safehands-pharos 1.4.0 → 2.6.0

package/dist/tools/x402PayAndFetch.js

@@ -1,153 +1,296 @@
-// ─── Tool: x402_pay_and_fetch ─────────────────────────────────────────────
-// Enables an agent to fetch protected resources from an x402 server.
-// Automatically executes the payment challenge only after HTTP 402 is returned.
-// ─────────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
-import { registerExactEvmScheme } from "@x402/evm/exact/client";
-import { CHAIN_ID, PHAROS_ENVIRONMENT, RPC_URL, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
-import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
-import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
-import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
-export const x402PayAndFetchSchema = z.object({
-    url: z.string().describe("Target URL of the protected resource requiring x402 payment"),
-    method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET").describe("HTTP method to use"),
-    body: z.string().optional().describe("Optional stringified JSON request body"),
-    rpcUrl: z.string().optional().describe("Custom RPC URL for payment verification (defaults to Atlantic Testnet RPC)"),
-    agentId: z.string().optional().describe("Managed testnet wallet agentId when WALLET_MODE=managed-testnet"),
-    maxPaymentUsdc: z.string().optional().default(MAX_X402_PAYMENT_USDC),
-});
-export const x402PayAndFetchTool = {
-    name: "x402_pay_and_fetch",
-    description: "Fetch resources from an HTTP x402 payment-gated server. " +
-        "If the server challenges with HTTP 402, this tool signs the required testnet payment payload and completes the fetch.",
-    inputSchema: x402PayAndFetchSchema,
-};
-async function readResponseBody(res) {
-    const contentType = res.headers.get("content-type") || "";
-    if (contentType.includes("application/json")) {
-        try {
-            return await res.json();
-        }
-        catch {
-            return null;
-        }
-    }
-    return await res.text();
-}
-function buildFetchOptions(input) {
-    const fetchOptions = {
-        method: input.method,
-        headers: {
-            "Content-Type": "application/json",
-        },
-    };
-    if (input.body)
-        fetchOptions.body = input.body;
-    return fetchOptions;
-}
-export async function handleX402PayAndFetch(raw) {
-    const input = x402PayAndFetchSchema.parse(raw);
-    try {
-        await assertSafeFetchUrl(input.url);
-    }
-    catch (err) {
-        return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "x402_pay_and_fetch");
-    }
-    const staticPolicy = evaluateActionPolicy({
-        actionType: "x402_pay_and_fetch",
-        url: input.url,
-        paymentAmountUsdc: input.maxPaymentUsdc,
-        paymentTokenAddress: X402_PAYMENT_TOKEN_ADDRESS,
-        chainId: CHAIN_ID,
-        environment: PHAROS_ENVIRONMENT,
-        isMainnet: false,
-    });
-    if (staticPolicy.decision === "BLOCK") {
-        return fail("POLICY_BLOCKED", staticPolicy.reasons.join(" ") || "x402 request blocked by SafeHands policy.", false, "x402_pay_and_fetch");
-    }
-    const fetchOptions = buildFetchOptions(input);
-    try {
-        const initial = await fetchWithTimeoutAndRetry(input.url, {
-            ...fetchOptions,
-            timeoutMs: 10_000,
-            retries: 1,
-            retryDelayMs: 250,
-        });
-        if (initial.status !== 402) {
-            const data = await readResponseBody(initial);
-            return ok({
-                status: initial.status,
-                statusText: initial.statusText,
-                data,
-                paymentExecuted: false,
-                paymentDetails: null,
-                chainId: CHAIN_ID,
-                environment: PHAROS_ENVIRONMENT,
-                isMainnet: false,
-                policy: staticPolicy,
-                source: "x402_fetch",
-            });
-        }
-        const writeGuard = requireWriteToolsEnabled("x402_pay_and_fetch");
-        if (writeGuard)
-            return writeGuard;
-        const signer = await getSigner(input.agentId, { purpose: "x402" });
-        if (isSignerFailure(signer)) {
-            return fail("X402_PAYMENT_REQUIRED", `The resource returned HTTP 402, but no safe x402 signer is available: ${signer.error.message}`, false, "x402_pay_and_fetch");
-        }
-        const paymentPolicy = evaluateActionPolicy({
-            actionType: "x402_pay_and_fetch",
-            url: input.url,
-            paymentAmountUsdc: input.maxPaymentUsdc,
-            paymentTokenAddress: X402_PAYMENT_TOKEN_ADDRESS,
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-            signerAvailable: true,
-            requiresSigner: true,
-        });
-        if (paymentPolicy.decision === "BLOCK") {
-            return fail("POLICY_BLOCKED", paymentPolicy.reasons.join(" ") || "x402 payment blocked by SafeHands policy.", false, "x402_pay_and_fetch");
-        }
-        const rpc = input.rpcUrl || process.env.PHAROS_RPC_URL || RPC_URL;
-        const client = new x402Client();
-        registerExactEvmScheme(client, {
-            signer: signer.account,
-            schemeOptions: {
-                [CHAIN_ID]: { rpcUrl: rpc },
-            },
-        });
-        const fetchWithPayment = wrapFetchWithPayment(fetch, client);
-        const paidResponse = await fetchWithPayment(input.url, fetchOptions);
-        const data = await readResponseBody(paidResponse);
-        const paymentResponseHeader = paidResponse.headers.get("PAYMENT-RESPONSE");
-        return ok({
-            status: paidResponse.status,
-            statusText: paidResponse.statusText,
-            data,
-            paymentExecuted: !!paymentResponseHeader,
-            paymentDetails: paymentResponseHeader
-                ? {
-                    headerRedacted: true,
-                    note: "PAYMENT-RESPONSE header was present but intentionally not exposed to avoid leaking signed payment data.",
-                }
-                : null,
-            signerMode: signer.mode,
-            walletAddress: signer.address,
-            paymentToken: X402_PAYMENT_TOKEN_ADDRESS,
-            maxPaymentUsdc: input.maxPaymentUsdc,
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-            policy: paymentPolicy,
-            testnetPayment: true,
-            source: "x402_fetch",
-        });
-    }
-    catch (err) {
-        return fail("X402_PAYMENT_FAILED", err instanceof Error ? err.message : String(err), true, "x402_pay_and_fetch");
-    }
-}
+// ─── Tool: x402_pay_and_fetch ─────────────────────────────────────────────
+// Enables an agent to fetch protected resources from an x402 server.
+// Automatically executes the payment challenge only after HTTP 402 is returned.
+// ─────────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
+import { registerExactEvmScheme } from "@x402/evm/exact/client";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, RPC_URL, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS, IS_MAINNET, activeX402AllowedTokenAddresses } from "../lib/constants.js";
+import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
+import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { checkManagedWalletAuthorization } from "../lib/safeHandsRegistry.js";
+import { REQUIRE_AUTHORIZED_AGENT_FOR_X402 } from "../lib/constants.js";
+import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { enforceWriteDecision } from "../lib/policy/writeExecutionGate.js";
+import { validatePositiveAmount } from "../lib/validation.js";
+import { reserveDailyLimit, releaseReservation, estimateUsd } from "../lib/spendAccumulator.js";
+export const x402PayAndFetchSchema = z.object({
+    url: z.string().describe("Target URL of the protected resource requiring x402 payment"),
+    method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET").describe("HTTP method to use"),
+    body: z.string().optional().describe("Optional stringified JSON request body"),
+    rpcUrl: z.string().optional().describe("Custom RPC URL for payment verification"),
+    agentId: z.string().optional().describe("Managed wallet agentId when WALLET_MODE=managed-mainnet"),
+    maxPaymentUsdc: z.string().optional().default(MAX_X402_PAYMENT_USDC),
+    confirm: z.boolean().optional().default(false).describe("Explicit acknowledgement to proceed when SafeHands returns REQUIRE_CONFIRMATION for the payment. Hard BLOCK / SSRF / over-limit / unsupported-token are never overridable."),
+}).strict();
+export const x402PayAndFetchTool = {
+    name: "x402_pay_and_fetch",
+    description: "Fetch resources from an HTTP x402 payment-gated server. " +
+        "If the server challenges with HTTP 402, this tool signs the required mainnet payment payload and completes the fetch.",
+    inputSchema: x402PayAndFetchSchema,
+};
+async function readResponseBody(res) {
+    const contentType = res.headers.get("content-type") || "";
+    if (contentType.includes("application/json")) {
+        try {
+            return await res.json();
+        }
+        catch {
+            return null;
+        }
+    }
+    return await res.text();
+}
+function buildFetchOptions(input) {
+    const fetchOptions = {
+        method: input.method,
+        headers: {
+            "Content-Type": "application/json",
+        },
+    };
+    if (input.body)
+        fetchOptions.body = input.body;
+    return fetchOptions;
+}
+function x402AllowedTokenSet() {
+    return new Set(activeX402AllowedTokenAddresses().map((a) => a.toLowerCase()));
+}
+function validateX402Challenge(challengeHeader, maxPaymentUsdc) {
+    if (!challengeHeader)
+        return null;
+    try {
+        const decoded = JSON.parse(Buffer.from(challengeHeader, "base64").toString("utf-8"));
+        if (decoded.maxAmountRequired) {
+            const challengeAmount = Number(decoded.maxAmountRequired) / 1e6;
+            if (challengeAmount > Number(maxPaymentUsdc)) {
+                return `x402 challenge amount (${challengeAmount} USDC) exceeds maxPaymentUsdc (${maxPaymentUsdc}).`;
+            }
+        }
+        if (decoded.network) {
+            const parts = String(decoded.network).split(":");
+            const challengeChainId = parts.length === 2 ? Number(parts[1]) : Number(decoded.network);
+            if (Number.isFinite(challengeChainId) && challengeChainId !== CHAIN_ID) {
+                return `x402 challenge targets chain ${challengeChainId}, expected ${PHAROS_ENVIRONMENT} (${CHAIN_ID}).`;
+            }
+        }
+        if (decoded.asset) {
+            const asset = String(decoded.asset).toLowerCase();
+            if (!x402AllowedTokenSet().has(asset)) {
+                const allowed = activeX402AllowedTokenAddresses().join(", ");
+                return `x402 challenge requests payment in unsupported token ${decoded.asset}. Supported for ${PHAROS_ENVIRONMENT}: ${allowed}.`;
+            }
+        }
+    }
+    catch {
+        // Challenge header not parseable — proceed with caution but don't block
+    }
+    return null;
+}
+export async function handleX402PayAndFetch(raw) {
+    let input;
+    try {
+        input = x402PayAndFetchSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `x402_pay_and_fetch input validation failed: ${msg}`, false, "x402_pay_and_fetch");
+    }
+    if (input.maxPaymentUsdc) {
+        const amtErr = validatePositiveAmount(input.maxPaymentUsdc, "maxPaymentUsdc");
+        if (amtErr)
+            return fail("VALIDATION_ERROR", amtErr, false, "x402_pay_and_fetch");
+    }
+    try {
+        await assertSafeFetchUrl(input.url);
+    }
+    catch (err) {
+        return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "x402_pay_and_fetch");
+    }
+    const staticPolicy = evaluateActionPolicy({
+        actionType: "x402_pay_and_fetch",
+        agentId: input.agentId,
+        url: input.url,
+        paymentAmountUsdc: input.maxPaymentUsdc,
+        paymentTokenAddress: X402_PAYMENT_TOKEN_ADDRESS,
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
+        isMainnet: IS_MAINNET,
+    });
+    if (staticPolicy.decision === "BLOCK") {
+        return fail("POLICY_BLOCKED", staticPolicy.reasons.join(" ") || "x402 request blocked by SafeHands policy.", false, "x402_pay_and_fetch");
+    }
+    const fetchOptions = buildFetchOptions(input);
+    // Daily-cap reservation state, hoisted above the try so the catch block can
+    // return the budget if the paying fetch throws after the reserve.
+    let reservedUsd = 0;
+    let reservedWallet = null;
+    try {
+        let initial;
+        try {
+            initial = await fetchWithTimeoutAndRetry(input.url, {
+                ...fetchOptions,
+                timeoutMs: 10_000,
+                retries: 1,
+                retryDelayMs: 250,
+            });
+        }
+        catch (err) {
+            // fetchWithTimeoutAndRetry follows redirects internally and re-validates
+            // SSRF on every hop (initial URL and every redirect target). Surface
+            // that as the same clean SSRF_BLOCKED error code used for the upfront
+            // check, instead of falling through to the generic X402_PAYMENT_FAILED.
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("SSRF_BLOCKED")) {
+                return fail("SSRF_BLOCKED", msg.replace(/^SSRF_BLOCKED:\s*/, ""), false, "x402_pay_and_fetch");
+            }
+            throw err;
+        }
+        if (initial.status !== 402) {
+            const data = await readResponseBody(initial);
+            return ok({
+                status: initial.status,
+                statusText: initial.statusText,
+                data,
+                paymentExecuted: false,
+                paymentDetails: null,
+                chainId: CHAIN_ID,
+                environment: PHAROS_ENVIRONMENT,
+                isMainnet: IS_MAINNET,
+                policy: staticPolicy,
+                source: "x402_fetch",
+            });
+        }
+        const challengeHeader = initial.headers.get("PAYMENT-REQUIRED");
+        const challengeError = validateX402Challenge(challengeHeader, input.maxPaymentUsdc);
+        if (challengeError) {
+            return fail("X402_CHALLENGE_INVALID", challengeError, false, "x402_pay_and_fetch");
+        }
+        const writeGuard = requireWriteToolsEnabled("x402_pay_and_fetch");
+        if (writeGuard)
+            return writeGuard;
+        const signer = await getSigner(input.agentId, { purpose: "x402" });
+        if (isSignerFailure(signer)) {
+            return fail("X402_PAYMENT_REQUIRED", `The resource returned HTTP 402, but no safe x402 signer is available: ${signer.error.message}`, false, "x402_pay_and_fetch");
+        }
+        // x402 is permissionless-first: self-signed x402 (mode "x402-env") never needs
+        // registry authorization. A managed/custodial x402 payment is allowlist-gated
+        // ONLY when explicitly opted in via REQUIRE_AUTHORIZED_AGENT_FOR_X402=true.
+        if (signer.mode === "managed-mainnet" && REQUIRE_AUTHORIZED_AGENT_FOR_X402) {
+            const authCheck = await checkManagedWalletAuthorization(signer.address);
+            if (!authCheck.authorized) {
+                return fail("REQUIRE_AUTHORIZATION", authCheck.errorMessage || "Managed wallet is not authorized in SafeHandsRegistry.", false, "x402_pay_and_fetch");
+            }
+        }
+        const paymentPolicy = evaluateActionPolicy({
+            actionType: "x402_pay_and_fetch",
+            agentId: input.agentId,
+            url: input.url,
+            paymentAmountUsdc: input.maxPaymentUsdc,
+            paymentTokenAddress: X402_PAYMENT_TOKEN_ADDRESS,
+            chainId: CHAIN_ID,
+            environment: PHAROS_ENVIRONMENT,
+            isMainnet: IS_MAINNET,
+            signerAvailable: true,
+            requiresSigner: true,
+        });
+        const paymentGate = enforceWriteDecision(paymentPolicy, { confirmed: input.confirm === true, toolName: "x402_pay_and_fetch" });
+        if (paymentGate)
+            return paymentGate;
+        // x402 payments count toward the same per-wallet daily USD cap as
+        // send_payment / execute_swap — otherwise a looping agent could drain the
+        // wallet in per-call-cap increments. Reserve the payment BOUND
+        // (maxPaymentUsdc; the 402 challenge amount is validated to be ≤ this)
+        // atomically before the paying fetch, and release it if no payment settles.
+        const reserveUsd = estimateUsd(input.maxPaymentUsdc, "USDC");
+        const reservation = reserveDailyLimit(signer.address, reserveUsd);
+        if (!reservation.allowed) {
+            return fail("DAILY_SPEND_LIMIT_EXCEEDED", `Daily spend limit reached. Spent $${reservation.currentUsd.toFixed(2)} of $${reservation.limitUsd.toFixed(2)} USD today. Remaining: $${reservation.remainingUsd.toFixed(2)}. Resets at UTC midnight.`, false, "x402_pay_and_fetch");
+        }
+        reservedUsd = reserveUsd;
+        reservedWallet = signer.address;
+        const rpc = input.rpcUrl || process.env.PHAROS_RPC_URL || RPC_URL;
+        const client = new x402Client();
+        registerExactEvmScheme(client, {
+            signer: signer.account,
+            schemeOptions: {
+                [CHAIN_ID]: { rpcUrl: rpc },
+            },
+        });
+        // wrapFetchWithPayment always invokes the supplied fetch with a single
+        // Request object (it builds one internally via `new Request(input, init)`
+        // and clones it for retries/hooks). This guard re-derives the URL/method/
+        // headers/body from that Request and routes the actual network call
+        // through fetchWithTimeoutAndRetry, so the payment-carrying request — the
+        // most sensitive call in this flow — gets the same DNS-pinned SSRF
+        // protection as the initial request instead of bypassing it via the raw
+        // global fetch.
+        const guardedFetch = async (requestInput, requestInit) => {
+            const req = requestInput instanceof Request ? requestInput : new Request(requestInput, requestInit);
+            const method = req.method || "GET";
+            const headersInit = {};
+            req.headers.forEach((value, key) => {
+                headersInit[key] = value;
+            });
+            let body;
+            if (method !== "GET" && method !== "HEAD") {
+                const buf = await req.arrayBuffer();
+                if (buf.byteLength > 0)
+                    body = new Uint8Array(buf);
+            }
+            return fetchWithTimeoutAndRetry(req.url, {
+                method,
+                headers: headersInit,
+                body,
+                timeoutMs: 10_000,
+                retries: 0, // avoid duplicate payment submission on a transient error
+            });
+        };
+        const fetchWithPayment = wrapFetchWithPayment(guardedFetch, client);
+        const paidResponse = await fetchWithPayment(input.url, fetchOptions);
+        const data = await readResponseBody(paidResponse);
+        const paymentResponseHeader = paidResponse.headers.get("PAYMENT-RESPONSE");
+        if (!paymentResponseHeader) {
+            // No payment actually settled (e.g. the resource stopped charging) —
+            // return the reserved budget so unpaid fetches never consume the cap.
+            releaseReservation(signer.address, reservedUsd);
+            reservedUsd = 0;
+            reservedWallet = null;
+        }
+        return ok({
+            status: paidResponse.status,
+            statusText: paidResponse.statusText,
+            data,
+            paymentExecuted: !!paymentResponseHeader,
+            paymentDetails: paymentResponseHeader
+                ? {
+                    headerRedacted: true,
+                    note: "PAYMENT-RESPONSE header was present but intentionally not exposed to avoid leaking signed payment data.",
+                }
+                : null,
+            signerMode: signer.mode,
+            walletAddress: signer.address,
+            paymentToken: X402_PAYMENT_TOKEN_ADDRESS,
+            maxPaymentUsdc: input.maxPaymentUsdc,
+            chainId: CHAIN_ID,
+            environment: PHAROS_ENVIRONMENT,
+            isMainnet: IS_MAINNET,
+            policy: paymentPolicy,
+            mainnetPayment: true,
+            source: "x402_fetch",
+        });
+    }
+    catch (err) {
+        // A payment that failed in flight is ambiguous (it MAY have settled), but
+        // the x402 replay store makes a re-submission of the same authorization
+        // safe — release the reservation so a transient fetch error does not
+        // permanently consume the daily budget.
+        if (reservedWallet && reservedUsd > 0) {
+            releaseReservation(reservedWallet, reservedUsd);
+        }
+        return fail("X402_PAYMENT_FAILED", err instanceof Error ? err.message : String(err), true, "x402_pay_and_fetch");
+    }
+}
 //# sourceMappingURL=x402PayAndFetch.js.map

package/dist/tools/x402PayAndFetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"x402PayAndFetch.js","sourceRoot":"","sources":["../../src/tools/x402PayAndFetch.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,qEAAqE;AACrE,gFAAgF;AAChF,4EAA4E;AAE5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC/H,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACzG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;IACpH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC1G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC;CACrE,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,0DAA0D;QAC1D,uHAAuH;IACzH,WAAW,EAAE,qBAAqB;CACnC,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA4C;IACrE,MAAM,YAAY,GAAgB;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC;IAEF,IAAI,KAAK,CAAC,IAAI;QAAE,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC/C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAyB;IACnE,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC;QACxC,UAAU,EAAE,oBAAoB;QAChC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,KAAK,CAAC,cAAc;QACvC,mBAAmB,EAAE,0BAA0B;QAC/C,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2CAA2C,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE;YACxD,GAAG,YAAY;YACf,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,GAAG;SAClB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,IAAI;gBACJ,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,kBAAkB;gBAC/B,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CACT,uBAAuB,EACvB,yEAAyE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAC/F,KAAK,EACL,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,UAAU,EAAE,oBAAoB;YAChC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,iBAAiB,EAAE,KAAK,CAAC,cAAc;YACvC,mBAAmB,EAAE,0BAA0B;YAC/C,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;YAChB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2CAA2C,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC7I,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,sBAAsB,CAAC,MAAM,EAAE;YAC7B,MAAM,EAAE,MAAM,CAAC,OAAc;YAC7B,aAAa,EAAE;gBACb,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aAC5B;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,qBAAqB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAE3E,OAAO,EAAE,CAAC;YACR,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,IAAI;YACJ,eAAe,EAAE,CAAC,CAAC,qBAAqB;YACxC,cAAc,EAAE,qBAAqB;gBACnC,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,IAAI,EAAE,yGAAyG;iBAChH;gBACH,CAAC,CAAC,IAAI;YACR,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,YAAY,EAAE,0BAA0B;YACxC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,aAAa;YACrB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,qBAAqB,EACrB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,EACJ,oBAAoB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"x402PayAndFetch.js","sourceRoot":"","sources":["../../src/tools/x402PayAndFetch.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,qEAAqE;AACrE,gFAAgF;AAChF,4EAA4E;AAE5E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,UAAU,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAC5K,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEhG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACzG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACjF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;IAClG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,4KAA4K,CAAC;CACtO,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,0DAA0D;QAC1D,uHAAuH;IACzH,WAAW,EAAE,qBAAqB;CACnC,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA4C;IACrE,MAAM,YAAY,GAAgB;QAChC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC;IAEF,IAAI,KAAK,CAAC,IAAI;QAAE,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC/C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,GAAG,CAAC,+BAA+B,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,qBAAqB,CAAC,eAA8B,EAAE,cAAsB;IACnF,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAErF,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC;YAChE,IAAI,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7C,OAAO,0BAA0B,eAAe,kCAAkC,cAAc,IAAI,CAAC;YACvG,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzF,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,KAAK,QAAQ,EAAE,CAAC;gBACvE,OAAO,gCAAgC,gBAAgB,cAAc,kBAAkB,KAAK,QAAQ,IAAI,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,+BAA+B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7D,OAAO,wDAAwD,OAAO,CAAC,KAAK,mBAAmB,kBAAkB,KAAK,OAAO,GAAG,CAAC;YACnI,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAyB;IACnE,IAAI,KAA4C,CAAC;IACjD,IAAI,CAAC;QACH,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,+CAA+C,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC9E,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC;QACxC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,KAAK,CAAC,cAAc;QACvC,mBAAmB,EAAE,0BAA0B;QAC/C,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2CAA2C,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE9C,4EAA4E;IAC5E,kEAAkE;IAClE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAkB,IAAI,CAAC;IAEzC,IAAI,CAAC;QACH,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClD,GAAG,YAAY;gBACf,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,CAAC;gBACV,YAAY,EAAE,GAAG;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,qEAAqE;YACrE,sEAAsE;YACtE,wEAAwE;YACxE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,IAAI;gBACJ,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,kBAAkB;gBAC/B,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,qBAAqB,CAAC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACpF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,wBAAwB,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CACT,uBAAuB,EACvB,yEAAyE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAC/F,KAAK,EACL,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,4EAA4E;QAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,iCAAiC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC1B,OAAO,IAAI,CACT,uBAAuB,EACvB,SAAS,CAAC,YAAY,IAAI,wDAAwD,EAClF,KAAK,EACL,oBAAoB,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,iBAAiB,EAAE,KAAK,CAAC,cAAc;YACvC,mBAAmB,EAAE,0BAA0B;YAC/C,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,UAAU;YACrB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/H,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QAEpC,kEAAkE;QAClE,0EAA0E;QAC1E,+DAA+D;QAC/D,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CACT,4BAA4B,EAC5B,qCAAqC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EACtM,KAAK,EACL,oBAAoB,CACrB,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,UAAU,CAAC;QACzB,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC;QAEhC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,sBAAsB,CAAC,MAAM,EAAE;YAC7B,MAAM,EAAE,MAAM,CAAC,OAAc;YAC7B,aAAa,EAAE;gBACb,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aAC5B;SACF,CAAC,CAAC;QAEH,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,0EAA0E;QAC1E,mEAAmE;QACnE,wEAAwE;QACxE,gBAAgB;QAChB,MAAM,YAAY,GAAiB,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE;YACrE,MAAM,GAAG,GAAG,YAAY,YAAY,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACpG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,WAAW,GAA2B,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACjC,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,IAAI,IAA0B,CAAC;YAC/B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC;oBAAE,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAwB,CAAC;YAC5E,CAAC;YAED,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAAG,EAAE;gBACvC,MAAM;gBACN,OAAO,EAAE,WAAW;gBACpB,IAAI;gBACJ,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,CAAC,EAAE,0DAA0D;aACvE,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,qBAAqB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAE3E,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,qEAAqE;YACrE,sEAAsE;YACtE,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAChD,WAAW,GAAG,CAAC,CAAC;YAChB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,EAAE,CAAC;YACR,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,IAAI;YACJ,eAAe,EAAE,CAAC,CAAC,qBAAqB;YACxC,cAAc,EAAE,qBAAqB;gBACnC,CAAC,CAAC;oBACE,cAAc,EAAE,IAAI;oBACpB,IAAI,EAAE,yGAAyG;iBAChH;gBACH,CAAC,CAAC,IAAI;YACR,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,YAAY,EAAE,0BAA0B;YACxC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,aAAa;YACrB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,wEAAwE;QACxE,qEAAqE;QACrE,wCAAwC;QACxC,IAAI,cAAc,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACtC,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CACT,qBAAqB,EACrB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,IAAI,EACJ,oBAAoB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "./lib/envLoader.js";
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":";AASA,OAAO,oBAAoB,CAAC"}

package/dist/worker.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+// ─── SafeHands Background Worker ───────────────────────────────────────
+// Runs durable background jobs for the hosted/full-enabled deployment.
+// Keep this as a separate service on Railway/Fly/VPS so public HTTP latency is
+// not tied to retry loops. Current jobs:
+//   - attestation retry queue from SAFEHANDS_ATTESTATION_STORE_PATH
+// Future jobs can be added here (risk-root batching, DA uploads, indexing).
+// ────────────────────────────────────────────────────────────────────────
+import "./lib/envLoader.js";
+import { retryPendingAttestations, startAttestationRetryLoop } from "./lib/pharos/attestationPublisher.js";
+import { assertProductionPosture } from "./lib/productionGuards.js";
+// Same fail-fast posture check as the API server (active only when
+// NODE_ENV=production) — the worker can hold an attester key, so it must not
+// silently boot into a custody-unsafe configuration either.
+assertProductionPosture();
+const intervalMs = Number(process.env.SAFEHANDS_WORKER_HEARTBEAT_MS || 60_000);
+process.on("unhandledRejection", (reason) => {
+    console.error("SafeHands worker unhandled rejection:", reason);
+});
+process.on("uncaughtException", (error) => {
+    console.error("SafeHands worker uncaught exception:", error);
+    process.exit(1);
+});
+console.log("🛡️  SafeHands worker started");
+console.log(`   Attestation retry enabled: ${process.env.SAFEHANDS_ATTESTATION_RETRY_ENABLED !== "false"}`);
+console.log(`   Store: ${process.env.SAFEHANDS_ATTESTATION_STORE_PATH || process.env.SAFEHANDS_STATE_DIR || ".safehands"}`);
+startAttestationRetryLoop();
+// Run once immediately so a restarted worker drains due records without waiting
+// for the first interval. The loop imported above continues afterwards.
+retryPendingAttestations()
+    .then((count) => console.log(`   Initial attestation retry attempts: ${count}`))
+    .catch((err) => console.error("   Initial attestation retry failed:", err instanceof Error ? err.message : String(err)));
+setInterval(() => {
+    console.log(`SafeHands worker heartbeat ${new Date().toISOString()}`);
+}, intervalMs);
+// The ref'ed interval above keeps Railway/Fly/VPS worker processes alive.
+// Avoid an unsettled top-level await here because Node may terminate ESM modules
+// with warning code 13 when the only remaining work is an unresolved Promise.
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":";AACA,0EAA0E;AAC1E,uEAAuE;AACvE,+EAA+E;AAC/E,yCAAyC;AACzC,oEAAoE;AACpE,4EAA4E;AAC5E,2EAA2E;AAE3E,OAAO,oBAAoB,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,mEAAmE;AACnE,6EAA6E;AAC7E,4DAA4D;AAC5D,uBAAuB,EAAE,CAAC;AAE1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,MAAM,CAAC,CAAC;AAE/E,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;IACxC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AAC7C,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,OAAO,EAAE,CAAC,CAAC;AAC5G,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,YAAY,EAAE,CAAC,CAAC;AAE5H,yBAAyB,EAAE,CAAC;AAE5B,gFAAgF;AAChF,wEAAwE;AACxE,wBAAwB,EAAE;KACvB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;KAC/E,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE3H,WAAW,CAAC,GAAG,EAAE;IACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC,EAAE,UAAU,CAAC,CAAC;AAEf,0EAA0E;AAC1E,iFAAiF;AACjF,8EAA8E"}

package/dist/x402Server.d.ts

@@ -1,2 +1,2 @@
-export {};
+import "./lib/envLoader.js";
 //# sourceMappingURL=x402Server.d.ts.map

package/dist/x402Server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x402Server.d.ts","sourceRoot":"","sources":["../src/x402Server.ts"],"names":[],"mappings":""}
+{"version":3,"file":"x402Server.d.ts","sourceRoot":"","sources":["../src/x402Server.ts"],"names":[],"mappings":"AAMA,OAAO,oBAAoB,CAAC"}