mppx 0.6.30 → 0.6.31

package/src/tempo/server/Session.ts

@@ -285,7 +285,8 @@ export function session<const parameters extends session.Parameters>(
       if (
         envelope &&
         isSessionContentRequest(envelope.capturedRequest) &&
-        (payload.action === 'open' || payload.action === 'voucher')
+        (payload.action === 'open' ||
+          (payload.action === 'voucher' && !isSseNegotiationRequest(envelope.capturedRequest)))
       ) {
         const charged = await charge(
           store,
@@ -315,17 +316,23 @@ export function session<const parameters extends session.Parameters>(
     // updates; billable requests fall through to the application handler.
     respond({ credential, envelope, input }) {
       const { payload } = credential as Credential.Credential<SessionCredentialPayload>
+      const request = envelope?.capturedRequest ?? captureRequestBodyProbe(input)
 
       if (payload.action === 'close') return new Response(null, { status: 204 })
       if (payload.action === 'topUp') return new Response(null, { status: 204 })
+      if (parameters.sse && payload.action === 'voucher' && isSseNegotiationRequest(request))
+        return new Response(null, { status: 204 })
 
-      const request = envelope?.capturedRequest ?? captureRequestBodyProbe(input)
       if (isSessionContentRequest(request)) return undefined
       return new Response(null, { status: 204 })
     },
   })
 }
 
+function isSseNegotiationRequest(input: Pick<Method.CapturedRequest, 'headers'>): boolean {
+  return input.headers.get('Accept')?.includes('text/event-stream') ?? false
+}
+
 export declare namespace session {
   type Defaults = LooseOmit<
     Method.RequestDefaults<typeof Methods.session>,
@@ -553,7 +560,7 @@ async function verifyAndAcceptVoucher(parameters: {
 
   if (voucher.cumulativeAmount <= onChain.settled) {
     throw new VerificationFailedError({
-      reason: 'voucher cumulativeAmount is below on-chain settled amount',
+      reason: 'voucher cumulativeAmount is at or below on-chain settled amount',
     })
   }
 
@@ -561,12 +568,6 @@ async function verifyAndAcceptVoucher(parameters: {
     throw new AmountExceedsDepositError({ reason: 'voucher amount exceeds on-chain deposit' })
   }
 
-  if (voucher.cumulativeAmount < channel.highestVoucherAmount) {
-    throw new VerificationFailedError({
-      reason: 'voucher cumulativeAmount must be strictly greater than highest accepted voucher',
-    })
-  }
-
   const isValid = await verifyVoucher(
     channel.escrowContract,
     channel.chainId,
@@ -578,9 +579,11 @@ async function verifyAndAcceptVoucher(parameters: {
     throw new InvalidSignatureError({ reason: 'invalid voucher signature' })
   }
 
-  // Idempotent replay: equal cumulative voucher is accepted without
-  // advancing channel state or charging additional value.
-  if (voucher.cumulativeAmount === channel.highestVoucherAmount) {
+  // Idempotent replay: a non-advancing voucher (at or below the highest
+  // accepted amount, but above the on-chain settled amount checked above)
+  // returns 200 OK with the current highest amount without advancing state,
+  // per the session spec's idempotency requirement.
+  if (voucher.cumulativeAmount <= channel.highestVoucherAmount) {
     return createSessionReceipt({
       challengeId: challenge.id,
       channelId,
@@ -660,7 +663,7 @@ async function handleOpen(
 
     if (voucher.cumulativeAmount <= onChain.settled) {
       throw new VerificationFailedError({
-        reason: 'voucher cumulativeAmount is below on-chain settled amount',
+        reason: 'voucher cumulativeAmount is at or below on-chain settled amount',
       })
     }
 
@@ -701,7 +704,7 @@ async function handleOpen(
     if (existing) {
       if (voucher.cumulativeAmount <= existing.settledOnChain) {
         throw new VerificationFailedError({
-          reason: 'voucher amount is below settled on-chain amount',
+          reason: 'voucher amount is at or below settled on-chain amount',
         })
       }
 

package/src/tempo/server/internal/html/package.json

@@ -3,7 +3,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "accounts": "0.10.2",
+    "accounts": "0.14.6",
     "mppx": "workspace:*",
     "viem": "2.50.4"
   }