@1sat/wallet-server 0.0.28 → 0.0.31

package/dist/paymail/resolve.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Resolve OpNS alias → identity via tip UTXO PushDrop bind.
+ */
+import { OneSatServices } from '@1sat/client';
+import { LockingScript, Transaction } from '@bsv/sdk';
+import type { ResolvedBind } from './types';
+/**
+ * Load tip locking script for alias, verify PushDrop bind, return identity key.
+ */
+export declare function resolvePaymailBind(services: OneSatServices, alias: string): Promise<ResolvedBind>;
+export declare function verifyPushDropBind(tx: Transaction, vout: number, lockingScript: LockingScript): Promise<string>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/paymail/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/paymail/resolve.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,EACN,aAAa,EAGb,WAAW,EAEX,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAY3C;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC,CAavB;AAED,wBAAsB,kBAAkB,CACvC,EAAE,EAAE,WAAW,EACf,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,aAAa,GAC1B,OAAO,CAAC,MAAM,CAAC,CA+CjB"}

package/dist/paymail/resolve.js

@@ -0,0 +1,72 @@
+/**
+ * Resolve OpNS alias → identity via tip UTXO PushDrop bind.
+ */
+import { P1SAT_PROTOCOL, opnsRegisterKeyId } from '@1sat/types';
+import { ProtoWallet, PushDrop, Transaction, Utils, } from '@bsv/sdk';
+function parseOutpoint(outpoint) {
+    const normalized = outpoint.replace('_', '.');
+    const [txid, voutStr] = normalized.split('.');
+    const vout = Number(voutStr);
+    if (!txid || !Number.isFinite(vout)) {
+        throw new Error(`invalid outpoint: ${outpoint}`);
+    }
+    return { txid, vout };
+}
+/**
+ * Load tip locking script for alias, verify PushDrop bind, return identity key.
+ */
+export async function resolvePaymailBind(services, alias) {
+    const { outpoint } = await services.opns.getOrigin(alias);
+    const { txid, vout } = parseOutpoint(outpoint);
+    const beefBytes = await services.beef.getBeef(txid);
+    const tx = Transaction.fromBEEF(Array.from(beefBytes));
+    const output = tx.outputs[vout];
+    if (!output?.lockingScript) {
+        throw new Error(`no output at ${outpoint}`);
+    }
+    const identityKey = await verifyPushDropBind(tx, vout, output.lockingScript);
+    return { identityKey, outpoint: `${txid}.${vout}` };
+}
+export async function verifyPushDropBind(tx, vout, lockingScript) {
+    const decoded = PushDrop.decode(lockingScript);
+    if (decoded.fields.length < 2) {
+        throw new Error('not a signed PushDrop bind');
+    }
+    const fields = decoded.fields.map((f) => [...f]);
+    const signature = fields.pop();
+    const idKeyBytes = fields[0];
+    if (!idKeyBytes?.length) {
+        throw new Error('missing identity field');
+    }
+    const identityKey = Utils.toHex(idKeyBytes);
+    const input = tx.inputs[0];
+    const sourceTxid = input.sourceTXID ?? input.sourceTransaction?.id('hex') ?? '';
+    const sourceVout = input.sourceOutputIndex;
+    if (!sourceTxid) {
+        throw new Error('missing creation input outpoint');
+    }
+    const keyID = opnsRegisterKeyId(`${sourceTxid}.${sourceVout}`);
+    const anyone = new ProtoWallet('anyone');
+    const { publicKey: expectedLockPub } = await anyone.getPublicKey({
+        protocolID: P1SAT_PROTOCOL,
+        keyID,
+        counterparty: identityKey,
+        forSelf: true,
+    });
+    if (expectedLockPub !== decoded.lockingPublicKey.toString()) {
+        throw new Error('lock pubkey does not match bind derivation');
+    }
+    const data = fields.reduce((a, e) => [...a, ...e], []);
+    const { valid } = await anyone.verifySignature({
+        data,
+        signature,
+        protocolID: P1SAT_PROTOCOL,
+        keyID,
+        counterparty: identityKey,
+    });
+    if (!valid) {
+        throw new Error('invalid PushDrop field signature');
+    }
+    return identityKey;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/paymail/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/paymail/resolve.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAEN,WAAW,EACX,QAAQ,EACR,WAAW,EACX,KAAK,GACL,MAAM,UAAU,CAAA;AAGjB,SAAS,aAAa,CAAC,QAAgB;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC7C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAAwB,EACxB,KAAa;IAEb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACzD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAE9C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAC5E,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAA;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,EAAe,EACf,IAAY,EACZ,aAA4B;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAc,CAAA;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5B,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAE3C,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,UAAU,GACf,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAA;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC,CAAA;IAE9D,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QAChE,UAAU,EAAE,cAAc;QAC1B,KAAK;QACL,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,IAAI;KACb,CAAC,CAAA;IACF,IAAI,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAW,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI;QACJ,SAAS;QACT,UAAU,EAAE,cAAc;QAC1B,KAAK;QACL,YAAY,EAAE,WAAW;KACzB,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACpD,CAAC;IAED,OAAO,WAAW,CAAA;AACnB,CAAC"}

package/dist/paymail/routes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Mount bsvalias surface on the host app using @bsv/paymail PaymailRouter.
+ * Public routes — no BRC-100 auth. Mounted before auth-scoped surfaces.
+ */
+import type { Express } from 'express';
+import type { PaymailDeps } from './types';
+export declare function mountPaymailRoutes(app: Express, deps: PaymailDeps): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/paymail/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/paymail/routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAKtC,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,SAAS,CAAA;AAS1D,wBAAsB,kBAAkB,CACvC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAkJf"}

package/dist/paymail/routes.js

@@ -0,0 +1,152 @@
+/**
+ * Mount bsvalias surface on the host app using @bsv/paymail PaymailRouter.
+ * Public routes — no BRC-100 auth. Mounted before auth-scoped surfaces.
+ */
+import { OneSatServices } from '@1sat/client';
+import { PaymailRouter, PublicKeyInfrastructureRoute, PublicProfileRoute, P2pPaymentDestinationRoute, ReceiveBeefTransactionRoute, ReceiveTransactionRoute, PaymailClient, } from '@bsv/paymail';
+import { Transaction, Utils } from '@bsv/sdk';
+import { createPaymentDestination, verifyPaymentOutputs } from './destination';
+import { checkHostingEntitlement } from './entitlement';
+import { MessageBoxClient } from './messagebox';
+import { resolvePaymailBind } from './resolve';
+class NotFoundError extends Error {
+    constructor(message = 'paymail not found') {
+        super(message);
+        this.name = 'NotFoundError';
+    }
+}
+export async function mountPaymailRoutes(app, deps) {
+    const services = new OneSatServices('main', deps.stackUrl);
+    const gateOn = deps.requireEntitlement === true && deps.hostWallet != null;
+    const messageBox = deps.messageboxUrl && deps.hostPrivateKey
+        ? MessageBoxClient.fromPrivateKey(deps.messageboxUrl, deps.hostPrivateKey)
+        : null;
+    if (deps.messageboxUrl && !deps.hostPrivateKey) {
+        console.warn('[paymail] messageboxUrl set without hostPrivateKey — inbox delivery disabled');
+    }
+    async function resolveAndAuthorize(alias) {
+        try {
+            const bind = await resolvePaymailBind(services, alias);
+            if (gateOn && deps.hostWallet) {
+                const ent = await checkHostingEntitlement(deps.hostWallet, bind.identityKey);
+                if (!ent.active)
+                    throw new NotFoundError();
+            }
+            return bind;
+        }
+        catch (err) {
+            if (err instanceof NotFoundError)
+                throw err;
+            throw new NotFoundError();
+        }
+    }
+    const paymailClient = new PaymailClient();
+    const router = new PaymailRouter({
+        baseUrl: deps.baseUrl,
+        basePath: '/bsvalias',
+        routes: [
+            new PublicKeyInfrastructureRoute({
+                domainLogicHandler: async (params) => {
+                    const { name, domain } = PublicKeyInfrastructureRoute.getNameAndDomain(params);
+                    const bind = await resolveAndAuthorize(name);
+                    return {
+                        bsvalias: '1.0',
+                        handle: `${name}@${domain}`,
+                        pubkey: bind.identityKey,
+                    };
+                },
+            }),
+            new PublicProfileRoute({
+                domainLogicHandler: async (params) => {
+                    const { name } = PublicProfileRoute.getNameAndDomain(params);
+                    return { name, avatar: '' };
+                },
+            }),
+            new P2pPaymentDestinationRoute({
+                domainLogicHandler: async (params, body) => {
+                    const { name, domain } = P2pPaymentDestinationRoute.getNameAndDomain(params);
+                    const bind = await resolveAndAuthorize(name);
+                    const pending = await createPaymentDestination(deps.pendingStore, {
+                        alias: name,
+                        domain,
+                        identityPubKey: bind.identityKey,
+                        satoshis: Number(body.satoshis ?? 0),
+                        ttlMs: deps.pendingTtlMs,
+                    });
+                    return {
+                        reference: pending.reference,
+                        outputs: [
+                            { satoshis: pending.satoshis, script: pending.outputScript },
+                        ],
+                    };
+                },
+            }),
+            new ReceiveBeefTransactionRoute({
+                verifySignature: false,
+                paymailClient,
+                domainLogicHandler: async (params, body) => {
+                    const beefBytes = Utils.toArray(body.beef, 'hex');
+                    const tx = Transaction.fromAtomicBEEF(beefBytes);
+                    return finishReceive(tx, beefBytes, body.reference);
+                },
+            }),
+            new ReceiveTransactionRoute({
+                verifySignature: false,
+                paymailClient,
+                domainLogicHandler: async (params, body) => {
+                    const tx = Transaction.fromHex(body.hex);
+                    await populateAncestors(tx);
+                    const beefBytes = tx.toAtomicBEEF();
+                    return finishReceive(tx, beefBytes, body.reference);
+                },
+            }),
+        ],
+        errorHandler: (err, _req, res, next) => {
+            if (err instanceof NotFoundError) {
+                return res.status(404).json({ error: 'paymail not found' });
+            }
+            next(err);
+        },
+    });
+    async function populateAncestors(tx) {
+        for (const input of tx.inputs) {
+            if (input.sourceTransaction)
+                continue;
+            const sourceTxid = input.sourceTXID;
+            if (!sourceTxid)
+                throw new Error('input missing sourceTXID');
+            const beefBytes = await services.beef.getBeef(sourceTxid);
+            input.sourceTransaction = Transaction.fromBEEF(Array.from(beefBytes));
+        }
+    }
+    async function finishReceive(tx, beefBytes, reference) {
+        const pending = await deps.pendingStore.get(reference);
+        if (!pending)
+            throw new NotFoundError('destination not found or expired');
+        const scripts = tx.outputs.map((o) => o.lockingScript.toHex());
+        const sats = tx.outputs.map((o) => o.satoshis ?? 0);
+        const outputIndex = verifyPaymentOutputs(scripts, sats, pending);
+        const status = await services.submitToStack(new Uint8Array(beefBytes));
+        if (isRejected(status.txStatus)) {
+            throw new Error('transaction rejected by network');
+        }
+        const txid = status.txid || tx.id('hex');
+        pending.txid = txid;
+        await deps.pendingStore.update(pending);
+        if (messageBox) {
+            try {
+                await messageBox.deliverPayment(Utils.toHex(beefBytes), outputIndex, pending);
+            }
+            catch (err) {
+                console.error('[paymail] messagebox delivery failed', err);
+                throw new Error('failed to process payment');
+            }
+        }
+        return { txid, note: 'Payment received' };
+    }
+    app.use(router.getRouter());
+}
+function isRejected(txStatus) {
+    return ['REJECTED', 'INVALID', 'DOUBLE_SPEND_ATTEMPTED'].includes(txStatus?.toUpperCase?.() ?? '');
+}
+//# sourceMappingURL=routes.js.map

package/dist/paymail/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/paymail/routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EACN,aAAa,EACb,4BAA4B,EAC5B,kBAAkB,EAClB,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,aAAa,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAE7C,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAG9C,MAAM,aAAc,SAAQ,KAAK;IAChC,YAAY,OAAO,GAAG,mBAAmB;QACxC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC5B,CAAC;CACD;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAY,EACZ,IAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAA;IAC1E,MAAM,UAAU,GACf,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc;QACxC,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC;QAC1E,CAAC,CAAC,IAAI,CAAA;IACR,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,KAAa;QAC/C,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YACtD,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,MAAM,uBAAuB,CACxC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,CAChB,CAAA;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM;oBAAE,MAAM,IAAI,aAAa,EAAE,CAAA;YAC3C,CAAC;YACD,OAAO,IAAI,CAAA;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAA;YAC3C,MAAM,IAAI,aAAa,EAAE,CAAA;QAC1B,CAAC;IACF,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE;YACP,IAAI,4BAA4B,CAAC;gBAChC,kBAAkB,EAAE,KAAK,EAAE,MAAW,EAAE,EAAE;oBACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;oBAC9E,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;oBAC5C,OAAO;wBACN,QAAQ,EAAE,KAAc;wBACxB,MAAM,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE;wBAC3B,MAAM,EAAE,IAAI,CAAC,WAAW;qBACxB,CAAA;gBACF,CAAC;aACD,CAAC;YACF,IAAI,kBAAkB,CAAC;gBACtB,kBAAkB,EAAE,KAAK,EAAE,MAAW,EAAE,EAAE;oBACzC,MAAM,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;oBAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;gBAC5B,CAAC;aACD,CAAC;YACF,IAAI,0BAA0B,CAAC;gBAC9B,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GACrB,0BAA0B,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;oBACpD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;oBAC5C,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,YAAY,EAAE;wBACjE,KAAK,EAAE,IAAI;wBACX,MAAM;wBACN,cAAc,EAAE,IAAI,CAAC,WAAW;wBAChC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACpC,KAAK,EAAE,IAAI,CAAC,YAAY;qBACxB,CAAC,CAAA;oBACF,OAAO;wBACN,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,OAAO,EAAE;4BACR,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE;yBAC5D;qBACD,CAAA;gBACF,CAAC;aACD,CAAC;YACF,IAAI,2BAA2B,CAAC;gBAC/B,eAAe,EAAE,KAAK;gBACtB,aAAa;gBACb,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;oBACjD,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;oBAChD,OAAO,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;gBACpD,CAAC;aACD,CAAC;YACF,IAAI,uBAAuB,CAAC;gBAC3B,eAAe,EAAE,KAAK;gBACtB,aAAa;gBACb,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACxC,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAA;oBAC3B,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,EAAE,CAAA;oBACnC,OAAO,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;gBACpD,CAAC;aACD,CAAC;SACF;QACD,YAAY,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAA;QACV,CAAC;KACD,CAAC,CAAA;IAEF,KAAK,UAAU,iBAAiB,CAAC,EAAe;QAC/C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,iBAAiB;gBAAE,SAAQ;YACrC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YACnC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC5D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACzD,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QACtE,CAAC;IACF,CAAC;IAED,KAAK,UAAU,aAAa,CAC3B,EAAe,EACf,SAAmB,EACnB,SAAiB;QAEjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAA;QAEzE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAA;QACnD,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAEhE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;QACtE,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACnD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QACxC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;QACnB,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEvC,IAAI,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC;gBACJ,MAAM,UAAU,CAAC,cAAc,CAC9B,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EACtB,WAAW,EACX,OAAO,CACP,CAAA;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAA;gBAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC7C,CAAC;QACF,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC1C,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,QAA4B;IAC/C,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAChE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAC/B,CAAA;AACF,CAAC"}

package/dist/paymail/types.d.ts

@@ -0,0 +1,48 @@
+export interface PendingPayment {
+    reference: string;
+    alias: string;
+    domain: string;
+    identityPubKey: string;
+    derivationPrefix: string;
+    derivationSuffix: string;
+    satoshis: number;
+    outputScript: string;
+    txid?: string;
+    createdAt: Date;
+    expiresAt: Date;
+}
+export interface PendingStore {
+    create(p: PendingPayment): Promise<void>;
+    get(reference: string): Promise<PendingPayment | null>;
+    update(p: PendingPayment): Promise<void>;
+    delete(reference: string): Promise<void>;
+}
+export interface ResolvedBind {
+    identityKey: string;
+    outpoint: string;
+}
+export interface PaymailDeps {
+    /** Public base URL for capability document (e.g. https://1sat.app) */
+    baseUrl: string;
+    /** Stack root URL (OpNS, beef, tx broadcast) */
+    stackUrl: string;
+    /** In-flight payment refs store */
+    pendingStore: PendingStore;
+    /** Pending TTL ms (default 15m) */
+    pendingTtlMs?: number;
+    /**
+     * Host wallet for subscription receipt checks + messagebox AuthFetch.
+     * Gate is on when requireEntitlement is true.
+     */
+    hostWallet?: import('@bsv/sdk').WalletInterface;
+    requireEntitlement?: boolean;
+    /**
+     * Messagebox URL for payment_inbox delivery after receive.
+     * When unified with messagebox on the same app, point at this server's
+     * own public (or loopback) URL. Unset = skip delivery.
+     */
+    messageboxUrl?: string;
+    /** Host private key for messagebox AuthFetch (required if messageboxUrl set) */
+    hostPrivateKey?: import('@bsv/sdk').PrivateKey;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/paymail/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/paymail/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CACf;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IACtD,MAAM,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,WAAW;IAC3B,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAA;IAChB,mCAAmC;IACnC,YAAY,EAAE,YAAY,CAAA;IAC1B,mCAAmC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,UAAU,EAAE,eAAe,CAAA;IAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gFAAgF;IAChF,cAAc,CAAC,EAAE,OAAO,UAAU,EAAE,UAAU,CAAA;CAC9C"}

package/dist/paymail/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/paymail/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/paymail/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,59 +1,63 @@
 {
-	"name": "@1sat/wallet-server",
-	"version": "0.0.28",
-	"description": "BRC-100 wallet storage RPC server for 1Sat Ordinals SDK",
-	"type": "module",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist"
-	],
-	"scripts": {
-		"build": "tsc",
-		"dev": "tsc --watch",
-		"clean": "rm -rf dist",
-		"test": "bun test"
-	},
-	"keywords": [
-		"1sat",
-		"bsv",
-		"ordinals",
-		"wallet",
-		"server",
-		"rpc",
-		"brc-100"
-	],
-	"license": "MIT",
-	"dependencies": {
-		"@1sat/client": "0.0.43",
-		"@1sat/wallet": "0.0.93",
-		"evlog": "^2.13.0",
-		"express": "^4.21.2"
-	},
-	"peerDependencies": {
-		"@bsv/auth-express-middleware": "^2.0.4",
-		"@bsv/sdk": "^2.1.6",
-		"@bsv/wallet-toolbox": "2.1.24",
-		"knex": "^3.1.0"
-	},
-	"peerDependenciesMeta": {
-		"pg": {
-			"optional": true
-		}
-	},
-	"devDependencies": {
-		"@bsv/auth-express-middleware": "^2.0.4",
-		"@bsv/sdk": "^2.1.6",
-		"@bsv/wallet-toolbox": "2.1.24",
-		"@types/bun": "^1.3.10",
-		"@types/express": "^4.17.21",
-		"knex": "^3.1.0",
-		"typescript": "^5.9.3"
-	}
+  "name": "@1sat/wallet-server",
+  "version": "0.0.31",
+  "description": "BRC-100 wallet storage RPC server for 1Sat Ordinals SDK",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "test": "bun test"
+  },
+  "keywords": [
+    "1sat",
+    "bsv",
+    "ordinals",
+    "wallet",
+    "server",
+    "rpc",
+    "brc-100"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@1sat/client": "0.0.45",
+    "@1sat/types": "0.0.36",
+    "@1sat/wallet": "0.0.96",
+    "evlog": "^2.13.0",
+    "express": "^4.21.2",
+    "@bopen-io/messagebox-server": "^1.3.2"
+  },
+  "peerDependencies": {
+    "@bsv/auth-express-middleware": "^2.0.4",
+    "@bsv/sdk": "^2.1.6",
+    "@bsv/wallet-toolbox": "2.1.24",
+    "knex": "^3.1.0",
+    "@bsv/paymail": "^2.4.0"
+  },
+  "peerDependenciesMeta": {
+    "pg": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@bsv/auth-express-middleware": "^2.0.4",
+    "@bsv/sdk": "^2.1.6",
+    "@bsv/wallet-toolbox": "2.1.24",
+    "@types/bun": "^1.3.10",
+    "@types/express": "^4.17.21",
+    "knex": "^3.1.0",
+    "typescript": "^5.9.3",
+    "@bsv/paymail": "^2.4.0"
+  }
 }