server

type BroadcastFunc func(
	ctx context.Context,
	credential *mpp.Credential,
	request map[string]any,
) (*mpp.Receipt, error)

type BroadcastingIntent interface {
	ValidatingIntent
	Broadcast(ctx context.Context, credential *mpp.Credential, request map[string]any) (*mpp.Receipt, error)
}

type ChargeOffersBuilder interface {
	BuildChargeRequests(params ChargeParams) ([]map[string]any, error)
}

type ChargeParams struct {
	// EnableChallengeNonce opts into unique issuance after every replica has
	// nonce-aware verification. Leave false during the initial rolling upgrade.
	EnableChallengeNonce bool
	// Authorization is the incoming Authorization header value.
	Authorization string
	// PaymentAuthorization is the incoming Payment-Authorization header value.
	// Used when the handler was created with WithRequiresAuth(true).
	PaymentAuthorization string
	// Amount is the human-readable charge amount.
	Amount string
	// Currency overrides the method's default currency.
	Currency string
	// Recipient overrides the method's default recipient.
	Recipient string
	// ExternalID is copied into the request and echoed back in the Receipt.
	ExternalID string
	// Body is the actual request body to bind via the challenge digest. See
	// mpp.BodyDigest for how non-byte, non-string values are digested.
	Body any
	// Expires overrides the default Challenge expiry.
	Expires string
	// Description is exposed in the server-generated Challenge.
	Description string
	// Splits adds Tempo split-payment transfers under methodDetails.splits.
	Splits []tempo.SplitParams
	// FeePayer requests the sponsored Tempo flow when the method supports it.
	FeePayer bool
	// FeePayerURL points at a remote fee-payer signer.
	FeePayerURL string
	// SupportedModes advertises the Tempo submission modes allowed for this challenge.
	SupportedModes []tempo.ChargeMode
	// ChainID overrides the method's default Tempo chain ID.
	ChainID int
	// Meta stores opaque Challenge metadata.
	Meta map[string]string
	// MppxScope binds framework route/resource/query context into the request.
	MppxScope map[string]string
}

type ChargeRequestBuilder interface {
	BuildChargeRequest(params ChargeParams) (map[string]any, error)
}

type ChargeResult struct {
	// Challenge is returned when the client still needs to satisfy the payment.
	// With several offers it is the offer the submitted Credential echoed, or
	// the first offer otherwise.
	Challenge *mpp.Challenge
	// Challenges lists every offered Challenge in presentation order whenever
	// Challenge is set. It contains a single element for single-offer methods.
	Challenges []*mpp.Challenge
	// Credential is the verified client credential on success.
	Credential *mpp.Credential
	// Receipt acknowledges a successfully verified payment.
	Receipt *mpp.Receipt
}

type ComposeConfig struct {
	Mpp    *Mpp
	Params ChargeParams
}

type Intent interface {
	Name() string
	Verify(ctx context.Context, credential *mpp.Credential, request map[string]any) (*mpp.Receipt, error)
}

type IntentHooks struct {
	// Verify configures the legacy combined verification path.
	Verify VerifyFunc
	// Validate configures the advisory phase of a split verification path.
	Validate ValidateFunc
	// Broadcast configures the settlement phase of a split verification path.
	Broadcast BroadcastFunc
}

type Method interface {
	Name() string
	Intents() map[string]Intent
}

type Mpp struct {
	// contains filtered or unexported fields
}

type Option func(*Mpp)

type ValidateFunc func(
	ctx context.Context,
	credential *mpp.Credential,
	request map[string]any,
) (*Validation, error)

type ValidatingIntent interface {
	Intent
	Validate(ctx context.Context, credential *mpp.Credential, request map[string]any) (*Validation, error)
}

type Validation struct {
	// Challenge is the server-issued challenge echoed by the credential.
	Challenge mpp.ChallengeEcho
	// Credential is the accepted credential.
	Credential *mpp.Credential
	// Details contains method-specific validation metadata.
	Details map[string]any
	// Intent is the validated payment intent.
	Intent string
	// Method is the validated payment method.
	Method string
	// Request is the challenge request bound to the credential.
	Request map[string]any
	// Source is the optional payer identity.
	Source string
}

type VerifyFunc func(
	ctx context.Context,
	credential *mpp.Credential,
	request map[string]any,
) (*mpp.Receipt, error)

type VerifyParams struct {
	// EnableChallengeNonce opts into unique issuance after every replica has
	// nonce-aware verification. The default preserves legacy issuance for rollout.
	EnableChallengeNonce bool
	// Authorization is the incoming Authorization header value.
	Authorization string
	// Intent verifies Credentials for this request.
	Intent Intent
	// Request is the canonical request shape the Challenge binds to.
	Request map[string]any
	// Body is the actual request body bytes/string/object the digest binds to.
	// When set, issued challenges include a body digest and submitted
	// credentials must echo a digest matching this value. See mpp.BodyDigest
	// for how non-byte, non-string values are digested.
	Body any
	// Realm is the expected server realm.
	Realm string
	// SecretKey signs and verifies Challenge IDs.
	SecretKey string
	// Method is the payment method token, for example "tempo".
	Method string
	// Description is copied into a newly issued Challenge.
	Description string
	// Meta stores opaque Challenge metadata.
	Meta map[string]string
	// Expires overrides the default Challenge expiry.
	Expires string
	// Header selects the HTTP field for the Payment credential. Empty defaults
	// to Authorization. Payment-Authorization is advertised when set.
	Header string
}

type VerifyResult struct {
	// Challenge is returned when the server needs the client to pay first.
	Challenge *mpp.Challenge
	// Credential is the parsed client credential on success.
	Credential *mpp.Credential
	// Receipt acknowledges successful verification.
	Receipt *mpp.Receipt
}