@1sat/serve 0.0.1

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { type AuthContext, type AuthenticatedHandlerOptions, type AuthHandler, BunTransport, createAuthenticatedHandler, } from './transport.js';
+export { type OnInternalize, type PaidContext, type PaidHandler, type VerifiedPayment, withPayment, type WithPaymentOptions, } from './payment.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,YAAY,EACZ,0BAA0B,GAC1B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,WAAW,EACX,KAAK,kBAAkB,GACvB,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { BunTransport, createAuthenticatedHandler, } from './transport.js';
+export { withPayment, } from './payment.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,YAAY,EACZ,0BAA0B,GAC1B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAKN,WAAW,GAEX,MAAM,cAAc,CAAA"}

package/dist/payment.d.ts

@@ -0,0 +1,46 @@
+import { type InternalizeActionArgs, type WalletInterface } from '@bsv/sdk';
+import type { AuthContext, AuthHandler } from './transport.js';
+/** A payment verified against the server-derived BRC-29 script. */
+export interface VerifiedPayment {
+    /** The payment transaction as AtomicBEEF bytes. */
+    tx: number[];
+    /** Index of the output that pays the server. */
+    outputIndex: number;
+    /** Satoshis on that output. */
+    satoshis: number;
+    derivationPrefix: string;
+    derivationSuffix: string;
+    /** The paying peer's identity key. */
+    senderIdentityKey: string;
+}
+/** The context a paid handler receives — the auth context plus the payment. */
+export interface PaidContext extends AuthContext {
+    payment: VerifiedPayment;
+}
+export type PaidHandler = (ctx: PaidContext) => Promise<Response> | Response;
+/**
+ * Decides how the verified payment is recorded. Receives the default
+ * 'wallet payment' internalize args (general balance) and returns the args to
+ * actually use — e.g. a 'basket insertion' with tags. Defaults to the wallet
+ * payment when omitted.
+ */
+export type OnInternalize = (payment: VerifiedPayment, defaults: InternalizeActionArgs) => InternalizeActionArgs | Promise<InternalizeActionArgs>;
+export interface WithPaymentOptions {
+    /** Server wallet that issued the auth session; also records the payment. */
+    wallet: WalletInterface;
+    /** Flat price, or a per-request price function. */
+    price: number | ((ctx: AuthContext) => number | Promise<number>);
+    /** Optional hook to redirect the internalize (e.g. into a basket). */
+    onInternalize?: OnInternalize;
+    /** Action-level description recorded with the internalize (5..50 chars). */
+    description?: string;
+}
+/**
+ * Wraps a handler behind the BRC-105 payment flow. Wire-identical to
+ * `@bsv/payment-express-middleware`: an unpaid request gets a 402 with a
+ * derivation-prefix nonce; the paid retry is verified against the
+ * server-derived BRC-29 script and internalized (via `onInternalize`) before
+ * the wrapped handler runs. The buyer identity comes from the auth layer.
+ */
+export declare function withPayment(options: WithPaymentOptions, handler: PaidHandler): AuthHandler;
+//# sourceMappingURL=payment.d.ts.map

package/dist/payment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../src/payment.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,qBAAqB,EAK1B,KAAK,eAAe,EAIpB,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAM9D,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC/B,mDAAmD;IACnD,EAAE,EAAE,MAAM,EAAE,CAAA;IACZ,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,sCAAsC;IACtC,iBAAiB,EAAE,MAAM,CAAA;CACzB;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC/C,OAAO,EAAE,eAAe,CAAA;CACxB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAC3B,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,qBAAqB,KAC3B,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAE3D,MAAM,WAAW,kBAAkB;IAClC,4EAA4E;IAC5E,MAAM,EAAE,eAAe,CAAA;IACvB,mDAAmD;IACnD,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAChE,sEAAsE;IACtE,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAQD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAC1B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,WAAW,GAClB,WAAW,CAwGb"}

package/dist/payment.js

@@ -0,0 +1,149 @@
+import { P2PKH, PublicKey, Transaction, Utils, createNonce, verifyNonce, } from '@bsv/sdk';
+/** BRC-29 protocol ID for wallet payments (matches @1sat/types). */
+const BRC29_PROTOCOL_ID = [2, '3241645161d8'];
+const PAYMENT_VERSION = '1.0';
+/**
+ * Wraps a handler behind the BRC-105 payment flow. Wire-identical to
+ * `@bsv/payment-express-middleware`: an unpaid request gets a 402 with a
+ * derivation-prefix nonce; the paid retry is verified against the
+ * server-derived BRC-29 script and internalized (via `onInternalize`) before
+ * the wrapped handler runs. The buyer identity comes from the auth layer.
+ */
+export function withPayment(options, handler) {
+    const { wallet, onInternalize } = options;
+    return async (ctx) => {
+        if (ctx.identityKey === 'unknown') {
+            return json(401, {
+                status: 'error',
+                description: 'identity required for payment',
+            });
+        }
+        const price = typeof options.price === 'function'
+            ? await options.price(ctx)
+            : options.price;
+        const rawPayment = ctx.request.headers.get('x-bsv-payment');
+        if (!rawPayment) {
+            const derivationPrefix = await createNonce(wallet);
+            return new Response(JSON.stringify({
+                status: 'error',
+                code: 'ERR_PAYMENT_REQUIRED',
+                satoshisRequired: price,
+                description: `A payment of ${price} satoshis is required.`,
+            }), {
+                status: 402,
+                headers: {
+                    'content-type': 'application/json',
+                    'x-bsv-payment-version': PAYMENT_VERSION,
+                    'x-bsv-payment-satoshis-required': String(price),
+                    'x-bsv-payment-derivation-prefix': derivationPrefix,
+                },
+            });
+        }
+        let pay;
+        try {
+            pay = JSON.parse(rawPayment);
+        }
+        catch {
+            return json(400, {
+                status: 'error',
+                description: 'malformed x-bsv-payment header',
+            });
+        }
+        let validNonce = false;
+        try {
+            validNonce = await verifyNonce(pay.derivationPrefix, wallet);
+        }
+        catch {
+            validNonce = false;
+        }
+        if (!validNonce) {
+            return json(400, {
+                status: 'error',
+                code: 'ERR_INVALID_DERIVATION_PREFIX',
+                description: 'derivation prefix is not a nonce we issued',
+            });
+        }
+        let verified;
+        try {
+            verified = await verifyPayment(wallet, ctx.identityKey, pay, price);
+        }
+        catch (err) {
+            return json(400, {
+                status: 'error',
+                code: 'ERR_PAYMENT_INVALID',
+                description: err instanceof Error ? err.message : String(err),
+            });
+        }
+        const defaults = {
+            tx: verified.tx,
+            outputs: [
+                {
+                    outputIndex: verified.outputIndex,
+                    protocol: 'wallet payment',
+                    paymentRemittance: {
+                        derivationPrefix: verified.derivationPrefix,
+                        derivationSuffix: verified.derivationSuffix,
+                        senderIdentityKey: verified.senderIdentityKey,
+                    },
+                },
+            ],
+            description: (options.description ?? 'payment for request').slice(0, 50),
+        };
+        try {
+            await wallet.internalizeAction(onInternalize ? await onInternalize(verified, defaults) : defaults);
+        }
+        catch (err) {
+            return json(400, {
+                status: 'error',
+                code: 'ERR_PAYMENT_FAILED',
+                description: err instanceof Error ? err.message : String(err),
+            });
+        }
+        const response = await handler({ ...ctx, payment: verified });
+        const buf = await response.arrayBuffer();
+        const headers = new Headers(response.headers);
+        headers.set('x-bsv-payment-satoshis-paid', String(verified.satoshis));
+        return new Response(buf, { status: response.status, headers });
+    };
+}
+/**
+ * Verifies the paid output: re-derives the BRC-29 P2PKH script from the buyer
+ * key + derivation and confirms an output pays it for at least `price`. This
+ * is the check `internalizeAction` performs for 'wallet payment' but skips for
+ * 'basket insertion', so we do it ourselves.
+ */
+async function verifyPayment(wallet, senderIdentityKey, pay, price) {
+    const { publicKey } = await wallet.getPublicKey({
+        protocolID: BRC29_PROTOCOL_ID,
+        keyID: `${pay.derivationPrefix} ${pay.derivationSuffix}`,
+        counterparty: senderIdentityKey,
+        forSelf: true,
+    });
+    const expectedScript = new P2PKH()
+        .lock(PublicKey.fromString(publicKey).toAddress())
+        .toHex();
+    const txBytes = Utils.toArray(pay.transaction, 'base64');
+    const tx = Transaction.fromAtomicBEEF(txBytes);
+    for (let i = 0; i < tx.outputs.length; i++) {
+        const out = tx.outputs[i];
+        if (out?.lockingScript.toHex() === expectedScript &&
+            (out.satoshis ?? 0) >= price) {
+            return {
+                tx: txBytes,
+                outputIndex: i,
+                satoshis: out.satoshis ?? 0,
+                derivationPrefix: pay.derivationPrefix,
+                derivationSuffix: pay.derivationSuffix,
+                senderIdentityKey,
+            };
+        }
+    }
+    throw new Error('no output pays the derived script for the required amount');
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+//# sourceMappingURL=payment.js.map

package/dist/payment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../src/payment.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,EAGL,WAAW,EACX,WAAW,GACX,MAAM,UAAU,CAAA;AAGjB,oEAAoE;AACpE,MAAM,iBAAiB,GAAmB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;AAC7D,MAAM,eAAe,GAAG,KAAK,CAAA;AAmD7B;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAC1B,OAA2B,EAC3B,OAAoB;IAEpB,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IACzC,OAAO,KAAK,EAAE,GAAgB,EAAqB,EAAE;QACpD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,+BAA+B;aAC5C,CAAC,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GACV,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU;YAClC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAC1B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;QAEjB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,gBAAgB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;YAClD,OAAO,IAAI,QAAQ,CAClB,IAAI,CAAC,SAAS,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,gBAAgB,EAAE,KAAK;gBACvB,WAAW,EAAE,gBAAgB,KAAK,wBAAwB;aAC1D,CAAC,EACF;gBACC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACR,cAAc,EAAE,kBAAkB;oBAClC,uBAAuB,EAAE,eAAe;oBACxC,iCAAiC,EAAE,MAAM,CAAC,KAAK,CAAC;oBAChD,iCAAiC,EAAE,gBAAgB;iBACnD;aACD,CACD,CAAA;QACF,CAAC;QAED,IAAI,GAAkB,CAAA;QACtB,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAkB,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,gCAAgC;aAC7C,CAAC,CAAA;QACH,CAAC;QAED,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,IAAI,CAAC;YACJ,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACR,UAAU,GAAG,KAAK,CAAA;QACnB,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,+BAA+B;gBACrC,WAAW,EAAE,4CAA4C;aACzD,CAAC,CAAA;QACH,CAAC;QAED,IAAI,QAAyB,CAAA;QAC7B,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAA0B;YACvC,EAAE,EAAE,QAAQ,CAAC,EAAgB;YAC7B,OAAO,EAAE;gBACR;oBACC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,QAAQ,EAAE,gBAAgB;oBAC1B,iBAAiB,EAAE;wBAClB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;wBAC3C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;wBAC3C,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;qBAC7C;iBACD;aACD;YACD,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACxE,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,iBAAiB,CAC7B,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAClE,CAAA;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7C,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACrE,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC3B,MAAuB,EACvB,iBAAyB,EACzB,GAAkB,EAClB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QAC/C,UAAU,EAAE,iBAAiB;QAC7B,KAAK,EAAE,GAAG,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB,EAAE;QACxD,YAAY,EAAE,iBAAiB;QAC/B,OAAO,EAAE,IAAI;KACb,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,IAAI,KAAK,EAAE;SAChC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;SACjD,KAAK,EAAE,CAAA;IAET,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACxD,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACzB,IACC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,cAAc;YAC7C,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,EAC3B,CAAC;YACF,OAAO;gBACN,EAAE,EAAE,OAAO;gBACX,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;gBAC3B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,iBAAiB;aACjB,CAAA;QACF,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa;IAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAA;AACH,CAAC"}

package/dist/serialize.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Canonical byte serializations for BRC-104 general (authenticated) HTTP
+ * messages. These MUST match the client (`@bsv/sdk` AuthFetch /
+ * SimplifiedFetchTransport) byte-for-byte, or signature verification fails.
+ *
+ * Ported from the BSV `ExpressTransport` server, adapted to the web
+ * `Request`/`Response` model: the request body is the raw bytes received (not
+ * a parsed-then-restringified form), which is exactly what the client signed.
+ */
+/** A general HTTP response decoded from a signed message payload. */
+export interface DecodedResponse {
+    requestId: string;
+    status: number;
+    headers: Record<string, string>;
+    body?: number[];
+}
+/**
+ * Reproduces the signed payload for an incoming general request: request
+ * nonce, method, pathname, search, the signed subset of headers (sorted), and
+ * the body. `bodyBytes` is the raw request body, or null when there is none.
+ */
+export declare function buildRequestPayload(request: Request, bodyBytes: number[] | null): number[];
+/**
+ * Builds the payload the server signs for a general response: request id,
+ * status, the signed subset of response headers (sorted), and the body.
+ */
+export declare function buildResponsePayload(requestId: string, status: number, headers: Record<string, string>, body: number[]): number[];
+/** Decodes a signed general-response payload back into an HTTP response. */
+export declare function decodeResponse(payload: number[]): DecodedResponse;
+/** The request id (base64 of the first 32 payload bytes) of a general message. */
+export declare function requestIdOf(payload: number[]): string;
+//# sourceMappingURL=serialize.d.ts.map

package/dist/serialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../src/serialize.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,GACxB,MAAM,EAAE,CA6BV;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,EAAE,GACZ,MAAM,EAAE,CAgCV;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,eAAe,CAmBjE;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAErD"}

package/dist/serialize.js

@@ -0,0 +1,123 @@
+import { Utils } from '@bsv/sdk';
+/**
+ * Reproduces the signed payload for an incoming general request: request
+ * nonce, method, pathname, search, the signed subset of headers (sorted), and
+ * the body. `bodyBytes` is the raw request body, or null when there is none.
+ */
+export function buildRequestPayload(request, bodyBytes) {
+    const url = new URL(request.url);
+    const writer = new Utils.Writer();
+    const requestNonce = request.headers.get('x-bsv-auth-request-id');
+    writer.write(requestNonce ? Utils.toArray(requestNonce, 'base64') : []);
+    writer.writeVarIntNum(request.method.length);
+    writer.write(Utils.toArray(request.method));
+    if (url.pathname.length > 0) {
+        const pathname = Utils.toArray(url.pathname);
+        writer.writeVarIntNum(pathname.length);
+        writer.write(pathname);
+    }
+    else {
+        writer.writeVarIntNum(-1);
+    }
+    if (url.search.length > 0) {
+        const search = Utils.toArray(url.search);
+        writer.writeVarIntNum(search.length);
+        writer.write(search);
+    }
+    else {
+        writer.writeVarIntNum(-1);
+    }
+    writeSignedHeaders(writer, request.headers);
+    writeBody(writer, bodyBytes);
+    return writer.toArray();
+}
+/**
+ * Builds the payload the server signs for a general response: request id,
+ * status, the signed subset of response headers (sorted), and the body.
+ */
+export function buildResponsePayload(requestId, status, headers, body) {
+    const writer = new Utils.Writer();
+    writer.write(Utils.toArray(requestId, 'base64'));
+    writer.writeVarIntNum(status);
+    const included = [];
+    for (const [k, v] of Object.entries(headers)) {
+        const key = k.toLowerCase();
+        if ((key.startsWith('x-bsv-') || key === 'authorization') &&
+            !key.startsWith('x-bsv-auth')) {
+            included.push([key, v]);
+        }
+    }
+    included.sort(([a], [b]) => a.localeCompare(b));
+    writer.writeVarIntNum(included.length);
+    for (const [key, value] of included) {
+        const keyBytes = Utils.toArray(key, 'utf8');
+        writer.writeVarIntNum(keyBytes.length);
+        writer.write(keyBytes);
+        const valueBytes = Utils.toArray(value, 'utf8');
+        writer.writeVarIntNum(valueBytes.length);
+        writer.write(valueBytes);
+    }
+    // Response bodies always carry a real length prefix (0 when empty) — unlike
+    // request bodies, which use the -1 "absent" sentinel.
+    writer.writeVarIntNum(body.length);
+    if (body.length > 0)
+        writer.write(body);
+    return writer.toArray();
+}
+/** Decodes a signed general-response payload back into an HTTP response. */
+export function decodeResponse(payload) {
+    const reader = new Utils.Reader(payload);
+    const requestId = Utils.toBase64(reader.read(32));
+    const status = reader.readVarIntNum();
+    const headers = {};
+    const nHeaders = reader.readVarIntNum();
+    for (let i = 0; i < nHeaders; i++) {
+        const keyLen = reader.readVarIntNum();
+        const key = Utils.toUTF8(reader.read(keyLen));
+        const valueLen = reader.readVarIntNum();
+        headers[key] = Utils.toUTF8(reader.read(valueLen));
+    }
+    let body;
+    const bodyLen = reader.readVarIntNum();
+    if (bodyLen > 0)
+        body = reader.read(bodyLen);
+    return { requestId, status, headers, body };
+}
+/** The request id (base64 of the first 32 payload bytes) of a general message. */
+export function requestIdOf(payload) {
+    return Utils.toBase64(new Utils.Reader(payload).read(32));
+}
+function writeSignedHeaders(writer, headers) {
+    const included = [];
+    for (const [k, v] of headers.entries()) {
+        const key = k.toLowerCase();
+        const value = key === 'content-type' ? v.split(';')[0].trim() : v;
+        if ((key.startsWith('x-bsv-') ||
+            key === 'content-type' ||
+            key === 'authorization') &&
+            !key.startsWith('x-bsv-auth')) {
+            included.push([key, value]);
+        }
+    }
+    included.sort(([a], [b]) => a.localeCompare(b));
+    writer.writeVarIntNum(included.length);
+    for (const [key, value] of included) {
+        const keyBytes = Utils.toArray(key, 'utf8');
+        writer.writeVarIntNum(keyBytes.length);
+        writer.write(keyBytes);
+        const valueBytes = Utils.toArray(value, 'utf8');
+        writer.writeVarIntNum(valueBytes.length);
+        writer.write(valueBytes);
+    }
+}
+/** A present body writes its length then bytes; an absent body writes -1. */
+function writeBody(writer, bodyBytes) {
+    if (bodyBytes && bodyBytes.length > 0) {
+        writer.writeVarIntNum(bodyBytes.length);
+        writer.write(bodyBytes);
+    }
+    else {
+        writer.writeVarIntNum(-1);
+    }
+}
+//# sourceMappingURL=serialize.js.map

package/dist/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../src/serialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAoBhC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAgB,EAChB,SAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;IAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;IACjE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAEvE,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAE3C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAED,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC5B,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CACnC,SAAiB,EACjB,MAAc,EACd,OAA+B,EAC/B,IAAc;IAEd,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;IACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IAChD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IAE7B,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3B,IACC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,eAAe,CAAC;YACrD,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAC5B,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;IACF,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACzB,CAAC;IAED,4EAA4E;IAC5E,sDAAsD;IACtD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;AACxB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,OAAiB;IAC/C,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;IAErC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;QACrC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,IAA0B,CAAA;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;IACtC,IAAI,OAAO,GAAG,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,OAAiB;IAC5C,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB,EAAE,OAAgB;IACjE,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACjE,IACC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;YACxB,GAAG,KAAK,cAAc;YACtB,GAAG,KAAK,eAAe,CAAC;YACzB,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAC5B,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;QAC5B,CAAC;IACF,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACzB,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,MAAoB,EAAE,SAA0B;IAClE,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACxB,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;AACF,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,60 @@
+import { type AuthMessage, Peer, type RequestedCertificateSet, SessionManager, type Transport, type WalletInterface } from '@bsv/sdk';
+/** The authenticated context handed to a route handler. */
+export interface AuthContext {
+    /** The raw incoming request. */
+    request: Request;
+    /** Parsed URL of the request. */
+    url: URL;
+    /** The peer's BRC-103 identity key, or 'unknown' when unauthenticated. */
+    identityKey: string;
+}
+/** A route handler: receives the authenticated request, returns a response. */
+export type AuthHandler = (ctx: AuthContext) => Promise<Response> | Response;
+export interface AuthenticatedHandlerOptions {
+    /** Server wallet used to run the BRC-103/104 handshake and sign responses. */
+    wallet: WalletInterface;
+    /** The route handler invoked once a request is authenticated. */
+    handler: AuthHandler;
+    /**
+     * When true, requests with no auth headers are passed through with
+     * `identityKey = 'unknown'` (unsigned). When false (default), they get 401.
+     */
+    allowUnauthenticated?: boolean;
+    /** Certificates to request from the peer during the handshake. */
+    certificatesToRequest?: RequestedCertificateSet;
+    /** Reuse an existing session manager (defaults to a fresh one). */
+    sessionManager?: SessionManager;
+}
+declare const AUTH_HEADER_KEYS: readonly ["x-bsv-auth-version", "x-bsv-auth-identity-key", "x-bsv-auth-nonce", "x-bsv-auth-your-nonce", "x-bsv-auth-signature", "x-bsv-auth-request-id"];
+/**
+ * A BRC-103/104 mutual-auth `Transport` bound to Bun's `Request`/`Response`.
+ *
+ * Where the Express transport hijacks a mutable `res` and gates on `next()`,
+ * this models each request as a promise: it feeds the incoming message to the
+ * `Peer`, runs the route handler once the peer confirms the identity, and
+ * resolves the request's promise when the peer emits the signed reply through
+ * `send`. Wire-identical to the Express middleware.
+ */
+export declare class BunTransport implements Transport {
+    private readonly handler;
+    private readonly allowUnauthenticated;
+    private peer?;
+    private messageCallback?;
+    private readonly pendingNonGeneral;
+    private readonly pendingGeneral;
+    constructor(handler: AuthHandler, allowUnauthenticated: boolean);
+    setPeer(peer: Peer): void;
+    onData(callback: (message: AuthMessage) => Promise<void>): Promise<void>;
+    /** Delivers a signed message from the peer back to its pending request. */
+    send(message: AuthMessage): Promise<void>;
+    /** Handles one HTTP request end to end, returning the (signed) response. */
+    handleRequest(request: Request): Promise<Response>;
+    private handleHandshake;
+    private handleGeneral;
+    /** Runs the route handler and signs its response back to the peer. */
+    private runHandler;
+}
+/** Builds the Bun `fetch` handler that authenticates every request. */
+export declare function createAuthenticatedHandler(options: AuthenticatedHandlerOptions): (request: Request) => Promise<Response>;
+export { AUTH_HEADER_KEYS };
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,WAAW,EAChB,IAAI,EACJ,KAAK,uBAAuB,EAC5B,cAAc,EACd,KAAK,SAAS,EAEd,KAAK,eAAe,EACpB,MAAM,UAAU,CAAA;AAQjB,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC3B,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,iCAAiC;IACjC,GAAG,EAAE,GAAG,CAAA;IACR,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;AAE5E,MAAM,WAAW,2BAA2B;IAC3C,8EAA8E;IAC9E,MAAM,EAAE,eAAe,CAAA;IACvB,iEAAiE;IACjE,OAAO,EAAE,WAAW,CAAA;IACpB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,kEAAkE;IAClE,qBAAqB,CAAC,EAAE,uBAAuB,CAAA;IAC/C,mEAAmE;IACnE,cAAc,CAAC,EAAE,cAAc,CAAA;CAC/B;AAwBD,QAAA,MAAM,gBAAgB,0JAOZ,CAAA;AAEV;;;;;;;;GAQG;AACH,qBAAa,YAAa,YAAW,SAAS;IAO5C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAPtC,OAAO,CAAC,IAAI,CAAC,CAAM;IACnB,OAAO,CAAC,eAAe,CAAC,CAAyC;IACjE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwC;IAC1E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;gBAGjD,OAAO,EAAE,WAAW,EACpB,oBAAoB,EAAE,OAAO;IAG/C,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAInB,MAAM,CACX,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAC/C,OAAO,CAAC,IAAI,CAAC;IAIhB,2EAA2E;IACrE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA+C/C,4EAA4E;IACtE,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;YA2B1C,eAAe;YAcf,aAAa;IA4C3B,sEAAsE;YACxD,UAAU;CA2BxB;AAED,uEAAuE;AACvE,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,2BAA2B,GAClC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAezC;AAuBD,OAAO,EAAE,gBAAgB,EAAE,CAAA"}

package/dist/transport.js

@@ -0,0 +1,216 @@
+import { Peer, SessionManager, Utils, } from '@bsv/sdk';
+import { buildRequestPayload, buildResponsePayload, decodeResponse, requestIdOf, } from './serialize.js';
+function defer() {
+    let resolve;
+    let reject;
+    const promise = new Promise((res, rej) => {
+        resolve = res;
+        reject = rej;
+    });
+    return { promise, resolve, reject };
+}
+const AUTH_HEADER_KEYS = [
+    'x-bsv-auth-version',
+    'x-bsv-auth-identity-key',
+    'x-bsv-auth-nonce',
+    'x-bsv-auth-your-nonce',
+    'x-bsv-auth-signature',
+    'x-bsv-auth-request-id',
+];
+/**
+ * A BRC-103/104 mutual-auth `Transport` bound to Bun's `Request`/`Response`.
+ *
+ * Where the Express transport hijacks a mutable `res` and gates on `next()`,
+ * this models each request as a promise: it feeds the incoming message to the
+ * `Peer`, runs the route handler once the peer confirms the identity, and
+ * resolves the request's promise when the peer emits the signed reply through
+ * `send`. Wire-identical to the Express middleware.
+ */
+export class BunTransport {
+    handler;
+    allowUnauthenticated;
+    peer;
+    messageCallback;
+    pendingNonGeneral = new Map();
+    pendingGeneral = new Map();
+    constructor(handler, allowUnauthenticated) {
+        this.handler = handler;
+        this.allowUnauthenticated = allowUnauthenticated;
+    }
+    setPeer(peer) {
+        this.peer = peer;
+    }
+    async onData(callback) {
+        this.messageCallback = callback;
+    }
+    /** Delivers a signed message from the peer back to its pending request. */
+    async send(message) {
+        if (message.messageType !== 'general') {
+            const deferred = this.pendingNonGeneral.get(message.yourNonce ?? '');
+            if (!deferred)
+                throw new Error('No open handshake handle for this peer');
+            this.pendingNonGeneral.delete(message.yourNonce ?? '');
+            const headers = {
+                'content-type': 'application/json',
+                'x-bsv-auth-version': message.version,
+                'x-bsv-auth-message-type': message.messageType,
+                'x-bsv-auth-identity-key': message.identityKey,
+                'x-bsv-auth-nonce': message.nonce ?? '',
+                'x-bsv-auth-your-nonce': message.yourNonce ?? '',
+                'x-bsv-auth-signature': Utils.toHex(message.signature ?? []),
+            };
+            if (message.requestedCertificates) {
+                headers['x-bsv-auth-requested-certificates'] = JSON.stringify(message.requestedCertificates);
+            }
+            deferred.resolve(new Response(JSON.stringify(message), { status: 200, headers }));
+            return;
+        }
+        if (!message.payload)
+            throw new Error('general message has no payload');
+        const requestId = requestIdOf(message.payload);
+        const pending = this.pendingGeneral.get(requestId);
+        if (!pending)
+            throw new Error('No open response handle for this requestId');
+        this.pendingGeneral.delete(requestId);
+        const decoded = decodeResponse(message.payload);
+        const headers = { ...pending.passthrough };
+        for (const [k, v] of Object.entries(decoded.headers))
+            headers[k] = v;
+        headers['x-bsv-auth-version'] = message.version;
+        headers['x-bsv-auth-identity-key'] = message.identityKey;
+        headers['x-bsv-auth-nonce'] = message.nonce ?? '';
+        headers['x-bsv-auth-your-nonce'] = message.yourNonce ?? '';
+        headers['x-bsv-auth-signature'] = Utils.toHex(message.signature ?? []);
+        headers['x-bsv-auth-request-id'] = requestId;
+        const body = decoded.body ? new Uint8Array(decoded.body) : undefined;
+        pending.deferred.resolve(new Response(body, { status: decoded.status, headers }));
+    }
+    /** Handles one HTTP request end to end, returning the (signed) response. */
+    async handleRequest(request) {
+        if (!this.peer || !this.messageCallback) {
+            return json(500, {
+                status: 'error',
+                description: 'auth transport not ready',
+            });
+        }
+        const url = new URL(request.url);
+        if (url.pathname === '/.well-known/auth') {
+            return this.handleHandshake(request);
+        }
+        if (request.headers.get('x-bsv-auth-request-id')) {
+            return this.handleGeneral(request, url);
+        }
+        if (this.allowUnauthenticated) {
+            return Promise.resolve(this.handler({ request, url, identityKey: 'unknown' }));
+        }
+        return json(401, {
+            status: 'error',
+            code: 'UNAUTHORIZED',
+            message: 'Mutual-authentication failed!',
+        });
+    }
+    async handleHandshake(request) {
+        const message = (await request.json());
+        const key = message.initialNonce ?? '';
+        const deferred = defer();
+        this.pendingNonGeneral.set(key, deferred);
+        try {
+            await this.messageCallback?.(message);
+        }
+        catch (err) {
+            this.pendingNonGeneral.delete(key);
+            return authError(err);
+        }
+        return deferred.promise;
+    }
+    async handleGeneral(request, url) {
+        // Read a clone for the signed payload so the handler can still read the body.
+        const rawBody = await request.clone().arrayBuffer();
+        const bodyBytes = rawBody.byteLength > 0 ? [...new Uint8Array(rawBody)] : null;
+        const requestId = request.headers.get('x-bsv-auth-request-id');
+        const claimedIdentity = request.headers.get('x-bsv-auth-identity-key') ?? '';
+        const message = {
+            messageType: 'general',
+            version: request.headers.get('x-bsv-auth-version') ?? '',
+            identityKey: claimedIdentity,
+            nonce: request.headers.get('x-bsv-auth-nonce') ?? undefined,
+            yourNonce: request.headers.get('x-bsv-auth-your-nonce') ?? undefined,
+            payload: buildRequestPayload(request, bodyBytes),
+            signature: hexToBytes(request.headers.get('x-bsv-auth-signature')),
+        };
+        const deferred = defer();
+        this.pendingGeneral.set(requestId, { deferred, passthrough: {} });
+        const peer = this.peer;
+        const listenerId = peer.listenForGeneralMessages((senderPublicKey, payload) => {
+            if (senderPublicKey !== claimedIdentity)
+                return;
+            if (requestIdOf(payload) !== requestId)
+                return;
+            peer.stopListeningForGeneralMessages(listenerId);
+            void this.runHandler({ request, url, identityKey: senderPublicKey }, requestId);
+        });
+        try {
+            await this.messageCallback?.(message);
+        }
+        catch (err) {
+            peer.stopListeningForGeneralMessages(listenerId);
+            this.pendingGeneral.delete(requestId);
+            return authError(err);
+        }
+        return deferred.promise;
+    }
+    /** Runs the route handler and signs its response back to the peer. */
+    async runHandler(ctx, requestId) {
+        const pending = this.pendingGeneral.get(requestId);
+        if (!pending)
+            return;
+        try {
+            const response = await this.handler(ctx);
+            const bodyBytes = [...new Uint8Array(await response.arrayBuffer())];
+            const headers = {};
+            response.headers.forEach((value, key) => {
+                headers[key] = value;
+                // Carry non-signed headers (e.g. content-type) through untouched.
+                const lk = key.toLowerCase();
+                if (!lk.startsWith('x-bsv-') && lk !== 'authorization') {
+                    pending.passthrough[lk] = value;
+                }
+            });
+            const payload = buildResponsePayload(requestId, response.status, headers, bodyBytes);
+            await this.peer.toPeer(payload, ctx.identityKey);
+        }
+        catch (err) {
+            this.pendingGeneral.delete(requestId);
+            pending.deferred.resolve(authError(err));
+        }
+    }
+}
+/** Builds the Bun `fetch` handler that authenticates every request. */
+export function createAuthenticatedHandler(options) {
+    if (!options.wallet)
+        throw new Error('createAuthenticatedHandler requires a wallet');
+    const transport = new BunTransport(options.handler, options.allowUnauthenticated ?? false);
+    const peer = new Peer(options.wallet, transport, options.certificatesToRequest, options.sessionManager ?? new SessionManager());
+    transport.setPeer(peer);
+    return (request) => transport.handleRequest(request);
+}
+function hexToBytes(hex) {
+    return hex ? Utils.toArray(hex, 'hex') : [];
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function authError(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    const isAuth = /nonce|signature|session|auth version/i.test(msg);
+    return json(isAuth ? 401 : 500, {
+        status: 'error',
+        code: isAuth ? 'ERR_AUTH_FAILED' : 'ERR_INTERNAL_SERVER_ERROR',
+        description: msg,
+    });
+}
+export { AUTH_HEADER_KEYS };
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,IAAI,EAEJ,cAAc,EAEd,KAAK,GAEL,MAAM,UAAU,CAAA;AACjB,OAAO,EACN,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,WAAW,GACX,MAAM,gBAAgB,CAAA;AAqCvB,SAAS,KAAK;IACb,IAAI,OAA4B,CAAA;IAChC,IAAI,MAA+B,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,OAAO,GAAG,GAAG,CAAA;QACb,MAAM,GAAG,GAAG,CAAA;IACb,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACpC,CAAC;AAQD,MAAM,gBAAgB,GAAG;IACxB,oBAAoB;IACpB,yBAAyB;IACzB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;IACtB,uBAAuB;CACd,CAAA;AAEV;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IAON;IACA;IAPV,IAAI,CAAO;IACX,eAAe,CAA0C;IAChD,iBAAiB,GAAG,IAAI,GAAG,EAA8B,CAAA;IACzD,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAA;IAEnE,YACkB,OAAoB,EACpB,oBAA6B;QAD7B,YAAO,GAAP,OAAO,CAAa;QACpB,yBAAoB,GAApB,oBAAoB,CAAS;IAC5C,CAAC;IAEJ,OAAO,CAAC,IAAU;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CACX,QAAiD;QAEjD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAA;IAChC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI,CAAC,OAAoB;QAC9B,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;YACpE,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACxE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;YACtD,MAAM,OAAO,GAA2B;gBACvC,cAAc,EAAE,kBAAkB;gBAClC,oBAAoB,EAAE,OAAO,CAAC,OAAO;gBACrC,yBAAyB,EAAE,OAAO,CAAC,WAAW;gBAC9C,yBAAyB,EAAE,OAAO,CAAC,WAAW;gBAC9C,kBAAkB,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;gBAChD,sBAAsB,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;aAC5D,CAAA;YACD,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBACnC,OAAO,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAAC,SAAS,CAC5D,OAAO,CAAC,qBAAqB,CAC7B,CAAA;YACF,CAAC;YACD,QAAQ,CAAC,OAAO,CACf,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAC/D,CAAA;YACD,OAAM;QACP,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACvE,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC3E,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAErC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,OAAO,GAA2B,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;QAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACpE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAA;QAC/C,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAA;QACxD,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;QACjD,OAAO,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAA;QAC1D,OAAO,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QACtE,OAAO,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAA;QAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CACvB,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CACvD,CAAA;IACF,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,aAAa,CAAC,OAAgB;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,0BAA0B;aACvC,CAAC,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAEhC,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,OAAO,CACrB,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CACtD,CAAA;QACF,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE;YAChB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,+BAA+B;SACxC,CAAC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAgB;QAC7C,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAA;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAA;QACtC,MAAM,QAAQ,GAAG,KAAK,EAAY,CAAA;QAClC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACzC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAClC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAA;IACxB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,GAAQ;QACrD,8EAA8E;QAC9E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAA;QACnD,MAAM,SAAS,GACd,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAW,CAAA;QACxE,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QAE5E,MAAM,OAAO,GAAgB;YAC5B,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE;YACxD,WAAW,EAAE,eAAe;YAC5B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS;YAC3D,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,SAAS;YACpE,OAAO,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC;YAChD,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;SAClE,CAAA;QAED,MAAM,QAAQ,GAAG,KAAK,EAAY,CAAA;QAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;QAEjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAY,CAAA;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAC/C,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE;YAC5B,IAAI,eAAe,KAAK,eAAe;gBAAE,OAAM;YAC/C,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS;gBAAE,OAAM;YAC9C,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAA;YAChD,KAAK,IAAI,CAAC,UAAU,CACnB,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,EAC9C,SAAS,CACT,CAAA;QACF,CAAC,CACD,CAAA;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAA;YAChD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACrC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAA;IACxB,CAAC;IAED,sEAAsE;IAC9D,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,SAAiB;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACxC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;YACnE,MAAM,OAAO,GAA2B,EAAE,CAAA;YAC1C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACpB,kEAAkE;gBAClE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;gBAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,eAAe,EAAE,CAAC;oBACxD,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,KAAK,CAAA;gBAChC,CAAC;YACF,CAAC,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,oBAAoB,CACnC,SAAS,EACT,QAAQ,CAAC,MAAM,EACf,OAAO,EACP,SAAS,CACT,CAAA;YACD,MAAO,IAAI,CAAC,IAAa,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QACzC,CAAC;IACF,CAAC;CACD;AAED,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CACzC,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,IAAI,YAAY,CACjC,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,oBAAoB,IAAI,KAAK,CACrC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CACpB,OAAO,CAAC,MAAM,EACd,SAAS,EACT,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,cAAc,IAAI,IAAI,cAAc,EAAE,CAC9C,CAAA;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,OAAO,CAAC,OAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,GAAkB;IACrC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa;IAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC9B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAChE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,2BAA2B;QAC9D,WAAW,EAAE,GAAG;KAChB,CAAC,CAAA;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@1sat/serve",
+  "version": "0.0.1",
+  "description": "Bun-native BRC-103/104 mutual-auth transport and BRC-105 payment for HTTP servers, wire-compatible with the BSV Express middleware",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "test": "bun test"
+  },
+  "keywords": [
+    "1sat",
+    "bsv",
+    "brc-103",
+    "brc-104",
+    "brc-105",
+    "auth",
+    "payment",
+    "bun"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@bsv/sdk": "^2.0.13"
+  },
+  "devDependencies": {
+    "@bsv/sdk": "^2.0.13",
+    "@types/bun": "latest",
+    "typescript": "^5.9.3"
+  }
+}