@avow-finance/verifier 0.0.0-stage → 0.2.0

package/dist/tempo.js

@@ -0,0 +1,341 @@
+import { CHARGE_KINDS, RAIL_STATES, SIDE_CODES, tempoKeychainCheck, } from '@avow-finance/spec';
+import { BlockNotFoundError, isAddressEqual, parseEventLogs, TransactionReceiptNotFoundError, zeroAddress, } from 'viem';
+import { getBlock, getTransactionReceipt, readContract } from 'viem/actions';
+import { Abis, Addresses } from 'viem/tempo';
+import { FACTORY_ABI, LOCK_ABI, LOCK_PAUSED_EVENT_ABI, PAUSE_CAUSES } from './lock-abi.js';
+/** The keychain stores a key with no expiry as the largest uint64. */
+const NO_EXPIRY = 2n ** 64n - 1n;
+/**
+ * Reads an agent key from Tempo's keychain: whether it's revoked, when it expires, and the
+ * mandate hash bound into it. The keychain logs that hash as a witness in the transaction that
+ * authorized the key, and Moderato's public RPC searches logs only over short block ranges, so the
+ * caller names that transaction. Its receipt comes from the chain, so naming it proves nothing on
+ * its own: the key and the witness must both appear in it.
+ */
+export async function readAgentKey(client, account, key, authorizedIn) {
+    const stored = await readContract(client, {
+        address: Addresses.accountKeychain,
+        abi: Abis.accountKeychain,
+        functionName: 'getKey',
+        args: [account, key],
+    });
+    if (isAddressEqual(stored.keyId, zeroAddress))
+        return null;
+    const receipt = await getTransactionReceipt(client, { hash: authorizedIn });
+    const logs = parseEventLogs({
+        abi: Abis.accountKeychain,
+        logs: receipt.logs.filter((l) => isAddressEqual(l.address, Addresses.accountKeychain)),
+    });
+    // Tempo's witness event doesn't name the key, so the transaction must authorize exactly one key
+    // for this account, this one, with exactly one witness. Anything else can't be paired safely.
+    const authorizedKeys = logs.flatMap((l) => l.eventName === 'KeyAuthorized' && isAddressEqual(l.args.account, account)
+        ? [l.args.publicKey]
+        : []);
+    const witnesses = logs.flatMap((l) => l.eventName === 'KeyAuthorizationWitness' && isAddressEqual(l.args.account, account)
+        ? [l.args.witness]
+        : []);
+    const onlyThisKey = authorizedKeys.length === 1 && isAddressEqual(authorizedKeys[0] ?? zeroAddress, key);
+    return {
+        active: !stored.isRevoked,
+        expiry: stored.expiry >= NO_EXPIRY ? null : stored.expiry,
+        witness: onlyThisKey && witnesses.length === 1 ? (witnesses[0] ?? null) : null,
+    };
+}
+/** Tempo puts every TIP-20 token at these 12 bytes, `0x20c0` and ten zero bytes, then its 8-byte id. */
+const TIP20_PREFIX = '0x20c000000000000000000000';
+/** Whether an address is a TIP-20 token's, by the whole 12-byte prefix. */
+function isTip20(address) {
+    return address.toLowerCase().startsWith(TIP20_PREFIX);
+}
+/**
+ * A transaction's receipt, read after the chain's finalized block, or null when the chain has no
+ * such transaction. The receipt counts as final only when its block is at or below that finalized
+ * block and is the chain's block at its height, so a receipt from a block that lost a
+ * reorganization never reads as final. Reading the finalized block first keeps every block at or
+ * below it the chain's block.
+ */
+async function finalityOf(client, transactionHash) {
+    const final = await getBlock(client, { blockTag: 'finalized' });
+    let receipt;
+    try {
+        receipt = await getTransactionReceipt(client, { hash: transactionHash });
+    }
+    catch (error) {
+        if (error instanceof TransactionReceiptNotFoundError)
+            return null;
+        throw error;
+    }
+    let finalized = false;
+    if (final.number !== null && receipt.blockNumber <= final.number) {
+        // A node a block behind may not have the block yet, and then the receipt reads as not final.
+        const atHeight = await getBlock(client, { blockNumber: receipt.blockNumber }).catch((error) => {
+            if (error instanceof BlockNotFoundError)
+                return null;
+            throw error;
+        });
+        finalized =
+            atHeight?.hash != null && atHeight.hash.toLowerCase() === receipt.blockHash.toLowerCase();
+    }
+    return { receipt, finalized };
+}
+/**
+ * Reads the log at one index of one transaction. The log counts as a payment only when a TIP-20
+ * token emitted it and it decodes as that token's `TransferWithMemo` event, and the caller checks
+ * that the token is the one the reference names and one it accepts. The receipt is final only
+ * when its block is at or below the chain's finalized block and is the chain's block at that
+ * height, so a receipt from a block that lost a reorg never reads as final.
+ */
+export async function readTransfer(client, chainId, transactionHash, logIndex) {
+    const read = await finalityOf(client, transactionHash);
+    if (!read)
+        return null;
+    const { receipt, finalized } = read;
+    const log = receipt.logs.find((l) => l.logIndex === logIndex);
+    if (!log)
+        return null;
+    const [decoded] = isTip20(log.address)
+        ? parseEventLogs({ abi: Abis.tip20, eventName: 'TransferWithMemo', logs: [log], strict: true })
+        : [];
+    return {
+        chainId,
+        transactionHash: receipt.transactionHash,
+        logIndex,
+        succeeded: receipt.status === 'success',
+        finalized,
+        emitter: log.address,
+        event: decoded
+            ? {
+                from: decoded.args.from,
+                to: decoded.args.to,
+                amount: decoded.args.amount,
+                memo: decoded.args.memo,
+            }
+            : null,
+    };
+}
+const KIND_NAMES = new Map(Object.entries(CHARGE_KINDS).map(([name, code]) => [code, name]));
+/** A charge kind by the code the lock stores, refusing a code this verifier doesn't read. */
+function kindOf(code) {
+    const kind = KIND_NAMES.get(code);
+    if (!kind)
+        throw new Error(`The lock holds charge kind ${code}, which this verifier doesn't read`);
+    return kind;
+}
+/**
+ * Reads what a lock holds for one side of a commitment, or null when it holds nothing. It reads
+ * only the lock, so it needs no factory, and the caller decides whether the lock is Avow's. Given
+ * a block number it reads the lock as of that block, and a node that doesn't have the block yet
+ * refuses the read.
+ */
+export async function readBacking(client, lock, commitmentId, side, options = {}) {
+    const at = options.blockNumber === undefined ? {} : { blockNumber: options.blockNumber };
+    const [c, token] = await Promise.all([
+        readContract(client, {
+            address: lock,
+            abi: LOCK_ABI,
+            functionName: 'commitment',
+            args: [commitmentId, SIDE_CODES[side]],
+            ...at,
+        }),
+        readContract(client, { address: lock, abi: LOCK_ABI, functionName: 'token', ...at }),
+    ]);
+    if (c.state === 0)
+        return null;
+    const state = RAIL_STATES[c.state];
+    if (!state)
+        throw new Error(`The lock reports state ${c.state}, which this verifier doesn't read`);
+    const charges = [];
+    for (let k = 0; k < c.most.length; k++) {
+        if ((c.kinds & (1 << k)) === 0)
+            continue;
+        charges.push({ kind: kindOf(k), most: c.most[k] ?? 0n, earliest: c.earliest[k] ?? 0n });
+    }
+    return {
+        state,
+        token,
+        amount: c.amount,
+        held: c.held,
+        payee: c.payout,
+        supplier: c.supplier,
+        supplierSigner: c.supplierSigner,
+        freeCancelBy: c.freeCancelBy,
+        acceptBy: c.acceptBy,
+        chargeDeadline: c.chargeDeadline,
+        contestWindow: c.contestWindow,
+        releaseDate: c.releaseDate,
+        charges,
+        day90SupplierShareBps: c.day90ShareBps,
+        arbiter: c.arbiter,
+        termsHash: c.termsHash,
+        mandateHash: c.mandateHash,
+        approvalHash: c.approvalHash,
+        fundingKey: c.fundedBy,
+        reportCount: c.reportCount,
+        // The lock leaves the kind at zero until the first report, so only a count says one was filed.
+        reportKind: c.reportCount > 0 ? kindOf(c.reportKind) : null,
+        reportAmount: c.reportAmount,
+        hasReport: c.hasReport,
+        contested: c.contested,
+        chargeStart: c.chargeStart,
+        pausedAt: c.pausedAt,
+        hasRuling: c.hasRuling,
+    };
+}
+/**
+ * The contest of one side of a commitment among one transaction's logs, from the `Paused` event the
+ * lock logged with a contest as its cause, or null when there's none. Only a log the lock itself
+ * wrote counts, since any contract can write one shaped like it. A transaction can carry calls to
+ * several commitments, so the event has to name this commitment and side.
+ */
+export function contestInLogs(logs, lock, commitmentId, side) {
+    const events = parseEventLogs({
+        abi: LOCK_PAUSED_EVENT_ABI,
+        logs: logs.filter((l) => isAddressEqual(l.address, lock)),
+        strict: true,
+    });
+    for (const { args } of events) {
+        if (args.cause !== PAUSE_CAUSES.contest || args.side !== SIDE_CODES[side])
+            continue;
+        if (args.commitmentId.toLowerCase() !== commitmentId.toLowerCase())
+            continue;
+        return {
+            commitmentId: args.commitmentId.toLowerCase(),
+            side,
+            reasonCode: args.reasonCode,
+            statementHash: args.evidenceHash.toLowerCase(),
+            pausedAt: args.pausedAt,
+        };
+    }
+    return null;
+}
+/**
+ * Reads the contest of one side of a commitment that one transaction carried to a lock, from the
+ * transaction's receipt, with whether its block is final as `readTransfer` judges it, and the
+ * report it named as the lock held it at that block. It returns null when the chain has no such
+ * transaction, when the transaction failed, or when it holds no contest of that side from that
+ * lock, and throws when the node can't answer, so an outage never reads as a missing contest.
+ *
+ * The lock's record is read as of the end of the contest's block, so a withdrawal and a new report
+ * later in that same block would show the new report. The lock takes a contest only when it names
+ * the latest report, so the record shows the contested report unless both happened in that block.
+ */
+export async function readContest(client, lock, commitmentId, side, transactionHash) {
+    const read = await finalityOf(client, transactionHash);
+    if (!read || read.receipt.status !== 'success')
+        return null;
+    const { receipt, finalized } = read;
+    const seen = contestInLogs(receipt.logs, lock, commitmentId, side);
+    if (!seen)
+        return null;
+    const held = await readBacking(client, lock, commitmentId, side, {
+        blockNumber: receipt.blockNumber,
+    });
+    if (!held?.reportKind) {
+        throw new Error(`The lock held no report on ${commitmentId} in the block its contest landed in`);
+    }
+    return {
+        ...seen,
+        blockNumber: receipt.blockNumber,
+        finalized,
+        report: { number: held.reportCount, kind: held.reportKind, amount: held.reportAmount },
+    };
+}
+/** The chain's id from the options or the client, or a setup mistake when neither names one. */
+function chainIdOf(client, options) {
+    const chainId = options.chainId ?? client.chain?.id;
+    if (chainId === undefined)
+        throw new Error("Name the chain's id, or give the client a chain");
+    return chainId;
+}
+/**
+ * Reads the locks one factory created on Tempo, every read as of a block named by number, for the
+ * check of a booking another booking relies on. The latest finalized block is the one pinned, so
+ * no later block can change what it shows, and a node that doesn't have a block refuses the read.
+ * The pinned block carries its timestamp, so the check can refuse a node that has fallen behind.
+ * The caller trusts the node the client talks to, so it uses one it chose.
+ */
+export function tempoLockReader(client, options) {
+    const { factory } = options;
+    const lockView = (lock, name, blockNumber) => readContract(client, { address: lock, abi: LOCK_ABI, functionName: name, blockNumber });
+    return {
+        chainId: chainIdOf(client, options),
+        factory,
+        async head() {
+            const block = await getBlock(client, { blockTag: 'finalized' });
+            return { number: block.number, hash: block.hash, timestamp: block.timestamp };
+        },
+        async blockHash(blockNumber) {
+            try {
+                return (await getBlock(client, { blockNumber })).hash;
+            }
+            catch (error) {
+                if (error instanceof BlockNotFoundError)
+                    return null;
+                throw error;
+            }
+        },
+        isLock: (lock, blockNumber) => readContract(client, {
+            address: factory,
+            abi: FACTORY_ABI,
+            functionName: 'isLock',
+            args: [lock],
+            blockNumber,
+        }),
+        async lockFields(lock, blockNumber) {
+            const [lockFactory, account] = await Promise.all([
+                lockView(lock, 'factory', blockNumber),
+                lockView(lock, 'account', blockNumber),
+            ]);
+            return { factory: lockFactory, account };
+        },
+        commitment: (lock, commitmentId, side, blockNumber) => readBacking(client, lock, commitmentId, side, { blockNumber }),
+    };
+}
+/**
+ * Reads Tempo directly: the lock's settings and its record of a commitment, the agent key in the
+ * keychain, and account signatures through Tempo's own signature verifier. A lock counts as
+ * Avow's only when the factory the supplier pinned says it created it, since any contract can name
+ * a factory. The supplier trusts the node the client talks to, so it uses one it chose.
+ */
+export function tempoChainReader(client, options) {
+    const chainId = chainIdOf(client, options);
+    const check = tempoKeychainCheck(client);
+    const tokenOf = (lock) => readContract(client, { address: lock, abi: LOCK_ABI, functionName: 'token' });
+    async function lock(lock) {
+        const created = await readContract(client, {
+            address: options.factory,
+            abi: FACTORY_ABI,
+            functionName: 'isLock',
+            args: [lock],
+        });
+        if (!created)
+            return null;
+        const at = { address: lock, abi: LOCK_ABI };
+        const [factory, account, token, minContestWindow, confirmWindow, rulingDelay, rulingKeyEnd, day90,] = await Promise.all([
+            readContract(client, { ...at, functionName: 'factory' }),
+            readContract(client, { ...at, functionName: 'account' }),
+            tokenOf(lock),
+            readContract(client, { ...at, functionName: 'minContestWindow' }),
+            readContract(client, { ...at, functionName: 'confirmWindow' }),
+            readContract(client, { ...at, functionName: 'rulingDelay' }),
+            readContract(client, { ...at, functionName: 'rulingKeyEnd' }),
+            readContract(client, { ...at, functionName: 'day90' }),
+        ]);
+        return {
+            fromFactory: isAddressEqual(factory, options.factory),
+            account,
+            token,
+            timing: { minContestWindow, confirmWindow, rulingDelay, rulingKeyEnd, day90 },
+        };
+    }
+    return {
+        chainId,
+        lock,
+        backing: (lock, commitmentId, side) => readBacking(client, lock, commitmentId, side),
+        agentKey: (account, key, authorizedIn) => readAgentKey(client, account, key, authorizedIn),
+        isAccountSignature: (account, digest, signature) => check({ signer: account, digest, signature }),
+        transfer: (transactionHash, logIndex) => readTransfer(client, chainId, transactionHash, logIndex),
+        contest: (lock, commitmentId, side, transactionHash) => readContest(client, lock, commitmentId, side, transactionHash),
+    };
+}
+//# sourceMappingURL=tempo.js.map

package/dist/tempo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tempo.js","sourceRoot":"","sources":["../src/tempo.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAIZ,WAAW,EACX,UAAU,EAEV,kBAAkB,GACnB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEL,kBAAkB,EAGlB,cAAc,EAEd,cAAc,EACd,+BAA+B,EAC/B,WAAW,GACZ,MAAM,MAAM,CAAA;AACb,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAU5C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE1F,sEAAsE;AACtE,MAAM,SAAS,GAAG,EAAE,IAAI,GAAG,GAAG,EAAE,CAAA;AAEhC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,OAAgB,EAChB,GAAY,EACZ,YAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE;QACxC,OAAO,EAAE,SAAS,CAAC,eAAe;QAClC,GAAG,EAAE,IAAI,CAAC,eAAe;QACzB,YAAY,EAAE,QAAQ;QACtB,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC;KACrB,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAA;IAE1D,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IAC3E,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,GAAG,EAAE,IAAI,CAAC,eAAe;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;KACvF,CAAC,CAAA;IACF,gGAAgG;IAChG,8FAA8F;IAC9F,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,SAAS,KAAK,eAAe,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;QACxE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,CAAC,EAAE,CACP,CAAA;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC,CAAC,SAAS,KAAK,yBAAyB,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;QAClF,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAClB,CAAC,CAAC,EAAE,CACP,CAAA;IACD,MAAM,WAAW,GACf,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,CAAA;IACtF,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;QACzD,OAAO,EAAE,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;KAC/E,CAAA;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,YAAY,GAAG,4BAA4B,CAAA;AAEjD,2EAA2E;AAC3E,SAAS,OAAO,CAAC,OAAgB;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;AACvD,CAAC;AAID;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,eAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;IAC/D,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B;YAAE,OAAO,IAAI,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjE,6FAA6F;QAC7F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CACjF,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,KAAK,YAAY,kBAAkB;gBAAE,OAAO,IAAI,CAAA;YACpD,MAAM,KAAK,CAAA;QACb,CAAC,CACF,CAAA;QACD,SAAS;YACP,QAAQ,EAAE,IAAI,IAAI,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAA;IAC7F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,OAAe,EACf,eAAoB,EACpB,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QACpC,CAAC,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/F,CAAC,CAAC,EAAE,CAAA;IACN,OAAO;QACL,OAAO;QACP,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,QAAQ;QACR,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;QACvC,SAAS;QACT,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,OAAO;YACZ,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;gBACnB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;aACxB;YACH,CAAC,CAAC,IAAI;KACT,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAC7F,CAAA;AAED,6FAA6F;AAC7F,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,oCAAoC,CAAC,CAAA;IAClG,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,IAAa,EACb,YAAiB,EACjB,IAA0B,EAC1B,OAAO,GAA6B,EAAE;IAEtC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAA;IACxF,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,YAAY,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,YAAY,EAAE,YAAY;YAC1B,IAAI,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtC,GAAG,EAAE;SACN,CAAC;QACF,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;KACrF,CAAC,CAAA;IACF,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,KAAK,oCAAoC,CAAC,CAAA;IAClG,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,SAAQ;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO;QACL,KAAK;QACL,KAAK;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO;QACP,qBAAqB,EAAE,CAAC,CAAC,aAAa;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,UAAU,EAAE,CAAC,CAAC,QAAQ;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,+FAA+F;QAC/F,UAAU,EAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3D,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAoB,EACpB,IAAa,EACb,YAAiB,EACjB,IAAU;IAEV,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,GAAG,EAAE,qBAAqB;QAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,EAAE,IAAI;KACb,CAAC,CAAA;IACF,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC;YAAE,SAAQ;QACnF,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC5E,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAS;YACpD,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAS;YACrD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,IAAa,EACb,YAAiB,EACjB,IAAU,EACV,eAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACtD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IACnC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QAC/D,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,qCAAqC,CAAC,CAAA;IAClG,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS;QACT,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;KACvF,CAAA;AACH,CAAC;AASD,gGAAgG;AAChG,SAAS,SAAS,CAAC,MAAc,EAAE,OAA2B;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IACnD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAC7F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,OAA2B;IACzE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAC3B,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,IAA2B,EAAE,WAAmB,EAAE,EAAE,CACnF,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IACzF,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;QACnC,OAAO;QACP,KAAK,CAAC,IAAI;YACR,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;YAC/D,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;QAC/E,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,WAAW;YACzB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,kBAAkB;oBAAE,OAAO,IAAI,CAAA;gBACpD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAC5B,YAAY,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,OAAO;YAChB,GAAG,EAAE,WAAW;YAChB,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,WAAW;SACZ,CAAC;QACJ,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW;YAChC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC;gBACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC;aACvC,CAAC,CAAA;YACF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;QAC1C,CAAC;QACD,UAAU,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CACpD,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;KACjE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAA2B;IAC1E,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE,CAChC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;IAE/E,KAAK,UAAU,IAAI,CAAC,IAAa;QAC/B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,EAAE,WAAW;YAChB,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,IAAI,CAAC;SACb,CAAC,CAAA;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAW,CAAA;QACpD,MAAM,CACJ,OAAO,EACP,OAAO,EACP,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,KAAK,EACN,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YACxD,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC;YACb,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;YACjE,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;YAC9D,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;YAC5D,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;YAC7D,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;SACvD,CAAC,CAAA;QACF,OAAO;YACL,WAAW,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YACrD,OAAO;YACP,KAAK;YACL,MAAM,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE;SAC9E,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC;QACpF,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC;QAC1F,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CACjD,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/C,QAAQ,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CACtC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC;QAC1D,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CACrD,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC;KACjE,CAAA;AACH,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,65 @@
+import { type AnyTerms, type RailToken, type ReasonCode, type ReplayGuard, type SupplierAuthorization, type TermsProfile } from '@avow-finance/spec';
+import type { Address } from 'viem';
+import { type Agreed } from './authorization.js';
+import type { ChainReader } from './chain.js';
+export type { Agreed } from './authorization.js';
+export { AUTHORIZATION_VALIDITY } from './authorization.js';
+export interface VerifierConfig {
+    chainId: number;
+    /** Avow's published keys for supplier authorizations. */
+    avowKeys: readonly Address[];
+    /** The supplier's own business id, as a buyer's mandate names it. */
+    businessId: string;
+    /** The supplier's own payout address. Every reserve it accepts must pay here. */
+    payee: Address;
+    /** Tokens the supplier accepts, with the currency each stands for. */
+    acceptedTokens: readonly RailToken[];
+    profile: TermsProfile;
+    /** Whether KYB results marked as test data pass. Allowed only on a testnet. */
+    acceptTestData: boolean;
+    /** The longest an authorization may stay valid, in seconds. Five minutes when left out. */
+    maxValidity?: bigint;
+}
+export interface VerifierDeps {
+    config: VerifierConfig;
+    chain: ChainReader;
+    replay: ReplayGuard;
+}
+export interface VerifyInput {
+    /** The signed supplier authorization, as JSON. */
+    authorization: unknown;
+    /** The commitment the supplier agreed to, from the terms agreement it signed. */
+    agreed: Agreed;
+    /**
+     * The supplier's own copy of the agreed terms: version 2, or version 1 for one made under it.
+     * Version 3 terms are refused, since this check doesn't read the bookings they rely on, and
+     * `prepareAcceptance` takes them.
+     */
+    terms: AnyTerms;
+    /** The buyer's signed mandate, as JSON, when the supplier wants to check it too. */
+    mandate?: unknown;
+    now: bigint;
+}
+export type Verification = {
+    ok: true;
+    authorization: SupplierAuthorization;
+    lock: Address;
+    /** The buyer's account, which owns the lock. */
+    account: Address;
+    /** The Avow key that signed. */
+    signer: Address;
+} | {
+    ok: false;
+    reason: ReasonCode;
+};
+/**
+ * Checks a supplier authorization before the supplier grants capacity. It uses only the signed
+ * message, the supplier's own record of what it agreed to and the chain, and never asks Avow.
+ * It refuses with the first reason that applies. It passes once per commitment, and it records
+ * that only after every other check passes, so a refusal never uses it up.
+ *
+ * Throws when the config doesn't fit the chain, such as test data on a chain that isn't a
+ * testnet, because that's a setup mistake rather than a bad authorization.
+ */
+export declare function verifySupplierAuthorization(input: VerifyInput, deps: VerifierDeps): Promise<Verification>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,QAAQ,EAGb,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,EAAE,KAAK,MAAM,EAAsB,MAAM,oBAAoB,CAAA;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,YAAY,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,yDAAyD;IACzD,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAA;IAC5B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,iFAAiF;IACjF,KAAK,EAAE,OAAO,CAAA;IACd,sEAAsE;IACtE,cAAc,EAAE,SAAS,SAAS,EAAE,CAAA;IACpC,OAAO,EAAE,YAAY,CAAA;IACrB,+EAA+E;IAC/E,cAAc,EAAE,OAAO,CAAA;IACvB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,aAAa,EAAE,OAAO,CAAA;IACtB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,KAAK,EAAE,QAAQ,CAAA;IACf,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,MAAM,YAAY,GACpB;IACE,EAAE,EAAE,IAAI,CAAA;IACR,aAAa,EAAE,qBAAqB,CAAA;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAA;IAChB,gCAAgC;IAChC,MAAM,EAAE,OAAO,CAAA;CAChB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAA;AAErC;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,YAAY,CAAC,CA0BvB"}

package/dist/verify.js

@@ -0,0 +1,36 @@
+import { commitmentKey, enforceableTerms, } from '@avow-finance/spec';
+import { checkAuthorization } from './authorization.js';
+export { AUTHORIZATION_VALIDITY } from './authorization.js';
+/**
+ * Checks a supplier authorization before the supplier grants capacity. It uses only the signed
+ * message, the supplier's own record of what it agreed to and the chain, and never asks Avow.
+ * It refuses with the first reason that applies. It passes once per commitment, and it records
+ * that only after every other check passes, so a refusal never uses it up.
+ *
+ * Throws when the config doesn't fit the chain, such as test data on a chain that isn't a
+ * testnet, because that's a setup mistake rather than a bad authorization.
+ */
+export async function verifySupplierAuthorization(input, deps) {
+    const checked = await checkAuthorization({ ...input, terms: { kind: 'plain', terms: input.terms } }, deps.config, deps.chain);
+    if (!checked.ok)
+        return checked;
+    const { authorization: auth, domain: d } = checked;
+    const { acceptBy } = enforceableTerms(input.terms);
+    // Last, so only an authorization that passed everything uses up its commitment.
+    const recorded = await deps.replay.recordAll([
+        {
+            key: commitmentKey('SupplierAuthorization', d, auth.commitmentId),
+            expiry: acceptBy > auth.expiry ? acceptBy : auth.expiry,
+        },
+    ]);
+    if (!recorded)
+        return { ok: false, reason: 'message.replayed' };
+    return {
+        ok: true,
+        authorization: auth,
+        lock: checked.lock,
+        account: checked.lockInfo.account,
+        signer: checked.signer,
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,aAAa,EACb,gBAAgB,GAMjB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAe,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAIpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAqD3D;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAkB,EAClB,IAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CACtC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAC1D,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,CACX,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAA;IAC/B,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAA;IAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAElD,gFAAgF;IAChF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C;YACE,GAAG,EAAE,aAAa,CAAC,uBAAuB,EAAE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC;YACjE,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;SACxD;KACF,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAE/D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,37 @@
 {
   "name": "@avow-finance/verifier",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "Lets a supplier check an Avow commitment's authorization, terms and on-chain reserve without calling Avow",
+  "license": "Apache-2.0",
+  "type": "module",
+  "engines": {
+    "node": ">=22.12"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Avow-Finance/avow.git",
+    "directory": "packages/verifier"
+  },
+  "dependencies": {
+    "viem": "2.57.11",
+    "@avow-finance/spec": "0.2.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
 }