tapimo 0.7.0 → 0.7.2

package/dist/apps/mpp/internal/Adapter.d.ts

@@ -0,0 +1,40 @@
+import type { LocalAccount } from 'viem/accounts';
+import type * as Viem from '../../../internal/Viem.js';
+import * as Store from '../../../internal/Store.js';
+import * as Mpp from '../Mpp.js';
+import * as Screening from './Screening.js';
+/** MPPX lifecycle adapter. */
+export type Adapter = {
+    /** Broadcasts a validated MPP credential. */
+    broadcast(input: Mpp.RelayInput): Promise<Mpp.BroadcastResponse>;
+    /** Validates an MPP credential without broadcasting it. */
+    verify(input: Mpp.RelayInput): Promise<Mpp.VerifyResponse>;
+};
+/** Creates an adapter for Tempo charge credentials. */
+export declare function create(options: create.Options): Adapter;
+export declare namespace create {
+    /** Dependencies used to validate and broadcast Tempo credentials. */
+    type Options = {
+        /** Default Tempo chain for challenges that omit a chain id. */
+        chainId: number;
+        /** Optional account used to sponsor Tempo pull transactions. */
+        feePayer?: LocalAccount | undefined;
+        /** Resolves a Tempo client for each credential chain. */
+        getClient: Viem.GetClient;
+        /** Address-screening provider. */
+        provider?: Screening.Provider | undefined;
+        /** Reports an unexpected relay failure without passing through its cause. */
+        reportUnknown?: ((options: {
+            operation: 'broadcast' | 'verify';
+        }) => void) | undefined;
+        /** Cache used for screening results. */
+        screeningStore: Store.Store;
+        /** Screening-cache duration. @default `Ttl.days(1)` */
+        screeningTtl?: number | undefined;
+        /** Durable state used for MPPX replay protection. */
+        state: Store.State;
+        /** Measures a named relay operation. */
+        time?: (<value>(name: string, fn: () => Promise<value>) => Promise<value>) | undefined;
+    };
+}
+//# sourceMappingURL=Adapter.d.ts.map

package/dist/apps/mpp/internal/Adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Adapter.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,KAAK,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAEhC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAI3C,8BAA8B;AAC9B,MAAM,MAAM,OAAO,GAAG;IACpB,6CAA6C;IAC7C,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAChE,2DAA2D;IAC3D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;CAC3D,CAAA;AAED,uDAAuD;AACvD,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAsEvD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qEAAqE;IACrE,KAAK,OAAO,GAAG;QACb,+DAA+D;QAC/D,OAAO,EAAE,MAAM,CAAA;QACf,gEAAgE;QAChE,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,yDAAyD;QACzD,SAAS,EAAE,IAAI,CAAC,SAAS,CAAA;QACzB,kCAAkC;QAClC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAA;QACzC,6EAA6E;QAC7E,aAAa,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;YAAE,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;SAAE,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;QACtF,wCAAwC;QACxC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAA;QAC3B,uDAAuD;QACvD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,qDAAqD;QACrD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;QAClB,wCAAwC;QACxC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAA;KACvF,CAAA;CACF"}

package/dist/apps/mpp/internal/Adapter.js

@@ -0,0 +1,66 @@
+import * as Mppx from 'mppx';
+import { tempo } from 'mppx/server';
+import * as Store from '../../../internal/Store.js';
+import * as Mpp from '../Mpp.js';
+import * as MppError from './Error.js';
+import * as Screening from './Screening.js';
+import * as ScreenManager from './ScreenManager.js';
+import * as Utils from './Utils.js';
+/** Creates an adapter for Tempo charge credentials. */
+export function create(options) {
+    const { chainId, feePayer, getClient, provider = Screening.allowAll, reportUnknown, screeningStore, screeningTtl = Screening.defaultTtl, state, time = (_, fn) => fn(), } = options;
+    const screenManager = ScreenManager.create({
+        chainId,
+        provider,
+        store: screeningStore,
+        ttl: screeningTtl,
+    });
+    const methods = [
+        tempo.charge({
+            ...(feePayer ? { feePayer } : {}),
+            getClient: ({ chainId: chainId_option }) => getClient(chainId_option),
+            store: Utils.mppxStore(state),
+        }),
+    ];
+    /** Validates and screens a credential, rejecting when either check fails. */
+    async function validateOrThrow(input) {
+        const result = await time('mpp_validate', () => Mppx.Method.validateCredential(methods, Mppx.Credential.from(input)));
+        await time('mpp_screen', () => screenManager.screen(Utils.addresses(result)));
+    }
+    function failure(cause, operation) {
+        const error = MppError.map(cause);
+        if (error.code === Mpp.relayErrorCode.unknown)
+            reportUnknown?.({ operation });
+        return { error, success: false };
+    }
+    return {
+        async broadcast(input) {
+            try {
+                await validateOrThrow(input);
+                const result = await time('mpp_broadcast', () => Mppx.Method.broadcastCredential(methods, Mppx.Credential.from(input)));
+                return {
+                    receipt: {
+                        ...(result.externalId ? { externalId: result.externalId } : {}),
+                        method: result.method,
+                        reference: result.reference,
+                        timestamp: result.timestamp,
+                    },
+                    success: true,
+                };
+            }
+            catch (cause) {
+                return failure(cause, 'broadcast');
+            }
+        },
+        async verify(input) {
+            try {
+                await validateOrThrow(input);
+                return { success: true };
+            }
+            catch (cause) {
+                return failure(cause, 'verify');
+            }
+        },
+    };
+}
+//# sourceMappingURL=Adapter.js.map

package/dist/apps/mpp/internal/Adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Adapter.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAInC,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAChC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AAUnC,uDAAuD;AACvD,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,MAAM,EACJ,OAAO,EACP,QAAQ,EACR,SAAS,EACT,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAC7B,aAAa,EACb,cAAc,EACd,YAAY,GAAG,SAAS,CAAC,UAAU,EACnC,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GACvB,GAAG,OAAO,CAAA;IACX,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;QACzC,OAAO;QACP,QAAQ;QACR,KAAK,EAAE,cAAc;QACrB,GAAG,EAAE,YAAY;KAClB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM,CAAC;YACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,SAAS,CAAC,cAA0C,CAAC;YACvD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;SAC9B,CAAC;KACM,CAAA;IAEV,6EAA6E;IAC7E,KAAK,UAAU,eAAe,CAAC,KAAqB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAC7C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrE,CAAA;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,SAAS,OAAO,CAAC,KAAc,EAAE,SAAiC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,cAAc,CAAC,OAAO;YAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC7E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAW,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAC9C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACtE,CAAA;gBACD,OAAO;oBACL,OAAO,EAAE;wBACP,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/D,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B;oBACD,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/apps/mpp/internal/Error.d.ts

@@ -0,0 +1,4 @@
+import * as Mpp from '../Mpp.js';
+/** Maps an MPPX failure to the public relay error contract. */
+export declare function map(cause: unknown): Mpp.RelayError;
+//# sourceMappingURL=Error.d.ts.map

package/dist/apps/mpp/internal/Error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Error.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Error.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAIhC,+DAA+D;AAC/D,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,UAAU,CAmClD"}

package/dist/apps/mpp/internal/Error.js

@@ -0,0 +1,41 @@
+import * as Mppx from 'mppx';
+import * as Mpp from '../Mpp.js';
+import * as Policy from './Policy.js';
+import * as ScreenManager from './ScreenManager.js';
+/** Maps an MPPX failure to the public relay error contract. */
+export function map(cause) {
+    const message = cause instanceof Error ? cause.message : undefined;
+    switch (true) {
+        case cause instanceof ScreenManager.RejectedError:
+            return error(Mpp.relayErrorCode.screenRejected, 'Address screening rejected the payment.');
+        case cause instanceof Policy.UnsupportedChainError:
+        case cause instanceof Mppx.Errors.PaymentMethodUnsupportedError:
+            return error(Mpp.relayErrorCode.unsupported, message);
+        case cause instanceof Policy.PolicyDeniedError:
+            return error(Mpp.relayErrorCode.policyDenied, message);
+        case cause instanceof Mppx.Errors.PaymentExpiredError:
+            return error(Mpp.relayErrorCode.expired, message);
+        case cause instanceof Mppx.Errors.InsufficientBalanceError:
+        case cause instanceof Mppx.Errors.PaymentInsufficientError:
+            return error(Mpp.relayErrorCode.insufficientFunds, message);
+        case cause instanceof Mppx.Errors.InvalidChallengeError:
+        case cause instanceof Mppx.Errors.VerificationFailedError:
+            return error(/\balready (?:been )?used\b/i.test(message ?? '')
+                ? Mpp.relayErrorCode.alreadyUsed
+                : Mpp.relayErrorCode.invalidPayment, message);
+        case cause instanceof Mppx.Errors.InvalidPayloadError:
+        case cause instanceof Mppx.Errors.InvalidSignatureError:
+        case cause instanceof Mppx.Errors.MalformedCredentialError:
+            return error(Mpp.relayErrorCode.invalidPayment, message);
+        case message?.toLowerCase().includes('simulation'):
+            return error(Mpp.relayErrorCode.simulationFailed, message);
+        case message?.toLowerCase().includes('broadcast'):
+            return error(Mpp.relayErrorCode.broadcastFailed, message);
+        default:
+            return error(Mpp.relayErrorCode.unknown, message);
+    }
+}
+function error(code, message) {
+    return message === undefined ? { code } : { code, message };
+}
+//# sourceMappingURL=Error.js.map

package/dist/apps/mpp/internal/Error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Error.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,OAAO,KAAK,GAAG,MAAM,WAAW,CAAA;AAChC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,KAAc;IAChC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAElE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,YAAY,aAAa,CAAC,aAAa;YAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAA;QAC5F,KAAK,KAAK,YAAY,MAAM,CAAC,qBAAqB,CAAC;QACnD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,6BAA6B;YAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACvD,KAAK,KAAK,YAAY,MAAM,CAAC,iBAAiB;YAC5C,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACxD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACnD,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAC3D,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACxD,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAA;QAC7D,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACxD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,uBAAuB;YACvD,OAAO,KAAK,CACV,6BAA6B,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC/C,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW;gBAChC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,EACrC,OAAO,CACR,CAAA;QACH,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACtD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACxD,KAAK,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACxD,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAC1D,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YAChD,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QAC5D,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QAC3D;YACE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,IAAwB,EAAE,OAA2B;IAClE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC7D,CAAC"}

package/dist/apps/mpp/internal/Idempotency.d.ts

@@ -0,0 +1,33 @@
+import * as core_Idempotency from '../../../internal/Idempotency.js';
+import type * as Mpp from '../Mpp.js';
+/**
+ * API-level retry coordination for `POST /v1/mpp/broadcast`, backed by the
+ * shared coordinator in `internal/Idempotency.ts`.
+ *
+ * MPPX consumes payment proofs, preventing settlement replay. This module instead lets a caller recover a successful receipt after a transport timeout.
+ */
+/** Identity for one caller-supplied idempotent broadcast request. */
+export type Identity = core_Idempotency.Identity;
+/** Returns a stable digest without retaining credential contents in durable state. */
+export declare function inputHash(input: Mpp.RelayInput): string;
+/** Claims a broadcast request or returns its current outcome. */
+export declare function claim(options: claim.Options): Promise<claim.Result>;
+export declare namespace claim {
+    /** Outcome from attempting to claim an idempotency key. */
+    type Result = core_Idempotency.claim.Result<Mpp.BroadcastResponse>;
+    /** Dependencies for claiming one idempotency key. */
+    type Options = core_Idempotency.claim.Options;
+}
+/** Persists a successful response for an owned request claim. */
+export declare function complete(options: complete.Options): Promise<void>;
+export declare namespace complete {
+    /** Dependencies for persisting one terminal broadcast response. */
+    type Options = core_Idempotency.complete.Options<Mpp.BroadcastResponse>;
+}
+/** Releases an owned retryable request claim. */
+export declare function release(options: release.Options): Promise<void>;
+export declare namespace release {
+    /** Dependencies for releasing one idempotency claim. */
+    type Options = core_Idempotency.release.Options;
+}
+//# sourceMappingURL=Idempotency.d.ts.map

package/dist/apps/mpp/internal/Idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Idempotency.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,gBAAgB,MAAM,kCAAkC,CAAA;AAEpE,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AAErC;;;;;GAKG;AAEH,qEAAqE;AACrE,MAAM,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAA;AAYhD,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,UAE9C;AAED,iEAAiE;AACjE,wBAAgB,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAEnE;AAED,MAAM,CAAC,OAAO,WAAW,KAAK,CAAC;IAC7B,2DAA2D;IAC3D,KAAK,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAElE,qDAAqD;IACrD,KAAK,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAA;CAC9C;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,mEAAmE;IACnE,KAAK,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;CACxE;AAED,iDAAiD;AACjD,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,wDAAwD;IACxD,KAAK,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAA;CAChD"}

package/dist/apps/mpp/internal/Idempotency.js

@@ -0,0 +1,28 @@
+import * as core_Idempotency from '../../../internal/Idempotency.js';
+import * as Ttl from '../../../internal/Ttl.js';
+const broadcast = core_Idempotency.create({
+    namespace: 'mpp:relay:v1',
+    // Covers the confirmation wait after a credential has passed its
+    // five-second validity window.
+    pendingTtl: Ttl.minutes(1),
+    // Retains a successful settlement receipt for client recovery after
+    // transport failures.
+    receiptTtl: Ttl.days(1),
+});
+/** Returns a stable digest without retaining credential contents in durable state. */
+export function inputHash(input) {
+    return core_Idempotency.inputHash(input);
+}
+/** Claims a broadcast request or returns its current outcome. */
+export function claim(options) {
+    return broadcast.claim(options);
+}
+/** Persists a successful response for an owned request claim. */
+export function complete(options) {
+    return broadcast.complete(options);
+}
+/** Releases an owned retryable request claim. */
+export function release(options) {
+    return broadcast.release(options);
+}
+//# sourceMappingURL=Idempotency.js.map

package/dist/apps/mpp/internal/Idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Idempotency.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,gBAAgB,MAAM,kCAAkC,CAAA;AACpE,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAA;AAa/C,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAwB;IAC/D,SAAS,EAAE,cAAc;IACzB,iEAAiE;IACjE,+BAA+B;IAC/B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1B,oEAAoE;IACpE,sBAAsB;IACtB,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;CACxB,CAAC,CAAA;AAEF,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,KAAK,CAAC,OAAsB;IAC1C,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;AACjC,CAAC;AAUD,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,OAAyB;IAChD,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAOD,iDAAiD;AACjD,MAAM,UAAU,OAAO,CAAC,OAAwB;IAC9C,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AACnC,CAAC"}

package/dist/apps/mpp/internal/Policy.d.ts

@@ -0,0 +1,46 @@
+import type { LocalAccount } from 'viem/accounts';
+import type * as Auth from '../../../internal/Auth.js';
+import type * as Db from '../../../db/Db.js';
+import type * as Mpp from '../Mpp.js';
+/** Resolves the chain declared by a Tempo charge challenge. */
+export declare function chainId(input: Mpp.RelayInput): number | undefined;
+/** Whether a Tempo charge credential requests platform fee sponsorship. */
+export declare function requiresFeePayer(input: Mpp.RelayInput): boolean;
+/** Refuses credentials outside the chains served by this API deployment. */
+export declare function assertSupportedChain(options: assertSupportedChain.Options): void;
+export declare namespace assertSupportedChain {
+    /** Chain-selection inputs. */
+    type Options = {
+        /** Resolved credential chain. */
+        chainId: number;
+        /** Chains served by this API deployment. */
+        supportedChainIds: ReadonlySet<number>;
+    };
+}
+/** Authorizes managed fee sponsorship for one broadcast request. */
+export declare function authorizeFeePayer(options: authorizeFeePayer.Options): Promise<LocalAccount | undefined>;
+export declare namespace authorizeFeePayer {
+    /** Dependencies used to authorize managed fee sponsorship. */
+    type Options = {
+        /** Credential chain. */
+        chainId: number;
+        /** Primary database for authoritative billing enforcement. */
+        db: Db.Db;
+        /** Managed fee-payer account, when configured. */
+        feePayer?: LocalAccount | undefined;
+        /** MPP credential being broadcast. */
+        input: Mpp.RelayInput;
+        /** Authenticated request principal. */
+        principal?: Auth.Principal | undefined;
+    };
+}
+/** Raised when an MPP credential selects a chain this deployment does not serve. */
+export declare class UnsupportedChainError extends Error {
+    name: string;
+    constructor(chainId: number);
+}
+/** Raised when a caller is not eligible for managed fee sponsorship. */
+export declare class PolicyDeniedError extends Error {
+    name: string;
+}
+//# sourceMappingURL=Policy.d.ts.map

package/dist/apps/mpp/internal/Policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Policy.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,OAAO,KAAK,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAG5C,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AAErC,+DAA+D;AAC/D,wBAAgB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAIjE;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,WAGrD;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,CAAC,OAAO,QAGzE;AAED,MAAM,CAAC,OAAO,WAAW,oBAAoB,CAAC;IAC5C,8BAA8B;IAC9B,KAAK,OAAO,GAAG;QACb,iCAAiC;QACjC,OAAO,EAAE,MAAM,CAAA;QACf,4CAA4C;QAC5C,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;KACvC,CAAA;CACF;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,CAAC,OAAO,GACjC,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAiBnC;AAED,MAAM,CAAC,OAAO,WAAW,iBAAiB,CAAC;IACzC,8DAA8D;IAC9D,KAAK,OAAO,GAAG;QACb,wBAAwB;QACxB,OAAO,EAAE,MAAM,CAAA;QACf,8DAA8D;QAC9D,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QACT,kDAAkD;QAClD,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;QACnC,sCAAsC;QACtC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAA;QACrB,uCAAuC;QACvC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;KACvC,CAAA;CACF;AAYD,oFAAoF;AACpF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAAqC;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED,wEAAwE;AACxE,qBAAa,iBAAkB,SAAQ,KAAK;IACjC,IAAI,SAAiC;CAC/C"}

package/dist/apps/mpp/internal/Policy.js

@@ -0,0 +1,57 @@
+import * as Viem from '../../../internal/Viem.js';
+import * as Billing from '../../management/Billing.js';
+/** Resolves the chain declared by a Tempo charge challenge. */
+export function chainId(input) {
+    const request = input.challenge.request;
+    const details = record(request['methodDetails']);
+    return number(details?.['chainId']) ?? number(request['chainId']);
+}
+/** Whether a Tempo charge credential requests platform fee sponsorship. */
+export function requiresFeePayer(input) {
+    const request = input.challenge.request;
+    return record(request['methodDetails'])?.['feePayer'] === true && request['feePayer'] !== false;
+}
+/** Refuses credentials outside the chains served by this API deployment. */
+export function assertSupportedChain(options) {
+    const { chainId, supportedChainIds } = options;
+    if (!supportedChainIds.has(chainId))
+        throw new UnsupportedChainError(chainId);
+}
+/** Authorizes managed fee sponsorship for one broadcast request. */
+export async function authorizeFeePayer(options) {
+    const { chainId, db, feePayer, input, principal } = options;
+    if (!feePayer || !requiresFeePayer(input))
+        return feePayer;
+    if (principal?.type !== 'api_key')
+        throw new PolicyDeniedError('Fee sponsorship requires an API key.');
+    if (!Viem.isMainnet(chainId))
+        return feePayer;
+    if (principal.environment !== 'production')
+        throw new PolicyDeniedError('Mainnet fee sponsorship requires a production API key.');
+    const status = await Billing.status(db, principal.orgId);
+    if (status !== 'active')
+        throw new PolicyDeniedError(status === 'past_due'
+            ? 'Billing is past due.'
+            : 'Active billing is required for mainnet fee sponsorship.');
+    return feePayer;
+}
+function record(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function number(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) ? value : undefined;
+}
+/** Raised when an MPP credential selects a chain this deployment does not serve. */
+export class UnsupportedChainError extends Error {
+    name = 'Mpp.Policy.UnsupportedChainError';
+    constructor(chainId) {
+        super(`Unsupported chain id ${chainId}.`);
+    }
+}
+/** Raised when a caller is not eligible for managed fee sponsorship. */
+export class PolicyDeniedError extends Error {
+    name = 'Mpp.Policy.PolicyDeniedError';
+}
+//# sourceMappingURL=Policy.js.map

package/dist/apps/mpp/internal/Policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Policy.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Policy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAA;AAGtD,+DAA+D;AAC/D,MAAM,UAAU,OAAO,CAAC,KAAqB;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAqB;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAA;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,CAAA;AACjG,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,OAAqC;IACxE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAA;IAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;AAC/E,CAAC;AAYD,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAkC;IAElC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1D,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAC/B,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAA;IACrE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7C,IAAI,SAAS,CAAC,WAAW,KAAK,YAAY;QACxC,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,CAAC,CAAA;IAEvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,MAAM,KAAK,QAAQ;QACrB,MAAM,IAAI,iBAAiB,CACzB,MAAM,KAAK,UAAU;YACnB,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,yDAAyD,CAC9D,CAAA;IACH,OAAO,QAAQ,CAAA;AACjB,CAAC;AAkBD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACrF,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,kCAAkC,CAAA;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,OAAO,GAAG,CAAC,CAAA;IAC3C,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,8BAA8B,CAAA;CAC/C"}

package/dist/apps/mpp/internal/ScreenManager.d.ts

@@ -0,0 +1,27 @@
+import * as Store from '../../../internal/Store.js';
+import * as Screening from './Screening.js';
+/** Coordinates concurrent cached screening before credential processing. */
+export type Manager = {
+    /** Rejects when any payment participant fails screening. */
+    screen(addresses: readonly string[]): Promise<void>;
+};
+/** Creates a cached address-screening manager. */
+export declare function create(options: create.Options): Manager;
+export declare namespace create {
+    /** Dependencies for cached address screening. */
+    type Options = {
+        /** Tempo chain that owns the screened addresses. */
+        chainId: number;
+        /** Address-screening provider. */
+        provider?: Screening.Provider | undefined;
+        /** Cache used for screening results. */
+        store: Store.Store;
+        /** Cache duration. @default `Ttl.days(1)` */
+        ttl?: number | undefined;
+    };
+}
+/** Indicates that an address-screening provider rejected a participant. */
+export declare class RejectedError extends Error {
+    name: string;
+}
+//# sourceMappingURL=ScreenManager.d.ts.map

package/dist/apps/mpp/internal/ScreenManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScreenManager.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/ScreenManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C,4EAA4E;AAC5E,MAAM,MAAM,OAAO,GAAG;IACpB,4DAA4D;IAC5D,MAAM,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpD,CAAA;AAED,kDAAkD;AAClD,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAWvD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,iDAAiD;IACjD,KAAK,OAAO,GAAG;QACb,oDAAoD;QACpD,OAAO,EAAE,MAAM,CAAA;QACf,kCAAkC;QAClC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAA;QACzC,wCAAwC;QACxC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;QAClB,6CAA6C;QAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;CACF;AAED,2EAA2E;AAC3E,qBAAa,aAAc,SAAQ,KAAK;IAC7B,IAAI,SAAoC;CAClD"}

package/dist/apps/mpp/internal/ScreenManager.js

@@ -0,0 +1,18 @@
+import * as Store from '../../../internal/Store.js';
+import * as Screening from './Screening.js';
+/** Creates a cached address-screening manager. */
+export function create(options) {
+    const { chainId, provider = Screening.allowAll, store, ttl = Screening.defaultTtl } = options;
+    return {
+        async screen(addresses) {
+            const results = await Promise.all(addresses.map((address) => Screening.screen({ address, chainId, provider, store, ttl })));
+            if (results.some((result) => !result.allowed))
+                throw new RejectedError();
+        },
+    };
+}
+/** Indicates that an address-screening provider rejected a participant. */
+export class RejectedError extends Error {
+    name = 'Mpp.ScreenManager.RejectedError';
+}
+//# sourceMappingURL=ScreenManager.js.map

package/dist/apps/mpp/internal/ScreenManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScreenManager.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/ScreenManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAQ3C,kDAAkD;AAClD,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,CAAA;IAE7F,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CACzF,CAAA;YACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,aAAa,EAAE,CAAA;QAC1E,CAAC;KACF,CAAA;AACH,CAAC;AAgBD,2EAA2E;AAC3E,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,iCAAiC,CAAA;CAClD"}

package/dist/apps/mpp/internal/Screening.d.ts

@@ -0,0 +1,35 @@
+import * as Store from '../../../internal/Store.js';
+/** Address-screening result. */
+export type Result = {
+    allowed: boolean;
+};
+/** Address-screening provider. */
+export type Provider = {
+    /** Screens one normalized account address on a Tempo chain. */
+    screen(options: {
+        address: string;
+        chainId: number;
+    }): Promise<Result>;
+};
+/** Allows every address while the external screening provider is unconfigured. */
+export declare const allowAll: Provider;
+/** Screens one address, caching the provider result by chain and normalized address. */
+export declare function screen(options: screen.Options): Promise<Result>;
+export declare namespace screen {
+    /** Dependencies used to screen an address. */
+    type Options = {
+        /** Normalized account address. */
+        address: string;
+        /** Tempo chain identifier. */
+        chainId: number;
+        /** Address-screening provider. */
+        provider: Provider;
+        /** Cache used for provider results. */
+        store: Store.Store;
+        /** Cache duration. @default `Ttl.days(1)` */
+        ttl?: number | undefined;
+    };
+}
+/** Default address-screening cache lifetime (24 hours). */
+export declare const defaultTtl: number;
+//# sourceMappingURL=Screening.d.ts.map

package/dist/apps/mpp/internal/Screening.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Screening.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Screening.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AAGnD,gCAAgC;AAChC,MAAM,MAAM,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAEzC,kCAAkC;AAClC,MAAM,MAAM,QAAQ,GAAG;IACrB,+DAA+D;IAC/D,MAAM,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACvE,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,QAAQ,EAAE,QAItB,CAAA;AAED,wFAAwF;AACxF,wBAAsB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAOrE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,8CAA8C;IAC9C,KAAK,OAAO,GAAG;QACb,kCAAkC;QAClC,OAAO,EAAE,MAAM,CAAA;QACf,8BAA8B;QAC9B,OAAO,EAAE,MAAM,CAAA;QACf,kCAAkC;QAClC,QAAQ,EAAE,QAAQ,CAAA;QAClB,uCAAuC;QACvC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;QAClB,6CAA6C;QAC7C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;CACF;AAED,2DAA2D;AAC3D,eAAO,MAAM,UAAU,QAAc,CAAA"}

package/dist/apps/mpp/internal/Screening.js

@@ -0,0 +1,20 @@
+import * as Store from '../../../internal/Store.js';
+import * as Ttl from '../../../internal/Ttl.js';
+/** Allows every address while the external screening provider is unconfigured. */
+export const allowAll = {
+    async screen() {
+        return { allowed: true };
+    },
+};
+/** Screens one address, caching the provider result by chain and normalized address. */
+export async function screen(options) {
+    const { address, chainId, provider, store, ttl = defaultTtl } = options;
+    return Store.memoize(() => provider.screen({ address, chainId }), {
+        key: `mpp:screen:v1:${chainId}:${address.toLowerCase()}`,
+        store,
+        ttl,
+    });
+}
+/** Default address-screening cache lifetime (24 hours). */
+export const defaultTtl = Ttl.days(1);
+//# sourceMappingURL=Screening.js.map

package/dist/apps/mpp/internal/Screening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Screening.js","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Screening.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAA;AAW/C,kFAAkF;AAClF,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;CACF,CAAA;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAuB;IAClD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,UAAU,EAAE,GAAG,OAAO,CAAA;IACvE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;QAChE,GAAG,EAAE,iBAAiB,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE;QACxD,KAAK;QACL,GAAG;KACJ,CAAC,CAAA;AACJ,CAAC;AAkBD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA"}

package/dist/apps/mpp/internal/Sponsorship.d.ts

@@ -0,0 +1,36 @@
+import type { LocalAccount } from 'viem/accounts';
+import type * as Auth from '../../../internal/Auth.js';
+import type * as Db from '../../../db/Db.js';
+/** Wraps a managed fee payer to record its signed transaction before broadcast. */
+export declare function decorate(options: decorate.Options): LocalAccount;
+export declare namespace decorate {
+    /** Dependencies used to record one MPP-sponsored transaction. */
+    type Options = {
+        /** Account that MPPX uses to add the fee-payer signature. */
+        account: LocalAccount;
+        /** Records the signed transaction before it can reach the network. */
+        onSigned: (options: {
+            serializedTransaction: `0x${string}`;
+        }) => Promise<void>;
+    };
+}
+/** Records a sponsorship and atomically enforces its billing limits. */
+export declare function record(options: record.Options): Promise<void>;
+export declare namespace record {
+    /** Dependencies used to persist one MPP sponsorship. */
+    type Options = {
+        /** Primary database for billing enforcement and sponsorship state. */
+        db: Db.Db;
+        /** Cached database used for verified-token reads. */
+        dbCached: Db.Db;
+        /** API key that requested sponsorship. */
+        principal: Extract<Auth.Principal, {
+            type: 'api_key';
+        }>;
+        /** Final fee-payer-signed transaction, before broadcast. */
+        serializedTransaction: `0x${string}`;
+        /** Platform per-transaction cap in fee-token base units. */
+        txFeeLimit: bigint;
+    };
+}
+//# sourceMappingURL=Sponsorship.d.ts.map

package/dist/apps/mpp/internal/Sponsorship.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sponsorship.d.ts","sourceRoot":"","sources":["../../../../src/apps/mpp/internal/Sponsorship.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,KAAK,KAAK,IAAI,MAAM,2BAA2B,CAAA;AAEtD,OAAO,KAAK,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAQ5C,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,GAAG,YAAY,CAchE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,iEAAiE;IACjE,KAAK,OAAO,GAAG;QACb,6DAA6D;QAC7D,OAAO,EAAE,YAAY,CAAA;QACrB,sEAAsE;QACtE,QAAQ,EAAE,CAAC,OAAO,EAAE;YAAE,qBAAqB,EAAE,KAAK,MAAM,EAAE,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAC/E,CAAA;CACF;AAUD,wEAAwE;AACxE,wBAAsB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4EnE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,wDAAwD;IACxD,KAAK,OAAO,GAAG;QACb,sEAAsE;QACtE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QACT,qDAAqD;QACrD,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAA;QACf,0CAA0C;QAC1C,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,IAAI,EAAE,SAAS,CAAA;SAAE,CAAC,CAAA;QACvD,4DAA4D;QAC5D,qBAAqB,EAAE,KAAK,MAAM,EAAE,CAAA;QACpC,4DAA4D;QAC5D,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;CACF"}

package/dist/apps/mpp/internal/Sponsorship.js

@@ -0,0 +1,103 @@
+import { Hash } from 'ox';
+import { TxEnvelopeTempo } from 'ox/tempo';
+import { TokenId, Transaction } from 'viem/tempo';
+import * as BillingSettings from '../../../db/tables/billingSettings.js';
+import * as SponsoredTransactions from '../../../db/tables/sponsoredTransactions.js';
+import * as Fees from '../../../internal/Fees.js';
+import * as VerifiedTokens from '../../../internal/VerifiedTokens.js';
+import * as Viem from '../../../internal/Viem.js';
+import * as Billing from '../../management/Billing.js';
+import * as Policy from './Policy.js';
+/** Wraps a managed fee payer to record its signed transaction before broadcast. */
+export function decorate(options) {
+    const { account, onSigned } = options;
+    const signTransaction = account.signTransaction.bind(account);
+    return new Proxy(account, {
+        get(target, property, receiver) {
+            if (property !== 'signTransaction')
+                return Reflect.get(target, property, receiver);
+            return async (...parameters) => {
+                const serializedTransaction = await signTransaction(...parameters);
+                await onSigned({ serializedTransaction });
+                return serializedTransaction;
+            };
+        },
+    });
+}
+/** Records a sponsorship and atomically enforces its billing limits. */
+export async function record(options) {
+    const { db, dbCached, principal, serializedTransaction, txFeeLimit } = options;
+    const transaction = Transaction.deserialize(serializedTransaction);
+    if (!transaction.from)
+        throw new Policy.PolicyDeniedError('Fee-sponsored transaction must declare a sender.');
+    if (typeof transaction.chainId !== 'number')
+        throw new Policy.PolicyDeniedError('Fee-sponsored transaction must declare a chain id.');
+    const chainId = transaction.chainId;
+    const feeMax = Fees.maxOf(transaction);
+    if (feeMax === undefined)
+        throw new Policy.PolicyDeniedError('Fee-sponsored transaction must declare a fee limit.');
+    const feeToken = (() => {
+        try {
+            return transaction.feeToken === undefined
+                ? undefined
+                : TokenId.toAddress(transaction.feeToken);
+        }
+        catch {
+            throw new Policy.PolicyDeniedError('Fee-sponsored transaction uses an invalid fee token.');
+        }
+    })();
+    const mainnet = Viem.isMainnet(chainId);
+    const settings = mainnet ? await BillingSettings.get(db, principal.orgId) : undefined;
+    let currency;
+    if (mainnet) {
+        const verified = feeToken
+            ? (await VerifiedTokens.read(dbCached, chainId))?.byAddress.get(feeToken.toLowerCase())
+            : undefined;
+        if (!verified ||
+            verified.currency.toLowerCase() !== 'usd' ||
+            verified.decimals !== Fees.tokenDecimals)
+            throw new Policy.PolicyDeniedError('Fee-sponsored transaction uses an unsupported fee token.');
+        currency = verified.currency.toLowerCase();
+        const cap = (() => {
+            if (settings?.txFeeLimit == null)
+                return txFeeLimit;
+            const org = Billing.toBaseUnits(settings.txFeeLimit);
+            return org < txFeeLimit ? org : txFeeLimit;
+        })();
+        if (feeMax > cap)
+            throw new Policy.PolicyDeniedError('Transaction fee limit exceeded.');
+    }
+    const envelope = TxEnvelopeTempo.deserialize(serializedTransaction);
+    const signPayload = TxEnvelopeTempo.getFeePayerSignPayload(envelope, { sender: transaction.from });
+    const input = {
+        apiKeyId: principal.id,
+        billable: mainnet && principal.environment === 'production',
+        chainId,
+        ...(currency ? { currency } : {}),
+        environment: principal.environment,
+        feeMax: feeMax.toString(),
+        ...(feeToken ? { feeToken } : {}),
+        orgId: principal.orgId,
+        ...(principal.projectId === undefined ? {} : { projectId: principal.projectId }),
+        signPayload,
+        transaction: serializedTransaction,
+        transactionHash: Hash.keccak256(serializedTransaction),
+    };
+    if (settings?.spendLimit == null) {
+        await SponsoredTransactions.upsert(db, input);
+        return;
+    }
+    try {
+        await SponsoredTransactions.reserve(db, input, {
+            chainIds: [Viem.chainId.mainnet],
+            max: Billing.toBaseUnits(settings.spendLimit),
+            since: Billing.periodStart(settings.period),
+        });
+    }
+    catch (cause) {
+        if (cause instanceof SponsoredTransactions.PeriodSpendLimitError)
+            throw new Policy.PolicyDeniedError('Spend limit exceeded.');
+        throw cause;
+    }
+}
+//# sourceMappingURL=Sponsorship.js.map