@arcblock/payment-service 1.29.8 → 1.29.9

package/dist/cf.d.ts

@@ -35,6 +35,26 @@ export interface CloudflareCallerIdentity {
     authMethod?: string;
     displayName?: string;
 }
+/** Branding/profile for DID-Connect prompts (mirrors the worker driver `InstanceAppInfo`). */
+export interface InstanceAppInfo {
+    name?: string;
+    description?: string;
+    icon?: string;
+    link?: string;
+}
+/**
+ * Per-instance app signing identity used to build the DID-Connect authenticator
+ * (mirrors the worker driver `InstanceAppIdentity` / did-connect-service
+ * InstanceAppIdentityDTO). Declared locally so `cf.d.ts` stays self-contained.
+ */
+export interface InstanceAppIdentity {
+    /** Current app signing key for this instance. */
+    appSk: string;
+    /** Permanent app signing key, present when the instance has rotated keys. */
+    appPsk?: string;
+    /** Branding/profile for DID-Connect prompts. */
+    appInfo?: InstanceAppInfo;
+}
 /**
  * The CF host-wire contract. Deliberately has NO `sessionSecret` (decision #5):
  * on CF the caller identity is host-resolved and injected as `x-user-did`; payment
@@ -66,6 +86,17 @@ export interface CloudflarePaymentAdapterOptions {
     /** Per-tenant EK source (semantics aligned with arc-node: connect-service `app:ek` else derive). */
     identity: {
         getAppEk: (instanceDid: string) => Promise<string> | string;
+        /**
+         * Per-instance app signing identity (S3-CF). When the host wires it — arc reads
+         * connect-service settings `app:sk`/`app:psk`, the SAME authority as getAppEk — it
+         * is the authoritative DID-Connect signer source. Optional: when absent the adapter
+         * falls back to the AUTH_SERVICE-backed CF driver (which fails closed if AUTH_SERVICE
+         * is also absent). This is the published, type-checked counterpart of the adapter's
+         * internal options contract (blocklets/core/cloudflare/cf-adapter.ts) — keep the two
+         * `identity` shapes in sync by hand; they are intentionally separate so cf.d.ts stays
+         * dependency-free.
+         */
+        getInstanceAppIdentity?: (instanceDid: string) => Promise<InstanceAppIdentity> | InstanceAppIdentity;
     };
     /**
      * Host-resolved caller (CF API gate). The adapter injects it as `x-user-did`