mppx 0.8.3 → 0.8.4

package/dist/cli/validate/index.js

@@ -0,0 +1,224 @@
+import { Cli, z } from 'incur';
+import { validate as validateDiscovery } from '../../discovery/Validate.js';
+import { pc } from '../utils.js';
+import { validateChallenge, validateErrorHandling } from './challenge.js';
+import { extractEndpointsFromDiscovery, extractRequestBodyFromDiscovery, fetchDiscoveryDoc, } from './discovery.js';
+import { check, fail, parseEndpointArg, printCheck, printResults, printSection, resolveBodyForEndpoint, warn, } from './helpers.js';
+import { validatePaymentFlow } from './payment.js';
+const validate = Cli.create('validate', {
+    description: 'Validate an MPP server implementation end-to-end',
+    args: z.object({
+        url: z.string().describe('Base URL of the MPP server to validate'),
+    }),
+    options: z.object({
+        endpoint: z.string().optional().describe('Endpoint to test (METHOD:path). Skips discovery.'),
+        body: z
+            .string()
+            .optional()
+            .describe('Request body. With --endpoint, used directly. In discovery mode, JSON with / keys is a per-path mapping.'),
+        query: z.array(z.string()).optional().describe('Query parameter (key=value, repeatable)'),
+        verbose: z.number().default(0).meta({ count: true }).describe('Verbosity level'),
+        yes: z.boolean().default(false).describe('Auto-approve mainnet payments'),
+    }),
+    alias: {
+        endpoint: 'e',
+        verbose: 'v',
+        yes: 'y',
+    },
+    async run(c) {
+        const baseUrl = c.args.url.replace(/\/$/, '').replace(/\/openapi\.json$/i, '');
+        const verbose = c.options.verbose > 0;
+        const counts = { passed: 0, failed: 0, warnings: 0, skipped: 0 };
+        console.log(`\n${pc.bold('mppx validate')} ${pc.dim(baseUrl)}\n`);
+        const { endpoints, discoveryDoc, shouldExit } = await discoverEndpoints(baseUrl, c.options, counts);
+        if (shouldExit)
+            process.exit(1);
+        const flags = await validateEndpoints(baseUrl, endpoints, discoveryDoc, counts, {
+            verbose,
+            endpoint: c.options.endpoint,
+            body: c.options.body,
+            query: c.options.query,
+            yes: c.options.yes,
+        });
+        printSummary(counts, flags, endpoints.length);
+    },
+});
+export default validate;
+// Each stage of validation is defined in its own function below.
+async function discoverEndpoints(baseUrl, options, counts) {
+    let endpoints = [];
+    let discoveryDoc = null;
+    printSection('Discovery (/openapi.json)');
+    const discoveryResult = await fetchDiscoveryDoc(baseUrl);
+    if ('error' in discoveryResult) {
+        printCheck(fail('Document found', discoveryResult.error, 'MPP servers must serve an OpenAPI document at /openapi.json with x-payment-info extensions.'));
+        counts.failed++;
+        if (!options.endpoint) {
+            console.log('');
+            console.log(pc.yellow('  No discovery document found.'));
+            console.log(pc.dim('  MPP servers must serve an OpenAPI document at /openapi.json with x-payment-info extensions.'));
+            console.log(pc.dim('  To test a specific endpoint: mppx validate <url> --endpoint POST:/your/path'));
+            console.log('');
+            return { endpoints, discoveryDoc, shouldExit: true };
+        }
+    }
+    else {
+        printCheck(check('Document found and parseable'));
+        counts.passed++;
+        const issues = validateDiscovery(discoveryResult.doc);
+        const errors = issues.filter((i) => i.severity === 'error');
+        const warnings = issues.filter((i) => i.severity === 'warning');
+        if (errors.length > 0) {
+            printCheck(fail('Valid OpenAPI structure', `${errors.length} error(s)`));
+            counts.failed++;
+            for (const issue of errors) {
+                console.log(pc.dim(`    ${issue.path}: ${issue.message}`));
+            }
+        }
+        else {
+            printCheck(check('Valid OpenAPI structure'));
+            counts.passed++;
+        }
+        for (const w of warnings) {
+            printCheck(warn(w.message, w.path));
+            counts.warnings++;
+        }
+        discoveryDoc = discoveryResult.doc;
+    }
+    // Resolve endpoints: --endpoint overrides discovery
+    if (options.endpoint) {
+        const parsed = parseEndpointArg(options.endpoint);
+        if (!parsed) {
+            console.log(pc.red(`Invalid endpoint format: "${options.endpoint}". Use METHOD:path (e.g. GET:/api/data)`));
+            return { endpoints, discoveryDoc, shouldExit: true };
+        }
+        endpoints.push(parsed);
+    }
+    else if (discoveryDoc) {
+        endpoints = extractEndpointsFromDiscovery(discoveryDoc);
+        const NO_AMOUNT = BigInt('999999999999999999');
+        endpoints.sort((a, b) => {
+            const aAmt = a.amount ? BigInt(a.amount) : NO_AMOUNT;
+            const bAmt = b.amount ? BigInt(b.amount) : NO_AMOUNT;
+            return aAmt < bAmt ? -1 : aAmt > bAmt ? 1 : 0;
+        });
+        if (endpoints.length === 0) {
+            printCheck(warn('Paid endpoints found', 'No endpoints with x-payment-info'));
+            counts.warnings++;
+            console.log(pc.dim('  Use --endpoint to specify endpoints manually.'));
+            return { endpoints, discoveryDoc, shouldExit: true };
+        }
+        printCheck(check('Paid endpoints found', `${endpoints.length} endpoint(s)`));
+        counts.passed++;
+    }
+    return { endpoints, discoveryDoc };
+}
+async function validateEndpoints(baseUrl, endpoints, discoveryDoc, counts, options) {
+    let sawTestnet = false;
+    let sawMainnet = false;
+    let paymentSucceeded = false;
+    let sawMppEndpoint = false;
+    let sawNonMppPaymentEndpoint = false;
+    for (const endpoint of endpoints) {
+        printSection(`${endpoint.method} ${endpoint.path}`);
+        // With --endpoint, --body is used directly. In discovery mode, resolve per-path or auto-generate.
+        let body;
+        if (options.endpoint) {
+            body = options.body;
+        }
+        else {
+            body = resolveBodyForEndpoint(options.body, endpoint.path);
+            if (!body && discoveryDoc) {
+                body = extractRequestBodyFromDiscovery(discoveryDoc, endpoint);
+                if (body && options.verbose) {
+                    console.log(pc.dim(`  Auto-generated body: ${body}`));
+                }
+            }
+        }
+        // Challenge
+        console.log(pc.dim('  Challenge'));
+        const { results: challengeResults, resolvedBody } = await validateChallenge(baseUrl, endpoint, options.verbose, {
+            body,
+            query: options.query,
+            discoveryDoc: discoveryDoc ?? undefined,
+        });
+        const effectiveBody = resolvedBody ?? body;
+        printResults(challengeResults, counts);
+        const isMppEndpoint = challengeResults.some((r) => r.severity === 'pass' && r.label === 'Challenge parseable');
+        if (!isMppEndpoint) {
+            if (challengeResults.some((r) => r.label === 'Not an MPP endpoint'))
+                sawNonMppPaymentEndpoint = true;
+            continue;
+        }
+        sawMppEndpoint = true;
+        const isTestnetEndpoint = challengeResults.some((r) => r.severity === 'pass' && r.label === 'Valid currency address' && r.detail === 'testnet');
+        if (isTestnetEndpoint)
+            sawTestnet = true;
+        else
+            sawMainnet = true;
+        // Error Handling
+        console.log(pc.dim('  Error Handling'));
+        const errorResults = await validateErrorHandling(baseUrl, endpoint, {
+            body: effectiveBody,
+            query: options.query,
+        });
+        printResults(errorResults, counts);
+        // Payment
+        console.log(pc.dim('  Payment'));
+        const paymentResults = await validatePaymentFlow(baseUrl, endpoint, options.verbose, {
+            body: effectiveBody,
+            query: options.query,
+            yes: options.yes,
+        });
+        printResults(paymentResults, counts);
+        if (paymentResults.some((r) => r.severity === 'pass' && r.label === 'Payment: successful')) {
+            paymentSucceeded = true;
+        }
+    }
+    return { sawMppEndpoint, sawNonMppPaymentEndpoint, sawTestnet, sawMainnet, paymentSucceeded };
+}
+function printSummary(counts, flags, endpointsLength) {
+    // No MPP endpoints found
+    if (!flags.sawMppEndpoint && endpointsLength > 0) {
+        console.log('');
+        if (flags.sawNonMppPaymentEndpoint) {
+            console.log(pc.yellow(`  No MPP endpoints found. Tested ${endpointsLength} endpoint(s) but none use WWW-Authenticate: Payment.`));
+            console.log(pc.dim('  This server may use x402 or another payment protocol.'));
+        }
+        else if (counts.skipped > 0 && counts.failed === 0) {
+            console.log(pc.yellow(`  Could not reach payment gate on any endpoint (all returned 401/403/200).`));
+            console.log(pc.dim('  The server may require authentication before payment. Try providing auth or use --endpoint with a public path.'));
+        }
+        else {
+            console.log(pc.yellow(`  No MPP endpoints found. Tested ${endpointsLength} endpoint(s) but none use WWW-Authenticate: Payment.`));
+            console.log(pc.dim('  This server may use x402 or another payment protocol.'));
+        }
+        console.log('');
+        process.exit(1);
+    }
+    // Summary
+    console.log('');
+    const parts = [];
+    if (counts.passed > 0)
+        parts.push(pc.green(`${counts.passed} passed`));
+    if (counts.failed > 0)
+        parts.push(pc.red(`${counts.failed} failed`));
+    if (counts.warnings > 0)
+        parts.push(pc.yellow(`${counts.warnings} warning(s)`));
+    if (counts.skipped > 0)
+        parts.push(pc.yellow(`${counts.skipped} skipped`));
+    console.log(`${pc.bold('Summary:')} ${parts.join(', ')}`);
+    // Cross-promotion
+    if (flags.paymentSucceeded && flags.sawTestnet && !flags.sawMainnet) {
+        console.log('');
+        console.log(pc.dim('  Tip: validate your mainnet server too to confirm real payments work end-to-end.'));
+    }
+    else if (flags.sawMainnet && !flags.sawTestnet) {
+        console.log('');
+        console.log(pc.dim('  Tip: validate a testnet server too for free. This CLI automatically provisions and funds a testnet wallet for testing.'));
+    }
+    console.log('');
+    if (counts.failed > 0)
+        process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/validate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/validate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,OAAO,CAAA;AAE9B,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC3E,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACzE,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,iBAAiB,GAClB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,KAAK,EACL,IAAI,EACJ,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,IAAI,GACL,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE;IACtC,WAAW,EAAE,kDAAkD;IAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;KACnE,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC5F,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,0GAA0G,CAC3G;QACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChF,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;KAC1E,CAAC;IACF,KAAK,EAAE;QACL,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,GAAG;QACZ,GAAG,EAAE,GAAG;KACT;IACD,KAAK,CAAC,GAAG,CAAC,CAAC;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;QAC9E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;QAExE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAEjE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CACrE,OAAO,EACP,CAAC,CAAC,OAAO,EACT,MAAM,CACP,CAAA;QACD,IAAI,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE;YAC9E,OAAO;YACP,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;YAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;YACpB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;YACtB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG;SACnB,CAAC,CAAA;QACF,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;CACF,CAAC,CAAA;AAEF,eAAe,QAAQ,CAAA;AAEvB,iEAAiE;AAEjE,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,OAMC,EACD,MAAc;IAMd,IAAI,SAAS,GAAmB,EAAE,CAAA;IAClC,IAAI,YAAY,GAAmC,IAAI,CAAA;IAEvD,YAAY,CAAC,2BAA2B,CAAC,CAAA;IACzC,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAExD,IAAI,OAAO,IAAI,eAAe,EAAE,CAAC;QAC/B,UAAU,CACR,IAAI,CACF,gBAAgB,EAChB,eAAe,CAAC,KAAK,EACrB,6FAA6F,CAC9F,CACF,CAAA;QACD,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAA;YACxD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,+FAA+F,CAChG,CACF,CAAA;YACD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,+EAA+E,CAAC,CACxF,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QACtD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,EAAE,CAAA;QAEf,MAAM,MAAM,GAAG,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAA;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAA;QAE/D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAA;YACxE,MAAM,CAAC,MAAM,EAAE,CAAA;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAA;YAC5C,MAAM,CAAC,MAAM,EAAE,CAAA;QACjB,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACnC,MAAM,CAAC,QAAQ,EAAE,CAAA;QACnB,CAAC;QAED,YAAY,GAAG,eAAe,CAAC,GAA8B,CAAA;IAC/D,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,6BAA6B,OAAO,CAAC,QAAQ,yCAAyC,CACvF,CACF,CAAA;YACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QACtD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACxB,SAAS,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAA;QAEvD,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAC9C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpD,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC,CAAA;YAC5E,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAA;YACtE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QACtD,CAAC;QAED,UAAU,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,SAAS,CAAC,MAAM,cAAc,CAAC,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,EAAE,CAAA;IACjB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAA;AACpC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,SAAyB,EACzB,YAA4C,EAC5C,MAAc,EACd,OAMC;IAQD,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,wBAAwB,GAAG,KAAK,CAAA;IAEpC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,YAAY,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;QAEnD,kGAAkG;QAClG,IAAI,IAAwB,CAAA;QAC5B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;gBAC1B,IAAI,GAAG,+BAA+B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;gBAC9D,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,CAAA;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;QAED,YAAY;QACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAA;QAClC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,CACzE,OAAO,EACP,QAAQ,EACR,OAAO,CAAC,OAAO,EACf;YACE,IAAI;YACJ,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,YAAY,IAAI,SAAS;SACxC,CACF,CAAA;QACD,MAAM,aAAa,GAAG,YAAY,IAAI,IAAI,CAAA;QAC1C,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QAEtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,qBAAqB,CAClE,CAAA;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,qBAAqB,CAAC;gBACjE,wBAAwB,GAAG,IAAI,CAAA;YACjC,SAAQ;QACV,CAAC;QACD,cAAc,GAAG,IAAI,CAAA;QAErB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,wBAAwB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAC1F,CAAA;QACD,IAAI,iBAAiB;YAAE,UAAU,GAAG,IAAI,CAAA;;YACnC,UAAU,GAAG,IAAI,CAAA;QAEtB,iBAAiB;QACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACvC,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE;YAClE,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAA;QACF,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAElC,UAAU;QACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;QAChC,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE;YACnF,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAA;QACF,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QACpC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,qBAAqB,CAAC,EAAE,CAAC;YAC3F,gBAAgB,GAAG,IAAI,CAAA;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAA;AAC/F,CAAC;AAED,SAAS,YAAY,CACnB,MAAc,EACd,KAMC,EACD,eAAuB;IAEvB,yBAAyB;IACzB,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,MAAM,CACP,oCAAoC,eAAe,sDAAsD,CAC1G,CACF,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAA;QAChF,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,MAAM,CAAC,4EAA4E,CAAC,CACxF,CAAA;YACD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,kHAAkH,CACnH,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,MAAM,CACP,oCAAoC,eAAe,sDAAsD,CAC1G,CACF,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAA;QAChF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAA;IACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAA;IACpE,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,aAAa,CAAC,CAAC,CAAA;IAC/E,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,UAAU,CAAC,CAAC,CAAA;IAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEzD,kBAAkB;IAClB,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAC5F,CAAA;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,0HAA0H,CAC3H,CACF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACxC,CAAC"}

package/dist/cli/validate/payment.d.ts

@@ -0,0 +1,7 @@
+import type { CheckResult, EndpointSpec } from './helpers.js';
+export declare function validatePaymentFlow(baseUrl: string, endpoint: EndpointSpec, verbose: boolean, options?: {
+    body?: string | undefined;
+    query?: string[] | undefined;
+    yes?: boolean | undefined;
+}): Promise<CheckResult[]>;
+//# sourceMappingURL=payment.d.ts.map

package/dist/cli/validate/payment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../src/cli/validate/payment.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAyC7D,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,GAC/F,OAAO,CAAC,WAAW,EAAE,CAAC,CAwPxB"}

package/dist/cli/validate/payment.js

@@ -0,0 +1,381 @@
+import { createClient, http } from 'viem';
+import { privateKeyToAccount, generatePrivateKey } from 'viem/accounts';
+import { waitForTransactionReceipt } from 'viem/actions';
+import { Actions } from 'viem/tempo';
+import { tempoModerato, tempo as tempoMainnetChain } from 'viem/tempo/chains';
+import * as Challenge from '../../Challenge.js';
+import * as Mppx from '../../client/Mppx.js';
+import * as Constants from '../../Constants.js';
+import * as Receipt from '../../Receipt.js';
+import { tempo as tempoMethods } from '../../tempo/client/index.js';
+import { chainId as tempoChainIds } from '../../tempo/internal/defaults.js';
+import { resolveAccount, resolveAccountName } from '../account.js';
+import { loadConfig, selectChallenge } from '../internal.js';
+import { fetchTokenInfo, confirm, pc } from '../utils.js';
+import { buildUrl, check, fail, fetchWithTimeout, formatBytes, skip, warn } from './helpers.js';
+async function provisionAndPayTestnet(challenge, verbose) {
+    try {
+        console.log(pc.dim('    Provisioning testnet wallet and funding via faucet...'));
+        const key = generatePrivateKey();
+        const account = privateKeyToAccount(key);
+        const client = createClient({ chain: tempoModerato, transport: http() });
+        const hashes = await Actions.faucet.fund(client, { account });
+        await Promise.all(hashes.map((hash) => waitForTransactionReceipt(client, { hash })));
+        console.log(pc.dim(`    Using wallet: ${account.address}`));
+        const methods = [...tempoMethods({ account })];
+        return { methods };
+    }
+    catch (error) {
+        if (verbose)
+            console.log(pc.dim(`    Provisioning failed: ${error.message}`));
+        return undefined;
+    }
+}
+async function resolveWalletAddress() {
+    const accountName = resolveAccountName();
+    const { isTempoAccount } = await import('../utils.js');
+    const { resolveTempoAccount } = await import('../plugins/tempo.js');
+    if (isTempoAccount(accountName)) {
+        const entry = resolveTempoAccount(accountName);
+        if (entry)
+            return entry.wallet_address;
+    }
+    try {
+        const account = await resolveAccount();
+        return account.address;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function validatePaymentFlow(baseUrl, endpoint, verbose, options) {
+    const results = [];
+    const url = buildUrl(baseUrl, endpoint, options?.query);
+    const fetchHeaders = {};
+    let fetchBody;
+    if (options?.body) {
+        fetchBody = options.body;
+        fetchHeaders['content-type'] = 'application/json';
+    }
+    // Get a fresh challenge
+    let challengeResponse;
+    try {
+        challengeResponse = await fetchWithTimeout(url, {
+            method: endpoint.method,
+            headers: fetchHeaders,
+            body: fetchBody ?? null,
+        });
+    }
+    catch (error) {
+        results.push(fail('Payment: fetch challenge', error.message));
+        return results;
+    }
+    if (challengeResponse.status !== 402) {
+        results.push(skip('Payment: skipped', `Endpoint returned ${challengeResponse.status}`));
+        return results;
+    }
+    // Parse challenge
+    let challenge;
+    try {
+        challenge = Challenge.fromResponse(challengeResponse);
+    }
+    catch (error) {
+        results.push(fail('Payment: parse challenge', error.message));
+        return results;
+    }
+    // Detect network
+    const request = challenge.request;
+    const methodDetails = request.methodDetails;
+    const isTestnet = typeof methodDetails?.chainId === 'number' && methodDetails.chainId !== tempoChainIds.mainnet;
+    // Testnet Tempo: always use ephemeral wallet (zero-setup, free money)
+    if (isTestnet && challenge.method === Constants.Methods.tempo) {
+        const provisioned = await provisionAndPayTestnet(challenge, verbose);
+        if (provisioned) {
+            const fakeResp = new Response(null, {
+                status: 402,
+                headers: { [Constants.Headers.wwwAuthenticate]: Challenge.serialize(challenge) },
+            });
+            try {
+                const mppx = Mppx.create({ methods: provisioned.methods, polyfill: false });
+                const cred = await mppx.createCredential(fakeResp);
+                results.push(check('Payment: credential created', 'ephemeral testnet wallet'));
+                return await sendAndValidateResponse(results, url, endpoint, cred, fetchHeaders, fetchBody, verbose, true);
+            }
+            catch (error) {
+                results.push(fail('Payment: create credential', error.message));
+                return results;
+            }
+        }
+        else {
+            results.push(fail('Payment: auto-provision wallet', 'Failed to create and fund testnet wallet'));
+            return results;
+        }
+    }
+    // Mainnet: use configured wallet
+    const loaded = await loadConfig().catch(() => undefined);
+    const selected = selectChallenge([challenge], loaded?.config);
+    if (!selected) {
+        results.push(skip('Payment: no configured method', `Need ${challenge.method}/${challenge.intent}`, 'Run "mppx account create" to create a local wallet for payment testing. The wallet is stored on your machine and only used by mppx.'));
+        return results;
+    }
+    const { plugin, method: directMethod } = selected;
+    if (!plugin && !directMethod) {
+        results.push(skip('Payment: no plugin available', `${challenge.method}/${challenge.intent}`));
+        return results;
+    }
+    const requiredAmount = request.amount ? BigInt(request.amount) : undefined;
+    // Display only -- defaults to 6 (standard for USDC/PathUSD tokens)
+    const decimals = request.decimals ?? 6;
+    const currency = request.currency;
+    // Pre-flight balance check
+    let walletAddress;
+    if (challenge.method === Constants.Methods.tempo && requiredAmount && currency) {
+        try {
+            walletAddress = await resolveWalletAddress();
+            if (walletAddress) {
+                const client = createClient({ chain: tempoMainnetChain, transport: http() });
+                const tokenInfo = await fetchTokenInfo(client, currency, walletAddress);
+                const requiredDisplay = `$${(Number(requiredAmount) / 10 ** decimals).toFixed(2)}`;
+                const balanceDisplay = `$${(Number(tokenInfo.balance) / 10 ** tokenInfo.decimals).toFixed(2)}`;
+                if (tokenInfo.balance < requiredAmount) {
+                    console.log(pc.dim(`    Wallet: ${walletAddress}`));
+                    console.log(pc.dim(`    Balance: ${balanceDisplay} ${tokenInfo.symbol}`));
+                    const hint = `Wallet ${walletAddress} has ${balanceDisplay} but endpoint requires ${requiredDisplay}. Fund this wallet to run payment tests, or use a testnet server.`;
+                    results.push(skip('Payment: insufficient balance', `Have ${balanceDisplay}, need ${requiredDisplay}`, hint));
+                    return results;
+                }
+            }
+        }
+        catch (e) {
+            if (verbose)
+                console.log(pc.dim(`    Balance check skipped: ${e.message}`));
+        }
+    }
+    // Prompt before paying on mainnet (unless --yes or non-interactive)
+    const amountDisplay = requiredAmount
+        ? `$${(Number(requiredAmount) / 10 ** decimals).toFixed(2)}`
+        : 'unknown amount';
+    if (walletAddress)
+        console.log(pc.dim(`    Using wallet: ${walletAddress}`));
+    const isInteractive = process.stdin.isTTY ?? false;
+    if (!options?.yes && !isInteractive) {
+        results.push(skip('Payment: skipped', 'Non-interactive mode. Use --yes to approve mainnet payments.'));
+        return results;
+    }
+    if (!options?.yes) {
+        console.log('');
+        const ok = await confirm(`  ${pc.yellow('Mainnet payment:')} Will transfer ${amountDisplay} to ${String(request.recipient).slice(0, 10)}... Continue?`, false);
+        if (!ok) {
+            results.push(skip('Payment: skipped by user', 'mainnet payment declined'));
+            return results;
+        }
+    }
+    else {
+        console.log(pc.dim(`    Auto-approved: ${amountDisplay} to ${String(request.recipient).slice(0, 10)}...`));
+    }
+    // Setup plugin or use direct method
+    let methods;
+    let createCredentialFn;
+    if (plugin) {
+        try {
+            const pluginResult = await plugin.setup({
+                challenge,
+                options: { network: 'mainnet' },
+                methodOpts: {},
+            });
+            methods = pluginResult.methods;
+            createCredentialFn = pluginResult.createCredential;
+        }
+        catch (error) {
+            const msg = error.message;
+            if (msg.includes('No account found') || msg.includes('not found')) {
+                results.push(skip('Payment: no wallet configured', msg));
+            }
+            else {
+                results.push(fail('Payment: wallet setup', msg));
+            }
+            return results;
+        }
+    }
+    else {
+        methods = [directMethod];
+    }
+    // Create credential
+    let credential;
+    const fakeResponse = new Response(null, {
+        status: 402,
+        headers: { [Constants.Headers.wwwAuthenticate]: Challenge.serialize(challenge) },
+    });
+    try {
+        if (createCredentialFn) {
+            credential = await createCredentialFn(fakeResponse);
+        }
+        else {
+            const mppx = Mppx.create({ methods, polyfill: false });
+            credential = await mppx.createCredential(fakeResponse);
+        }
+    }
+    catch (error) {
+        const msg = error.message;
+        const isInsufficientBalance = msg.toLowerCase().includes('insufficientbalance') ||
+            msg.toLowerCase().includes('insufficient');
+        if (isInsufficientBalance) {
+            const match = msg.match(/available:\s*(\d+),\s*required:\s*(\d+)/);
+            const available = match ? BigInt(match[1]) : undefined;
+            const required = match ? BigInt(match[2]) : requiredAmount;
+            const fromMatch = msg.match(/from:\s*(0x[0-9a-fA-F]{40})/);
+            const fromAddr = fromMatch?.[1];
+            const requiredDisplay = required
+                ? `$${(Number(required) / 10 ** decimals).toFixed(2)}`
+                : 'unknown';
+            const availableDisplay = available !== undefined ? `$${(Number(available) / 10 ** decimals).toFixed(2)}` : undefined;
+            const detail = availableDisplay
+                ? `Have ${availableDisplay}, need ${requiredDisplay}`
+                : `Endpoint requires ${requiredDisplay}`;
+            const hint = fromAddr
+                ? `Wallet ${fromAddr} needs at least ${requiredDisplay}. This is a local wallet created by "mppx account create". Fund it to run payment tests, or point at a testnet server for free validation.`
+                : `Fund your mppx wallet with at least ${requiredDisplay} to run payment tests, or use a testnet server.`;
+            results.push(skip('Payment: insufficient balance', detail, hint));
+            return results;
+        }
+        results.push(fail('Payment: create credential', msg));
+        return results;
+    }
+    results.push(check('Payment: credential created'));
+    // Prepare and send
+    plugin?.prepareCredentialRequest?.({ challenge, credential, headers: fetchHeaders });
+    return await sendAndValidateResponse(results, url, endpoint, credential, fetchHeaders, fetchBody, verbose, isTestnet);
+}
+async function sendAndValidateResponse(results, url, endpoint, credential, baseHeaders, fetchBody, verbose, isTestnet) {
+    let paymentResponse;
+    try {
+        paymentResponse = await fetchWithTimeout(url, {
+            method: endpoint.method,
+            headers: { ...baseHeaders, [Constants.Headers.authorization]: credential },
+            body: fetchBody ?? null,
+        }, 30_000);
+    }
+    catch (error) {
+        results.push(fail('Payment: send credential', error.message));
+        return results;
+    }
+    if (paymentResponse.status === 402) {
+        const body = await paymentResponse.text().catch(() => '');
+        let detail = 'Payment rejected';
+        try {
+            const problem = JSON.parse(body);
+            detail = problem.detail ?? problem.title ?? detail;
+        }
+        catch { }
+        results.push(fail('Payment: accepted', detail, 'The server rejected a valid credential. Check that your payment verification logic accepts the credential format and that the payment was processed on-chain.'));
+        return results;
+    }
+    if (paymentResponse.status >= 400 && paymentResponse.status < 500) {
+        results.push(warn('Payment: post-payment response', `Got ${paymentResponse.status}`, 'Payment succeeded but the endpoint returned a client error. The endpoint likely requires request body parameters. Use --body to provide them.'));
+    }
+    else if (paymentResponse.status >= 500) {
+        results.push(fail('Payment: server response', `Got ${paymentResponse.status}`, 'Payment was accepted but the server errored while generating the response. Check server logs for the underlying error.'));
+        return results;
+    }
+    else {
+        results.push(check('Payment: successful', `HTTP ${paymentResponse.status}`));
+    }
+    // Validate receipt
+    const receiptHeader = paymentResponse.headers.get(Constants.Headers.paymentReceipt);
+    if (!receiptHeader) {
+        results.push(fail('Payment-Receipt header present', undefined, 'After accepting payment, include a Payment-Receipt header with a base64url-encoded JSON object containing: method, reference, status ("success"), and timestamp (ISO 8601).'));
+    }
+    else {
+        results.push(check('Payment-Receipt header present'));
+        try {
+            const receipt = Receipt.deserialize(receiptHeader);
+            results.push(check('Receipt parseable'));
+            if (receipt.status === 'success') {
+                results.push(check('Receipt status is "success"'));
+            }
+            else {
+                results.push(fail('Receipt status is "success"', `Got: ${receipt.status}`));
+            }
+            if (receipt.reference) {
+                const validTxHash = /^0x[0-9a-fA-F]{64}$/.test(receipt.reference);
+                const validStripeRef = receipt.reference.startsWith('pi_');
+                if (validTxHash || validStripeRef) {
+                    results.push(check('Receipt reference valid', receipt.reference.slice(0, 20) + '...'));
+                }
+                else {
+                    results.push(warn('Receipt reference format', receipt.reference.slice(0, 40)));
+                }
+            }
+            else {
+                results.push(warn('Receipt has reference', 'No reference field'));
+            }
+            if (receipt.timestamp) {
+                const ts = new Date(receipt.timestamp);
+                const age = Date.now() - ts.getTime();
+                if (age < 60_000) {
+                    results.push(check('Receipt timestamp recent', `${Math.round(age / 1000)}s ago`));
+                }
+                else {
+                    results.push(warn('Receipt timestamp recent', `${Math.round(age / 60000)}m ago`));
+                }
+            }
+            if (verbose) {
+                console.log(pc.dim(`    Receipt: ${JSON.stringify(receipt, null, 2)}`));
+            }
+        }
+        catch (error) {
+            results.push(fail('Receipt parseable', error.message));
+        }
+    }
+    // Validate response body
+    const contentType = paymentResponse.headers.get('content-type') ?? '';
+    const body = await paymentResponse.text().catch(() => '');
+    if (body.length > 0) {
+        results.push(check('Response body non-empty', `${contentType.split(';')[0]}, ${formatBytes(body.length)}`));
+    }
+    else {
+        const suspiciousHeaders = [...paymentResponse.headers.entries()].filter(([key]) => !key.startsWith('x-') &&
+            ![
+                'content-type',
+                'content-length',
+                'date',
+                'server',
+                'connection',
+                'keep-alive',
+                'cache-control',
+                'vary',
+                'access-control-allow-origin',
+                'payment-receipt',
+                'payment-session',
+                'payment-session-snapshot',
+            ].includes(key.toLowerCase()));
+        if (suspiciousHeaders.length > 0) {
+            results.push(warn('Response body empty -- data may be in headers only', suspiciousHeaders.map(([k]) => k).join(', ')));
+        }
+        else {
+            results.push(warn('Response body empty'));
+        }
+    }
+    if (!contentType) {
+        results.push(warn('Content-Type header set'));
+    }
+    else {
+        results.push(check('Content-Type header set', contentType.split(';')[0]));
+    }
+    // Explorer link for on-chain payments
+    if (receiptHeader) {
+        try {
+            const receipt = Receipt.deserialize(receiptHeader);
+            if (receipt.reference && /^0x[0-9a-fA-F]{64}$/.test(receipt.reference)) {
+                const chain = isTestnet ? tempoModerato : tempoMainnetChain;
+                const explorerUrl = chain.blockExplorers?.default?.url;
+                if (explorerUrl) {
+                    results.push(check('On-chain transaction', `${explorerUrl}/receipt/${receipt.reference}`));
+                }
+            }
+        }
+        catch { }
+    }
+    return results;
+}
+//# sourceMappingURL=payment.js.map