mppx 0.8.14 → 0.8.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (507) hide show
  1. package/CHANGELOG.md +57 -0
  2. package/dist/Challenge.d.ts.map +1 -1
  3. package/dist/Challenge.js +40 -35
  4. package/dist/Challenge.js.map +1 -1
  5. package/dist/Constants.d.ts +17 -17
  6. package/dist/Constants.d.ts.map +1 -1
  7. package/dist/Credential.d.ts.map +1 -1
  8. package/dist/Errors.d.ts +3 -3
  9. package/dist/Errors.d.ts.map +1 -1
  10. package/dist/Errors.js.map +1 -1
  11. package/dist/Method.d.ts +35 -5
  12. package/dist/Method.d.ts.map +1 -1
  13. package/dist/Method.js +7 -22
  14. package/dist/Method.js.map +1 -1
  15. package/dist/Store.d.ts +19 -0
  16. package/dist/Store.d.ts.map +1 -1
  17. package/dist/Store.js +43 -0
  18. package/dist/Store.js.map +1 -1
  19. package/dist/attestation/Client.d.ts +17 -0
  20. package/dist/attestation/Client.d.ts.map +1 -0
  21. package/dist/attestation/Client.js +28 -0
  22. package/dist/attestation/Client.js.map +1 -0
  23. package/dist/attestation/Constants.d.ts +15 -0
  24. package/dist/attestation/Constants.d.ts.map +1 -0
  25. package/dist/attestation/Constants.js +15 -0
  26. package/dist/attestation/Constants.js.map +1 -0
  27. package/dist/attestation/Server.d.ts +4 -0
  28. package/dist/attestation/Server.d.ts.map +1 -0
  29. package/dist/attestation/Server.js +8 -0
  30. package/dist/attestation/Server.js.map +1 -0
  31. package/dist/attestation/Types.d.ts +76 -0
  32. package/dist/attestation/Types.d.ts.map +1 -0
  33. package/dist/attestation/Types.js +2 -0
  34. package/dist/attestation/Types.js.map +1 -0
  35. package/dist/attestation/index.d.ts +6 -0
  36. package/dist/attestation/index.d.ts.map +1 -0
  37. package/dist/attestation/index.js +6 -0
  38. package/dist/attestation/index.js.map +1 -0
  39. package/dist/attestation/internal/HttpMessageSignature.d.ts +73 -0
  40. package/dist/attestation/internal/HttpMessageSignature.d.ts.map +1 -0
  41. package/dist/attestation/internal/HttpMessageSignature.js +320 -0
  42. package/dist/attestation/internal/HttpMessageSignature.js.map +1 -0
  43. package/dist/attestation/internal/SigningContext.d.ts +4 -0
  44. package/dist/attestation/internal/SigningContext.d.ts.map +1 -0
  45. package/dist/attestation/internal/SigningContext.js +11 -0
  46. package/dist/attestation/internal/SigningContext.js.map +1 -0
  47. package/dist/cli/account.d.ts +14 -14
  48. package/dist/cli/account.d.ts.map +1 -1
  49. package/dist/cli/cli.d.ts +6 -6
  50. package/dist/cli/cli.d.ts.map +1 -1
  51. package/dist/cli/cli.js +1 -0
  52. package/dist/cli/cli.js.map +1 -1
  53. package/dist/cli/plugins/tempo.js.map +1 -1
  54. package/dist/cli/sessions/commands.d.ts +4 -4
  55. package/dist/cli/sessions/commands.d.ts.map +1 -1
  56. package/dist/cli/sessions/commands.js.map +1 -1
  57. package/dist/cli/sessions/store.d.ts.map +1 -1
  58. package/dist/cli/sessions/store.js.map +1 -1
  59. package/dist/cli/utils.d.ts +1 -1
  60. package/dist/cli/utils.d.ts.map +1 -1
  61. package/dist/cli/utils.js.map +1 -1
  62. package/dist/cli/validate/discovery.js.map +1 -1
  63. package/dist/cli/validate/index.d.ts +3 -3
  64. package/dist/cli/validate/index.d.ts.map +1 -1
  65. package/dist/cli/validate/payment.d.ts.map +1 -1
  66. package/dist/cli/validate/payment.js +18 -4
  67. package/dist/cli/validate/payment.js.map +1 -1
  68. package/dist/client/Mppx.d.ts +3 -0
  69. package/dist/client/Mppx.d.ts.map +1 -1
  70. package/dist/client/Mppx.js +13 -5
  71. package/dist/client/Mppx.js.map +1 -1
  72. package/dist/client/Transport.d.ts +3 -5
  73. package/dist/client/Transport.d.ts.map +1 -1
  74. package/dist/client/Transport.js +1 -17
  75. package/dist/client/Transport.js.map +1 -1
  76. package/dist/client/internal/Fetch.d.ts.map +1 -1
  77. package/dist/client/internal/Fetch.js +92 -13
  78. package/dist/client/internal/Fetch.js.map +1 -1
  79. package/dist/client/internal/MethodChallenge.d.ts +2 -0
  80. package/dist/client/internal/MethodChallenge.d.ts.map +1 -1
  81. package/dist/client/internal/MethodChallenge.js +4 -0
  82. package/dist/client/internal/MethodChallenge.js.map +1 -1
  83. package/dist/client/internal/MethodResponse.d.ts +15 -0
  84. package/dist/client/internal/MethodResponse.d.ts.map +1 -1
  85. package/dist/client/internal/MethodResponse.js +10 -0
  86. package/dist/client/internal/MethodResponse.js.map +1 -1
  87. package/dist/client/node.js.map +1 -1
  88. package/dist/discovery/OpenApi.d.ts +3 -5
  89. package/dist/discovery/OpenApi.d.ts.map +1 -1
  90. package/dist/discovery/OpenApi.js +13 -34
  91. package/dist/discovery/OpenApi.js.map +1 -1
  92. package/dist/discovery/internal/Metadata.d.ts +20 -0
  93. package/dist/discovery/internal/Metadata.d.ts.map +1 -0
  94. package/dist/discovery/internal/Metadata.js +36 -0
  95. package/dist/discovery/internal/Metadata.js.map +1 -0
  96. package/dist/evm/Methods.d.ts +11 -11
  97. package/dist/evm/Methods.d.ts.map +1 -1
  98. package/dist/evm/Types.d.ts +17 -17
  99. package/dist/evm/Types.d.ts.map +1 -1
  100. package/dist/evm/client/Charge.d.ts +11 -11
  101. package/dist/evm/client/Methods.d.ts +11 -11
  102. package/dist/evm/server/Charge.d.ts +1 -1
  103. package/dist/evm/server/Charge.d.ts.map +1 -1
  104. package/dist/evm/server/Charge.js +2 -0
  105. package/dist/evm/server/Charge.js.map +1 -1
  106. package/dist/evm/server/Methods.d.ts +11 -11
  107. package/dist/internal/HeaderCodec.d.ts +2 -2
  108. package/dist/internal/HeaderCodec.d.ts.map +1 -1
  109. package/dist/internal/types.d.ts +6 -0
  110. package/dist/internal/types.d.ts.map +1 -1
  111. package/dist/middlewares/elysia.js.map +1 -1
  112. package/dist/middlewares/express.js.map +1 -1
  113. package/dist/middlewares/hono.js.map +1 -1
  114. package/dist/middlewares/nextjs.js.map +1 -1
  115. package/dist/proxy/Proxy.d.ts +2 -0
  116. package/dist/proxy/Proxy.d.ts.map +1 -1
  117. package/dist/proxy/Proxy.js +117 -9
  118. package/dist/proxy/Proxy.js.map +1 -1
  119. package/dist/proxy/Service.d.ts +36 -1
  120. package/dist/proxy/Service.d.ts.map +1 -1
  121. package/dist/proxy/Service.js +9 -8
  122. package/dist/proxy/Service.js.map +1 -1
  123. package/dist/proxy/services/anthropic.d.ts.map +1 -1
  124. package/dist/proxy/services/anthropic.js +1 -0
  125. package/dist/proxy/services/anthropic.js.map +1 -1
  126. package/dist/proxy/services/openai.d.ts.map +1 -1
  127. package/dist/proxy/services/openai.js +1 -0
  128. package/dist/proxy/services/openai.js.map +1 -1
  129. package/dist/proxy/services/stripe.d.ts.map +1 -1
  130. package/dist/proxy/services/stripe.js +1 -0
  131. package/dist/proxy/services/stripe.js.map +1 -1
  132. package/dist/server/Mppx.d.ts +75 -13
  133. package/dist/server/Mppx.d.ts.map +1 -1
  134. package/dist/server/Mppx.js +201 -23
  135. package/dist/server/Mppx.js.map +1 -1
  136. package/dist/server/internal/html/config.d.ts +9 -9
  137. package/dist/server/internal/html/config.d.ts.map +1 -1
  138. package/dist/server/internal/html/constants.d.ts +17 -17
  139. package/dist/server/internal/html/constants.d.ts.map +1 -1
  140. package/dist/stripe/Methods.d.ts +10 -10
  141. package/dist/stripe/Methods.d.ts.map +1 -1
  142. package/dist/stripe/client/Charge.d.ts +10 -10
  143. package/dist/stripe/client/Methods.d.ts +10 -10
  144. package/dist/stripe/internal/constants.d.ts +1 -1
  145. package/dist/stripe/internal/constants.js +1 -1
  146. package/dist/stripe/internal/types.d.ts +1 -0
  147. package/dist/stripe/internal/types.d.ts.map +1 -1
  148. package/dist/stripe/server/Charge.d.ts +11 -11
  149. package/dist/stripe/server/Charge.d.ts.map +1 -1
  150. package/dist/stripe/server/Charge.js +49 -1
  151. package/dist/stripe/server/Charge.js.map +1 -1
  152. package/dist/stripe/server/Methods.d.ts +137 -48
  153. package/dist/stripe/server/Methods.d.ts.map +1 -1
  154. package/dist/stripe/server/Methods.js +259 -4
  155. package/dist/stripe/server/Methods.js.map +1 -1
  156. package/dist/stripe/server/internal/deposit-address.d.ts +13 -0
  157. package/dist/stripe/server/internal/deposit-address.d.ts.map +1 -0
  158. package/dist/stripe/server/internal/deposit-address.js +28 -0
  159. package/dist/stripe/server/internal/deposit-address.js.map +1 -0
  160. package/dist/stripe/server/internal/html.gen.d.ts +1 -1
  161. package/dist/stripe/server/internal/html.gen.d.ts.map +1 -1
  162. package/dist/stripe/server/internal/html.gen.js +1 -1
  163. package/dist/stripe/server/internal/html.gen.js.map +1 -1
  164. package/dist/stripe/server/internal/record-payment.d.ts +15 -0
  165. package/dist/stripe/server/internal/record-payment.d.ts.map +1 -0
  166. package/dist/stripe/server/internal/record-payment.js +42 -0
  167. package/dist/stripe/server/internal/record-payment.js.map +1 -0
  168. package/dist/stripe/server/internal/request.d.ts +25 -0
  169. package/dist/stripe/server/internal/request.d.ts.map +1 -0
  170. package/dist/stripe/server/internal/request.js +29 -0
  171. package/dist/stripe/server/internal/request.js.map +1 -0
  172. package/dist/tap/Constants.d.ts +28 -0
  173. package/dist/tap/Constants.d.ts.map +1 -0
  174. package/dist/tap/Constants.js +32 -0
  175. package/dist/tap/Constants.js.map +1 -0
  176. package/dist/tap/Types.d.ts +11 -0
  177. package/dist/tap/Types.d.ts.map +1 -0
  178. package/dist/tap/Types.js +2 -0
  179. package/dist/tap/Types.js.map +1 -0
  180. package/dist/tap/client/index.d.ts +26 -0
  181. package/dist/tap/client/index.d.ts.map +1 -0
  182. package/dist/tap/client/index.js +33 -0
  183. package/dist/tap/client/index.js.map +1 -0
  184. package/dist/tap/index.d.ts +5 -0
  185. package/dist/tap/index.d.ts.map +1 -0
  186. package/dist/tap/index.js +5 -0
  187. package/dist/tap/index.js.map +1 -0
  188. package/dist/tap/server/index.d.ts +20 -0
  189. package/dist/tap/server/index.d.ts.map +1 -0
  190. package/dist/tap/server/index.js +36 -0
  191. package/dist/tap/server/index.js.map +1 -0
  192. package/dist/tempo/Attribution.d.ts +1 -1
  193. package/dist/tempo/Methods.d.ts +60 -60
  194. package/dist/tempo/Methods.d.ts.map +1 -1
  195. package/dist/tempo/Proof.d.ts +16 -16
  196. package/dist/tempo/client/Charge.d.ts +19 -19
  197. package/dist/tempo/client/Charge.d.ts.map +1 -1
  198. package/dist/tempo/client/Charge.js +1 -7
  199. package/dist/tempo/client/Charge.js.map +1 -1
  200. package/dist/tempo/client/Methods.d.ts +38 -38
  201. package/dist/tempo/client/Methods.js.map +1 -1
  202. package/dist/tempo/client/Subscription.d.ts +23 -23
  203. package/dist/tempo/client/Subscription.js.map +1 -1
  204. package/dist/tempo/internal/address.d.ts +2 -1
  205. package/dist/tempo/internal/address.d.ts.map +1 -1
  206. package/dist/tempo/internal/address.js +3 -1
  207. package/dist/tempo/internal/address.js.map +1 -1
  208. package/dist/tempo/internal/auto-swap.d.ts.map +1 -1
  209. package/dist/tempo/internal/auto-swap.js +4 -19
  210. package/dist/tempo/internal/auto-swap.js.map +1 -1
  211. package/dist/tempo/internal/defaults.d.ts +6 -6
  212. package/dist/tempo/internal/defaults.d.ts.map +1 -1
  213. package/dist/tempo/internal/fee-payer.d.ts +12 -12
  214. package/dist/tempo/internal/fee-payer.d.ts.map +1 -1
  215. package/dist/tempo/internal/fee-payer.js.map +1 -1
  216. package/dist/tempo/internal/proof.d.ts +17 -17
  217. package/dist/tempo/internal/proof.d.ts.map +1 -1
  218. package/dist/tempo/legacy/client/Session.d.ts +20 -20
  219. package/dist/tempo/legacy/client/Session.js.map +1 -1
  220. package/dist/tempo/legacy/client/SessionManager.js.map +1 -1
  221. package/dist/tempo/legacy/index.d.ts +1 -3
  222. package/dist/tempo/legacy/index.d.ts.map +1 -1
  223. package/dist/tempo/legacy/index.js +1 -3
  224. package/dist/tempo/legacy/index.js.map +1 -1
  225. package/dist/tempo/legacy/session/escrow.abi.d.ts +374 -374
  226. package/dist/tempo/legacy/session/escrow.abi.d.ts.map +1 -1
  227. package/dist/tempo/server/Charge.d.ts +34 -12
  228. package/dist/tempo/server/Charge.d.ts.map +1 -1
  229. package/dist/tempo/server/Charge.js +44 -39
  230. package/dist/tempo/server/Charge.js.map +1 -1
  231. package/dist/tempo/server/Methods.d.ts +37 -52
  232. package/dist/tempo/server/Methods.d.ts.map +1 -1
  233. package/dist/tempo/server/Methods.js +0 -14
  234. package/dist/tempo/server/Methods.js.map +1 -1
  235. package/dist/tempo/server/Relay.d.ts +14 -5
  236. package/dist/tempo/server/Relay.d.ts.map +1 -1
  237. package/dist/tempo/server/Relay.js +6 -4
  238. package/dist/tempo/server/Relay.js.map +1 -1
  239. package/dist/tempo/server/SponsorBudget.d.ts.map +1 -1
  240. package/dist/tempo/server/SponsorBudget.js +7 -1
  241. package/dist/tempo/server/SponsorBudget.js.map +1 -1
  242. package/dist/tempo/server/Subscription.d.ts +25 -25
  243. package/dist/tempo/server/Subscription.d.ts.map +1 -1
  244. package/dist/tempo/server/Subscription.js +2 -0
  245. package/dist/tempo/server/Subscription.js.map +1 -1
  246. package/dist/tempo/server/index.d.ts +1 -1
  247. package/dist/tempo/server/index.d.ts.map +1 -1
  248. package/dist/tempo/server/index.js +1 -1
  249. package/dist/tempo/server/index.js.map +1 -1
  250. package/dist/tempo/server/internal/html.gen.d.ts +1 -1
  251. package/dist/tempo/server/internal/html.gen.d.ts.map +1 -1
  252. package/dist/tempo/server/internal/html.gen.js +1 -1
  253. package/dist/tempo/server/internal/html.gen.js.map +1 -1
  254. package/dist/tempo/server/internal/transport.d.ts +2 -0
  255. package/dist/tempo/server/internal/transport.d.ts.map +1 -1
  256. package/dist/tempo/server/internal/transport.js +9 -2
  257. package/dist/tempo/server/internal/transport.js.map +1 -1
  258. package/dist/tempo/session/client/ChannelOps.js.map +1 -1
  259. package/dist/tempo/session/client/CredentialState.d.ts +1 -1
  260. package/dist/tempo/session/client/CredentialState.js.map +1 -1
  261. package/dist/tempo/session/client/ReceiptCoordinator.js.map +1 -1
  262. package/dist/tempo/session/client/Runtime.js.map +1 -1
  263. package/dist/tempo/session/client/Session.d.ts +19 -19
  264. package/dist/tempo/session/client/Session.d.ts.map +1 -1
  265. package/dist/tempo/session/client/Session.js +128 -14
  266. package/dist/tempo/session/client/Session.js.map +1 -1
  267. package/dist/tempo/session/client/SessionManager.d.ts.map +1 -1
  268. package/dist/tempo/session/client/SessionManager.js +62 -20
  269. package/dist/tempo/session/client/SessionManager.js.map +1 -1
  270. package/dist/tempo/session/client/Transports.d.ts +9 -1
  271. package/dist/tempo/session/client/Transports.d.ts.map +1 -1
  272. package/dist/tempo/session/client/Transports.js +36 -13
  273. package/dist/tempo/session/client/Transports.js.map +1 -1
  274. package/dist/tempo/session/precompile/Chain.d.ts +27 -0
  275. package/dist/tempo/session/precompile/Chain.d.ts.map +1 -1
  276. package/dist/tempo/session/precompile/Chain.js +68 -7
  277. package/dist/tempo/session/precompile/Chain.js.map +1 -1
  278. package/dist/tempo/session/precompile/Protocol.js.map +1 -1
  279. package/dist/tempo/session/precompile/Voucher.d.ts +4 -4
  280. package/dist/tempo/session/precompile/Voucher.d.ts.map +1 -1
  281. package/dist/tempo/session/precompile/escrow.abi.d.ts +306 -306
  282. package/dist/tempo/session/precompile/escrow.abi.d.ts.map +1 -1
  283. package/dist/tempo/session/server/ChannelStore.d.ts +9 -0
  284. package/dist/tempo/session/server/ChannelStore.d.ts.map +1 -1
  285. package/dist/tempo/session/server/ChannelStore.js +16 -8
  286. package/dist/tempo/session/server/ChannelStore.js.map +1 -1
  287. package/dist/tempo/session/server/CredentialVerification.d.ts +30 -13
  288. package/dist/tempo/session/server/CredentialVerification.d.ts.map +1 -1
  289. package/dist/tempo/session/server/CredentialVerification.js +207 -13
  290. package/dist/tempo/session/server/CredentialVerification.js.map +1 -1
  291. package/dist/tempo/session/server/MeteredStream.d.ts +3 -0
  292. package/dist/tempo/session/server/MeteredStream.d.ts.map +1 -1
  293. package/dist/tempo/session/server/MeteredStream.js +3 -1
  294. package/dist/tempo/session/server/MeteredStream.js.map +1 -1
  295. package/dist/tempo/session/server/Session.d.ts +32 -21
  296. package/dist/tempo/session/server/Session.d.ts.map +1 -1
  297. package/dist/tempo/session/server/Session.js +116 -53
  298. package/dist/tempo/session/server/Session.js.map +1 -1
  299. package/dist/tempo/session/server/Sse.d.ts +3 -1
  300. package/dist/tempo/session/server/Sse.d.ts.map +1 -1
  301. package/dist/tempo/session/server/Sse.js +2 -1
  302. package/dist/tempo/session/server/Sse.js.map +1 -1
  303. package/dist/tempo/session/server/Transports.d.ts +1 -1
  304. package/dist/tempo/session/server/Transports.d.ts.map +1 -1
  305. package/dist/tempo/session/server/Transports.js +1 -0
  306. package/dist/tempo/session/server/Transports.js.map +1 -1
  307. package/dist/tempo/session/server/Ws.d.ts +6 -1
  308. package/dist/tempo/session/server/Ws.d.ts.map +1 -1
  309. package/dist/tempo/session/server/Ws.js +4 -0
  310. package/dist/tempo/session/server/Ws.js.map +1 -1
  311. package/dist/tempo/subscription/KeyAuthorization.d.ts +38 -866
  312. package/dist/tempo/subscription/KeyAuthorization.d.ts.map +1 -1
  313. package/dist/tempo/subscription/KeyAuthorization.js +14 -3
  314. package/dist/tempo/subscription/KeyAuthorization.js.map +1 -1
  315. package/dist/viem/Account.d.ts.map +1 -1
  316. package/dist/viem/Account.js.map +1 -1
  317. package/dist/viem/Client.d.ts.map +1 -1
  318. package/dist/viem/Client.js +6 -1
  319. package/dist/viem/Client.js.map +1 -1
  320. package/dist/web-bot-auth/Constants.d.ts +20 -0
  321. package/dist/web-bot-auth/Constants.d.ts.map +1 -0
  322. package/dist/web-bot-auth/Constants.js +24 -0
  323. package/dist/web-bot-auth/Constants.js.map +1 -0
  324. package/dist/web-bot-auth/Types.d.ts +10 -0
  325. package/dist/web-bot-auth/Types.d.ts.map +1 -0
  326. package/dist/web-bot-auth/Types.js +2 -0
  327. package/dist/web-bot-auth/Types.js.map +1 -0
  328. package/dist/web-bot-auth/client/index.d.ts +29 -0
  329. package/dist/web-bot-auth/client/index.d.ts.map +1 -0
  330. package/dist/web-bot-auth/client/index.js +64 -0
  331. package/dist/web-bot-auth/client/index.js.map +1 -0
  332. package/dist/web-bot-auth/index.d.ts +7 -0
  333. package/dist/web-bot-auth/index.d.ts.map +1 -0
  334. package/dist/web-bot-auth/index.js +7 -0
  335. package/dist/web-bot-auth/index.js.map +1 -0
  336. package/dist/web-bot-auth/internal/JwkThumbprint.d.ts +5 -0
  337. package/dist/web-bot-auth/internal/JwkThumbprint.d.ts.map +1 -0
  338. package/dist/web-bot-auth/internal/JwkThumbprint.js +20 -0
  339. package/dist/web-bot-auth/internal/JwkThumbprint.js.map +1 -0
  340. package/dist/web-bot-auth/internal/SignatureAgent.d.ts +3 -0
  341. package/dist/web-bot-auth/internal/SignatureAgent.d.ts.map +1 -0
  342. package/dist/web-bot-auth/internal/SignatureAgent.js +18 -0
  343. package/dist/web-bot-auth/internal/SignatureAgent.js.map +1 -0
  344. package/dist/web-bot-auth/server/index.d.ts +35 -0
  345. package/dist/web-bot-auth/server/index.d.ts.map +1 -0
  346. package/dist/web-bot-auth/server/index.js +88 -0
  347. package/dist/web-bot-auth/server/index.js.map +1 -0
  348. package/dist/x402/Assets.d.ts.map +1 -1
  349. package/dist/x402/Types.d.ts +6 -6
  350. package/dist/x402/Types.d.ts.map +1 -1
  351. package/dist/x402/server/EvmCharge.d.ts.map +1 -1
  352. package/dist/x402/server/EvmCharge.js +32 -20
  353. package/dist/x402/server/EvmCharge.js.map +1 -1
  354. package/package.json +20 -4
  355. package/src/Challenge.fuzz.test.ts +80 -47
  356. package/src/Challenge.test.ts +65 -0
  357. package/src/Challenge.ts +39 -35
  358. package/src/Method.ts +82 -68
  359. package/src/Store.test-d.ts +16 -0
  360. package/src/Store.test.ts +50 -0
  361. package/src/Store.ts +68 -0
  362. package/src/attestation/Attestation.integration.test.ts +208 -0
  363. package/src/attestation/Client.test.ts +83 -0
  364. package/src/attestation/Client.ts +34 -0
  365. package/src/attestation/Constants.ts +15 -0
  366. package/src/attestation/Server.test.ts +60 -0
  367. package/src/attestation/Server.ts +12 -0
  368. package/src/attestation/Types.test-d.ts +54 -0
  369. package/src/attestation/Types.ts +77 -0
  370. package/src/attestation/index.ts +5 -0
  371. package/src/attestation/internal/HttpMessageSignature.test.ts +101 -0
  372. package/src/attestation/internal/HttpMessageSignature.ts +429 -0
  373. package/src/attestation/internal/SigningContext.ts +13 -0
  374. package/src/bin.js +2 -0
  375. package/src/cli/cli.ts +1 -0
  376. package/src/cli/validate/payment.ts +18 -4
  377. package/src/cli/validate.test.ts +16 -0
  378. package/src/client/Mppx.test-d.ts +17 -0
  379. package/src/client/Mppx.test.ts +14 -14
  380. package/src/client/Mppx.ts +25 -4
  381. package/src/client/Transport.test.ts +12 -45
  382. package/src/client/Transport.ts +3 -24
  383. package/src/client/internal/Fetch.test.ts +77 -0
  384. package/src/client/internal/Fetch.ts +112 -14
  385. package/src/client/internal/MethodChallenge.ts +5 -0
  386. package/src/client/internal/MethodResponse.ts +28 -0
  387. package/src/discovery/OpenApi.test.ts +170 -0
  388. package/src/discovery/OpenApi.ts +16 -48
  389. package/src/discovery/internal/Metadata.ts +51 -0
  390. package/src/evm/server/Charge.ts +6 -1
  391. package/src/internal/AcceptPayment.test.ts +12 -8
  392. package/src/internal/types.ts +9 -0
  393. package/src/mcp/client/McpClient.integration.test.ts +19 -32
  394. package/src/middlewares/elysia.test.ts +2 -12
  395. package/src/middlewares/express.test.ts +2 -12
  396. package/src/middlewares/hono.test.ts +6 -9
  397. package/src/middlewares/nextjs.test.ts +2 -12
  398. package/src/proxy/Proxy.test.ts +26 -19
  399. package/src/proxy/Proxy.ts +147 -9
  400. package/src/proxy/Proxy.upstreamError.test.ts +364 -0
  401. package/src/proxy/Service.test.ts +73 -3
  402. package/src/proxy/Service.ts +50 -23
  403. package/src/proxy/services/anthropic.ts +1 -0
  404. package/src/proxy/services/hooks.test-d.ts +14 -0
  405. package/src/proxy/services/hooks.test.ts +44 -0
  406. package/src/proxy/services/openai.ts +1 -0
  407. package/src/proxy/services/stripe.ts +1 -0
  408. package/src/server/Methods.test-d.ts +88 -0
  409. package/src/server/Methods.test.ts +69 -0
  410. package/src/server/Mppx.test-d.ts +141 -7
  411. package/src/server/Mppx.test.ts +1017 -119
  412. package/src/server/Mppx.ts +350 -54
  413. package/src/stripe/internal/constants.ts +1 -1
  414. package/src/stripe/internal/types.ts +1 -0
  415. package/src/stripe/server/Charge.test-d.ts +16 -1
  416. package/src/stripe/server/Charge.test.ts +79 -0
  417. package/src/stripe/server/Charge.ts +54 -1
  418. package/src/stripe/server/Methods.test-d.ts +157 -0
  419. package/src/stripe/server/Methods.test.ts +403 -0
  420. package/src/stripe/server/Methods.ts +423 -6
  421. package/src/stripe/server/internal/deposit-address.ts +57 -0
  422. package/src/stripe/server/internal/html/node_modules/.bin/mppx +3 -3
  423. package/src/stripe/server/internal/html/package.json +1 -1
  424. package/src/stripe/server/internal/html.gen.ts +1 -1
  425. package/src/stripe/server/internal/record-payment.ts +66 -0
  426. package/src/stripe/server/internal/request.ts +49 -0
  427. package/src/tap/Constants.ts +32 -0
  428. package/src/tap/Tap.test.ts +125 -0
  429. package/src/tap/Types.ts +11 -0
  430. package/src/tap/client/index.ts +54 -0
  431. package/src/tap/index.ts +4 -0
  432. package/src/tap/server/index.ts +48 -0
  433. package/src/tempo/PublicExports.test-d.ts +3 -3
  434. package/src/tempo/client/Charge.ts +1 -19
  435. package/src/tempo/internal/address.test.ts +42 -0
  436. package/src/tempo/internal/address.ts +3 -3
  437. package/src/tempo/internal/auto-swap.test.ts +4 -4
  438. package/src/tempo/internal/auto-swap.ts +7 -50
  439. package/src/tempo/legacy/README.md +5 -5
  440. package/src/tempo/legacy/index.ts +1 -3
  441. package/src/tempo/server/AtomicStore.test-d.ts +13 -0
  442. package/src/tempo/server/Charge.test.ts +19 -84
  443. package/src/tempo/server/Charge.ts +92 -56
  444. package/src/tempo/server/Methods.ts +0 -20
  445. package/src/tempo/server/Relay.test.ts +161 -7
  446. package/src/tempo/server/Relay.ts +15 -6
  447. package/src/tempo/server/SponsorBudget.test.ts +29 -0
  448. package/src/tempo/server/SponsorBudget.ts +7 -1
  449. package/src/tempo/server/Subscription.ts +4 -1
  450. package/src/tempo/server/index.ts +1 -1
  451. package/src/tempo/server/internal/html/node_modules/.bin/mppx +3 -3
  452. package/src/tempo/server/internal/html/package.json +1 -1
  453. package/src/tempo/server/internal/html.gen.ts +1 -1
  454. package/src/tempo/server/internal/transport.test.ts +22 -3
  455. package/src/tempo/server/internal/transport.ts +15 -3
  456. package/src/tempo/session/README.md +119 -0
  457. package/src/tempo/session/client/Session.test.ts +299 -33
  458. package/src/tempo/session/client/Session.ts +152 -16
  459. package/src/tempo/session/client/SessionManager.test.ts +216 -9
  460. package/src/tempo/session/client/SessionManager.ts +63 -17
  461. package/src/tempo/session/client/Transports.test.ts +22 -0
  462. package/src/tempo/session/client/Transports.ts +58 -22
  463. package/src/tempo/session/precompile/Chain.ts +131 -11
  464. package/src/tempo/session/server/ChannelStore.ts +33 -12
  465. package/src/tempo/session/server/CredentialVerification.test.ts +4 -4
  466. package/src/tempo/session/server/CredentialVerification.ts +340 -28
  467. package/src/tempo/session/server/MeteredStream.ts +5 -1
  468. package/src/tempo/session/server/Session.test.ts +483 -36
  469. package/src/tempo/session/server/Session.ts +159 -60
  470. package/src/tempo/session/server/Sse.test.ts +77 -0
  471. package/src/tempo/session/server/Sse.ts +8 -1
  472. package/src/tempo/session/server/Transports.ts +2 -1
  473. package/src/tempo/session/server/Ws.test.ts +171 -0
  474. package/src/tempo/session/server/Ws.ts +10 -1
  475. package/src/tempo/subscription/KeyAuthorization.test.ts +70 -1
  476. package/src/tempo/subscription/KeyAuthorization.ts +14 -3
  477. package/src/viem/Client.test.ts +18 -1
  478. package/src/viem/Client.ts +7 -1
  479. package/src/web-bot-auth/Constants.ts +24 -0
  480. package/src/web-bot-auth/Types.ts +9 -0
  481. package/src/web-bot-auth/WebBotAuth.test.ts +182 -0
  482. package/src/web-bot-auth/client/index.ts +84 -0
  483. package/src/web-bot-auth/index.ts +6 -0
  484. package/src/web-bot-auth/internal/JwkThumbprint.ts +21 -0
  485. package/src/web-bot-auth/internal/SignatureAgent.ts +18 -0
  486. package/src/web-bot-auth/server/index.ts +113 -0
  487. package/src/x402/Exact.e2e.test.ts +121 -81
  488. package/src/x402/Exact.localnet.test.ts +1 -1
  489. package/src/x402/server/EvmCharge.ts +35 -19
  490. package/dist/tempo/legacy/server/Session.d.ts +0 -208
  491. package/dist/tempo/legacy/server/Session.d.ts.map +0 -1
  492. package/dist/tempo/legacy/server/Session.js +0 -698
  493. package/dist/tempo/legacy/server/Session.js.map +0 -1
  494. package/dist/tempo/legacy/server/index.d.ts +0 -5
  495. package/dist/tempo/legacy/server/index.d.ts.map +0 -1
  496. package/dist/tempo/legacy/server/index.js +0 -5
  497. package/dist/tempo/legacy/server/index.js.map +0 -1
  498. package/dist/tempo/legacy/session/ChannelStore.d.ts +0 -22
  499. package/dist/tempo/legacy/session/ChannelStore.d.ts.map +0 -1
  500. package/dist/tempo/legacy/session/ChannelStore.js +0 -6
  501. package/dist/tempo/legacy/session/ChannelStore.js.map +0 -1
  502. package/src/tempo/legacy/server/Defaults.test-d.ts +0 -9
  503. package/src/tempo/legacy/server/Session.test.ts +0 -6370
  504. package/src/tempo/legacy/server/Session.ts +0 -1024
  505. package/src/tempo/legacy/server/index.ts +0 -4
  506. package/src/tempo/legacy/session/ChannelStore.test.ts +0 -58
  507. package/src/tempo/legacy/session/ChannelStore.ts +0 -39
@@ -1 +1 @@
1
- {"version":3,"file":"Types.d.ts","sourceRoot":"","sources":["../../src/x402/Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,WAAW,CAAA;AAE9B,eAAO,MAAM,QAAQ,cAAe,CAAA;AAEpC,sEAAsE;AACtE,eAAO,MAAM,aAAa,EAAG,KAAc,CAAA;AAE3C,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAG,QAAiB,CAAA;AAE5C,eAAO,MAAM,OAAO,oBAAqB,CAAA;AACzC,eAAO,MAAM,oBAAoB,iCAAkC,CAAA;AAEnE,gDAAgD;AAChD,eAAO,MAAM,gBAAgB,EAAG,SAAkB,CAAA;AAElD,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAG,OAAgB,CAAA;AAE1D,uDAAuD;AACvD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAA;AAEvB,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAA;AAEhD,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAA;AAE5C,6CAA6C;AAC7C,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7C,4CAA4C;AAC5C,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvE,qCAAqC;AACrC,MAAM,MAAM,UAAU,GAAG,GAAG,OAAO,gBAAgB,GAAG,MAAM,EAAE,CAAA;AAE9D,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,qBAAqB,CAAA;AAEvD,kEAAkE;AAClE,eAAO,MAAM,sBAAsB,sBAAsB,CAAA;AAEzD,sEAAsE;AACtE,eAAO,MAAM,qBAAqB,qBAAqB,CAAA;AAYvD,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB;;;;;;;iBAO7B,CAAA;AAEF,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB;;;;;;;;2BAW9B,CAAA;AAEF,qEAAqE;AACrE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEpG,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEpG,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,oEAAoE;AACpE,MAAM,MAAM,KAAK,GAAG;IAClB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,aAAa,CAAA;CACxB,CAAA;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAQpC,CAAA;AAEF,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,wCAAwC;AACxC,eAAO,MAAM,eAAe;;;iBAG1B,CAAA;AAEF,wCAAwC;AACxC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEvD,uCAAuC;AACvC,eAAO,MAAM,gBAAgB;;;kBAAwC,CAAA;AAErE,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD,kEAAkE;AAClE,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG;IAC/C,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMhC,CAAA;AAEF,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,yEAAyE;AACzE,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAUpC,CAAA;AAEF,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,8CAA8C;AAC9C,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAgBpC,CAAA;AAEF,8CAA8C;AAC9C,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,sCAAsC;AACtC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAkE,CAAA;AAEjG,sCAAsC;AACtC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,+BAA+B;AAC/B,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAA;AAEF,+BAA+B;AAC/B,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,yCAAyC;AACzC,eAAO,MAAM,oBAAoB;;;;;;;;;;iBAO/B,CAAA;AAEF,yCAAyC;AACzC,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,wEAAwE;AACxE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAU/B,CAAA;AAEF,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,CACN,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,KACrC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC5B,MAAM,EAAE,CACN,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,KACrC,OAAO,CAAC,cAAc,CAAC,CAAA;CAC7B,CAAA;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAGhF"}
1
+ {"version":3,"file":"Types.d.ts","sourceRoot":"","sources":["../../src/x402/Types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,WAAW,CAAA;AAE9B,eAAO,MAAM,QAAQ,YAAI,CAAC,CAAU,CAAA;AAEpC,sEAAsE;AACtE,eAAO,MAAM,aAAa,EAAG,KAAc,CAAA;AAE3C,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAG,QAAiB,CAAA;AAE5C,eAAO,MAAM,OAAO,YAAI,OAAO,CAAU,CAAA;AACzC,eAAO,MAAM,oBAAoB,YAAI,SAAS,EAAE,SAAS,CAAU,CAAA;AAEnE,gDAAgD;AAChD,eAAO,MAAM,gBAAgB,EAAG,SAAkB,CAAA;AAElD,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAG,OAAgB,CAAA;AAE1D,uDAAuD;AACvD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAA;AAEvB,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAA;AAEhD,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAA;AAE5C,6CAA6C;AAC7C,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAE7C,4CAA4C;AAC5C,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEvE,qCAAqC;AACrC,MAAM,MAAM,UAAU,GAAG,GAAG,OAAO,gBAAgB,GAAG,MAAM,EAAE,CAAA;AAE9D,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,qBAAqB,CAAA;AAEvD,kEAAkE;AAClE,eAAO,MAAM,sBAAsB,sBAAsB,CAAA;AAEzD,sEAAsE;AACtE,eAAO,MAAM,qBAAqB,qBAAqB,CAAA;AAYvD,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB;;;;;;;iBAO7B,CAAA;AAEF,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB;;;;;;;;2BAW9B,CAAA;AAEF,qEAAqE;AACrE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEpG,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEpG,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,oEAAoE;AACpE,MAAM,MAAM,KAAK,GAAG;IAClB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,aAAa,CAAA;CACxB,CAAA;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAQpC,CAAA;AAEF,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,wCAAwC;AACxC,eAAO,MAAM,eAAe;;;iBAG1B,CAAA;AAEF,wCAAwC;AACxC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEvD,uCAAuC;AACvC,eAAO,MAAM,gBAAgB;;;kBAAwC,CAAA;AAErE,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD,kEAAkE;AAClE,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG;IAC/C,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;CACpC,CAAA;AAED,yCAAyC;AACzC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMhC,CAAA;AAEF,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,yEAAyE;AACzE,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAUpC,CAAA;AAEF,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,8CAA8C;AAC9C,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAgBpC,CAAA;AAEF,8CAA8C;AAC9C,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,sCAAsC;AACtC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;mBAAkE,CAAA;AAEjG,sCAAsC;AACtC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D,+BAA+B;AAC/B,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAA;AAEF,+BAA+B;AAC/B,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,yCAAyC;AACzC,eAAO,MAAM,oBAAoB;;;;;;;;;;iBAO/B,CAAA;AAEF,yCAAyC;AACzC,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,wEAAwE;AACxE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAU/B,CAAA;AAEF,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,CACN,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,KACrC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC5B,MAAM,EAAE,CACN,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,KACrC,OAAO,CAAC,cAAc,CAAC,CAAA;CAC7B,CAAA;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAGhF"}
@@ -1 +1 @@
1
- {"version":3,"file":"EvmCharge.d.ts","sourceRoot":"","sources":["../../../src/x402/server/EvmCharge.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,UAAU,MAAM,qBAAqB,CAAA;AAGtD,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAG3C,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAA;AAG5D,OAAO,KAAK,UAAU,MAAM,aAAa,CAAA;AAmBzC,MAAM,MAAM,OAAO,GAAG;IACpB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,GAAG,SAAS,CAAA;IACzD,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;IAC3C,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAA;IACxC,WAAW,CAAC,EAAE,UAAU,CAAC,WAAW,GAAG,SAAS,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,IAAI,GAAG;IACjB,cAAc,EAAE,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACnE,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACpD,gBAAgB,EAAE,CAChB,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,KAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjC,cAAc,EAAE,CACd,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9D,QAAQ,EAAE,QAAQ,KACf,QAAQ,CAAA;CACd,CAAA;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,UAAU,EAAE;IACzC,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAA;IACxC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,GAAG,eAAe,CAclB;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA4GxD;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,eAAe,GAAG,qBAAqB,CA0CxF;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,UAAU,EAAE;IAC/C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC7D,OAAO,EAAE,KAAK,CAAC,oBAAoB,CAAA;IACnC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAA;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAA;CAC1C,KAAK,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAC,CAAA;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,GAAG,OAAO,CAEvE;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,GAAG,OAAO,CAE9E;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,KAAK,CAAC,aAAa,EAC5B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAG,mBAAmB,CAAC,GACnE,UAAU,CAAC,mBAAmB,CAchC;AAOD,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,UAAU,CAAC,cAAc,GACxC,KAAK,CAAC,oBAAoB,CAW5B"}
1
+ {"version":3,"file":"EvmCharge.d.ts","sourceRoot":"","sources":["../../../src/x402/server/EvmCharge.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,KAAK,UAAU,MAAM,qBAAqB,CAAA;AAGtD,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAG3C,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAA;AAG5D,OAAO,KAAK,UAAU,MAAM,aAAa,CAAA;AAmBzC,MAAM,MAAM,OAAO,GAAG;IACpB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,GAAG,SAAS,CAAA;IACzD,sDAAsD;IACtD,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;IAC3C,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAA;IACxC,WAAW,CAAC,EAAE,UAAU,CAAC,WAAW,GAAG,SAAS,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,IAAI,GAAG;IACjB,cAAc,EAAE,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACnE,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACpD,gBAAgB,EAAE,CAChB,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,KAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjC,cAAc,EAAE,CACd,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9D,QAAQ,EAAE,QAAQ,KACf,QAAQ,CAAA;CACd,CAAA;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,UAAU,EAAE;IACzC,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAA;IACxC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,GAAG,eAAe,CAclB;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAgIxD;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,eAAe,GAAG,qBAAqB,CA0CxF;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,UAAU,EAAE;IAC/C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC7D,OAAO,EAAE,KAAK,CAAC,oBAAoB,CAAA;IACnC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAA;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAA;CAC1C,KAAK,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B,CAAC,CAAA;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,GAAG,OAAO,CAEvE;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,GAAG,OAAO,CAE9E;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,KAAK,CAAC,aAAa,EAC5B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAG,mBAAmB,CAAC,GACnE,UAAU,CAAC,mBAAmB,CAchC;AAOD,yFAAyF;AACzF,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,UAAU,CAAC,cAAc,GACxC,KAAK,CAAC,oBAAoB,CAW5B"}
@@ -66,25 +66,43 @@ export function createPath(config) {
66
66
  reason: 'x402 payment payload does not match route requirements',
67
67
  });
68
68
  const expectedResource = { url: input.url };
69
- if (!isDeepStrictEqual(paymentPayload.resource, expectedResource))
69
+ const clientNonce = paymentPayload.extensions?.[mppxExtensionKey]?.info.nonce;
70
+ const isRouteBound = clientNonce !== undefined;
71
+ const routeRequiresBinding = challenge.digest !== undefined ||
72
+ challenge.opaque !== undefined ||
73
+ challenge.meta !== undefined;
74
+ if (routeRequiresBinding && !isRouteBound)
70
75
  throw new VerificationFailedError({
71
- reason: 'x402 payment payload resource does not match route resource',
76
+ reason: 'x402 payment payload does not bind required route metadata',
72
77
  });
73
- const expectedExtensions = routeExtensions(challenge, input);
74
- if (!containsExtensions(paymentPayload.extensions, expectedExtensions))
78
+ if (isRouteBound) {
79
+ if (!isDeepStrictEqual(paymentPayload.resource, expectedResource))
80
+ throw new VerificationFailedError({
81
+ reason: 'x402 payment payload resource does not match route resource',
82
+ });
83
+ const expectedExtensions = routeExtensions(challenge, input);
84
+ if (!containsExtensions(paymentPayload.extensions, expectedExtensions))
85
+ throw new VerificationFailedError({
86
+ reason: 'x402 payment payload extensions do not match route binding',
87
+ });
88
+ }
89
+ else if (paymentPayload.resource !== undefined &&
90
+ paymentPayload.resource.url !== expectedResource.url)
75
91
  throw new VerificationFailedError({
76
- reason: 'x402 payment payload extensions do not match route binding',
92
+ reason: 'x402 payment payload resource does not match route resource',
77
93
  });
78
94
  const payload = payloadToAuthorization(paymentPayload);
79
- const expectedNonce = x402_RouteBinding.nonce({
80
- accepted: paymentRequirements,
81
- extensions: paymentPayload.extensions,
82
- resource: expectedResource,
83
- });
84
- if (payload.nonce !== expectedNonce)
85
- throw new VerificationFailedError({
86
- reason: 'x402 authorization nonce does not match route binding',
95
+ if (isRouteBound) {
96
+ const expectedNonce = x402_RouteBinding.nonce({
97
+ accepted: paymentRequirements,
98
+ extensions: paymentPayload.extensions,
99
+ resource: expectedResource,
87
100
  });
101
+ if (payload.nonce !== expectedNonce)
102
+ throw new VerificationFailedError({
103
+ reason: 'x402 authorization nonce does not match route binding',
104
+ });
105
+ }
88
106
  return markCredential(Credential_.from({
89
107
  challenge,
90
108
  payload,
@@ -97,8 +115,6 @@ export function createPath(config) {
97
115
  respondChallenge(options, response) {
98
116
  if (!response)
99
117
  throw new Error('x402 path requires a base challenge response.');
100
- if (options.input.body !== null && options.challenge.digest === undefined)
101
- return response;
102
118
  const headers = new Headers(response.headers);
103
119
  const request = options.challenge.request;
104
120
  headers.set(x402_Types.paymentRequiredHeader, x402_Header.encodePaymentRequired({
@@ -264,12 +280,8 @@ function stripClientNonce(info) {
264
280
  return rest;
265
281
  }
266
282
  async function assertBodyDigest(challenge, input) {
267
- if (input.body === null)
283
+ if (input.body === null || challenge.digest === undefined)
268
284
  return;
269
- if (challenge.digest === undefined)
270
- throw new VerificationFailedError({
271
- reason: 'x402 payment requires a body digest for body-bearing requests',
272
- });
273
285
  let body;
274
286
  try {
275
287
  body = await input.clone().text();
@@ -1 +1 @@
1
- {"version":3,"file":"EvmCharge.js","sourceRoot":"","sources":["../../../src/x402/server/EvmCharge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAEjC,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAA;AAE/C,OAAO,KAAK,WAAW,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAC3C,OAAO,KAAK,cAAc,MAAM,yBAAyB,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,gCAAgC,CAAA;AAEvD,OAAO,KAAK,WAAW,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAA;AAChE,OAAO,KAAK,UAAU,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,gBAAgB,MAAM,kBAAkB,CAAA;AAEpD,MAAM,qBAAqB,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAA;AACtE,MAAM,cAAc,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAA;AACxD,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,sBAAsB,GAAG;IAC7B,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,IAAI,EAAE,QAAQ;CACf,CAAA;AA8BD,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,UAG9B;IACC,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW;YACjC,CAAC,CAAC;gBACE,WAAW,EAAE,gBAAgB,CAAC,OAAO,CACnC,UAAU,CAAC,OAAO,CAAC,WAAW,EAC9B,gDAAgD,EAChD,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,iBAAiB,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,IAAI,GAAG;KAChE,CAAA;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,MAAuB;IAChD,OAAO;QACL,aAAa,CAAC,OAAO;YACnB,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAA;YAC/E,IAAI,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAA;YAClC,MAAM,cAAc,GAAG,WAAW,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;YAE3E,OAAO,qBAAqB,CAC1B,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC;gBAC3C,OAAO,EAAE,cAAc;aACxB,CAAC,CACH,CAAA;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE;YACnD,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAC9D,IAAI,CAAC,cAAc;gBAAE,OAAO,UAAU,CAAA;YACtC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAAE,OAAO,UAAU,CAAA;YACvD,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAExC,MAAM,OAAO,GAAG,SAAS,CAAC,OAA8B,CAAA;YACxD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAClE,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,mBAAmB,CAAC;gBAClE,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,wDAAwD;iBACjE,CAAC,CAAA;YAEJ,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAA;YAC3C,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAC/D,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,6DAA6D;iBACtE,CAAC,CAAA;YAEJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC5D,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBACpE,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAA;YAEJ,MAAM,OAAO,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAA;YACtD,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC;gBAC5C,QAAQ,EAAE,mBAAmB;gBAC7B,UAAU,EAAE,cAAc,CAAC,UAAW;gBACtC,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CAAA;YACF,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa;gBACjC,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,uDAAuD;iBAChE,CAAC,CAAA;YAEJ,OAAO,cAAc,CACnB,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;oBACrB,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;oBACjC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO;iBACvC,CAAC;aACH,CAAC,CACH,CAAA;QACH,CAAC;QAED,gBAAgB,CAAC,OAAO,EAAE,QAAQ;YAChC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAC/E,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAA;YAC1F,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAA8B,CAAA;YAChE,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,qBAAqB,EAChC,WAAW,CAAC,qBAAqB,CAAC;gBAChC,OAAO,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjD,KAAK,EACH,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG,UAAU,CAAC,sBAAsB,qBAAqB;gBACrF,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,CAAC;aACf,CAAC,CACH,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc,CAAC,OAAO,EAAE,QAAQ;YAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAAE,OAAO,QAAQ,CAAA;YAElF,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAClF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,OAA8B,CAAA;YAC3E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,qBAAqB,EAChC,WAAW,CAAC,qBAAqB,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;gBACvD,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;aACvC,CAAC,CACH,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,UAA2B;IAC/D,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAA;IACrD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAEnF,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACpC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,OAAO,EAAE;YACzD,GAAG,UAAU;YACb,iBAAiB;SAClB,CAAC,CAAA;QACF,MAAM,cAAc,GAA8B;YAChD,QAAQ,EAAE,mBAAmB;YAC7B,OAAO,EAAE;gBACP,aAAa,EAAE;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB;gBACD,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;YACD,WAAW,EAAE,CAAC;SACf,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;QAC9E,IAAI,CAAC,QAAQ,CAAC,OAAO;YACnB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,MAAM,EACJ,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,aAAa,IAAI,+BAA+B;aACvF,CAAC,CAAA;QAEJ,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO,CAAC,OAAO;YAClB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,WAAW,IAAI,mCAAmC;aAC3F,CAAC,CAAA;QAEJ,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,WAAW;SAC/B,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAYD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,UAAiC;IAC5D,OAAQ,UAA0C,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;AAC7E,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,UAAiC;IACnE,OAAQ,UAAiD,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAA;AAC3F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,MAAoE;IAEpE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,QAAQ;QACvB,KAAK,EAAE;YACL,mBAAmB,EAAE,KAAK,CAAC,OAAO;YAClC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI;YAC/B,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO;SACtC;QACD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;QACvD,KAAK,EAAE,OAAO,CAAC,SAAS;QACxB,MAAM,EAAE,OAAO;KAChB,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CACpC,cAAyC;IAEzC,IAAI,CAAC,CAAC,eAAe,IAAI,cAAc,CAAC,OAAO,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC;QAC5C,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa;QACvC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;QAC3C,IAAI,EAAE,eAAe;KACtB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,cAAyC;IACjE,gFAAgF;IAChF,gFAAgF;IAChF,+DAA+D;IAC/D,OAAO,SAAS,CAAC,IAAI,CAAC;QACpB,EAAE,EAAE,kBAAkB,CAAC,cAAc,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,YAAY;QAC1B,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,cAAc,CAAC,QAAQ;KACjC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAyC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACzF,OAAO,GAAG,UAAU,CAAC,0BAA0B,GAAG,IAAI,EAAE,CAAA;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,SAA8B,EAAE,KAAc;IACrE,MAAM,OAAO,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,CAAA;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;IACrE,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC7F,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAA;IACjD,OAAO;QACL,CAAC,gBAAgB,CAAC,EAAE;YAClB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,sBAAsB;SAC/B;KACF,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAyC,EACzC,QAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,EAAE;QACjE,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACnC,OAAO,CACL,eAAe,KAAK,SAAS;YAC7B,iBAAiB,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACnE,iBAAiB,CAAC,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAClF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACjE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAA8B,EAAE,KAAc;IAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAM;IAC/B,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAChC,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAA;IACJ,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,iDAAiD;SAC1D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,MAA+B,EAAE,IAAI,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,mCAAmC;SAC5C,CAAC,CAAA;AACN,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAAsB;IAEtB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,qBAAqB,EAAE;QACvD,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,UAAsB;IAEtB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE;QAChD,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC"}
1
+ {"version":3,"file":"EvmCharge.js","sourceRoot":"","sources":["../../../src/x402/server/EvmCharge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAEjC,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAA;AAE/C,OAAO,KAAK,WAAW,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAC3C,OAAO,KAAK,cAAc,MAAM,yBAAyB,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,gCAAgC,CAAA;AAEvD,OAAO,KAAK,WAAW,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAA;AAChE,OAAO,KAAK,UAAU,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,gBAAgB,MAAM,kBAAkB,CAAA;AAEpD,MAAM,qBAAqB,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAA;AACtE,MAAM,cAAc,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAA;AACxD,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,sBAAsB,GAAG;IAC7B,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,IAAI,EAAE,QAAQ;CACf,CAAA;AA8BD,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,UAG9B;IACC,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW;YACjC,CAAC,CAAC;gBACE,WAAW,EAAE,gBAAgB,CAAC,OAAO,CACnC,UAAU,CAAC,OAAO,CAAC,WAAW,EAC9B,gDAAgD,EAChD,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CACpC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,iBAAiB,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,IAAI,GAAG;KAChE,CAAA;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,MAAuB;IAChD,OAAO;QACL,aAAa,CAAC,OAAO;YACnB,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAA;YAC/E,IAAI,CAAC,gBAAgB;gBAAE,OAAO,IAAI,CAAA;YAClC,MAAM,cAAc,GAAG,WAAW,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;YAE3E,OAAO,qBAAqB,CAC1B,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,gBAAgB,CAAC,cAAc,CAAC;gBAC3C,OAAO,EAAE,cAAc;aACxB,CAAC,CACH,CAAA;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE;YACnD,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAC9D,IAAI,CAAC,cAAc;gBAAE,OAAO,UAAU,CAAA;YACtC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC;gBAAE,OAAO,UAAU,CAAA;YACvD,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAExC,MAAM,OAAO,GAAG,SAAS,CAAC,OAA8B,CAAA;YACxD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAClE,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,mBAAmB,CAAC;gBAClE,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,wDAAwD;iBACjE,CAAC,CAAA;YAEJ,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAA;YAC3C,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,KAAK,CAAA;YAC7E,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,CAAA;YAC9C,MAAM,oBAAoB,GACxB,SAAS,CAAC,MAAM,KAAK,SAAS;gBAC9B,SAAS,CAAC,MAAM,KAAK,SAAS;gBAC9B,SAAS,CAAC,IAAI,KAAK,SAAS,CAAA;YAC9B,IAAI,oBAAoB,IAAI,CAAC,YAAY;gBACvC,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAA;YAEJ,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC;oBAC/D,MAAM,IAAI,uBAAuB,CAAC;wBAChC,MAAM,EAAE,6DAA6D;qBACtE,CAAC,CAAA;gBAEJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBAC5D,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,UAAU,EAAE,kBAAkB,CAAC;oBACpE,MAAM,IAAI,uBAAuB,CAAC;wBAChC,MAAM,EAAE,4DAA4D;qBACrE,CAAC,CAAA;YACN,CAAC;iBAAM,IACL,cAAc,CAAC,QAAQ,KAAK,SAAS;gBACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;gBAEpD,MAAM,IAAI,uBAAuB,CAAC;oBAChC,MAAM,EAAE,6DAA6D;iBACtE,CAAC,CAAA;YAEJ,MAAM,OAAO,GAAG,sBAAsB,CAAC,cAAc,CAAC,CAAA;YACtD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC;oBAC5C,QAAQ,EAAE,mBAAmB;oBAC7B,UAAU,EAAE,cAAc,CAAC,UAAW;oBACtC,QAAQ,EAAE,gBAAgB;iBAC3B,CAAC,CAAA;gBACF,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa;oBACjC,MAAM,IAAI,uBAAuB,CAAC;wBAChC,MAAM,EAAE,uDAAuD;qBAChE,CAAC,CAAA;YACN,CAAC;YAED,OAAO,cAAc,CACnB,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;oBACrB,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;oBACjC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO;iBACvC,CAAC;aACH,CAAC,CACH,CAAA;QACH,CAAC;QAED,gBAAgB,CAAC,OAAO,EAAE,QAAQ;YAChC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAC/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAA8B,CAAA;YAChE,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,qBAAqB,EAChC,WAAW,CAAC,qBAAqB,CAAC;gBAChC,OAAO,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjD,KAAK,EACH,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG,UAAU,CAAC,sBAAsB,qBAAqB;gBACrF,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpC,WAAW,EAAE,CAAC;aACf,CAAC,CACH,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,cAAc,CAAC,OAAO,EAAE,QAAQ;YAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC;gBAAE,OAAO,QAAQ,CAAA;YAElF,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAClF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,OAA8B,CAAA;YAC3E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC7C,OAAO,CAAC,GAAG,CACT,UAAU,CAAC,qBAAqB,EAChC,WAAW,CAAC,qBAAqB,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;gBACvD,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;aACvC,CAAC,CACH,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACjC,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,UAA2B;IAC/D,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAA;IACrD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAEnF,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACpC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,OAAO,EAAE;YACzD,GAAG,UAAU;YACb,iBAAiB;SAClB,CAAC,CAAA;QACF,MAAM,cAAc,GAA8B;YAChD,QAAQ,EAAE,mBAAmB;YAC7B,OAAO,EAAE;gBACP,aAAa,EAAE;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB;gBACD,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B;YACD,WAAW,EAAE,CAAC;SACf,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;QAC9E,IAAI,CAAC,QAAQ,CAAC,OAAO;YACnB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,MAAM,EACJ,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,aAAa,IAAI,+BAA+B;aACvF,CAAC,CAAA;QAEJ,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;QAC7E,IAAI,CAAC,OAAO,CAAC,OAAO;YAClB,MAAM,IAAI,uBAAuB,CAAC;gBAChC,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,WAAW,IAAI,mCAAmC;aAC3F,CAAC,CAAA;QAEJ,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,WAAW;SAC/B,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAYD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,UAAiC;IAC5D,OAAQ,UAA0C,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;AAC7E,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,UAAiC;IACnE,OAAQ,UAAiD,CAAC,qBAAqB,CAAC,KAAK,IAAI,CAAA;AAC3F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,MAAoE;IAEpE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,QAAQ;QACvB,KAAK,EAAE;YACL,mBAAmB,EAAE,KAAK,CAAC,OAAO;YAClC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI;YAC/B,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO;SACtC;QACD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;QACvD,KAAK,EAAE,OAAO,CAAC,SAAS;QACxB,MAAM,EAAE,OAAO;KAChB,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CACpC,cAAyC;IAEzC,IAAI,CAAC,CAAC,eAAe,IAAI,cAAc,CAAC,OAAO,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,+DAA+D;SACxE,CAAC,CAAA;IAEJ,OAAO,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC;QAC5C,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa;QACvC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS;QAC3C,IAAI,EAAE,eAAe;KACtB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,cAAyC;IACjE,gFAAgF;IAChF,gFAAgF;IAChF,+DAA+D;IAC/D,OAAO,SAAS,CAAC,IAAI,CAAC;QACpB,EAAE,EAAE,kBAAkB,CAAC,cAAc,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,YAAY;QAC1B,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,cAAc,CAAC,QAAQ;KACjC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAyC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACzF,OAAO,GAAG,UAAU,CAAC,0BAA0B,GAAG,IAAI,EAAE,CAAA;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,SAA8B,EAAE,KAAc;IACrE,MAAM,OAAO,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,CAAA;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;IACrE,MAAM,MAAM,GACV,SAAS,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC7F,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAA;IACjD,OAAO;QACL,CAAC,gBAAgB,CAAC,EAAE;YAClB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,sBAAsB;SAC/B;KACF,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAyC,EACzC,QAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,EAAE;QACjE,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACnC,OAAO,CACL,eAAe,KAAK,SAAS;YAC7B,iBAAiB,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACnE,iBAAiB,CAAC,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAClF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACjE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAA8B,EAAE,KAAc;IAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAM;IACjE,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,iDAAiD;SAC1D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,MAA+B,EAAE,IAAI,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAAC;YAChC,MAAM,EAAE,mCAAmC;SAC5C,CAAC,CAAA;AACN,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAAsB;IAEtB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,qBAAqB,EAAE;QACvD,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,UAAsB;IAEtB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE;QAChD,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAA;AACnB,CAAC"}
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "mppx",
3
3
  "type": "module",
4
- "version": "0.8.14",
4
+ "version": "0.8.17",
5
5
  "main": "./dist/index.js",
6
6
  "license": "MIT",
7
7
  "homepage": "https://github.com/wevm/mppx#readme",
@@ -39,6 +39,11 @@
39
39
  "types": "./dist/client/node.d.ts",
40
40
  "default": "./dist/client/node.js"
41
41
  },
42
+ "./attestation": {
43
+ "src": "./src/attestation/index.ts",
44
+ "types": "./dist/attestation/index.d.ts",
45
+ "default": "./dist/attestation/index.js"
46
+ },
42
47
  "./discovery": {
43
48
  "src": "./src/discovery/index.ts",
44
49
  "types": "./dist/discovery/index.d.ts",
@@ -114,6 +119,16 @@
114
119
  "types": "./dist/tempo/index.d.ts",
115
120
  "default": "./dist/tempo/index.js"
116
121
  },
122
+ "./attestation/tap": {
123
+ "src": "./src/tap/index.ts",
124
+ "types": "./dist/tap/index.d.ts",
125
+ "default": "./dist/tap/index.js"
126
+ },
127
+ "./attestation/web-bot-auth": {
128
+ "src": "./src/web-bot-auth/index.ts",
129
+ "types": "./dist/web-bot-auth/index.d.ts",
130
+ "default": "./dist/web-bot-auth/index.js"
131
+ },
117
132
  "./html": {
118
133
  "src": "./src/Html.ts",
119
134
  "types": "./dist/Html.d.ts",
@@ -167,10 +182,11 @@
167
182
  }
168
183
  },
169
184
  "dependencies": {
170
- "@stripe/stripe-js": "9.9.0",
185
+ "@stripe/stripe-js": "9.12.1",
171
186
  "eventsource-parser": "3.1.0",
172
- "incur": "^0.4.10",
173
- "ox": "0.14.30",
187
+ "incur": "^0.4.26",
188
+ "ox": "0.14.33",
189
+ "structured-headers": "2.0.3",
174
190
  "zod": "^4.4.3"
175
191
  },
176
192
  "repository": {
@@ -3,14 +3,16 @@ import { Challenge } from 'mppx'
3
3
  import { describe, expect, test } from 'vp/test'
4
4
 
5
5
  describe('parseAuthParams robustness', () => {
6
- test('deserialize never throws unhandled exception on arbitrary input', () => {
6
+ test('deserializers never throw unhandled exceptions on arbitrary input', () => {
7
7
  fc.assert(
8
8
  fc.property(fc.string(), (input) => {
9
- try {
10
- Challenge.deserialize(input)
11
- } catch (e) {
12
- if (!(e instanceof Error)) throw e
13
- if (e instanceof TypeError || e instanceof RangeError) throw e
9
+ for (const deserialize of [Challenge.deserialize, Challenge.deserializeList]) {
10
+ try {
11
+ deserialize(input)
12
+ } catch (e) {
13
+ if (!(e instanceof Error)) throw e
14
+ if (e instanceof TypeError || e instanceof RangeError) throw e
15
+ }
14
16
  }
15
17
  }),
16
18
  { numRuns: 10_000 },
@@ -53,20 +55,43 @@ describe('adversarial header strings', () => {
53
55
  })
54
56
  })
55
57
 
56
- describe('serialize/deserialize roundtrip', () => {
57
- const challengeArb = fc.record({
58
- id: fc.string({ minLength: 1 }).filter((s) => /^[A-Za-z0-9_-]+$/.test(s)),
59
- realm: fc.string({ minLength: 1 }).filter((s) => /^[A-Za-z0-9._-]+$/.test(s)),
60
- method: fc.string({ minLength: 1 }).filter((s) => /^[a-z][a-z0-9:_-]*$/.test(s)),
61
- intent: fc.string({ minLength: 1 }).filter((s) => /^[a-z][a-z0-9_-]*$/.test(s)),
62
- request: fc.dictionary(
63
- fc
64
- .string({ minLength: 1 })
65
- .filter((s) => /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(s) && s !== '__proto__'),
66
- fc.oneof(fc.string(), fc.integer().map(String), fc.boolean().map(String)),
67
- ),
68
- })
58
+ const authParamTextArb = fc.string().filter((value) => !/[\r\n]/.test(value))
59
+ const schemeLikeTextArb = fc
60
+ .tuple(
61
+ authParamTextArb,
62
+ fc.constantFrom('Payment ', 'payment ', 'PAYMENT\t', 'pAyMeNt '),
63
+ authParamTextArb,
64
+ )
65
+ .map(([prefix, token, suffix]) => `${prefix}${token}${suffix}`)
66
+ const quotedFieldTextArb = fc.oneof(
67
+ authParamTextArb.filter((value) => value.length > 0),
68
+ schemeLikeTextArb,
69
+ )
70
+ const optionalQuotedFieldTextArb = fc.option(quotedFieldTextArb, { nil: undefined })
71
+ const challengeArb = fc.record({
72
+ description: optionalQuotedFieldTextArb,
73
+ id: quotedFieldTextArb,
74
+ realm: quotedFieldTextArb,
75
+ method: fc.string({ minLength: 1 }).filter((s) => /^[a-z][a-z0-9:_-]*$/.test(s)),
76
+ intent: quotedFieldTextArb,
77
+ opaque: optionalQuotedFieldTextArb,
78
+ request: fc.dictionary(
79
+ fc
80
+ .string({ minLength: 1 })
81
+ .filter((s) => /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(s) && s !== '__proto__'),
82
+ fc.oneof(fc.string(), fc.integer().map(String), fc.boolean().map(String)),
83
+ ),
84
+ })
85
+
86
+ function escapeAuthParam(value: string): string {
87
+ return value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')
88
+ }
69
89
 
90
+ const decoySchemeArb = fc
91
+ .tuple(fc.constantFrom('Basic', 'Bearer', 'Digest'), schemeLikeTextArb)
92
+ .map(([scheme, value]) => `${scheme} realm="${escapeAuthParam(value)}"`)
93
+
94
+ describe('serialize/deserialize roundtrip', () => {
70
95
  test('serialize then deserialize produces equivalent challenge', () => {
71
96
  fc.assert(
72
97
  fc.property(challengeArb, (input) => {
@@ -78,44 +103,52 @@ describe('serialize/deserialize roundtrip', () => {
78
103
  expect(deserialized.method).toBe(input.method)
79
104
  expect(deserialized.intent).toBe(input.intent)
80
105
  expect(deserialized.request).toEqual(input.request)
106
+ expect(deserialized.description).toBe(input.description)
107
+ expect(deserialized.opaque).toBe(input.opaque)
81
108
  }),
82
- { numRuns: 1_000 },
109
+ { numRuns: 5_000 },
83
110
  )
84
111
  })
85
112
  })
86
113
 
87
114
  describe('deserializeList roundtrip', () => {
88
- const challengeArb = fc.record({
89
- id: fc.string({ minLength: 1 }).filter((s) => /^[A-Za-z0-9_-]+$/.test(s)),
90
- realm: fc.string({ minLength: 1 }).filter((s) => /^[A-Za-z0-9._-]+$/.test(s)),
91
- method: fc.string({ minLength: 1 }).filter((s) => /^[a-z][a-z0-9:_-]*$/.test(s)),
92
- intent: fc.string({ minLength: 1 }).filter((s) => /^[a-z][a-z0-9_-]*$/.test(s)),
93
- request: fc.dictionary(
94
- fc
95
- .string({ minLength: 1 })
96
- .filter((s) => /^[a-zA-Z_][a-zA-Z0-9_]*$/.test(s) && s !== '__proto__'),
97
- fc.oneof(fc.string(), fc.integer().map(String), fc.boolean().map(String)),
98
- ),
115
+ const entryArb = fc.record({
116
+ challenge: challengeArb,
117
+ decoy: fc.option(decoySchemeArb, { nil: undefined }),
118
+ scheme: fc.constantFrom('Payment ', 'payment ', 'PAYMENT ', 'pAyMeNt\t'),
99
119
  })
100
120
 
101
- test('serialize multiple then deserializeList returns all challenges', () => {
121
+ test('finds only real challenges among quoted decoys and mixed auth schemes', () => {
102
122
  fc.assert(
103
- fc.property(fc.array(challengeArb, { minLength: 1, maxLength: 3 }), (challenges) => {
104
- const header = challenges
105
- .map((c) => Challenge.serialize(c as Challenge.Challenge))
106
- .join(', ')
107
- const result = Challenge.deserializeList(header)
123
+ fc.property(
124
+ fc.array(entryArb, { minLength: 1, maxLength: 5 }),
125
+ fc.option(decoySchemeArb, { nil: undefined }),
126
+ (entries, trailingDecoy) => {
127
+ const parts: string[] = []
128
+ for (const { challenge, decoy, scheme } of entries) {
129
+ if (decoy) parts.push(decoy)
130
+ parts.push(
131
+ Challenge.serialize(challenge as Challenge.Challenge).replace(/^Payment /, scheme),
132
+ )
133
+ }
134
+ if (trailingDecoy) parts.push(trailingDecoy)
108
135
 
109
- expect(result).toHaveLength(challenges.length)
110
- for (let i = 0; i < challenges.length; i++) {
111
- expect(result[i]!.id).toBe(challenges[i]!.id)
112
- expect(result[i]!.realm).toBe(challenges[i]!.realm)
113
- expect(result[i]!.method).toBe(challenges[i]!.method)
114
- expect(result[i]!.intent).toBe(challenges[i]!.intent)
115
- expect(result[i]!.request).toEqual(challenges[i]!.request)
116
- }
117
- }),
118
- { numRuns: 1_000 },
136
+ const result = Challenge.deserializeList(parts.join(', '))
137
+
138
+ expect(result).toHaveLength(entries.length)
139
+ for (let i = 0; i < entries.length; i++) {
140
+ const expected = entries[i]!.challenge
141
+ expect(result[i]!.id).toBe(expected.id)
142
+ expect(result[i]!.realm).toBe(expected.realm)
143
+ expect(result[i]!.method).toBe(expected.method)
144
+ expect(result[i]!.intent).toBe(expected.intent)
145
+ expect(result[i]!.request).toEqual(expected.request)
146
+ expect(result[i]!.description).toBe(expected.description)
147
+ expect(result[i]!.opaque).toBe(expected.opaque)
148
+ }
149
+ },
150
+ ),
151
+ { numRuns: 10_000 },
119
152
  )
120
153
  })
121
154
  })
@@ -692,6 +692,71 @@ describe('deserialize', () => {
692
692
  })
693
693
  })
694
694
 
695
+ describe('deserializeList', () => {
696
+ const baseChallenge = {
697
+ id: 'first',
698
+ realm: 'api.example.com',
699
+ method: 'stripe',
700
+ intent: 'charge',
701
+ request: { amount: '50', currency: 'usd' },
702
+ } satisfies Challenge.Challenge
703
+ const secondHeader = Challenge.serialize({
704
+ id: 'second',
705
+ realm: 'api.example.com',
706
+ method: 'tempo',
707
+ intent: 'charge',
708
+ request: { amount: '1000000', currency: 'USD' },
709
+ })
710
+
711
+ test('behavior: parses the reported Stripe and Tempo header with payment in description', () => {
712
+ const stripeHeader =
713
+ 'Payment id="k3fGx9QpLmZ2vT8sWyR4nB6cD1eH5jA7uN0iO2aS9dU", realm="example.com", method="stripe", intent="charge", request="eyJhbW91bnQiOiI1MCIsImN1cnJlbmN5IjoidXNkIiwiZXh0ZXJuYWxJZCI6Im9yZGVyLTEyMyIsIm1ldGhvZERldGFpbHMiOnsibmV0d29ya0lkIjoicHJvZmlsZV8wMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwicGF5bWVudE1ldGhvZFR5cGVzIjpbImNhcmQiLCJsaW5rIl19fQ", description="Agentcash card payment test", expires="2026-09-01T00:00:00.000Z", opaque="eyJfbXBweF9zY29wZSI6ImNvZmZlZXNob3A6b3JkZXI6b3JkZXItMTIzOnBheSJ9"'
714
+
715
+ const challenges = Challenge.deserializeList(`${stripeHeader}, ${secondHeader}`)
716
+
717
+ expect(challenges).toHaveLength(2)
718
+ expect(challenges[0]).toMatchObject({
719
+ id: 'k3fGx9QpLmZ2vT8sWyR4nB6cD1eH5jA7uN0iO2aS9dU',
720
+ method: 'stripe',
721
+ description: 'Agentcash card payment test',
722
+ })
723
+ expect(challenges[1]).toMatchObject({ id: 'second', method: 'tempo' })
724
+ })
725
+
726
+ test.each([
727
+ ['description', 'Agentcash card payment test'],
728
+ ['description', 'Payment at the start'],
729
+ ['description', 'Use "Payment now", then retry \\'],
730
+ ['description', 'comma, Payment fake challenge'],
731
+ ['id', 'id with Payment text'],
732
+ ['intent', 'payment plan'],
733
+ ['realm', 'Payment realm'],
734
+ ['opaque', 'opaque Payment value'],
735
+ ] as const)('behavior: ignores scheme-like text in the %s parameter', (field, value) => {
736
+ const firstHeader = Challenge.serialize({ ...baseChallenge, [field]: value })
737
+ const challenges = Challenge.deserializeList(`${firstHeader}, ${secondHeader}`)
738
+
739
+ expect(challenges).toHaveLength(2)
740
+ expect(challenges[0]?.[field]).toBe(value)
741
+ expect(challenges[1]).toMatchObject({ id: 'second', method: 'tempo' })
742
+ })
743
+
744
+ test('behavior: finds case-insensitive Payment schemes among other auth schemes', () => {
745
+ const firstHeader = Challenge.serialize(baseChallenge)
746
+ const header =
747
+ `Bearer error_description="use Payment challenge", ${firstHeader}, ` +
748
+ `Digest realm="fallback Payment realm", ${secondHeader.replace(/^Payment /, 'pAyMeNt\t')}`
749
+
750
+ expect(Challenge.deserializeList(header).map(({ id }) => id)).toEqual(['first', 'second'])
751
+ })
752
+
753
+ test('error: quoted Payment text is not treated as a challenge', () => {
754
+ const header = 'Bearer error_description="use Payment challenge"'
755
+
756
+ expect(() => Challenge.deserializeList(header)).toThrow('No Payment schemes found.')
757
+ })
758
+ })
759
+
695
760
  describe('fromHeaders', () => {
696
761
  test('behavior: extracts challenge from Headers object', () => {
697
762
  const original = Challenge.from({
package/src/Challenge.ts CHANGED
@@ -366,35 +366,12 @@ export function deserialize<const methods extends readonly Method.Method[] | und
366
366
  /** @internal Extracts the `Payment` scheme from a WWW-Authenticate value that may contain multiple schemes. */
367
367
  function extractPaymentAuthParams(header: string): string | null {
368
368
  const token = Constants.Schemes.payment
369
- let inQuotes = false
370
- let escaped = false
371
-
372
- for (let i = 0; i < header.length; i++) {
373
- const char = header[i]
374
-
375
- if (inQuotes) {
376
- if (escaped) escaped = false
377
- else if (char === '\\') escaped = true
378
- else if (char === '"') inQuotes = false
379
- continue
380
- }
381
-
382
- if (char === '"') {
383
- inQuotes = true
384
- continue
385
- }
386
-
387
- if (!startsWithSchemeToken(header, i, token)) continue
388
-
389
- const prefix = header.slice(0, i)
390
- if (prefix.trim() && !prefix.trimEnd().endsWith(',')) continue
369
+ const [start] = findSchemeStarts(header, token)
370
+ if (start === undefined) return null
391
371
 
392
- let paramsStart = i + token.length
393
- while (paramsStart < header.length && /\s/.test(header[paramsStart] ?? '')) paramsStart++
394
- return header.slice(paramsStart)
395
- }
396
-
397
- return null
372
+ let paramsStart = start + token.length
373
+ while (paramsStart < header.length && /\s/.test(header[paramsStart] ?? '')) paramsStart++
374
+ return header.slice(paramsStart)
398
375
  }
399
376
 
400
377
  /** @internal Parses auth-params with support for escaped quoted-string values. */
@@ -481,11 +458,43 @@ function readQuotedAuthParamValue(
481
458
 
482
459
  /** @internal */
483
460
  function startsWithSchemeToken(value: string, index: number, token: string): boolean {
484
- if (!value.slice(index).toLowerCase().startsWith(token.toLowerCase())) return false
461
+ if (value.slice(index, index + token.length).toLowerCase() !== token.toLowerCase()) return false
485
462
  const next = value[index + token.length]
486
463
  return Boolean(next && /\s/.test(next))
487
464
  }
488
465
 
466
+ /** @internal Finds auth scheme boundaries while ignoring quoted-string contents. */
467
+ function findSchemeStarts(value: string, token: string): number[] {
468
+ const starts: number[] = []
469
+ let inQuotes = false
470
+ let escaped = false
471
+
472
+ for (let i = 0; i < value.length; i++) {
473
+ const char = value[i]
474
+
475
+ if (inQuotes) {
476
+ if (escaped) escaped = false
477
+ else if (char === '\\') escaped = true
478
+ else if (char === '"') inQuotes = false
479
+ continue
480
+ }
481
+
482
+ if (char === '"') {
483
+ inQuotes = true
484
+ continue
485
+ }
486
+
487
+ if (!startsWithSchemeToken(value, i, token)) continue
488
+
489
+ let boundary = i - 1
490
+ while (boundary >= 0 && /\s/.test(value[boundary] ?? '')) boundary--
491
+ if (boundary >= 0 && value[boundary] !== ',') continue
492
+ starts.push(i)
493
+ }
494
+
495
+ return starts
496
+ }
497
+
489
498
  /**
490
499
  * Extracts the challenge from a Headers object.
491
500
  *
@@ -594,12 +603,7 @@ export function fromHeadersList<
594
603
  export function deserializeList<
595
604
  const methods extends readonly Method.Method[] | undefined = undefined,
596
605
  >(value: string, options?: from.Options<methods>): from.ReturnType<from.Parameters, methods>[] {
597
- // Find the start index of each `Payment ` scheme prefix.
598
- const starts: number[] = []
599
- const schemePattern = new RegExp(`${Constants.Schemes.payment}\\s+`, 'gi')
600
- for (const match of value.matchAll(schemePattern)) {
601
- starts.push(match.index!)
602
- }
606
+ const starts = findSchemeStarts(value, Constants.Schemes.payment)
603
607
  if (starts.length === 0) throw new Error('No Payment schemes found.')
604
608
 
605
609
  // Slice each scheme from its `Payment ` prefix up to the next scheme boundary,