
 
+  // --- account export ---
+
+  test('export: prints private key for existing account', () => {
+    const name = `${prefix}_export`
+    createAccount(name)
+    const result = accountRun(['account', 'export', '--account', name])
+    expect(result.status).toBe(0)
+
+    const privateKey = result.stdout.match(/0x[0-9a-fA-F]{64}/)?.[0]
+    expect(privateKey).toBeDefined()
+
+    const view = accountRun(['account', 'view', '--account', name])
+    expect(view.stdout).toContain(privateKeyToAccount(privateKey as `0x${string}`).address)
+  })
+
+  test('export: missing account exits non-zero', () => {
+    const result = accountRun(['account', 'export', '--account', `${prefix}_missing_export`])
+    expect(result.status).not.toBe(0)
+    expect(result.stdout).toContain('not found')
+  })
+
   // --- account list ---
 
   test('list: includes created accounts', () => {

package/src/cli/cli.ts

@@ -497,7 +497,7 @@ const cli = Cli.create('mppx', {
 })
 
 const account = Cli.create('account', {
-  description: 'Manage accounts (create, default, delete, fund, list, view)',
+  description: 'Manage accounts (create, default, delete, export, fund, list, view)',
 })
   .command('create', {
     description: 'Create new account',
@@ -713,6 +713,38 @@ const account = Cli.create('account', {
       }
     },
   })
+  .command('export', {
+    description: 'Export the private key for a local account',
+    options: z.object({
+      account: z.string().optional().describe('Account name (env: MPPX_ACCOUNT)'),
+    }),
+    alias: { account: 'a' },
+    async run(c) {
+      const accountName = resolveAccountName(c.options.account)
+
+      if (isTempoAccount(accountName)) {
+        return c.error({
+          code: 'UNSUPPORTED_ACCOUNT',
+          message: `Account "${accountName}" is managed by Tempo wallet and does not expose a private key via mppx.`,
+          exitCode: 2,
+        })
+      }
+
+      const key = await createKeychain(accountName).get()
+      if (!key) {
+        if (c.options.account)
+          return c.error({
+            code: 'ACCOUNT_NOT_FOUND',
+            message: `Account "${accountName}" not found.`,
+            exitCode: 69,
+          })
+        else
+          return c.error({ code: 'ACCOUNT_NOT_FOUND', message: 'No account found.', exitCode: 69 })
+      }
+
+      console.log(key)
+    },
+  })
   .command('view', {
     description: 'View account address',
     options: z.object({

package/src/internal/changeset.test.ts

@@ -0,0 +1,106 @@
+import * as fs from 'node:fs'
+import * as path from 'node:path'
+
+import { describe, expect, test } from 'vp/test'
+
+const changesetDir = path.resolve(import.meta.dirname, '../../.changeset')
+const validPackages = new Set(['mppx'])
+const validBumpTypes = new Set(['major', 'minor', 'patch', 'none'])
+
+function getChangesetFiles() {
+  return fs
+    .readdirSync(changesetDir)
+    .filter((f) => f.endsWith('.md') && f !== 'README.md' && !f.startsWith('.'))
+}
+
+function parseFrontmatter(content: string) {
+  const match = content.match(/^\s*---\n([^]*?)\n\s*---/)
+  if (!match) return undefined
+  return match[1]
+}
+
+function parseReleases(frontmatter: string) {
+  return [...frontmatter.matchAll(/^['"]?([^'":\n]+?)['"]?\s*:\s*(.+)$/gm)].map(
+    ([, name, type]) => ({ name: name!.trim(), type: type!.trim().replace(/['"]/g, '') }),
+  )
+}
+
+describe('changesets', () => {
+  const files = getChangesetFiles()
+
+  test('all changeset files have valid frontmatter fences', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      expect(content, `${file}: must start with "---"`).toMatch(/^---\n/)
+      const closingIdx = content.indexOf('---', 3)
+      expect(closingIdx, `${file}: missing closing "---" fence`).toBeGreaterThan(3)
+
+      // closing fence must not have trailing non-whitespace (parser chokes)
+      const afterClosing = content.slice(closingIdx + 3).split('\n')[0]!
+      expect(afterClosing.trim(), `${file}: trailing characters after closing "---"`).toBe('')
+    }
+  })
+
+  test('all changesets reference valid packages', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      const frontmatter = parseFrontmatter(content)
+      if (!frontmatter) continue
+      for (const { name } of parseReleases(frontmatter)) {
+        expect(
+          validPackages.has(name),
+          `${file}: unknown package "${name}" (valid: ${[...validPackages].join(', ')})`,
+        ).toBe(true)
+      }
+    }
+  })
+
+  test('all changesets use valid bump types', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      const frontmatter = parseFrontmatter(content)
+      if (!frontmatter) continue
+      for (const { name, type } of parseReleases(frontmatter)) {
+        expect(
+          validBumpTypes.has(type),
+          `${file}: invalid bump type "${type}" for "${name}" (valid: major, minor, patch, none)`,
+        ).toBe(true)
+      }
+    }
+  })
+
+  test('no changeset uses major bump (pre-v1 policy)', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      const frontmatter = parseFrontmatter(content)
+      if (!frontmatter) continue
+      for (const { name, type } of parseReleases(frontmatter)) {
+        expect(type, `${file}: "${name}" uses major bump — pre-v1 policy forbids this`).not.toBe(
+          'major',
+        )
+      }
+    }
+  })
+
+  test('all changesets have a non-empty description', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      const match = content.match(/^\s*---[^]*?---\s*(.*)$/s)
+      expect(match?.[1]?.trim(), `${file}: changeset has an empty description`).toBeTruthy()
+    }
+  })
+
+  test('no duplicate package entries in frontmatter', () => {
+    for (const file of files) {
+      const content = fs.readFileSync(path.join(changesetDir, file), 'utf-8')
+      const frontmatter = parseFrontmatter(content)
+      if (!frontmatter) continue
+      const releases = parseReleases(frontmatter)
+      const seen = new Set<string>()
+      for (const { name } of releases) {
+        expect(seen.has(name), `${file}: duplicate entry for "${name}"`).toBe(false)
+        seen.add(name)
+      }
+    }
+  })
+})