@1sat/wallet-server 0.0.29 → 0.0.32

package/dist/openapi/fragments.js

@@ -0,0 +1,399 @@
+/**
+ * Per-surface OpenAPI path fragments. Each surface contributes its canonical
+ * paths only — legacy root-mounted messagebox aliases are intentionally
+ * undocumented. The assembler merges fragments for enabled surfaces.
+ */
+/** Tag metadata rendered as section headings + intros on the docs page. */
+export const TAG_DOCS = [
+    {
+        name: 'auth',
+        'x-displayName': 'Authentication',
+        description: 'BRC-103/104 mutual authentication. Complete one handshake here and the resulting peer session authenticates you on every authed endpoint below — storage, account, hosting, and messagebox.',
+    },
+    {
+        name: 'storage',
+        'x-displayName': 'Wallet storage',
+        description: 'Remote storage for BRC-100 wallets. A wallet-toolbox client connects here to persist and sync its outputs, actions, and certificates.',
+    },
+    {
+        name: 'account',
+        'x-displayName': 'Storage account (billing)',
+        description: 'Metered billing for the wallet storage surface above: every identity gets a free byte baseline, and additional capacity is purchased in fixed-size chunks for a block-window term. Unrelated to paymail/messagebox hosting, which has its own flat-rate subscription below.',
+    },
+    {
+        name: 'hosting',
+        'x-displayName': 'Paymail + messagebox hosting',
+        description: 'Flat-rate subscription that covers both paymail hosting and messagebox delivery for an identity. While the subscription is active, this server answers paymail lookups for your alias and stores inbound messages for you. Billed separately from the storage account above.',
+    },
+    {
+        name: 'paymail',
+        'x-displayName': 'Paymail (bsvalias)',
+        description: 'Public bsvalias surface for receiving payments at alias@domain. Endpoints beyond capability discovery are resolved from the capability document. When hosting is enabled, aliases resolve only for identities with an active hosting subscription.',
+    },
+    {
+        name: 'messagebox',
+        'x-displayName': 'Messagebox',
+        description: 'Store-and-forward message delivery between identity keys, with live WebSocket delivery to connected recipients. When hosting is enabled, recipients must hold an active hosting subscription.',
+    },
+];
+const brc104 = [{ brc104: [] }];
+const errorSchema = {
+    type: 'object',
+    properties: {
+        status: { type: 'string', example: 'error' },
+        code: { type: 'string' },
+        description: { type: 'string' },
+    },
+};
+const paymentRequiredResponse = {
+    description: 'Payment required (BRC-41). Retry the request with an `x-bsv-payment` header containing `{derivationPrefix, derivationSuffix, transaction}` where `transaction` is a base64 AtomicBEEF paying the server.',
+    headers: {
+        'x-bsv-payment-satoshis-required': {
+            schema: { type: 'string' },
+            description: 'Sats owed for this request.',
+        },
+        'x-bsv-payment-derivation-prefix': {
+            schema: { type: 'string' },
+            description: 'Server nonce to use as the BRC-29 derivation prefix.',
+        },
+    },
+    content: { 'application/json': { schema: errorSchema } },
+};
+export function authPaths() {
+    return {
+        '/.well-known/auth': {
+            post: {
+                tags: ['auth'],
+                summary: 'BRC-104 mutual-auth handshake',
+                description: 'Establishes a mutually authenticated peer session (BRC-103/104). One handshake authenticates the client for every authed surface on this server.',
+                responses: {
+                    '200': { description: 'Handshake message accepted.' },
+                },
+            },
+        },
+    };
+}
+export function storagePaths() {
+    return {
+        '/': {
+            post: {
+                tags: ['storage'],
+                summary: 'Wallet storage JSON-RPC',
+                description: 'JSON-RPC 2.0 endpoint exposing wallet-toolbox storage methods (`createAction`, `listOutputs`, `findOrInsertUser`, …) to remote BRC-100 wallets. When account metering is enabled, requests from over-capacity accounts fail with JSON-RPC error `-32005` (insufficient capacity).',
+                security: brc104,
+                requestBody: {
+                    required: true,
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: 'object',
+                                required: ['jsonrpc', 'id', 'method'],
+                                properties: {
+                                    jsonrpc: { type: 'string', example: '2.0' },
+                                    id: { type: 'integer' },
+                                    method: { type: 'string' },
+                                    params: { type: 'array', items: {} },
+                                },
+                            },
+                        },
+                    },
+                },
+                responses: {
+                    '200': {
+                        description: 'JSON-RPC response (result or error object).',
+                    },
+                },
+            },
+        },
+    };
+}
+export function accountPaths() {
+    const status = {
+        type: 'object',
+        properties: {
+            identityKey: { type: 'string' },
+            serverIdentityKey: { type: 'string' },
+            accountsEnabled: { type: 'boolean' },
+            currentBlock: { type: 'integer' },
+            usedBytes: { type: 'integer' },
+            baselineBytes: { type: 'integer' },
+            paidBytes: { type: 'integer' },
+            capacityBytes: { type: 'integer' },
+            deficitBytes: { type: 'integer' },
+            paidThroughBlock: { type: 'integer', nullable: true },
+            pricing: {
+                type: 'object',
+                properties: {
+                    purchaseUnitBytes: { type: 'integer' },
+                    satsPerUnit: { type: 'integer' },
+                    durationBlocks: { type: 'integer' },
+                },
+            },
+            nextPayment: {
+                type: 'object',
+                properties: {
+                    derivationPrefix: { type: 'string' },
+                    derivationSuffix: { type: 'string' },
+                },
+            },
+        },
+    };
+    return {
+        '/account/status': {
+            get: {
+                tags: ['account'],
+                summary: 'Storage account status and pricing',
+                description: 'Capacity, usage, and pricing for the authenticated identity. Capacity/pricing fields are present only when `accountsEnabled` is true.',
+                security: brc104,
+                responses: {
+                    '200': {
+                        description: 'Account status.',
+                        content: { 'application/json': { schema: status } },
+                    },
+                    '401': { description: 'Unauthenticated.' },
+                },
+            },
+        },
+        '/account/payment': {
+            post: {
+                tags: ['account'],
+                summary: 'Purchase storage capacity',
+                description: 'BRC-41 payment endpoint. Call without payment to receive a 402 quote for the sats owed (full price for needed capacity minus prorated credit for the active payment), then retry with the `x-bsv-payment` header.',
+                security: brc104,
+                responses: {
+                    '200': {
+                        description: 'Payment accepted; returns updated account status.',
+                        content: { 'application/json': { schema: status } },
+                    },
+                    '402': paymentRequiredResponse,
+                },
+            },
+        },
+    };
+}
+export function hostingPaths() {
+    const statusSchema = {
+        type: 'object',
+        properties: {
+            enabled: { type: 'boolean' },
+            identityKey: { type: 'string' },
+            active: { type: 'boolean' },
+            expiresAt: {
+                type: 'integer',
+                description: 'Unix seconds when the subscription expires.',
+            },
+            priceSats: { type: 'integer' },
+            priceUsd: { type: 'number' },
+            periodSeconds: { type: 'integer' },
+        },
+    };
+    return {
+        '/hosting/price': {
+            get: {
+                tags: ['hosting'],
+                summary: 'Hosting subscription price',
+                description: 'Public. Current price of a paymail + messagebox hosting subscription. `priceUsd` is the configured USD target price and is present only when the operator sets one.',
+                responses: {
+                    '200': {
+                        description: 'Current price.',
+                        content: {
+                            'application/json': {
+                                schema: {
+                                    type: 'object',
+                                    required: ['priceSats', 'periodSeconds'],
+                                    properties: {
+                                        priceSats: { type: 'integer' },
+                                        priceUsd: { type: 'number' },
+                                        periodSeconds: { type: 'integer' },
+                                    },
+                                },
+                            },
+                        },
+                    },
+                    '404': { description: 'Hosting disabled on this server.' },
+                },
+            },
+        },
+        '/hosting/status': {
+            get: {
+                tags: ['hosting'],
+                summary: 'Hosting subscription status',
+                security: brc104,
+                responses: {
+                    '200': {
+                        description: 'Subscription status for the authenticated identity.',
+                        content: { 'application/json': { schema: statusSchema } },
+                    },
+                    '401': { description: 'Unauthenticated.' },
+                },
+            },
+        },
+        '/hosting/subscribe': {
+            post: {
+                tags: ['hosting'],
+                summary: 'Buy or renew a hosting subscription',
+                description: 'BRC-41 payment endpoint (402 flow, price from `/hosting/price`). On success the server mints a receipt extending the subscription by one period from the later of now or the current expiry.',
+                security: brc104,
+                responses: {
+                    '200': {
+                        description: 'Subscription active.',
+                        content: {
+                            'application/json': {
+                                schema: {
+                                    type: 'object',
+                                    properties: {
+                                        status: { type: 'string', example: 'ok' },
+                                        identityKey: { type: 'string' },
+                                        expiresAt: { type: 'integer' },
+                                        txid: { type: 'string' },
+                                    },
+                                },
+                            },
+                        },
+                    },
+                    '402': paymentRequiredResponse,
+                    '404': { description: 'Hosting disabled on this server.' },
+                },
+            },
+        },
+    };
+}
+export function messageboxPaths() {
+    return {
+        '/messagebox/sendMessage': {
+            post: {
+                tags: ['messagebox'],
+                summary: 'Send a message to a recipient inbox',
+                description: 'Stores a message for the recipient and delivers it live over WebSocket when connected. When hosting is enabled, every recipient must hold an active hosting subscription (403 `ERR_HOSTING_REQUIRED` otherwise).',
+                security: brc104,
+                requestBody: {
+                    required: true,
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: 'object',
+                                required: ['message'],
+                                properties: {
+                                    message: {
+                                        type: 'object',
+                                        required: ['recipient', 'messageBox', 'messageId', 'body'],
+                                        properties: {
+                                            recipient: {
+                                                type: 'string',
+                                                description: 'Recipient identity key (hex).',
+                                            },
+                                            messageBox: {
+                                                type: 'string',
+                                                description: 'Inbox name, e.g. `payment_inbox`.',
+                                            },
+                                            messageId: { type: 'string' },
+                                            body: {
+                                                description: 'Message payload (string or object).',
+                                            },
+                                        },
+                                    },
+                                },
+                            },
+                        },
+                    },
+                },
+                responses: {
+                    '200': { description: 'Message stored.' },
+                    '403': {
+                        description: 'Recipient has no active hosting subscription (`ERR_HOSTING_REQUIRED`).',
+                        content: { 'application/json': { schema: errorSchema } },
+                    },
+                },
+            },
+        },
+        '/messagebox/listMessages': {
+            post: {
+                tags: ['messagebox'],
+                summary: 'List messages in one of your inboxes',
+                security: brc104,
+                requestBody: {
+                    required: true,
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: 'object',
+                                required: ['messageBox'],
+                                properties: { messageBox: { type: 'string' } },
+                            },
+                        },
+                    },
+                },
+                responses: { '200': { description: 'Messages in the box.' } },
+            },
+        },
+        '/messagebox/acknowledgeMessage': {
+            post: {
+                tags: ['messagebox'],
+                summary: 'Acknowledge (delete) received messages',
+                security: brc104,
+                requestBody: {
+                    required: true,
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: 'object',
+                                required: ['messageIds'],
+                                properties: {
+                                    messageIds: { type: 'array', items: { type: 'string' } },
+                                },
+                            },
+                        },
+                    },
+                },
+                responses: { '200': { description: 'Messages acknowledged.' } },
+            },
+        },
+        '/messagebox/registerDevice': {
+            post: {
+                tags: ['messagebox'],
+                summary: 'Register a device for push notifications',
+                security: brc104,
+                requestBody: {
+                    required: true,
+                    content: {
+                        'application/json': {
+                            schema: {
+                                type: 'object',
+                                required: ['fcmToken'],
+                                properties: {
+                                    fcmToken: { type: 'string' },
+                                    deviceId: { type: 'string' },
+                                    platform: { type: 'string' },
+                                },
+                            },
+                        },
+                    },
+                },
+                responses: { '200': { description: 'Device registered.' } },
+            },
+        },
+        '/messagebox/devices': {
+            get: {
+                tags: ['messagebox'],
+                summary: 'List your registered devices',
+                security: brc104,
+                responses: { '200': { description: 'Registered devices.' } },
+            },
+        },
+    };
+}
+export function paymailPaths() {
+    return {
+        '/.well-known/bsvalias': {
+            get: {
+                tags: ['paymail'],
+                summary: 'Paymail capability discovery',
+                description: 'Public bsvalias capability document. Paymail clients discover the PKI, public-profile, payment-destination, and receive-transaction endpoint templates from here rather than hardcoding paths.',
+                responses: {
+                    '200': { description: 'Capability document.' },
+                },
+            },
+        },
+    };
+}
+//# sourceMappingURL=fragments.js.map

package/dist/openapi/fragments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragments.js","sourceRoot":"","sources":["../../src/openapi/fragments.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,QAAQ,GAAa;IACjC;QACC,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,gBAAgB;QACjC,WAAW,EACV,6LAA6L;KAC9L;IACD;QACC,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,gBAAgB;QACjC,WAAW,EACV,uIAAuI;KACxI;IACD;QACC,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,2BAA2B;QAC5C,WAAW,EACV,6QAA6Q;KAC9Q;IACD;QACC,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,8BAA8B;QAC/C,WAAW,EACV,8QAA8Q;KAC/Q;IACD;QACC,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,oBAAoB;QACrC,WAAW,EACV,oPAAoP;KACrP;IACD;QACC,IAAI,EAAE,YAAY;QAClB,eAAe,EAAE,YAAY;QAC7B,WAAW,EACV,+LAA+L;KAChM;CACD,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;AAE/B,MAAM,WAAW,GAAG;IACnB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;QAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;CACD,CAAA;AAED,MAAM,uBAAuB,GAAG;IAC/B,WAAW,EACV,0MAA0M;IAC3M,OAAO,EAAE;QACR,iCAAiC,EAAE;YAClC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,WAAW,EAAE,6BAA6B;SAC1C;QACD,iCAAiC,EAAE;YAClC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,WAAW,EAAE,sDAAsD;SACnE;KACD;IACD,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;CACxD,CAAA;AAED,MAAM,UAAU,SAAS;IACxB,OAAO;QACN,mBAAmB,EAAE;YACpB,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,MAAM,CAAC;gBACd,OAAO,EAAE,+BAA+B;gBACxC,WAAW,EACV,kJAAkJ;gBACnJ,SAAS,EAAE;oBACV,KAAK,EAAE,EAAE,WAAW,EAAE,6BAA6B,EAAE;iBACrD;aACD;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY;IAC3B,OAAO;QACN,GAAG,EAAE;YACJ,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,WAAW,EACV,mRAAmR;gBACpR,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE;oBACZ,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACR,kBAAkB,EAAE;4BACnB,MAAM,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC;gCACrC,UAAU,EAAE;oCACX,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;oCAC3C,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oCACvB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;iCACpC;6BACD;yBACD;qBACD;iBACD;gBACD,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,6CAA6C;qBAC1D;iBACD;aACD;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY;IAC3B,MAAM,MAAM,GAAG;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACjC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACjC,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACrD,OAAO,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACX,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAChC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBACnC;aACD;YACD,WAAW,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACX,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACpC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACpC;aACD;SACD;KACD,CAAA;IACD,OAAO;QACN,iBAAiB,EAAE;YAClB,GAAG,EAAE;gBACJ,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,oCAAoC;gBAC7C,WAAW,EACV,uIAAuI;gBACxI,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,iBAAiB;wBAC9B,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;qBACnD;oBACD,KAAK,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;iBAC1C;aACD;SACD;QACD,kBAAkB,EAAE;YACnB,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,2BAA2B;gBACpC,WAAW,EACV,mNAAmN;gBACpN,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,mDAAmD;wBAChE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;qBACnD;oBACD,KAAK,EAAE,uBAAuB;iBAC9B;aACD;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY;IAC3B,MAAM,YAAY,GAAG;QACpB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3B,SAAS,EAAE;gBACV,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,6CAA6C;aAC1D;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAClC;KACD,CAAA;IACD,OAAO;QACN,gBAAgB,EAAE;YACjB,GAAG,EAAE;gBACJ,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,4BAA4B;gBACrC,WAAW,EACV,qKAAqK;gBACtK,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,gBAAgB;wBAC7B,OAAO,EAAE;4BACR,kBAAkB,EAAE;gCACnB,MAAM,EAAE;oCACP,IAAI,EAAE,QAAQ;oCACd,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;oCACxC,UAAU,EAAE;wCACX,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wCAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC5B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;qCAClC;iCACD;6BACD;yBACD;qBACD;oBACD,KAAK,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;iBAC1D;aACD;SACD;QACD,iBAAiB,EAAE;YAClB,GAAG,EAAE;gBACJ,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,6BAA6B;gBACtC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,qDAAqD;wBAClE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;qBACzD;oBACD,KAAK,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;iBAC1C;aACD;SACD;QACD,oBAAoB,EAAE;YACrB,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,qCAAqC;gBAC9C,WAAW,EACV,8LAA8L;gBAC/L,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE;oBACV,KAAK,EAAE;wBACN,WAAW,EAAE,sBAAsB;wBACnC,OAAO,EAAE;4BACR,kBAAkB,EAAE;gCACnB,MAAM,EAAE;oCACP,IAAI,EAAE,QAAQ;oCACd,UAAU,EAAE;wCACX,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;wCACzC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wCAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wCAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qCACxB;iCACD;6BACD;yBACD;qBACD;oBACD,KAAK,EAAE,uBAAuB;oBAC9B,KAAK,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;iBAC1D;aACD;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,OAAO;QACN,yBAAyB,EAAE;YAC1B,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,qCAAqC;gBAC9C,WAAW,EACV,kNAAkN;gBACnN,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE;oBACZ,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACR,kBAAkB,EAAE;4BACnB,MAAM,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,QAAQ,EAAE,CAAC,SAAS,CAAC;gCACrB,UAAU,EAAE;oCACX,OAAO,EAAE;wCACR,IAAI,EAAE,QAAQ;wCACd,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC;wCAC1D,UAAU,EAAE;4CACX,SAAS,EAAE;gDACV,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,+BAA+B;6CAC5C;4CACD,UAAU,EAAE;gDACX,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,mCAAmC;6CAChD;4CACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC7B,IAAI,EAAE;gDACL,WAAW,EAAE,qCAAqC;6CAClD;yCACD;qCACD;iCACD;6BACD;yBACD;qBACD;iBACD;gBACD,SAAS,EAAE;oBACV,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACzC,KAAK,EAAE;wBACN,WAAW,EACV,wEAAwE;wBACzE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;qBACxD;iBACD;aACD;SACD;QACD,0BAA0B,EAAE;YAC3B,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,sCAAsC;gBAC/C,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE;oBACZ,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACR,kBAAkB,EAAE;4BACnB,MAAM,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,QAAQ,EAAE,CAAC,YAAY,CAAC;gCACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;6BAC9C;yBACD;qBACD;iBACD;gBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE;aAC7D;SACD;QACD,gCAAgC,EAAE;YACjC,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,wCAAwC;gBACjD,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE;oBACZ,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACR,kBAAkB,EAAE;4BACnB,MAAM,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,QAAQ,EAAE,CAAC,YAAY,CAAC;gCACxB,UAAU,EAAE;oCACX,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iCACxD;6BACD;yBACD;qBACD;iBACD;gBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,EAAE;aAC/D;SACD;QACD,4BAA4B,EAAE;YAC7B,IAAI,EAAE;gBACL,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,0CAA0C;gBACnD,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE;oBACZ,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACR,kBAAkB,EAAE;4BACnB,MAAM,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,QAAQ,EAAE,CAAC,UAAU,CAAC;gCACtB,UAAU,EAAE;oCACX,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iCAC5B;6BACD;yBACD;qBACD;iBACD;gBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE;aAC3D;SACD;QACD,qBAAqB,EAAE;YACtB,GAAG,EAAE;gBACJ,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,8BAA8B;gBACvC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE;aAC5D;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY;IAC3B,OAAO;QACN,uBAAuB,EAAE;YACxB,GAAG,EAAE;gBACJ,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,8BAA8B;gBACvC,WAAW,EACV,gMAAgM;gBACjM,SAAS,EAAE;oBACV,KAAK,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;iBAC9C;aACD;SACD;KACD,CAAA;AACF,CAAC"}

package/dist/openapi/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * OpenAPI assembly for the host server. The spec is built per request from
+ * the surfaces actually mounted, so a deployment's docs never advertise
+ * routes it doesn't serve. Canonical paths only — the legacy root-mounted
+ * messagebox aliases are undocumented by design.
+ */
+import type { Express } from 'express';
+export interface OpenApiSurfaces {
+    storage?: boolean;
+    accounts?: boolean;
+    /** Getter so a live config toggle is reflected without restart. */
+    hosting?: () => boolean;
+    paymail?: boolean;
+    messagebox?: boolean;
+}
+export interface OpenApiOptions {
+    serverIdentityKey: string;
+    surfaces: OpenApiSurfaces;
+    title?: string;
+    description?: string;
+    version?: string;
+}
+export declare function buildOpenApiSpec(options: OpenApiOptions): object;
+export declare function mountOpenApiRoutes(app: Express, options: OpenApiOptions): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/openapi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAYtC,MAAM,WAAW,eAAe;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;IACvB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,UAAU,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC9B,iBAAiB,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,eAAe,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAgDhE;AAuBD,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,cAAc,GACrB,IAAI,CAON"}

package/dist/openapi/index.js

@@ -0,0 +1,82 @@
+/**
+ * OpenAPI assembly for the host server. The spec is built per request from
+ * the surfaces actually mounted, so a deployment's docs never advertise
+ * routes it doesn't serve. Canonical paths only — the legacy root-mounted
+ * messagebox aliases are undocumented by design.
+ */
+import { TAG_DOCS, accountPaths, authPaths, hostingPaths, messageboxPaths, paymailPaths, storagePaths, } from './fragments';
+export function buildOpenApiSpec(options) {
+    const paths = { ...authPaths() };
+    const tags = new Set(['auth']);
+    if (options.surfaces.storage) {
+        Object.assign(paths, storagePaths());
+        tags.add('storage');
+    }
+    if (options.surfaces.accounts) {
+        Object.assign(paths, accountPaths());
+        tags.add('account');
+    }
+    if (options.surfaces.hosting?.()) {
+        Object.assign(paths, hostingPaths());
+        tags.add('hosting');
+    }
+    if (options.surfaces.paymail) {
+        Object.assign(paths, paymailPaths());
+        tags.add('paymail');
+    }
+    if (options.surfaces.messagebox) {
+        Object.assign(paths, messageboxPaths());
+        tags.add('messagebox');
+    }
+    return {
+        openapi: '3.0.3',
+        info: {
+            title: options.title ?? '1sat Wallet Host Server',
+            version: options.version ?? '1.0.0',
+            description: options.description ??
+                'BRC-100 wallet storage host. Authenticated surfaces use BRC-103/104 mutual auth (one handshake at POST /.well-known/auth covers all of them); paid surfaces use the BRC-41 402 payment flow.',
+        },
+        'x-server-identity-key': options.serverIdentityKey,
+        tags: TAG_DOCS.filter((t) => tags.has(t.name)),
+        components: {
+            securitySchemes: {
+                brc104: {
+                    type: 'apiKey',
+                    in: 'header',
+                    name: 'x-bsv-auth-identity-key',
+                    description: 'BRC-103/104 mutual authentication. Use an auth-capable client (e.g. AuthFetch from @bsv/sdk); requests are signed, not bearer-token authorized.',
+                },
+            },
+        },
+        paths,
+    };
+}
+/** Scalar shell — renders /openapi.json client-side. Needs internet for the CDN script; the API itself does not. */
+function docsShellHtml(title) {
+    const safeTitle = title
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${safeTitle}</title>
+</head>
+<body>
+<div id="app"></div>
+<script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference"></script>
+<script>Scalar.createApiReference('#app', { url: '/openapi.json' })</script>
+</body>
+</html>`;
+}
+export function mountOpenApiRoutes(app, options) {
+    app.get('/openapi.json', (_req, res) => {
+        res.json(buildOpenApiSpec(options));
+    });
+    app.get('/', (_req, res) => {
+        res.type('html').send(docsShellHtml(options.title ?? '1sat Wallet Host Server'));
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/openapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEN,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,GACZ,MAAM,aAAa,CAAA;AAmBpB,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACvD,MAAM,KAAK,GAAkB,EAAE,GAAG,SAAS,EAAE,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACvB,CAAC;IAED,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,yBAAyB;YACjD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;YACnC,WAAW,EACV,OAAO,CAAC,WAAW;gBACnB,8LAA8L;SAC/L;QACD,uBAAuB,EAAE,OAAO,CAAC,iBAAiB;QAClD,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,UAAU,EAAE;YACX,eAAe,EAAE;gBAChB,MAAM,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACV,iJAAiJ;iBAClJ;aACD;SACD;QACD,KAAK;KACL,CAAA;AACF,CAAC;AAED,oHAAoH;AACpH,SAAS,aAAa,CAAC,KAAa;IACnC,MAAM,SAAS,GAAG,KAAK;SACrB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACvB,OAAO;;;;;SAKC,SAAS;;;;;;;QAOV,CAAA;AACR,CAAC;AAED,MAAM,UAAU,kBAAkB,CACjC,GAAY,EACZ,OAAuB;IAEvB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;AACH,CAAC"}

package/dist/paymail/destination.d.ts

@@ -0,0 +1,14 @@
+/**
+ * BRC-29 payment destination for a bound identity (anyone-deriver path).
+ * Port of Go DerivePaymentDestination.
+ */
+import type { PendingPayment, PendingStore } from './types';
+export declare function createPaymentDestination(store: PendingStore, opts: {
+    alias: string;
+    domain: string;
+    identityPubKey: string;
+    satoshis: number;
+    ttlMs?: number;
+}): Promise<PendingPayment>;
+export declare function verifyPaymentOutputs(outputScriptsHex: string[], satoshis: number[], pending: PendingPayment): number;
+//# sourceMappingURL=destination.d.ts.map

package/dist/paymail/destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination.d.ts","sourceRoot":"","sources":["../../src/paymail/destination.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAQ3D,wBAAsB,wBAAwB,CAC7C,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE;IACL,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACd,GACC,OAAO,CAAC,cAAc,CAAC,CA+BzB;AAED,wBAAgB,oBAAoB,CACnC,gBAAgB,EAAE,MAAM,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAAE,EAClB,OAAO,EAAE,cAAc,GACrB,MAAM,CAQR"}

package/dist/paymail/destination.js

@@ -0,0 +1,48 @@
+/**
+ * BRC-29 payment destination for a bound identity (anyone-deriver path).
+ * Port of Go DerivePaymentDestination.
+ */
+import { BRC29_PROTOCOL_ID } from '@1sat/types';
+import { KeyDeriver, P2PKH, PrivateKey, PublicKey, Utils } from '@bsv/sdk';
+import { DEFAULT_TTL_MS, generateReference } from './pending';
+function randomB64(n) {
+    const b = new Uint8Array(n);
+    crypto.getRandomValues(b);
+    return Utils.toBase64(Array.from(b));
+}
+export async function createPaymentDestination(store, opts) {
+    const derivationPrefix = randomB64(16);
+    const derivationSuffix = randomB64(16);
+    const keyID = `${derivationPrefix} ${derivationSuffix}`;
+    // Anyone-key derives the payment pub the recipient can spend (BRC-29).
+    const anyone = new KeyDeriver(new PrivateKey(1));
+    const paymentPub = anyone.derivePublicKey(BRC29_PROTOCOL_ID, keyID, PublicKey.fromString(opts.identityPubKey), false);
+    const outputScript = new P2PKH().lock(paymentPub.toAddress()).toHex();
+    const now = new Date();
+    const ttl = opts.ttlMs ?? DEFAULT_TTL_MS;
+    const pending = {
+        reference: generateReference(),
+        alias: opts.alias,
+        domain: opts.domain,
+        identityPubKey: opts.identityPubKey,
+        derivationPrefix,
+        derivationSuffix,
+        satoshis: opts.satoshis,
+        outputScript,
+        createdAt: now,
+        expiresAt: new Date(now.getTime() + ttl),
+    };
+    await store.create(pending);
+    return pending;
+}
+export function verifyPaymentOutputs(outputScriptsHex, satoshis, pending) {
+    for (let i = 0; i < outputScriptsHex.length; i++) {
+        if (outputScriptsHex[i] !== pending.outputScript)
+            continue;
+        if (pending.satoshis === 0 || satoshis[i] === pending.satoshis) {
+            return i;
+        }
+    }
+    throw new Error('no output matches the expected payment destination');
+}
+//# sourceMappingURL=destination.js.map

package/dist/paymail/destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination.js","sourceRoot":"","sources":["../../src/paymail/destination.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAG7D,SAAS,SAAS,CAAC,CAAS;IAC3B,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAC3B,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IACzB,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,KAAmB,EACnB,IAMC;IAED,MAAM,gBAAgB,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,gBAAgB,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,GAAG,gBAAgB,IAAI,gBAAgB,EAAE,CAAA;IAEvD,uEAAuE;IACvE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CACxC,iBAAiB,EACjB,KAAK,EACL,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EACzC,KAAK,CACL,CAAA;IACD,MAAM,YAAY,GAAG,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;IAErE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAA;IACxC,MAAM,OAAO,GAAmB;QAC/B,SAAS,EAAE,iBAAiB,EAAE;QAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY;QACZ,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;KACxC,CAAA;IACD,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3B,OAAO,OAAO,CAAA;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,gBAA0B,EAC1B,QAAkB,EAClB,OAAuB;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY;YAAE,SAAQ;QAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YAChE,OAAO,CAAC,CAAA;QACT,CAAC;IACF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;AACtE,CAAC"}

package/dist/paymail/entitlement.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Host subscription check — wallet-local receipts in HOSTING_BASKET.
+ * Identity is only in tags (not on-chain script).
+ */
+import type { WalletInterface } from '@bsv/sdk';
+export interface EntitlementStatus {
+    active: boolean;
+    expiresAt?: number;
+}
+/**
+ * True if host wallet has an unspent receipt for identity with exp > now.
+ * Uses max exp if multiple receipts exist.
+ */
+export declare function checkHostingEntitlement(wallet: WalletInterface, identityKeyHex: string, nowUnix?: number): Promise<EntitlementStatus>;
+//# sourceMappingURL=entitlement.d.ts.map

package/dist/paymail/entitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.d.ts","sourceRoot":"","sources":["../../src/paymail/entitlement.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE/C,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,eAAe,EACvB,cAAc,EAAE,MAAM,EACtB,OAAO,SAAgC,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAoB5B"}

package/dist/paymail/entitlement.js

@@ -0,0 +1,30 @@
+/**
+ * Host subscription check — wallet-local receipts in HOSTING_BASKET.
+ * Identity is only in tags (not on-chain script).
+ */
+import { HOSTING_BASKET, hostingPayerTag, readHostingExp, } from '@1sat/types';
+/**
+ * True if host wallet has an unspent receipt for identity with exp > now.
+ * Uses max exp if multiple receipts exist.
+ */
+export async function checkHostingEntitlement(wallet, identityKeyHex, nowUnix = Math.floor(Date.now() / 1000)) {
+    const { outputs } = await wallet.listOutputs({
+        basket: HOSTING_BASKET,
+        tags: [hostingPayerTag(identityKeyHex)],
+        tagQueryMode: 'all',
+        includeTags: true,
+        limit: 100,
+    });
+    // Correct subscribe path leaves a single receipt; if more exist, use latest exp.
+    let maxExp = 0;
+    for (const o of outputs) {
+        const exp = readHostingExp(o.tags);
+        if (exp !== undefined && exp > maxExp)
+            maxExp = exp;
+    }
+    if (maxExp > nowUnix) {
+        return { active: true, expiresAt: maxExp };
+    }
+    return { active: false, expiresAt: maxExp > 0 ? maxExp : undefined };
+}
+//# sourceMappingURL=entitlement.js.map