tapimo 0.14.0 → 0.15.1

package/dist/apps/mpp/App.d.ts

@@ -7,15 +7,16 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
     "/v1/mpp/validate": {
         $post: {
             output: {
+                success: true;
+            } | {
                 error: {
-                    code: "api_key_malformed";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
+                    code: "already_used" | "broadcast_failed" | "expired" | "insufficient_funds" | "invalid_payment" | "policy_denied" | "screen_rejected" | "simulation_failed" | "temporarily_unavailable" | "unknown" | "unsupported";
+                    message?: string | undefined;
                 };
-                requestId: string;
+                success: false;
             };
             outputFormat: "json";
-            status: 400;
+            status: 200;
             input: {
                 json: {
                     challenge: {
@@ -36,14 +37,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "api_key_malformed";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 json: {
                     challenge: {
@@ -64,14 +65,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "api_key_forbidden" | "api_key_ip_forbidden";
+                    code: "body_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 json: {
                     challenge: {
@@ -92,14 +93,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "payment_required" | "rate_limit_exceeded";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 429;
+            status: 401;
             input: {
                 json: {
                     challenge: {
@@ -120,14 +121,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "body_invalid";
+                    code: "api_key_forbidden" | "api_key_ip_forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 json: {
                     challenge: {
@@ -147,16 +148,15 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
             };
         } | {
             output: {
-                success: true;
-            } | {
                 error: {
-                    code: "already_used" | "broadcast_failed" | "expired" | "insufficient_funds" | "invalid_payment" | "policy_denied" | "screen_rejected" | "simulation_failed" | "temporarily_unavailable" | "unknown" | "unsupported";
-                    message?: string | undefined;
+                    code: "payment_required" | "rate_limit_exceeded";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
                 };
-                success: false;
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 429;
             input: {
                 json: {
                     challenge: {
@@ -180,15 +180,22 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
     "/v1/mpp/broadcast": {
         $post: {
             output: {
+                receipt: {
+                    externalId?: string | undefined;
+                    method: string;
+                    reference: string;
+                    timestamp: string;
+                };
+                success: true;
+            } | {
                 error: {
-                    code: "api_key_malformed";
-                    details?: readonly Response.error.Detail[] | undefined;
-                    message: string;
+                    code: "already_used" | "broadcast_failed" | "expired" | "insufficient_funds" | "invalid_payment" | "policy_denied" | "screen_rejected" | "simulation_failed" | "temporarily_unavailable" | "unknown" | "unsupported";
+                    message?: string | undefined;
                 };
-                requestId: string;
+                success: false;
             };
             outputFormat: "json";
-            status: 400;
+            status: 200;
             input: {
                 json: {
                     challenge: {
@@ -209,14 +216,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "api_key_invalid" | "api_key_missing";
+                    code: "api_key_malformed";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 401;
+            status: 400;
             input: {
                 json: {
                     challenge: {
@@ -237,14 +244,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "api_key_forbidden" | "api_key_ip_forbidden";
+                    code: "body_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 json: {
                     challenge: {
@@ -265,14 +272,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "payment_required" | "rate_limit_exceeded";
+                    code: "api_key_invalid" | "api_key_missing";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 429;
+            status: 401;
             input: {
                 json: {
                     challenge: {
@@ -293,14 +300,14 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
         } | {
             output: {
                 error: {
-                    code: "body_invalid";
+                    code: "api_key_forbidden" | "api_key_ip_forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 json: {
                     challenge: {
@@ -320,22 +327,15 @@ export declare function mpp(options: mpp.Options): import("hono/hono-base").Hono
             };
         } | {
             output: {
-                receipt: {
-                    externalId?: string | undefined;
-                    method: string;
-                    reference: string;
-                    timestamp: string;
-                };
-                success: true;
-            } | {
                 error: {
-                    code: "already_used" | "broadcast_failed" | "expired" | "insufficient_funds" | "invalid_payment" | "policy_denied" | "screen_rejected" | "simulation_failed" | "temporarily_unavailable" | "unknown" | "unsupported";
-                    message?: string | undefined;
+                    code: "payment_required" | "rate_limit_exceeded";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
                 };
-                success: false;
+                requestId: string;
             };
             outputFormat: "json";
-            status: 200;
+            status: 429;
             input: {
                 json: {
                     challenge: {

package/dist/apps/mpp/App.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../../src/apps/mpp/App.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,GAAG,MAAM,cAAc,CAAA;AAIxC,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AAKtD,OAAO,KAAK,OAAO,MAAM,uBAAuB,CAAA;AAChD,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AAKxD,6DAA6D;AAC7D,wBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BA+FvC;AAED,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,8BAA8B;IAC9B,KAAK,OAAO,GAAG;QACb,uDAAuD;QACvD,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,CAAA;QACzD,4EAA4E;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,CAAA;QACnE,0FAA0F;QAC1F,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACzC,uDAAuD;QACvD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,oEAAoE;QACpE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAChC,CAAA;CACF"}
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../../src/apps/mpp/App.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,GAAG,MAAM,cAAc,CAAA;AAKxC,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AAKtD,OAAO,KAAK,OAAO,MAAM,uBAAuB,CAAA;AAChD,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AAKxD,6DAA6D;AAC7D,wBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BA+FvC;AAED,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,8BAA8B;IAC9B,KAAK,OAAO,GAAG;QACb,uDAAuD;QACvD,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,CAAA;QACzD,4EAA4E;QAC5E,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,CAAA;QACnE,0FAA0F;QAC1F,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACzC,uDAAuD;QACvD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,oEAAoE;QACpE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAChC,CAAA;CACF"}

package/dist/apps/mpp/App.js

@@ -1,4 +1,5 @@
 import { Hono } from 'hono';
+import * as Scope from '../../Scope.js';
 import * as Db from '../../db/Db.js';
 import * as Auth from '../../internal/Auth.js';
 import * as OpenApi from '../../internal/OpenApi.js';
@@ -16,7 +17,7 @@ import * as Sponsorship from './internal/Sponsorship.js';
 export function mpp(options) {
     const app = new Hono()
         .post('/v1/mpp/validate', Auth.policy({ apiKey: { scopes: ['mpp:write'] }, mpp: false, public: false }), OpenApi.validate('json', Mpp.schema.RelayInput, bodyValidation), OpenApi.describeRoute({
-        description: 'Checks whether a completed MPP credential can be processed without submitting payment.\n\nTempo validates the challenge and credential, confirms the chain is supported, and screens the payment parties. It does not settle, broadcast, reserve funds, or consume the credential.\n\nRequires `mpp:write`. Well-formed requests return HTTP `200`; inspect `success`. Invalid bodies return `400`; missing or unauthorized API keys return `401` or `403`.',
+        description: 'Checks whether a completed MPP credential can be processed without submitting payment.\n\nTempo validates the challenge and credential, confirms the chain is supported, and screens the payment parties. It does not settle, broadcast, reserve funds, or consume the credential.\n\nRequires `mpp:write` and, for Zones, `zone:<chainId>:read` or `zone:<chainId>:write`. Well-formed requests return HTTP `200`; inspect `success`. Invalid bodies return `400`; missing or unauthorized API keys return `401` or `403`.',
         operationId: 'validateMppCredential',
         responses: responses({
             description: 'The MPP credential validation result.',
@@ -36,7 +37,7 @@ export function mpp(options) {
         return c.json(Response.validated(Mpp.schema.VerifyResponse, response), 200);
     })
         .post('/v1/mpp/broadcast', Auth.policy({ apiKey: { scopes: ['mpp:write'] }, mpp: false, public: false }), OpenApi.validate('json', Mpp.schema.RelayInput, bodyValidation), OpenApi.describeRoute({
-        description: 'Validates, screens, and submits a completed MPP credential to Tempo.\n\nRequires `mpp:write`. Well-formed requests return HTTP `200`; inspect `success`.\n\nUse `Idempotency-Key` on retries to replay a successful receipt. Reusing a key for a different credential returns `invalid_payment`, and in-flight duplicates return `temporarily_unavailable`.',
+        description: 'Validates, screens, and submits a completed MPP credential to Tempo.\n\nRequires `mpp:write` and, for Zones, `zone:<chainId>:write`. Well-formed requests return HTTP `200`; inspect `success`.\n\nUse `Idempotency-Key` on retries to replay a successful receipt. Reusing a key for a different credential returns `invalid_payment`, and in-flight duplicates return `temporarily_unavailable`.',
         operationId: 'broadcastMppCredential',
         parameters: [
             {
@@ -104,8 +105,20 @@ function responses(options) {
 async function authorizeBroadcast(c, options) {
     const { input, options: options_mpp } = options;
     const chainId = Policy.chainId(input) ?? c.get('chainId');
+    const principal = Auth.getPrincipal(c) ?? undefined;
     try {
-        Policy.assertSupportedChain({ chainId, supportedChainIds: c.get('supportedChainIds') });
+        Policy.assertChainAccess({
+            chainId,
+            principal,
+            supportedChainIds: c.get('supportedChainIds'),
+            zones: c.get('zones'),
+        });
+        // Validation can read Zone state, but submitting a credential requires broadcast access.
+        const scopes = principal?.type === 'api_key' ? principal.apiKey.scopes : undefined;
+        if (c.get('zones').has(chainId) &&
+            !scopes?.includes(Scope.wildcard) &&
+            !scopes?.includes(`zone:${chainId}:write`))
+            throw new Policy.PolicyDeniedError(`Broadcasting to zone ${chainId} requires \`zone:${chainId}:write\`.`);
         return {
             chainId,
             feePayer: await Timing.time(c, 'mpp_fee_payer', () => Policy.authorizeFeePayer({
@@ -113,7 +126,8 @@ async function authorizeBroadcast(c, options) {
                 db: Db.get(c.get('db')),
                 feePayer: options_mpp.feePayer,
                 input,
-                principal: Auth.getPrincipal(c) ?? undefined,
+                principal,
+                zones: c.get('zones'),
             })),
             type: 'authorized',
         };
@@ -191,17 +205,30 @@ function createAdapter(c, options) {
                 principal,
                 serializedTransaction,
                 txFeeLimit: Billing.toBaseUnits(options_mpp.txFeeLimit ?? '1.00'),
+                zones: c.get('zones'),
             }),
         })
         : undefined;
+    const storeKeyPrefix = (() => {
+        if (principal?.type === 'api_key')
+            return `mpp:${principal.environment}:${principal.orgId}:`;
+        if (principal?.type === 'super_admin')
+            return 'mpp:super_admin:';
+        throw new Error('MPP relay requires an API key.');
+    })();
     return Adapter.create({
         chainId,
         ...(feePayer ? { feePayer } : {}),
-        getClient: (chainId) => {
-            const resolved = chainId ?? c.get('chainId');
-            Policy.assertSupportedChain({
+        getClient: (chainId_client) => {
+            const resolved = chainId_client ?? chainId;
+            // Bind library-selected clients to the chain authorized for this credential.
+            if (resolved !== chainId)
+                throw new Policy.PolicyDeniedError('Credential chain does not match the authorized chain.');
+            Policy.assertChainAccess({
                 chainId: resolved,
+                principal: principal ?? undefined,
                 supportedChainIds: c.get('supportedChainIds'),
+                zones: c.get('zones'),
             });
             return c.get('getClient')(resolved);
         },
@@ -211,6 +238,7 @@ function createAdapter(c, options) {
             ? {}
             : { reportUnknown: options_mpp.reportUnknown }),
         state: options_mpp.state,
+        storeKeyPrefix,
         time: (name, fn) => Timing.time(c, name, fn),
     });
 }

package/dist/apps/mpp/App.js.map

@@ -1 +1 @@
-{"version":3,"file":"App.js","sourceRoot":"","sources":["../../../src/apps/mpp/App.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAA;AAIzC,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,KAAK,IAAI,MAAM,wBAAwB,CAAA;AAC9C,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AACtD,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAA;AACnD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,OAAO,MAAM,uBAAuB,CAAA;AAChD,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AACxD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AAExD,6DAA6D;AAC7D,MAAM,UAAU,GAAG,CAAC,OAAoB;IACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAmB;SACpC,IAAI,CACH,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,EAC/D,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,6bAA6b;QAC/b,WAAW,EAAE,uBAAuB;QACpC,SAAS,EAAE,SAAS,CAAC;YACnB,WAAW,EAAE,uCAAuC;YACpD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;SAClC,CAAC;QACF,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CACvD,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACrD,CAAA;QACD,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7E,CAAC,CACF;SACA,IAAI,CACH,mBAAmB,EACnB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,EAC/D,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,6VAA6V;QAC/V,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV;gBACE,WAAW,EACT,6XAA6X;gBAC/X,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/E;SACF;QACD,SAAS,EAAE,SAAS,CAAC;YACnB,WAAW,EAAE,sCAAsC;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB;SACrC,CAAC;QACF,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG;gBACf,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,OAAO,EAAE,KAAK;aACiB,CAAA;YACjC,CAAC,CAAC,GAAG,CACH,KAAK,EACL,aAAa,CAAC,CAAC,EAAE;gBACf,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,WAAW;gBACtB,QAAQ;aACT,CAAC,CACH,CAAA;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE;YAChC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,KAAK;YACL,OAAO;SACR,CAAC,CAAA;QACF,CAAC,CAAC,GAAG,CACH,KAAK,EACL,aAAa,CAAC,CAAC,EAAE;YACf,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YAChF,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CACH,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;IACvF,CAAC,CACF,CAAA;IACH,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAkBD,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,yDAAyD;CAC1D,CAAA;AAEV,SAAS,SAAS,CAA+B,OAAgD;IAC/F,OAAO,OAAO,CAAC,SAAS,CAAC;QACvB,MAAM,EAAE,EAAE,GAAG,EAAE,8CAA8C,EAAE;QAC/D,OAAO,EAAE,OAAO;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,kBAAkB,CAC/B,CAA2B,EAC3B,OAAmC;IAEnC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzD,IAAI,CAAC;QACH,MAAM,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvF,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,iBAAiB,CAAC;gBACvB,OAAO;gBACP,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,SAAS;aAC7C,CAAC,CACH;YACD,IAAI,EAAE,YAAqB;SAC5B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAA;IACxE,CAAC;AACH,CAAC;AAYD,+EAA+E;AAC/E,KAAK,UAAU,SAAS,CAAC,CAA2B,EAAE,OAA0B;IAC9E,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAClE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAA;IACnE,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAEjG,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,SAAS,CAAC,EAAE;QACtB,cAAc;QACd,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;KACxC,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAC/D,WAAW,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAC1D,CAAA;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,EAAE,WAAW,EAAE,QAAiB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;QACrE,KAAK,SAAS;YACZ,OAAO;gBACL,WAAW,EAAE,SAAkB;gBAC/B,QAAQ,EAAE;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,sBAAsB;wBAC/C,OAAO,EAAE,kDAAkD;qBAC5D;oBACD,OAAO,EAAE,KAAK;iBACiB;aAClC,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,cAAc;wBACvC,OAAO,EAAE,8DAA8D;qBACxE;oBACD,OAAO,EAAE,KAAK;iBACiB;aAClC,CAAA;QACH,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAChD,uEAAuE;YACvE,oEAAoE;YACpE,IAAI,QAAQ,CAAC,OAAO;gBAClB,MAAM,WAAW,CAAC,QAAQ,CAAC;oBACzB,QAAQ;oBACR,QAAQ;oBACR,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC,CAAA;;gBACC,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YAC1F,OAAO,EAAE,WAAW,EAAE,SAAkB,EAAE,QAAQ,EAAE,CAAA;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAgBD,SAAS,aAAa,CAAC,CAA2B,EAAE,OAA8B;IAChF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,QAAQ,GACZ,WAAW,CAAC,QAAQ,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QACnD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;YACnB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,QAAQ,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,CACtC,WAAW,CAAC,MAAM,CAAC;gBACjB,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,SAAS;gBACT,qBAAqB;gBACrB,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,IAAI,MAAM,CAAC;aAClE,CAAC;SACL,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACf,OAAO,OAAO,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC5C,MAAM,CAAC,oBAAoB,CAAC;gBAC1B,OAAO,EAAE,QAAQ;gBACjB,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;aAC9C,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC;QACD,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7F,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,CAAC;QACjD,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;KAC7C,CAAC,CAAA;AACJ,CAAC;AAYD,SAAS,aAAa,CACpB,CAA2B,EAC3B,OAMC;IAED,OAAO;QACL,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7F,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACjD,CAAA;AACZ,CAAC;AAED,MAAM,OAAO,GAAG;IACd,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,KAAK;YACX,WAAW,EACT,sKAAsK;SACzK;KACF;CAC4B,CAAA"}
+{"version":3,"file":"App.js","sourceRoot":"","sources":["../../../src/apps/mpp/App.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAA;AAIzC,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,KAAK,IAAI,MAAM,wBAAwB,CAAA;AAC9C,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAA;AACpD,OAAO,KAAK,QAAQ,MAAM,4BAA4B,CAAA;AACtD,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAA;AAClD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,OAAO,MAAM,0BAA0B,CAAA;AACnD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,OAAO,MAAM,uBAAuB,CAAA;AAChD,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AACxD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,2BAA2B,CAAA;AAExD,6DAA6D;AAC7D,MAAM,UAAU,GAAG,CAAC,OAAoB;IACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAmB;SACpC,IAAI,CACH,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,EAC/D,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,6fAA6f;QAC/f,WAAW,EAAE,uBAAuB;QACpC,SAAS,EAAE,SAAS,CAAC;YACnB,WAAW,EAAE,uCAAuC;YACpD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc;SAClC,CAAC;QACF,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CACvD,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACrD,CAAA;QACD,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7E,CAAC,CACF;SACA,IAAI,CACH,mBAAmB,EACnB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,EAC/D,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,oYAAoY;QACtY,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE;YACV;gBACE,WAAW,EACT,6XAA6X;gBAC/X,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/E;SACF;QACD,SAAS,EAAE,SAAS,CAAC;YACnB,WAAW,EAAE,sCAAsC;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB;SACrC,CAAC;QACF,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAC/E,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;QACrE,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG;gBACf,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,OAAO,EAAE,KAAK;aACiB,CAAA;YACjC,CAAC,CAAC,GAAG,CACH,KAAK,EACL,aAAa,CAAC,CAAC,EAAE;gBACf,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,WAAW;gBACtB,QAAQ;aACT,CAAC,CACH,CAAA;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE;YAChC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,KAAK;YACL,OAAO;SACR,CAAC,CAAA;QACF,CAAC,CAAC,GAAG,CACH,KAAK,EACL,aAAa,CAAC,CAAC,EAAE;YACf,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;YAChF,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CACH,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;IACvF,CAAC,CACF,CAAA;IACH,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAkBD,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,yDAAyD;CAC1D,CAAA;AAEV,SAAS,SAAS,CAA+B,OAAgD;IAC/F,OAAO,OAAO,CAAC,SAAS,CAAC;QACvB,MAAM,EAAE,EAAE,GAAG,EAAE,8CAA8C,EAAE;QAC/D,OAAO,EAAE,OAAO;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,kBAAkB,CAC/B,CAA2B,EAC3B,OAAmC;IAEnC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC;YACvB,OAAO;YACP,SAAS;YACT,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC7C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;SACtB,CAAC,CAAA;QACF,yFAAyF;QACzF,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAClF,IACE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,OAAO,QAAQ,CAAC;YAE1C,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAChC,wBAAwB,OAAO,oBAAoB,OAAO,WAAW,CACtE,CAAA;QACH,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,iBAAiB,CAAC;gBACvB,OAAO;gBACP,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;aACtB,CAAC,CACH;YACD,IAAI,EAAE,YAAqB;SAC5B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAA;IACxE,CAAC;AACH,CAAC;AAYD,+EAA+E;AAC/E,KAAK,UAAU,SAAS,CAAC,CAA2B,EAAE,OAA0B;IAC9E,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAClE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAA;IACnE,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAEjG,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,SAAS,CAAC,EAAE;QACtB,cAAc;QACd,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;KACxC,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAC/D,WAAW,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAC1D,CAAA;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,EAAE,WAAW,EAAE,QAAiB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;QACrE,KAAK,SAAS;YACZ,OAAO;gBACL,WAAW,EAAE,SAAkB;gBAC/B,QAAQ,EAAE;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,sBAAsB;wBAC/C,OAAO,EAAE,kDAAkD;qBAC5D;oBACD,OAAO,EAAE,KAAK;iBACiB;aAClC,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,cAAc;wBACvC,OAAO,EAAE,8DAA8D;qBACxE;oBACD,OAAO,EAAE,KAAK;iBACiB;aAClC,CAAA;QACH,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAChD,uEAAuE;YACvE,oEAAoE;YACpE,IAAI,QAAQ,CAAC,OAAO;gBAClB,MAAM,WAAW,CAAC,QAAQ,CAAC;oBACzB,QAAQ;oBACR,QAAQ;oBACR,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC,CAAA;;gBACC,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YAC1F,OAAO,EAAE,WAAW,EAAE,SAAkB,EAAE,QAAQ,EAAE,CAAA;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAgBD,SAAS,aAAa,CAAC,CAA2B,EAAE,OAA8B;IAChF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,QAAQ,GACZ,WAAW,CAAC,QAAQ,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QACnD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;YACnB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,QAAQ,EAAE,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,CACtC,WAAW,CAAC,MAAM,CAAC;gBACjB,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,SAAS;gBACT,qBAAqB;gBACrB,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,IAAI,MAAM,CAAC;gBACjE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;aACtB,CAAC;SACL,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;QAC3B,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,OAAO,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,KAAK,GAAG,CAAA;QAC5F,IAAI,SAAS,EAAE,IAAI,KAAK,aAAa;YAAE,OAAO,kBAAkB,CAAA;QAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC,CAAC,EAAE,CAAA;IACJ,OAAO,OAAO,CAAC,MAAM,CAAC;QACpB,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,SAAS,EAAE,CAAC,cAAc,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,cAAc,IAAI,OAAO,CAAA;YAC1C,6EAA6E;YAC7E,IAAI,QAAQ,KAAK,OAAO;gBACtB,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,uDAAuD,CAAC,CAAA;YAC7F,MAAM,CAAC,iBAAiB,CAAC;gBACvB,OAAO,EAAE,QAAQ;gBACjB,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAC7C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;aACtB,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC;QACD,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7F,GAAG,CAAC,WAAW,CAAC,aAAa,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,CAAC;QACjD,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,cAAc;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;KAC7C,CAAC,CAAA;AACJ,CAAC;AAYD,SAAS,aAAa,CACpB,CAA2B,EAC3B,OAMC;IAED,OAAO;QACL,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7F,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACjD,CAAA;AACZ,CAAC;AAED,MAAM,OAAO,GAAG;IACd,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,KAAK;YACX,WAAW,EACT,sKAAsK;SACzK;KACF;CAC4B,CAAA"}

package/dist/apps/mpp/internal/Adapter.d.ts

@@ -33,6 +33,8 @@ export declare namespace create {
         screeningTtl?: number | undefined;
         /** Durable state used for MPPX replay protection. */
         state: Store.State;
+        /** Tenant namespace for MPPX replay-protection records. */
+        storeKeyPrefix: string;
         /** Measures a named relay operation. */
         time?: (<value>(name: string, fn: () => Promise<value>) => Promise<value>) | undefined;
     };

package/dist/apps/mpp/internal/Adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Adapter.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAEhC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAI3C,8BAA8B;AAC9B,MAAM,MAAM,OAAO,GAAG;IACpB,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAChE,2DAA2D;IAC3D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;CAC3D,CAAA;AAED,uDAAuD;AACvD,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAiFvD;AAUD,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qEAAqE;IACrE,KAAK,OAAO,GAAG;QACb,+DAA+D;QAC/D,OAAO,EAAE,MAAM,CAAA;QACf,gEAAgE;QAChE,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,yDAAyD;QACzD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAA;QACzB,kCAAkC;QAClC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAA;QACzC,6EAA6E;QAC7E,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;YAAE,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;SAAE,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;QACtF,wCAAwC;QACxC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAA;QAC3B,uDAAuD;QACvD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,qDAAqD;QACrD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;QAClB,wCAAwC;QACxC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAA;KACvF,CAAA;CACF"}
+{"version":3,"file":"Adapter.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAGhC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAI3C,8BAA8B;AAC9B,MAAM,MAAM,OAAO,GAAG;IACpB,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAChE,2DAA2D;IAC3D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;CAC3D,CAAA;AAED,uDAAuD;AACvD,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CA6GvD;AAUD,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qEAAqE;IACrE,KAAK,OAAO,GAAG;QACb,+DAA+D;QAC/D,OAAO,EAAE,MAAM,CAAA;QACf,gEAAgE;QAChE,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,yDAAyD;QACzD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAA;QACzB,kCAAkC;QAClC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAA;QACzC,6EAA6E;QAC7E,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;YAAE,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;SAAE,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;QACtF,wCAAwC;QACxC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAA;QAC3B,uDAAuD;QACvD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,qDAAqD;QACrD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;QAClB,2DAA2D;QAC3D,cAAc,EAAE,MAAM,CAAA;QACtB,wCAAwC;QACxC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAA;KACvF,CAAA;CACF"}

package/dist/apps/mpp/internal/Adapter.js

@@ -1,16 +1,20 @@
 import * as Mppx from 'mppx';
 import { tempo } from 'mppx/server';
+import * as Hex from 'ox/Hex';
 import { maxUint256 } from 'viem';
+import { getBlock } from 'viem/actions';
+import { Transaction } from 'viem/tempo';
 import * as Store from '../../../internal/Store.js';
 import * as Viem from '../../../internal/Viem.js';
 import * as Mpp from '../Mpp.js';
 import * as MppError from './Error.js';
+import * as Policy from './Policy.js';
 import * as Screening from './Screening.js';
 import * as ScreenManager from './ScreenManager.js';
 import * as Utils from './Utils.js';
 /** Creates an adapter for Tempo charge credentials. */
 export function create(options) {
-    const { chainId, feePayer, getClient, provider = Screening.allowAll, reportUnknown, screeningStore, screeningTtl = Screening.defaultTtl, state, time = (_, fn) => fn(), } = options;
+    const { chainId, feePayer, getClient, provider = Screening.allowAll, reportUnknown, screeningStore, screeningTtl = Screening.defaultTtl, state, storeKeyPrefix, time = (_, fn) => fn(), } = options;
     const screenManager = ScreenManager.create({
         chainId,
         provider,
@@ -32,6 +36,7 @@ export function create(options) {
             ...(feePayerPolicy ? { feePayerPolicy } : {}),
             getClient: ({ chainId: chainId_option }) => getClient(chainId_option),
             store: Utils.mppxStore(state),
+            storeKeyPrefix,
         }),
     ];
     /** Validates and screens a credential, rejecting when either check fails. */
@@ -39,6 +44,29 @@ export function create(options) {
         const result = await time('mpp_validate', () => Mppx.Method.validateCredential(methods, credential(input)));
         await time('mpp_screen', () => screenManager.screen(Utils.addresses(result)));
     }
+    async function assertFeeMarketAdmission(input) {
+        if (!feePayer || !Policy.requiresFeePayer(input))
+            return;
+        const payload = input.payload && typeof input.payload === 'object' && !Array.isArray(input.payload)
+            ? input.payload
+            : undefined;
+        if (payload?.['type'] !== 'transaction' ||
+            typeof payload['signature'] !== 'string' ||
+            !Hex.validate(payload['signature']))
+            return;
+        const transaction = Transaction.deserialize(payload['signature']);
+        if (typeof transaction.maxFeePerGas !== 'bigint')
+            return;
+        const block = await getBlock(getClient(transaction.chainId), {
+            blockTag: 'latest',
+            includeTransactions: false,
+        });
+        if (block.baseFeePerGas !== null)
+            Policy.assertFeeMarketAdmission({
+                baseFeePerGas: block.baseFeePerGas,
+                maxFeePerGas: transaction.maxFeePerGas,
+            });
+    }
     function failure(cause, operation) {
         const error = MppError.map(cause);
         if (error.code === Mpp.relayErrorCode.unknown)
@@ -49,6 +77,7 @@ export function create(options) {
         async broadcast(input) {
             try {
                 await validateOrThrow(input);
+                await assertFeeMarketAdmission(input);
                 const result = await time('mpp_broadcast', () => Mppx.Method.broadcastCredential(methods, credential(input)));
                 return {
                     receipt: {

package/dist/apps/mpp/internal/Adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"Adapter.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAGjC,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAChC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAUnC,uDAAuD;AACvD,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,MAAM,EACJ,OAAO,EACP,QAAQ,EACR,SAAS,EACT,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAC7B,aAAa,EACb,cAAc,EACd,YAAY,GAAG,SAAS,CAAC,UAAU,EACnC,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GACvB,GAAG,OAAO,CAAA;IACX,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;QACzC,OAAO;QACP,QAAQ;QACR,KAAK,EAAE,cAAc;QACrB,GAAG,EAAE,YAAY;KAClB,CAAC,CAAA;IACF,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,cAAc,GAClB,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;QAC9B,CAAC,CAAC;YACE,YAAY,EAAE,UAAU;YACxB,oBAAoB,EAAE,UAAU;YAChC,WAAW,EAAE,oBAA0B;SACxC;QACH,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM,CAAC;YACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,SAAS,CAAC,cAA0C,CAAC;YACvD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;SAC9B,CAAC;KACM,CAAA;IAEV,6EAA6E;IAC7E,KAAK,UAAU,eAAe,CAAC,KAAqB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAC7C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAC3D,CAAA;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,SAAS,OAAO,CAAC,KAAc,EAAE,SAAiC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,cAAc,CAAC,OAAO;YAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC7E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAW,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAC5D,CAAA;gBACD,OAAO;oBACL,OAAO,EAAE;wBACP,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B;oBACD,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAqB;IACvC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"Adapter.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,GAAG,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAChC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAUnC,uDAAuD;AACvD,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,MAAM,EACJ,OAAO,EACP,QAAQ,EACR,SAAS,EACT,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAC7B,aAAa,EACb,cAAc,EACd,YAAY,GAAG,SAAS,CAAC,UAAU,EACnC,KAAK,EACL,cAAc,EACd,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GACvB,GAAG,OAAO,CAAA;IACX,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;QACzC,OAAO;QACP,QAAQ;QACR,KAAK,EAAE,cAAc;QACrB,GAAG,EAAE,YAAY;KAClB,CAAC,CAAA;IACF,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,cAAc,GAClB,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO;QAC9B,CAAC,CAAC;YACE,YAAY,EAAE,UAAU;YACxB,oBAAoB,EAAE,UAAU;YAChC,WAAW,EAAE,oBAA0B;SACxC;QACH,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM,CAAC;YACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,SAAS,CAAC,cAA0C,CAAC;YACvD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;YAC7B,cAAc;SACf,CAAC;KACM,CAAA;IAEV,6EAA6E;IAC7E,KAAK,UAAU,eAAe,CAAC,KAAqB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAC7C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAC3D,CAAA;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,UAAU,wBAAwB,CAAC,KAAqB;QAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,OAAM;QACxD,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACjF,CAAC,CAAE,KAAK,CAAC,OAAmC;YAC5C,CAAC,CAAC,SAAS,CAAA;QACf,IACE,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,aAAa;YACnC,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ;YACxC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAEnC,OAAM;QACR,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAY,CAAC,CAAA;QAC5E,IAAI,OAAO,WAAW,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAM;QACxD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,OAAmC,CAAC,EAAE;YACvF,QAAQ,EAAE,QAAQ;YAClB,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAA;QACF,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;YAC9B,MAAM,CAAC,wBAAwB,CAAC;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;aACvC,CAAC,CAAA;IACN,CAAC;IAED,SAAS,OAAO,CAAC,KAAc,EAAE,SAAiC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,cAAc,CAAC,OAAO;YAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC7E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAW,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAA;gBACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAC5D,CAAA;gBACD,OAAO;oBACL,OAAO,EAAE;wBACP,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B;oBACD,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAqB;IACvC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAChE,CAAC,CAAA;AACJ,CAAC"}

package/dist/apps/mpp/internal/Policy.d.ts

@@ -1,4 +1,5 @@
 import type { LocalAccount } from 'viem/accounts';
+import type * as App from '../../../App.js';
 import type * as Auth from '../../../internal/Auth.js';
 import type * as Db from '../../../db/Db.js';
 import type * as Mpp from '../Mpp.js';
@@ -6,15 +7,30 @@ import type * as Mpp from '../Mpp.js';
 export declare function chainId(input: Mpp.RelayInput): number | undefined;
 /** Whether a Tempo charge credential requests platform fee sponsorship. */
 export declare function requiresFeePayer(input: Mpp.RelayInput): boolean;
-/** Refuses credentials outside the chains served by this API deployment. */
-export declare function assertSupportedChain(options: assertSupportedChain.Options): void;
-export declare namespace assertSupportedChain {
+/** Refuses a sponsored transaction that the current fee market cannot admit. */
+export declare function assertFeeMarketAdmission(options: assertFeeMarketAdmission.Options): void;
+export declare namespace assertFeeMarketAdmission {
+    /** Current fee-market and transaction fee bounds. */
+    type Options = {
+        /** Latest block base fee. */
+        baseFeePerGas: bigint;
+        /** Signed transaction fee cap. */
+        maxFeePerGas: bigint;
+    };
+}
+/** Refuses unsupported chains, unauthorized Zones, and sandbox access to mainnet. */
+export declare function assertChainAccess(options: assertChainAccess.Options): void;
+export declare namespace assertChainAccess {
     /** Chain-selection inputs. */
     type Options = {
         /** Resolved credential chain. */
         chainId: number;
+        /** Authenticated request principal. */
+        principal?: Auth.Principal | undefined;
         /** Chains served by this API deployment. */
         supportedChainIds: ReadonlySet<number>;
+        /** Configured Zones and their parent chains. */
+        zones: App.Environment['Variables']['zones'];
     };
 }
 /** Authorizes managed fee sponsorship for one broadcast request. */
@@ -32,6 +48,8 @@ export declare namespace authorizeFeePayer {
         input: Mpp.RelayInput;
         /** Authenticated request principal. */
         principal?: Auth.Principal | undefined;
+        /** Configured Zones and their parent chains. */
+        zones: App.Environment['Variables']['zones'];
     };
 }
 /** Raised when an MPP credential selects a chain this deployment does not serve. */
@@ -39,7 +57,7 @@ export declare class UnsupportedChainError extends Error {
     name: string;
     constructor(chainId: number);
 }
-/** Raised when a caller is not eligible for managed fee sponsorship. */
+/** Raised when an MPP credential violates chain access or sponsorship policy. */
 export declare class PolicyDeniedError extends Error {
     name: string;
 }

package/dist/apps/mpp/internal/Policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Policy.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,KAAK,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAG5C,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AAErC,+DAA+D;AAC/D,wBAAgB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAIjE;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,WAGrD;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,CAAC,OAAO,QAGzE;AAED,MAAM,CAAC,OAAO,WAAW,oBAAoB,CAAC;IAC5C,8BAA8B;IAC9B,KAAK,OAAO,GAAG;QACb,iCAAiC;QACjC,OAAO,EAAE,MAAM,CAAA;QACf,4CAA4C;QAC5C,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;KACvC,CAAA;CACF;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,CAAC,OAAO,GACjC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAiBnC;AAED,MAAM,CAAC,OAAO,WAAW,iBAAiB,CAAC;IACzC,8DAA8D;IAC9D,KAAK,OAAO,GAAG;QACb,wBAAwB;QACxB,OAAO,EAAE,MAAM,CAAA;QACf,8DAA8D;QAC9D,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QACT,kDAAkD;QAClD,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,sCAAsC;QACtC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAA;QACrB,uCAAuC;QACvC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;KACvC,CAAA;CACF;AAYD,oFAAoF;AACpF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAAqC;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED,wEAAwE;AACxE,qBAAa,iBAAkB,SAAQ,KAAK;IACjC,IAAI,SAAiC;CAC/C"}
+{"version":3,"file":"Policy.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAA;AAE3C,OAAO,KAAK,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAG5C,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AAErC,+DAA+D;AAC/D,wBAAgB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAIjE;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,WAGrD;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,CAAC,OAAO,QAGjF;AAED,MAAM,CAAC,OAAO,WAAW,wBAAwB,CAAC;IAChD,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,6BAA6B;QAC7B,aAAa,EAAE,MAAM,CAAA;QACrB,kCAAkC;QAClC,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;CACF;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,QAqBnE;AAED,MAAM,CAAC,OAAO,WAAW,iBAAiB,CAAC;IACzC,8BAA8B;IAC9B,KAAK,OAAO,GAAG;QACb,iCAAiC;QACjC,OAAO,EAAE,MAAM,CAAA;QACf,uCAAuC;QACvC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QACtC,4CAA4C;QAC5C,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;QACtC,gDAAgD;QAChD,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAA;KAC7C,CAAA;CACF;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,CAAC,OAAO,GACjC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAiBnC;AAED,MAAM,CAAC,OAAO,WAAW,iBAAiB,CAAC;IACzC,8DAA8D;IAC9D,KAAK,OAAO,GAAG;QACb,wBAAwB;QACxB,OAAO,EAAE,MAAM,CAAA;QACf,8DAA8D;QAC9D,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QACT,kDAAkD;QAClD,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,sCAAsC;QACtC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAA;QACrB,uCAAuC;QACvC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QACtC,gDAAgD;QAChD,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAA;KAC7C,CAAA;CACF;AAYD,oFAAoF;AACpF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAAqC;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED,iFAAiF;AACjF,qBAAa,iBAAkB,SAAQ,KAAK;IACjC,IAAI,SAAiC;CAC/C"}

package/dist/apps/mpp/internal/Policy.js

@@ -1,3 +1,4 @@
+import * as Scope from '../../../Scope.js';
 import * as Viem from '../../../internal/Viem.js';
 import * as Billing from '../../management/Billing.js';
 /** Resolves the chain declared by a Tempo charge challenge. */
@@ -11,20 +12,37 @@ export function requiresFeePayer(input) {
     const request = input.challenge.request;
     return record(request['methodDetails'])?.['feePayer'] === true && request['feePayer'] !== false;
 }
-/** Refuses credentials outside the chains served by this API deployment. */
-export function assertSupportedChain(options) {
-    const { chainId, supportedChainIds } = options;
+/** Refuses a sponsored transaction that the current fee market cannot admit. */
+export function assertFeeMarketAdmission(options) {
+    if (options.maxFeePerGas < options.baseFeePerGas)
+        throw new PolicyDeniedError('Transaction max fee per gas is below the current base fee.');
+}
+/** Refuses unsupported chains, unauthorized Zones, and sandbox access to mainnet. */
+export function assertChainAccess(options) {
+    const { chainId, principal, supportedChainIds, zones } = options;
     if (!supportedChainIds.has(chainId))
         throw new UnsupportedChainError(chainId);
+    const zone = zones.get(chainId);
+    if (zone) {
+        const scopes = principal?.type === 'api_key' ? principal.apiKey.scopes : undefined;
+        if (!scopes?.includes(Scope.wildcard) &&
+            !scopes?.includes(`zone:${chainId}:read`) &&
+            !scopes?.includes(`zone:${chainId}:write`))
+            throw new PolicyDeniedError(`Chain id ${chainId} is a zone. Use an API key granting \`zone:${chainId}:read\` or \`zone:${chainId}:write\`.`);
+    }
+    if (principal?.type === 'api_key' &&
+        principal.environment === 'sandbox' &&
+        Viem.isMainnet(zone?.sourceId ?? chainId))
+        throw new PolicyDeniedError('Sandbox API keys only support testnet. Use a testnet challenge.');
 }
 /** Authorizes managed fee sponsorship for one broadcast request. */
 export async function authorizeFeePayer(options) {
-    const { chainId, db, feePayer, input, principal } = options;
+    const { chainId, db, feePayer, input, principal, zones } = options;
     if (!feePayer || !requiresFeePayer(input))
         return feePayer;
     if (principal?.type !== 'api_key')
         throw new PolicyDeniedError('Fee sponsorship requires an API key.');
-    if (!Viem.isMainnet(chainId))
+    if (!Viem.isMainnet(zones.get(chainId)?.sourceId ?? chainId))
         return feePayer;
     if (principal.environment !== 'production')
         throw new PolicyDeniedError('Mainnet fee sponsorship requires a production API key.');
@@ -50,7 +68,7 @@ export class UnsupportedChainError extends Error {
         super(`Unsupported chain id ${chainId}.`);
     }
 }
-/** Raised when a caller is not eligible for managed fee sponsorship. */
+/** Raised when an MPP credential violates chain access or sponsorship policy. */
 export class PolicyDeniedError extends Error {
     name = 'Mpp.Policy.PolicyDeniedError';
 }

package/dist/apps/mpp/internal/Policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"Policy.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAA;AAGtD,+DAA+D;AAC/D,MAAM,UAAU,OAAO,CAAC,KAAqB;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,CAAA;AACjG,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,OAAqC;IACxE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAA;IAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;AAC/E,CAAC;AAYD,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1D,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAA;IACrE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7C,IAAI,SAAS,CAAC,WAAW,KAAK,YAAY;QACxC,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,CAAC,CAAA;IAEvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,MAAM,KAAK,QAAQ;QACrB,MAAM,IAAI,iBAAiB,CACzB,MAAM,KAAK,UAAU;YACnB,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,yDAAyD,CAC9D,CAAA;IACH,OAAO,QAAQ,CAAA;AACjB,CAAC;AAkBD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACrF,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,kCAAkC,CAAA;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAA;IAC3C,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,8BAA8B,CAAA;CAC/C"}
+{"version":3,"file":"Policy.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAG1C,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAA;AAGtD,+DAA+D;AAC/D,MAAM,UAAU,OAAO,CAAC,KAAqB;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,CAAA;AACjG,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,OAAyC;IAChF,IAAI,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,aAAa;QAC9C,MAAM,IAAI,iBAAiB,CAAC,4DAA4D,CAAC,CAAA;AAC7F,CAAC;AAYD,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,OAAkC;IAClE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAChE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC/B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAClF,IACE,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YACjC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,OAAO,OAAO,CAAC;YACzC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,OAAO,QAAQ,CAAC;YAE1C,MAAM,IAAI,iBAAiB,CACzB,YAAY,OAAO,8CAA8C,OAAO,qBAAqB,OAAO,WAAW,CAChH,CAAA;IACL,CAAC;IACD,IACE,SAAS,EAAE,IAAI,KAAK,SAAS;QAC7B,SAAS,CAAC,WAAW,KAAK,SAAS;QACnC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO,CAAC;QAEzC,MAAM,IAAI,iBAAiB,CAAC,iEAAiE,CAAC,CAAA;AAClG,CAAC;AAgBD,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAClE,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1D,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAA;IACrE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7E,IAAI,SAAS,CAAC,WAAW,KAAK,YAAY;QACxC,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,CAAC,CAAA;IAEvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,MAAM,KAAK,QAAQ;QACrB,MAAM,IAAI,iBAAiB,CACzB,MAAM,KAAK,UAAU;YACnB,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,yDAAyD,CAC9D,CAAA;IACH,OAAO,QAAQ,CAAA;AACjB,CAAC;AAoBD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACrF,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,kCAAkC,CAAA;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAA;IAC3C,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,8BAA8B,CAAA;CAC/C"}