mppx 0.8.9 → 0.8.12

package/src/tempo/session/precompile/Chain.ts

@@ -434,15 +434,10 @@ function parsePrecompileCredentialTransaction(parameters: {
   return { transaction, call: { ...call, data: call.data, to: call.to } }
 }
 
-async function simulateTempoTransaction(client: Client, transaction: Transaction.TransactionTempo) {
+async function simulateTempoTransaction(client: Client, request: unknown) {
   // viem's public `call` type does not yet model Tempo's multi-call and
   // fee-payer fields together. Keep that compatibility cast in one place.
-  await call(client, {
-    ...transaction,
-    account: transaction.from,
-    calls: transaction.calls ?? [],
-    feePayerSignature: undefined,
-  } as never)
+  await call(client, request as never)
 }
 
 async function signTempoTransaction(client: Client, transaction: unknown): Promise<Hex> {
@@ -705,25 +700,38 @@ export async function sendCredentialTransaction(parameters: SendCredentialTransa
   assertSenderSigned(transaction)
 
   if (feePayer === true) {
+    // The transport owns hosted completion, so mppx can only preflight call
+    // execution as the sender. It intentionally omits fee fields here; the
+    // transport is responsible for validating its final sponsored envelope.
+    await simulateTempoTransaction(
+      client,
+      FeePayer.simulationTransaction(transaction, { feePayer: true }),
+    )
     const txHash = await sendTransaction(client, serializedTransaction)
     return waitForSuccessfulReceipt(client, txHash)
   }
 
-  await simulateTempoTransaction(client, transaction)
-
-  const sponsored = FeePayer.prepareSponsoredTransaction({
-    account: feePayer,
-    allowedFeeTokens,
-    challengeExpires,
-    chainId,
-    details,
-    policy: feePayerPolicy,
-    transaction: {
-      ...transaction,
-      ...(allowedFeeTokens?.[0] ? { feeToken: transaction.feeToken ?? allowedFeeTokens[0] } : {}),
+  const sponsorshipTransaction = {
+    ...transaction,
+    ...(allowedFeeTokens?.[0] ? { feeToken: transaction.feeToken ?? allowedFeeTokens[0] } : {}),
+  }
+  const completed = await FeePayer.preflightSponsorship({
+    transaction: sponsorshipTransaction,
+    simulate: (request) => simulateTempoTransaction(client, request),
+    async complete() {
+      const sponsored = FeePayer.prepareSponsoredTransaction({
+        account: feePayer,
+        allowedFeeTokens,
+        challengeExpires,
+        chainId,
+        details,
+        policy: feePayerPolicy,
+        transaction: sponsorshipTransaction,
+      })
+      return { feePayer: feePayer.address, transaction: sponsored }
     },
   })
-  const serialized = await signTempoTransaction(client, sponsored)
+  const serialized = await signTempoTransaction(client, completed.transaction)
   const receipt = await sendRawTransactionSync(client, {
     serializedTransaction: serialized as Transaction.TransactionSerializedTempo,
   })

package/src/tempo/session/server/Session.test.ts

@@ -2257,6 +2257,7 @@ describe('precompile server session unit guardrails', () => {
         action: SessionCredentialPayload['action']
         contentLength: string | null
         hasBody: boolean
+        hasReceipt: boolean
         status: number
       }> = []
       const app = new Hono()
@@ -2271,6 +2272,7 @@ describe('precompile server session unit guardrails', () => {
             action: payload.action,
             contentLength: request.headers.get('content-length'),
             hasBody: request.body !== null,
+            hasReceipt: response.headers.has(Constants.Headers.paymentReceipt),
             status: response.status,
           })
         return response
@@ -2302,9 +2304,27 @@ describe('precompile server session unit guardrails', () => {
         expect(closeReceipt?.spent).toBe('3')
         expect(managementPosts).toEqual(
           expect.arrayContaining([
-            { action: 'topUp', contentLength: '0', hasBody: true, status: 204 },
-            { action: 'voucher', contentLength: '0', hasBody: true, status: 204 },
-            { action: 'close', contentLength: '0', hasBody: true, status: 204 },
+            {
+              action: 'topUp',
+              contentLength: '0',
+              hasBody: true,
+              hasReceipt: true,
+              status: 204,
+            },
+            {
+              action: 'voucher',
+              contentLength: '0',
+              hasBody: true,
+              hasReceipt: true,
+              status: 204,
+            },
+            {
+              action: 'close',
+              contentLength: '0',
+              hasBody: true,
+              hasReceipt: true,
+              status: 204,
+            },
           ]),
         )
         expect(managementPosts.every(({ status }) => status === 204)).toBe(true)

package/src/tempo/session/server/index.ts

@@ -1,4 +1,6 @@
 export { charge, session, settle, settleBatch } from './Session.js'
+/** SSE helpers and types for Tempo session streams. */
+export * as Sse from './Sse.js'
 /** Server-side automatic settlement schedule. */
 export type {
   ResolveSessionChannelId,

package/src/validation/core.ts

@@ -25,6 +25,7 @@ export type ValidateOptions = {
   endpoint?: string | undefined
   body?: string | undefined
   query?: string[] | undefined
+  headers?: string[] | undefined
   verbose?: boolean | undefined
   yes?: boolean | undefined
   skipPayment?: boolean | undefined
@@ -92,12 +93,14 @@ export async function* validateStream(options: ValidateOptions): AsyncGenerator<
     yield { phase: 'endpoint', endpoint }
 
     let body: string | undefined
+    let bodyIsAutogenerated = false
     if (options.endpoint) {
       body = options.body
     } else {
       body = resolveBodyForEndpoint(options.body, endpoint.path)
       if (!body && discovery.doc) {
         body = extractRequestBodyFromDiscovery(discovery.doc, endpoint)
+        bodyIsAutogenerated = !!body
       }
     }
 
@@ -107,7 +110,9 @@ export async function* validateStream(options: ValidateOptions): AsyncGenerator<
       challenges: parsedChallenges,
     } = await validateChallenge(baseUrl, endpoint, verbose, {
       body,
+      bodyIsAutogenerated,
       query: options.query,
+      extraHeaders: options.headers,
       discoveryDoc: discovery.doc ?? undefined,
     })
     const effectiveBody = resolvedBody ?? body
@@ -156,6 +161,7 @@ export async function* validateStream(options: ValidateOptions): AsyncGenerator<
         const paymentResults = await validatePaymentFlow(baseUrl, endpoint, verbose, {
           body: effectiveBody,
           query: options.query,
+          extraHeaders: options.headers,
           yes: options.yes,
           silent: !onResults,
           interactive: options.interactive,

package/src/x402/Header.ts

@@ -68,7 +68,7 @@ const parsePaymentRequiredEnvelope = (value: unknown): PaymentRequiredEnvelope =
 
   const resource = ResourceInfoSchema.parse(record.resource)
   const extensions =
-    record.extensions === undefined ? undefined : ExtensionsSchema.parse(record.extensions)
+    record.extensions !== undefined ? ExtensionsSchema.safeParse(record.extensions).data : undefined
 
   return {
     accepts: record.accepts,