@1sat/wallet-server 0.0.1

package/README.md

@@ -0,0 +1,50 @@
+# @1sat/wallet-server
+
+BRC-100 wallet storage RPC server. Symmetric counterpart to `@1sat/wallet-remote`.
+
+Exposes a `WalletStorageProvider` (typically `StorageKnex` backed by postgres) over JSON-RPC. Supports two identity resolution modes:
+
+- **BRC-100 mutual auth** — for public or direct client access
+- **Bearer token + trusted identity header** — for proxy deployments where an upstream (e.g. 1sat-stack) has already authenticated the caller
+
+Both can run on the same process under different routes.
+
+## Install
+
+```sh
+bun add @1sat/wallet-server @bsv/sdk @bsv/wallet-toolbox knex pg
+```
+
+## Usage
+
+```ts
+import { createWalletRpcHandler, bearerResolver } from '@1sat/wallet-server'
+import { StorageKnex } from '@bsv/wallet-toolbox'
+import knex from 'knex'
+
+const storage = new StorageKnex({
+	chain: 'main',
+	knex: knex({ client: 'pg', connection: process.env.DATABASE_URL }),
+	commissionSatoshis: 0,
+	commissionPubKeyHex: undefined,
+	feeModel: { model: 'sat/kb', value: 1 },
+})
+
+const handler = createWalletRpcHandler({
+	storage,
+	resolveIdentity: bearerResolver({ token: process.env.INTERNAL_API_KEY! }),
+})
+
+Bun.serve({ port: 8100, fetch: handler })
+```
+
+## Resolvers
+
+- `bearerResolver({ token, header? })` — requires `Authorization: Bearer <token>` plus `X-Identity-Key: <pubkey>`. Use for firewalled internal routes where an upstream has already authenticated the caller.
+- `brc100Resolver({ wallet })` — stock BRC-100 mutual authentication via `@bsv/auth-express-middleware`. Use for public routes.
+
+## Related packages
+
+- `@1sat/wallet-remote` — client that talks to this server
+- `@1sat/wallet-node` / `@1sat/wallet-browser` — local storage wallet factories
+- `@1sat/cli` — ships the `1sat serve` command built on this package

package/dist/accounts/index.d.ts

@@ -0,0 +1,8 @@
+export type { Account, AccountsConfig, IdentityKey, NewPayment, Payment, PaymentQuote, } from './types';
+export { AccountsRepo } from './repo';
+export { ACCOUNTS_TABLE, PAYMENTS_TABLE, runMigrations, up, down, } from './migrations';
+export { measureUsedBytes } from './metering';
+export { BYTES_PER_GB, computeCapacity, priceForDeficit, quoteForAccount, type CapacityInput, type CapacityResult, } from './pricing';
+export { BRC0121_HEADERS, Brc0121PaymentError, internalizePayment, parseBrc0121Payment, readBrc0121Headers, validateBrc0121Payment, type Brc0121PaymentHeaders, type ParsedPayment, type ValidatePaymentInput, type ValidatePaymentResult, } from './paymentValidation';
+export { AccountsGate, type AccountsMiddlewareDeps, type BillabilityCheckInput, type BillabilityDecision, } from './middleware';
+//# sourceMappingURL=index.d.ts.map

package/dist/accounts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,OAAO,EACP,cAAc,EACd,WAAW,EACX,UAAU,EACV,OAAO,EACP,YAAY,GACZ,MAAM,SAAS,CAAA;AAEhB,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EACN,cAAc,EACd,cAAc,EACd,aAAa,EACb,EAAE,EACF,IAAI,GACJ,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EACN,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,GACnB,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACN,YAAY,EACZ,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACxB,MAAM,cAAc,CAAA"}

package/dist/accounts/index.js

@@ -0,0 +1,7 @@
+export { AccountsRepo } from './repo';
+export { ACCOUNTS_TABLE, PAYMENTS_TABLE, runMigrations, up, down, } from './migrations';
+export { measureUsedBytes } from './metering';
+export { BYTES_PER_GB, computeCapacity, priceForDeficit, quoteForAccount, } from './pricing';
+export { BRC0121_HEADERS, Brc0121PaymentError, internalizePayment, parseBrc0121Payment, readBrc0121Headers, validateBrc0121Payment, } from './paymentValidation';
+export { AccountsGate, } from './middleware';
+//# sourceMappingURL=index.js.map

package/dist/accounts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/accounts/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EACN,cAAc,EACd,cAAc,EACd,aAAa,EACb,EAAE,EACF,IAAI,GACJ,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EACN,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAGf,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,GAKtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACN,YAAY,GAIZ,MAAM,cAAc,CAAA"}

package/dist/accounts/metering.d.ts

@@ -0,0 +1,15 @@
+import type { Knex } from 'knex';
+/**
+ * Measures the stored-byte footprint of a single wallet-toolbox user.
+ *
+ * Sums the sizes of data that represent persisted wallet state:
+ *   - `transactions.rawTx`
+ *   - `transactions.inputBEEF`
+ *   - `outputs.lockingScript` (or `outputs.scriptLength` when the blob was pushed to rawTx)
+ *
+ * These are the fields that actually consume storage per user and that the
+ * dispatcher's billable methods grow (`createAction`, `processAction`,
+ * `internalizeAction`, `processSyncChunk`, `insertCertificateAuth`).
+ */
+export declare function measureUsedBytes(knex: Knex, userId: number): Promise<number>;
+//# sourceMappingURL=metering.d.ts.map

package/dist/accounts/metering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metering.d.ts","sourceRoot":"","sources":["../../src/accounts/metering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAkBjB"}

package/dist/accounts/metering.js

@@ -0,0 +1,32 @@
+/**
+ * Measures the stored-byte footprint of a single wallet-toolbox user.
+ *
+ * Sums the sizes of data that represent persisted wallet state:
+ *   - `transactions.rawTx`
+ *   - `transactions.inputBEEF`
+ *   - `outputs.lockingScript` (or `outputs.scriptLength` when the blob was pushed to rawTx)
+ *
+ * These are the fields that actually consume storage per user and that the
+ * dispatcher's billable methods grow (`createAction`, `processAction`,
+ * `internalizeAction`, `processSyncChunk`, `insertCertificateAuth`).
+ */
+export async function measureUsedBytes(knex, userId) {
+    const [txRow] = await knex('transactions')
+        .where({ userId })
+        .select(knex.raw('COALESCE(SUM(COALESCE(LENGTH(rawTx), 0) + COALESCE(LENGTH(inputBEEF), 0)), 0) as total'));
+    const [outRow] = await knex('outputs')
+        .where({ userId })
+        .select(knex.raw('COALESCE(SUM(COALESCE(scriptLength, LENGTH(lockingScript), 0)), 0) as total'));
+    return asNumber(txRow?.total) + asNumber(outRow?.total);
+}
+function asNumber(v) {
+    if (v == null)
+        return 0;
+    if (typeof v === 'number')
+        return v;
+    if (typeof v === 'bigint')
+        return Number(v);
+    const n = Number(v);
+    return Number.isFinite(n) ? n : 0;
+}
+//# sourceMappingURL=metering.js.map

package/dist/accounts/metering.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metering.js","sourceRoot":"","sources":["../../src/accounts/metering.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAAU,EACV,MAAc;IAEd,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;SACxC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,MAAM,CACN,IAAI,CAAC,GAAG,CACP,wFAAwF,CACxF,CACD,CAAA;IAEF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;SACpC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,MAAM,CACN,IAAI,CAAC,GAAG,CACP,6EAA6E,CAC7E,CACD,CAAA;IAEF,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC3B,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,CAAC,CAAA;IACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAA;IACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC"}

package/dist/accounts/middleware.d.ts

@@ -0,0 +1,41 @@
+import type { WalletInterface } from '@bsv/sdk';
+import type { Knex } from 'knex';
+import type { ResolvedIdentity, WalletStorageProvider } from '../types';
+import { AccountsRepo } from './repo';
+import type { AccountsConfig, IdentityKey } from './types';
+export interface AccountsMiddlewareDeps {
+    config: AccountsConfig;
+    walletStorage: WalletStorageProvider;
+    knex: Knex;
+    wallet: WalletInterface;
+    serverIdentityKey: IdentityKey;
+    /** Returns the current chain tip block height. */
+    currentBlock: () => Promise<number>;
+}
+export interface BillabilityCheckInput {
+    method: string;
+    identity: ResolvedIdentity;
+    request: Request;
+    id: string | number | null;
+}
+export type BillabilityDecision = {
+    type: 'allow';
+} | {
+    type: 'blocked';
+    response: Response;
+};
+/**
+ * Gate that runs before dispatch for each JSON-RPC call. Decides whether to
+ * allow the call, to return a 402 challenge, or to accept a payment and then
+ * allow.
+ */
+export declare class AccountsGate {
+    private readonly deps;
+    readonly repo: AccountsRepo;
+    private readonly freeKeys;
+    constructor(deps: AccountsMiddlewareDeps);
+    check(input: BillabilityCheckInput): Promise<BillabilityDecision>;
+    private resolveUserId;
+    private buildChallenge;
+}
+//# sourceMappingURL=middleware.d.ts.map

package/dist/accounts/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/accounts/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAEX,gBAAgB,EAChB,qBAAqB,EACrB,MAAM,UAAU,CAAA;AASjB,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1D,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,cAAc,CAAA;IACtB,aAAa,EAAE,qBAAqB,CAAA;IACpC,IAAI,EAAE,IAAI,CAAA;IACV,MAAM,EAAE,eAAe,CAAA;IACvB,iBAAiB,EAAE,WAAW,CAAA;IAC9B,kDAAkD;IAClD,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE1C;;;;GAIG;AACH,qBAAa,YAAY;IAIZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;gBAEd,IAAI,EAAE,sBAAsB;IAQnD,KAAK,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAyEzD,aAAa;IAO3B,OAAO,CAAC,cAAc;CAmCtB"}

package/dist/accounts/middleware.js

@@ -0,0 +1,137 @@
+import { Random, Utils } from '@bsv/sdk';
+import { isBillableMethod } from '../dispatch';
+import { measureUsedBytes } from './metering';
+import { Brc0121PaymentError, internalizePayment, parseBrc0121Payment, readBrc0121Headers, } from './paymentValidation';
+import { BYTES_PER_GB, computeCapacity, priceForDeficit } from './pricing';
+import { AccountsRepo } from './repo';
+/**
+ * Gate that runs before dispatch for each JSON-RPC call. Decides whether to
+ * allow the call, to return a 402 challenge, or to accept a payment and then
+ * allow.
+ */
+export class AccountsGate {
+    deps;
+    repo;
+    freeKeys;
+    constructor(deps) {
+        this.deps = deps;
+        this.repo = new AccountsRepo(deps.knex);
+        this.freeKeys = new Set([
+            deps.serverIdentityKey,
+            ...(deps.config.freeIdentityKeys ?? []),
+        ]);
+    }
+    async check(input) {
+        if (!this.deps.config.enabled)
+            return { type: 'allow' };
+        if (!isBillableMethod(input.method))
+            return { type: 'allow' };
+        if (this.freeKeys.has(input.identity.identityKey))
+            return { type: 'allow' };
+        const userId = await this.resolveUserId(input.identity.identityKey);
+        if (userId == null) {
+            // No wallet-toolbox user yet means zero bytes stored. Allow the first
+            // billable request so the user row can be created; metering starts
+            // from the next request.
+            return { type: 'allow' };
+        }
+        const currentBlock = await this.deps.currentBlock();
+        const used = await measureUsedBytes(this.deps.knex, userId);
+        const paidBytes = await this.repo.sumUnexpiredBytes(input.identity.identityKey, currentBlock);
+        const capacity = computeCapacity({
+            baselineBytes: this.deps.config.baselineBytes,
+            paidBytes,
+            usedBytes: used,
+        });
+        if (capacity.deficitBytes <= 0)
+            return { type: 'allow' };
+        const paymentHeaders = readBrc0121Headers(input.request);
+        if (!paymentHeaders) {
+            return {
+                type: 'blocked',
+                response: this.buildChallenge(input.id, capacity.deficitBytes),
+            };
+        }
+        // A payment is attached. Validate and credit before allowing the retry.
+        const quote = priceForDeficit(capacity.deficitBytes, this.deps.config.satsPerGb);
+        try {
+            const parsed = parseBrc0121Payment(paymentHeaders, quote.satoshisRequired);
+            if (await this.repo.paymentExists(parsed.txid)) {
+                return {
+                    type: 'blocked',
+                    response: errorResponse(input.id, -32001, 'payment already applied'),
+                };
+            }
+            const validation = await internalizePayment({
+                wallet: this.deps.wallet,
+                senderIdentityKey: input.identity.identityKey,
+                parsed,
+            });
+            await this.repo.upsertAccount(input.identity.identityKey);
+            await this.repo.recordPayment({
+                identityKey: input.identity.identityKey,
+                txid: validation.txid,
+                bytesCovered: quote.bytesCovered,
+                satsPaid: validation.satoshisReceived,
+                paidThroughBlock: currentBlock + this.deps.config.durationBlocks,
+            });
+            return { type: 'allow' };
+        }
+        catch (err) {
+            if (err instanceof Brc0121PaymentError) {
+                return {
+                    type: 'blocked',
+                    response: errorResponse(input.id, -32002, err.message),
+                };
+            }
+            throw err;
+        }
+    }
+    async resolveUserId(identityKey) {
+        const result = await this.deps.walletStorage.findOrInsertUser(identityKey);
+        return result?.user?.userId;
+    }
+    buildChallenge(id, deficitBytes) {
+        const quote = priceForDeficit(deficitBytes, this.deps.config.satsPerGb);
+        const orderID = Utils.toBase64(Random(16));
+        const derivationPrefix = Utils.toBase64(Random(16));
+        const body = {
+            jsonrpc: '2.0',
+            error: {
+                code: -32000,
+                message: 'payment required',
+                data: {
+                    status: 'payment-required',
+                    satoshisRequired: quote.satoshisRequired,
+                    bytesRequested: quote.bytesCovered,
+                    gigabytesCharged: quote.gigabytesCharged,
+                    bytesPerGb: BYTES_PER_GB,
+                    derivationPrefix,
+                    orderID,
+                },
+            },
+            id,
+        };
+        return new Response(JSON.stringify(body), {
+            status: 402,
+            headers: {
+                'content-type': 'application/json',
+                'x-bsv-payment-order-id': orderID,
+                'x-bsv-payment-derivation-prefix': derivationPrefix,
+                'x-bsv-payment-satoshis-required': String(quote.satoshisRequired),
+            },
+        });
+    }
+}
+function errorResponse(id, code, message) {
+    const body = {
+        jsonrpc: '2.0',
+        error: { code, message },
+        id,
+    };
+    return new Response(JSON.stringify(body), {
+        status: 402,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+//# sourceMappingURL=middleware.js.map

package/dist/accounts/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/accounts/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAM9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EACN,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GAClB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AAwBrC;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAIK;IAHpB,IAAI,CAAc;IACV,QAAQ,CAAkB;IAE3C,YAA6B,IAA4B;QAA5B,SAAI,GAAJ,IAAI,CAAwB;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,IAAI,CAAC,iBAAiB;YACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACvC,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAA4B;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACvD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC7D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAE3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnE,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACpB,sEAAsE;YACtE,mEAAmE;YACnE,yBAAyB;YACzB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACzB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAClD,KAAK,CAAC,QAAQ,CAAC,WAAW,EAC1B,YAAY,CACZ,CAAA;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC;YAChC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAC7C,SAAS;YACT,SAAS,EAAE,IAAI;SACf,CAAC,CAAA;QAEF,IAAI,QAAQ,CAAC,YAAY,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAExD,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO;gBACN,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC;aAC9D,CAAA;QACF,CAAC;QAED,wEAAwE;QACxE,MAAM,KAAK,GAAG,eAAe,CAC5B,QAAQ,CAAC,YAAY,EACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAC1B,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;YAC1E,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC;iBACpE,CAAA;YACF,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC;gBAC3C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBACxB,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;gBAC7C,MAAM;aACN,CAAC,CAAA;YACF,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACzD,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC7B,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;gBACvC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,UAAU,CAAC,gBAAgB;gBACrC,gBAAgB,EAAE,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;aAChE,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACxC,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;iBACtD,CAAA;YACF,CAAC;YACD,MAAM,GAAG,CAAA;QACV,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,WAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAA;QAC1E,OAAO,MAAM,EAAE,IAAI,EAAE,MAAM,CAAA;IAC5B,CAAC;IAEO,cAAc,CACrB,EAA0B,EAC1B,YAAoB;QAEpB,MAAM,KAAK,GAAG,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC1C,MAAM,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACN,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,kBAAkB;gBAC3B,IAAI,EAAE;oBACL,MAAM,EAAE,kBAAkB;oBAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,cAAc,EAAE,KAAK,CAAC,YAAY;oBAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,UAAU,EAAE,YAAY;oBACxB,gBAAgB;oBAChB,OAAO;iBACP;aACD;YACD,EAAE;SACwB,CAAA;QAE3B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACzC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,wBAAwB,EAAE,OAAO;gBACjC,iCAAiC,EAAE,gBAAgB;gBACnD,iCAAiC,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;aACjE;SACD,CAAC,CAAA;IACH,CAAC;CACD;AAED,SAAS,aAAa,CACrB,EAA0B,EAC1B,IAAY,EACZ,OAAe;IAEf,MAAM,IAAI,GAAoB;QAC7B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACxB,EAAE;KACF,CAAA;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAA;AACH,CAAC"}

package/dist/accounts/migrations.d.ts

@@ -0,0 +1,18 @@
+import type { Knex } from 'knex';
+/**
+ * Knex migrations for the accounts layer.
+ *
+ * Tables are prefixed `wsa_` (wallet-server-accounts) to avoid colliding with
+ * wallet-toolbox's own tables (`transactions`, `outputs`, etc.) that live in
+ * the same database.
+ */
+export declare const ACCOUNTS_TABLE = "wsa_accounts";
+export declare const PAYMENTS_TABLE = "wsa_payments";
+export declare function up(knex: Knex): Promise<void>;
+export declare function down(knex: Knex): Promise<void>;
+/**
+ * Runs migrations against the given knex instance. Idempotent — safe to call on
+ * every server start.
+ */
+export declare function runMigrations(knex: Knex): Promise<void>;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/accounts/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/accounts/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC;;;;;;GAMG;AAEH,eAAO,MAAM,cAAc,iBAAiB,CAAA;AAC5C,eAAO,MAAM,cAAc,iBAAiB,CAAA;AAE5C,wBAAsB,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BlD;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpD;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D"}

package/dist/accounts/migrations.js

@@ -0,0 +1,46 @@
+/**
+ * Knex migrations for the accounts layer.
+ *
+ * Tables are prefixed `wsa_` (wallet-server-accounts) to avoid colliding with
+ * wallet-toolbox's own tables (`transactions`, `outputs`, etc.) that live in
+ * the same database.
+ */
+export const ACCOUNTS_TABLE = 'wsa_accounts';
+export const PAYMENTS_TABLE = 'wsa_payments';
+export async function up(knex) {
+    const hasAccounts = await knex.schema.hasTable(ACCOUNTS_TABLE);
+    if (!hasAccounts) {
+        await knex.schema.createTable(ACCOUNTS_TABLE, (t) => {
+            t.string('identity_key', 66).primary();
+            t.timestamp('created_at').notNullable().defaultTo(knex.fn.now());
+            t.timestamp('updated_at').notNullable().defaultTo(knex.fn.now());
+        });
+    }
+    const hasPayments = await knex.schema.hasTable(PAYMENTS_TABLE);
+    if (!hasPayments) {
+        await knex.schema.createTable(PAYMENTS_TABLE, (t) => {
+            t.increments('id').primary();
+            t.string('identity_key', 66).notNullable();
+            t.string('txid', 64).notNullable().unique();
+            t.bigInteger('bytes_covered').notNullable();
+            t.bigInteger('sats_paid').notNullable();
+            t.integer('paid_through_block').notNullable();
+            t.timestamp('applied_at').notNullable().defaultTo(knex.fn.now());
+            t.index('identity_key');
+            t.index('paid_through_block');
+            t.foreign('identity_key').references(`${ACCOUNTS_TABLE}.identity_key`);
+        });
+    }
+}
+export async function down(knex) {
+    await knex.schema.dropTableIfExists(PAYMENTS_TABLE);
+    await knex.schema.dropTableIfExists(ACCOUNTS_TABLE);
+}
+/**
+ * Runs migrations against the given knex instance. Idempotent — safe to call on
+ * every server start.
+ */
+export async function runMigrations(knex) {
+    await up(knex);
+}
+//# sourceMappingURL=migrations.js.map

package/dist/accounts/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/accounts/migrations.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAA;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAA;AAE5C,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,IAAU;IAClC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;YACnD,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;YACtC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;YAChE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;YACnD,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;YAC5B,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAA;YAC3C,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAA;YAC3C,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;YACvC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAA;YAC7C,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;YAEhE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACvB,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YAC7B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,GAAG,cAAc,eAAe,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAU;IACpC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;IACnD,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAU;IAC7C,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;AACf,CAAC"}

package/dist/accounts/paymentValidation.d.ts

@@ -0,0 +1,59 @@
+import { type WalletInterface } from '@bsv/sdk';
+/**
+ * BRC-0121 request-header names (lowercase for Headers API compatibility).
+ */
+export declare const BRC0121_HEADERS: {
+    readonly derivationPrefix: "x-bsv-payment-derivation-prefix";
+    readonly derivationSuffix: "x-bsv-payment-derivation-suffix";
+    readonly transaction: "x-bsv-payment-transaction";
+    readonly orderID: "x-bsv-payment-order-id";
+    readonly outputIndex: "x-bsv-payment-output-index";
+};
+export interface Brc0121PaymentHeaders {
+    derivationPrefix: string;
+    derivationSuffix: string;
+    beefBase64: string;
+    orderID?: string;
+    outputIndex: number;
+}
+export declare function readBrc0121Headers(req: Request): Brc0121PaymentHeaders | null;
+export interface ValidatePaymentInput {
+    wallet: WalletInterface;
+    senderIdentityKey: string;
+    headers: Brc0121PaymentHeaders;
+    expectedSatoshis: number;
+}
+export interface ParsedPayment {
+    txid: string;
+    beef: number[];
+    satoshisAtOutput: number;
+    outputIndex: number;
+    derivationPrefix: string;
+    derivationSuffix: string;
+}
+export interface ValidatePaymentResult {
+    txid: string;
+    satoshisReceived: number;
+}
+/**
+ * Parses the BRC-0121 payment headers into a usable shape. Performs the cheap
+ * checks (BEEF decode, output exists, satoshis sufficient) but does NOT touch
+ * the wallet — so callers can check duplicate-txid before internalizing.
+ */
+export declare function parseBrc0121Payment(headers: Brc0121PaymentHeaders, expectedSatoshis: number): ParsedPayment;
+/**
+ * Internalizes a previously-parsed BRC-29 payment into the server wallet.
+ * The wallet SDK handles BEEF validation, script derivation, and UTXO
+ * recording; failures throw `Brc0121PaymentError`.
+ */
+export declare function internalizePayment(input: {
+    wallet: WalletInterface;
+    senderIdentityKey: string;
+    parsed: ParsedPayment;
+}): Promise<ValidatePaymentResult>;
+/** @deprecated Use `parseBrc0121Payment` then `internalizePayment`. */
+export declare function validateBrc0121Payment(input: ValidatePaymentInput): Promise<ValidatePaymentResult>;
+export declare class Brc0121PaymentError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=paymentValidation.d.ts.map

package/dist/accounts/paymentValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paymentValidation.d.ts","sourceRoot":"","sources":["../../src/accounts/paymentValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAEnE;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAA;AAEV,MAAM,WAAW,qBAAqB;IACrC,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAmB7E;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,eAAe,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,qBAAqB,CAAA;IAC9B,gBAAgB,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,gBAAgB,EAAE,MAAM,CAAA;CACxB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,qBAAqB,EAC9B,gBAAgB,EAAE,MAAM,GACtB,aAAa,CAyBf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,eAAe,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,aAAa,CAAA;CACrB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2BjC;AAED,uEAAuE;AACvE,wBAAsB,sBAAsB,CAC3C,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,qBAAqB,CAAC,CAOhC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI3B"}

package/dist/accounts/paymentValidation.js

@@ -0,0 +1,112 @@
+import { Transaction, Utils } from '@bsv/sdk';
+/**
+ * BRC-0121 request-header names (lowercase for Headers API compatibility).
+ */
+export const BRC0121_HEADERS = {
+    derivationPrefix: 'x-bsv-payment-derivation-prefix',
+    derivationSuffix: 'x-bsv-payment-derivation-suffix',
+    transaction: 'x-bsv-payment-transaction',
+    orderID: 'x-bsv-payment-order-id',
+    outputIndex: 'x-bsv-payment-output-index',
+};
+export function readBrc0121Headers(req) {
+    const derivationPrefix = req.headers.get(BRC0121_HEADERS.derivationPrefix);
+    const derivationSuffix = req.headers.get(BRC0121_HEADERS.derivationSuffix);
+    const beefBase64 = req.headers.get(BRC0121_HEADERS.transaction);
+    if (!derivationPrefix || !derivationSuffix || !beefBase64)
+        return null;
+    const outIdxHeader = req.headers.get(BRC0121_HEADERS.outputIndex);
+    const outputIndex = outIdxHeader ? Number.parseInt(outIdxHeader, 10) : 0;
+    if (!Number.isInteger(outputIndex) || outputIndex < 0) {
+        throw new Brc0121PaymentError(`invalid output index: ${outIdxHeader}`);
+    }
+    return {
+        derivationPrefix,
+        derivationSuffix,
+        beefBase64,
+        orderID: req.headers.get(BRC0121_HEADERS.orderID) ?? undefined,
+        outputIndex,
+    };
+}
+/**
+ * Parses the BRC-0121 payment headers into a usable shape. Performs the cheap
+ * checks (BEEF decode, output exists, satoshis sufficient) but does NOT touch
+ * the wallet — so callers can check duplicate-txid before internalizing.
+ */
+export function parseBrc0121Payment(headers, expectedSatoshis) {
+    const beef = decodeBeefHeader(headers.beefBase64);
+    const tx = Transaction.fromAtomicBEEF(beef);
+    const txid = tx.id('hex');
+    const targetOutput = tx.outputs[headers.outputIndex];
+    if (!targetOutput) {
+        throw new Brc0121PaymentError(`BEEF has no output at index ${headers.outputIndex}`);
+    }
+    const satoshis = targetOutput.satoshis ?? 0;
+    if (satoshis < expectedSatoshis) {
+        throw new Brc0121PaymentError(`payment output ${satoshis} sats below required ${expectedSatoshis}`);
+    }
+    return {
+        txid,
+        beef,
+        satoshisAtOutput: satoshis,
+        outputIndex: headers.outputIndex,
+        derivationPrefix: headers.derivationPrefix,
+        derivationSuffix: headers.derivationSuffix,
+    };
+}
+/**
+ * Internalizes a previously-parsed BRC-29 payment into the server wallet.
+ * The wallet SDK handles BEEF validation, script derivation, and UTXO
+ * recording; failures throw `Brc0121PaymentError`.
+ */
+export async function internalizePayment(input) {
+    try {
+        await input.wallet.internalizeAction({
+            tx: input.parsed.beef,
+            outputs: [
+                {
+                    paymentRemittance: {
+                        derivationPrefix: input.parsed.derivationPrefix,
+                        derivationSuffix: input.parsed.derivationSuffix,
+                        senderIdentityKey: input.senderIdentityKey,
+                    },
+                    outputIndex: input.parsed.outputIndex,
+                    protocol: 'wallet payment',
+                },
+            ],
+            labels: ['wallet-server', 'brc-0121'],
+            description: 'BRC-0121 storage capacity payment',
+        });
+    }
+    catch (err) {
+        throw new Brc0121PaymentError(`wallet.internalizeAction rejected payment: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return {
+        txid: input.parsed.txid,
+        satoshisReceived: input.parsed.satoshisAtOutput,
+    };
+}
+/** @deprecated Use `parseBrc0121Payment` then `internalizePayment`. */
+export async function validateBrc0121Payment(input) {
+    const parsed = parseBrc0121Payment(input.headers, input.expectedSatoshis);
+    return internalizePayment({
+        wallet: input.wallet,
+        senderIdentityKey: input.senderIdentityKey,
+        parsed,
+    });
+}
+export class Brc0121PaymentError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'Brc0121PaymentError';
+    }
+}
+function decodeBeefHeader(value) {
+    try {
+        return Utils.toArray(value, 'base64');
+    }
+    catch (err) {
+        throw new Brc0121PaymentError(`cannot decode ${BRC0121_HEADERS.transaction} as base64: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=paymentValidation.js.map

package/dist/accounts/paymentValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paymentValidation.js","sourceRoot":"","sources":["../../src/accounts/paymentValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAwB,MAAM,UAAU,CAAA;AAEnE;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,gBAAgB,EAAE,iCAAiC;IACnD,WAAW,EAAE,2BAA2B;IACxC,OAAO,EAAE,wBAAwB;IACjC,WAAW,EAAE,4BAA4B;CAChC,CAAA;AAUV,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC9C,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAA;IAC1E,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAA;IAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAC/D,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAEtE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IACjE,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,OAAO;QACN,gBAAgB;QAChB,gBAAgB;QAChB,UAAU;QACV,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,SAAS;QAC9D,WAAW;KACX,CAAA;AACF,CAAC;AAuBD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAA8B,EAC9B,gBAAwB;IAExB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAW,CAAA;IAEnC,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,IAAI,mBAAmB,CAC5B,+BAA+B,OAAO,CAAC,WAAW,EAAE,CACpD,CAAA;IACF,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAA;IAC3C,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAmB,CAC5B,kBAAkB,QAAQ,wBAAwB,gBAAgB,EAAE,CACpE,CAAA;IACF,CAAC;IACD,OAAO;QACN,IAAI;QACJ,IAAI;QACJ,gBAAgB,EAAE,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC1C,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAIxC;IACA,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACpC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACrB,OAAO,EAAE;gBACR;oBACC,iBAAiB,EAAE;wBAClB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;wBAC/C,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;wBAC/C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;qBAC1C;oBACD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;oBACrC,QAAQ,EAAE,gBAAgB;iBAC1B;aACD;YACD,MAAM,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC;YACrC,WAAW,EAAE,mCAAmC;SAChD,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,mBAAmB,CAC5B,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChG,CAAA;IACF,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;QACvB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;KAC/C,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,KAA2B;IAE3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACzE,OAAO,kBAAkB,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM;KACN,CAAC,CAAA;AACH,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IAClC,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,KAAa;IACtC,IAAI,CAAC;QACJ,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,mBAAmB,CAC5B,iBAAiB,eAAe,CAAC,WAAW,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7G,CAAA;IACF,CAAC;AACF,CAAC"}

package/dist/accounts/pricing.d.ts

@@ -0,0 +1,30 @@
+import type { AccountsConfig } from './types';
+declare const BYTES_PER_GB = 1073741824;
+export interface CapacityInput {
+    baselineBytes: number;
+    paidBytes: number;
+    usedBytes: number;
+}
+export interface CapacityResult {
+    baselineBytes: number;
+    paidBytes: number;
+    capacityBytes: number;
+    usedBytes: number;
+    deficitBytes: number;
+}
+export declare function computeCapacity(input: CapacityInput): CapacityResult;
+/**
+ * Given a byte deficit and a `satsPerGb` rate, compute the sats required to
+ * cover the deficit (rounded up at GB granularity).
+ */
+export declare function priceForDeficit(deficitBytes: number, satsPerGb: number): {
+    satoshisRequired: number;
+    gigabytesCharged: number;
+    bytesCovered: number;
+};
+export declare function quoteForAccount(config: AccountsConfig, capacity: CapacityResult): {
+    satoshisRequired: number;
+    bytesCovered: number;
+};
+export { BYTES_PER_GB };
+//# sourceMappingURL=pricing.d.ts.map

package/dist/accounts/pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../src/accounts/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,QAAA,MAAM,YAAY,aAAgB,CAAA;AAElC,MAAM,WAAW,aAAa;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAUpE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC9B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,GACf;IACF,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;CACpB,CAUA;AAED,wBAAgB,eAAe,CAC9B,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,cAAc,GACtB;IACF,gBAAgB,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;CACpB,CAEA;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}