@bosonprotocol/x402-server 0.2.0 → 0.3.0

package/dist/cjs/challenge/index.d.ts

@@ -1,12 +1,13 @@
 import { UnsignedFullOffer } from '@bosonprotocol/x402-core/eip712';
 import { Address, BosonOfferRef, TokenAuthStrategy, FulfillmentRequirements, EvmNetwork, EscrowPaymentRequirements } from '@bosonprotocol/x402-core/schemes/escrow';
-import { S as SellerSigner } from '../config-CBr9qMps.js';
+import { S as SellerSigner } from '../config-hnCiZiXF.js';
 import { ChannelRegistry } from '@bosonprotocol/x402-actions';
 import '@bosonprotocol/x402-facilitator';
 import 'viem';
 import 'zod';
 import '@bosonprotocol/core-sdk';
 import '../onchain/index.js';
+import '../client-B2yejopi.js';
 
 interface SignFullOfferArgs {
     fullOffer: UnsignedFullOffer;

package/dist/cjs/client-B2yejopi.d.ts

@@ -0,0 +1,88 @@
+import { FacilitatorVerifyInput, FacilitatorVerifyResult, FacilitatorSettleInput, FacilitatorSettleResult, FacilitatorPerformActionInput, FacilitatorPerformActionResult } from '@bosonprotocol/x402-facilitator';
+
+interface Logger {
+    debug(msg: string, meta?: Record<string, unknown>): void;
+    info(msg: string, meta?: Record<string, unknown>): void;
+    warn(msg: string, meta?: Record<string, unknown>): void;
+    error(msg: string, meta?: Record<string, unknown>): void;
+}
+/** No-op logger — the default when the host doesn't supply one. */
+declare const noopLogger: Logger;
+
+type FetchLike = (input: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text: () => Promise<string>;
+    json?: () => Promise<unknown>;
+}>;
+interface FacilitatorRetryOptions {
+    /** Total attempt budget (initial try + retries). Default 3. */
+    attempts: number;
+    /** Linear-backoff multiplier in ms: sleep `backoffMs * attemptIndex` between attempts. Default 200. */
+    backoffMs: number;
+}
+interface CreateFacilitatorClientOptions {
+    /** Base URL of the facilitator service (no trailing slash needed). */
+    url: string;
+    /** Optional `fetch` override — defaults to the global `fetch`. Useful for tests + non-`fetch` runtimes. */
+    fetch?: FetchLike;
+    /** Optional headers attached to every request — e.g. an `Authorization` for hosted facilitators. */
+    headers?: Record<string, string>;
+    /**
+     * Per-attempt timeout in ms. Default 30_000. The `AbortController`
+     * aborts in-flight fetches when this elapses; the error surfaces as
+     * `FacilitatorHttpError` with code `TIMEOUT` and is retried under
+     * the same policy as `NETWORK_ERROR`.
+     */
+    timeoutMs?: number;
+    /**
+     * Retry policy applied to `NETWORK_ERROR`, `TIMEOUT`, and HTTP 5xx
+     * responses. Defaults to `{ attempts: 3, backoffMs: 200 }` — three
+     * attempts total at 0/200/400 ms. Set `{ attempts: 1, backoffMs: 0 }`
+     * to disable.
+     */
+    retry?: FacilitatorRetryOptions;
+    /**
+     * Factory for the `x-x402b-idempotency-key` header attached to
+     * `/settle` calls. Called once per logical request — *not* once per
+     * retry attempt — so the facilitator's dedup table can recognise
+     * retries of the same intent. Defaults to `crypto.randomUUID`.
+     */
+    idempotencyKey?: () => string;
+    /** Override for `setTimeout` — tests use this to skip real backoff sleeps. */
+    setTimeout?: typeof setTimeout;
+    /** Override for `clearTimeout` — paired with `setTimeout`. */
+    clearTimeout?: typeof clearTimeout;
+    /** Optional structured logger. Defaults to no-op. Receives `warn` on errored requests; `debug` on each call. */
+    logger?: Logger;
+}
+interface FacilitatorClient {
+    verify(input: FacilitatorVerifyInput): Promise<FacilitatorVerifyResult>;
+    settle(input: FacilitatorSettleInput): Promise<FacilitatorSettleResult>;
+    performAction(input: FacilitatorPerformActionInput): Promise<FacilitatorPerformActionResult>;
+    /**
+     * GET `/healthz` liveness probe. Resolves on any 2xx; throws on
+     * network error or non-2xx. Designed for the server SDK's
+     * `healthCheck()` helper — hosts mount that one behind whatever
+     * `/healthz` route their framework uses.
+     */
+    healthCheck(): Promise<void>;
+}
+/** Idempotency-key header name. Stable so a facilitator-side dedup table can recognise it. */
+declare const IDEMPOTENCY_KEY_HEADER = "x-x402b-idempotency-key";
+/**
+ * Construct a typed HTTP client for the facilitator. The returned
+ * methods stringify the input as JSON and POST to the matching path
+ * on the configured URL. Bodies matching the well-formed result shape
+ * (whether HTTP 2xx success or HTTP 400 domain rejection) are returned
+ * verbatim; transport failures (network, non-JSON body,
+ * schema-mismatched body) raise `FacilitatorHttpError`.
+ */
+declare function createFacilitatorClient(opts: CreateFacilitatorClientOptions): FacilitatorClient;
+
+export { type CreateFacilitatorClientOptions as C, type FacilitatorRetryOptions as F, IDEMPOTENCY_KEY_HEADER as I, type Logger as L, type FacilitatorClient as a, type FetchLike as b, createFacilitatorClient as c, noopLogger as n };

package/dist/cjs/{config-CBr9qMps.d.ts → config-hnCiZiXF.d.ts}

@@ -6,6 +6,7 @@ import { Hex } from 'viem';
 import { z } from 'zod';
 import { CoreSDK } from '@bosonprotocol/core-sdk';
 import { ExchangeReader } from './onchain/index.js';
+import { F as FacilitatorRetryOptions, L as Logger } from './client-B2yejopi.js';
 
 /** Funds entity returned by `coreSdk.getFunds` — narrowed to the fields the handler reshapes. */
 interface CoreSdkFundsEntity {
@@ -50,6 +51,34 @@ interface CoreSdkReadAdapter {
  */
 declare function asCoreSdkReadAdapter(coreSdk: CoreSDK): CoreSdkReadAdapter;
 
+/**
+ * Minimal async key/value store. `get` / `set` / `delete` are the
+ * hot-path handler operations; `entries` is consumed by the
+ * recovery-inspection surface (`recovery.list`) and stays optional in
+ * spirit by being a method on the same interface — wrapping a `Map`
+ * via `mapAsStore` makes all four trivial.
+ */
+interface Store<V> {
+    get(key: string): Promise<V | undefined>;
+    set(key: string, value: V): Promise<void>;
+    delete(key: string): Promise<void>;
+    entries(): AsyncIterable<readonly [string, V]>;
+}
+/**
+ * Wrap an in-memory `Map` as a `Store<V>`. The adapter is intentionally
+ * cheap — no copies, no locking — so single-process tests and dev
+ * deployments pay zero overhead versus the previous direct-`Map`
+ * shape.
+ */
+declare function mapAsStore<V>(m: Map<string, V>): Store<V>;
+/**
+ * Structural type-guard for the `Store<V>` shape. Used by
+ * `x402bServerConfigSchema` to validate host-supplied stores without
+ * locking the contract to `Map` (the previous `z.instanceof(Map)`
+ * accepted only the concrete `Map` class).
+ */
+declare function isStore(value: unknown): value is Store<unknown>;
+
 /**
  * Minimal signing surface needed by `signFullOffer`. Structurally
  * compatible with viem's `Account` (in particular `LocalAccount` from
@@ -85,9 +114,20 @@ interface X402bServerConfig {
     escrow: Address;
     /** Seller signer (signs the FullOffer EIP-712 typed-data). */
     signer: SellerSigner;
-    /** Facilitator service the server forwards meta-tx envelopes to. The URL is also advertised in `nextActions[].endpoints.facilitator`. */
+    /**
+     * Facilitator service the server forwards meta-tx envelopes to. The
+     * URL is also advertised in `nextActions[].endpoints.facilitator`.
+     *
+     * `timeoutMs`, `retry`, and `idempotencyKey` tune the HTTP client at
+     * `./facilitator/client.ts`. Defaults: 30 s timeout; 3 attempts at
+     * 0 / 200 / 400 ms; idempotency key sourced from `crypto.randomUUID()`
+     * on every `/settle` call.
+     */
     facilitator: {
         url: string;
+        timeoutMs?: number;
+        retry?: FacilitatorRetryOptions;
+        idempotencyKey?: () => string;
     };
     /** Per-seller channel + endpoint registry consumed by `deriveNextActions`. */
     channelRegistry: ChannelRegistry;
@@ -123,19 +163,31 @@ interface X402bServerConfig {
      * cannot switch to a channel the offer never advertised.
      *
      * Optional in the config: when omitted, `createX402bServer` wires up
-     * an in-memory `Map`. Hosts running multiple instances should plug
-     * in their own cross-process `Map`-shaped backing store.
+     * an in-memory `Map` via `mapAsStore`. Single-process / dev
+     * deployments need no extra plumbing; hosts running multiple
+     * instances or who need to survive a restart MUST supply their own
+     * `Store` implementation (Redis, Postgres, etc.) — otherwise the
+     * Flow A redeem-time option-policy check is silently bypassed after
+     * a restart because the in-memory `Map` is empty.
      */
-    exchangeFulfillmentOptionStore?: Map<string, readonly string[]>;
+    exchangeFulfillmentOptionStore?: Store<readonly string[]>;
     /**
-     * Pending fulfillment updates that reached REDEEMED on-chain but
-     * failed the server-side `channel.onCommit(...)` upsert. The commit
-     * handler records Flow B updates here before attempting the channel
-     * write; the redeem handler does the same for Flow A. Both delete the
-     * record on success and leave it behind with the error message on
-     * failure so the host can replay/reconcile out of band.
+     * Pending fulfillment work that reached REDEEMED on-chain but did
+     * not complete server-side. Tracks both the `channel.onCommit(...)`
+     * upsert and the `channel.onFulfill(...)` delivery dispatch — see
+     * `FulfillmentRecoveryEntry.phase` for which step each entry left
+     * behind. The commit handler records Flow B entries; the redeem
+     * handler records Flow A. Each step deletes the entry on success
+     * and re-records it with the error message on failure so the host
+     * can replay/reconcile out of band.
+     *
+     * Same persistence story as `exchangeFulfillmentOptionStore`:
+     * defaults to in-memory `Map`; production hosts MUST supply a
+     * persistent `Store` or lose the recovery queue on every restart —
+     * the on-chain voucher is irreversibly REDEEMED in that window and
+     * the buyer's delivery payload becomes unrecoverable.
      */
-    fulfillmentRecoveryStore?: Map<string, FulfillmentRecoveryEntry>;
+    fulfillmentRecoveryStore?: Store<FulfillmentRecoveryEntry>;
     /**
      * Fulfillment channels the server accepts at redeem time when the
      * client re-submits delivery data. Structurally a subset of
@@ -147,7 +199,52 @@ interface X402bServerConfig {
      * `FULFILLMENT_CHANNELS_NOT_CONFIGURED`.
      */
     fulfillmentChannels?: readonly RedeemFulfillmentChannel[];
+    /**
+     * Optional structured logger. Threaded through the handlers + the
+     * facilitator HTTP client; events emitted include recovery-store
+     * writes, channel-`onCommit` failures, facilitator retry attempts,
+     * and boot diagnostics. Defaults to a no-op so the SDK is silent
+     * unless the host opts in.
+     */
+    logger?: Logger;
+    /**
+     * Operational mode. Default `"development"` accepts everything the
+     * type system allows. `"production"` adds a boot-time `superRefine`
+     * that requires:
+     *
+     * - `exchangeReader` (post-settle state verification is non-optional)
+     * - one of `coreSdkRead` / `subgraphUrl` (withdraw / available-funds
+     *   require a read client)
+     * - `exchangeFulfillmentOptionStore` (otherwise the Flow A redeem-time
+     *   option gate silently relaxes after a restart)
+     * - `fulfillmentRecoveryStore` (otherwise post-settle channel-onCommit
+     *   failures lose their replay handle)
+     *
+     * Without `mode: "production"`, those fields default at runtime; a
+     * misconfigured deploy boots clean and only explodes on the first
+     * request. `mode: "production"` makes the misconfiguration a synchronous
+     * `ZodError` at `createX402bServer` time instead.
+     */
+    mode?: "development" | "production";
 }
+/**
+ * Result of a channel's `onFulfill` dispatch. Mirrors
+ * `@bosonprotocol/x402-fulfillment`'s `FulfillmentResult` (kept inline so
+ * this SDK doesn't depend on that package — see `RedeemFulfillmentChannel`).
+ *
+ * - `inline` — the resource itself (the server base64-encodes `body` for
+ *   the JSON wire response; see `serializeFulfillmentResult`).
+ * - `async`  — delivered out-of-band; an optional `pointer` (e.g.
+ *   `ipfs://…`, the buyer's webhook `https://…`) is surfaced to the caller.
+ */
+type FulfillmentResult = {
+    kind: "inline";
+    body: Uint8Array;
+    contentType: string;
+} | {
+    kind: "async";
+    pointer?: string;
+};
 /**
  * Minimal structural slice of `FulfillmentChannel` the redeem
  * handler needs. Kept inline so `@bosonprotocol/x402-server` does
@@ -164,6 +261,15 @@ interface RedeemFulfillmentChannel {
         reason: string;
     };
     onCommit(exchangeId: string, data: Record<string, unknown> | null): Promise<void>;
+    /**
+     * Dispatch delivery once the on-chain release is confirmed (REDEEMED).
+     * Optional: when present, the redeem / atomic-commit-and-redeem handlers
+     * invoke it after `onCommit` persists the buyer's target, and surface
+     * the result on the 200 response. A host that delivers out-of-band via
+     * its own worker can omit it — persistence (`onCommit`) still runs.
+     * Real `@bosonprotocol/x402-fulfillment` channels always implement it.
+     */
+    onFulfill?(exchangeId: string): Promise<FulfillmentResult>;
 }
 interface FulfillmentRecoveryEntry {
     exchangeId: string;
@@ -171,6 +277,17 @@ interface FulfillmentRecoveryEntry {
     data: Record<string, unknown> | null;
     redeemer: Address;
     recordedAt: number;
+    /**
+     * Which lifecycle step left this entry behind:
+     *   - `"commit"`   — `channel.onCommit(...)` was pending / failed
+     *     (the server's delivery-target store was not updated).
+     *   - `"delivery"` — `onCommit` persisted, but `channel.onFulfill(...)`
+     *     was pending / failed (the buyer's webhook POST / IPFS upload
+     *     still needs dispatch).
+     * A single recovery worker can dispatch the right retry step by
+     * branching on this field.
+     */
+    phase: "commit" | "delivery";
     error?: string;
 }
 /**
@@ -196,10 +313,34 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">>;
     facilitator: z.ZodObject<{
         url: z.ZodEffects<z.ZodString, string, string>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        retry: z.ZodOptional<z.ZodObject<{
+            attempts: z.ZodNumber;
+            backoffMs: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            attempts: number;
+            backoffMs: number;
+        }, {
+            attempts: number;
+            backoffMs: number;
+        }>>;
+        idempotencyKey: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodString>>;
     }, "strict", z.ZodTypeAny, {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     }, {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     }>;
     channelRegistry: z.ZodObject<{
         channels: z.ZodEffects<z.ZodArray<z.ZodEnum<[_bosonprotocol_x402_actions.ActionChannel, ..._bosonprotocol_x402_actions.ActionChannel[]]>, "many">, _bosonprotocol_x402_actions.ActionChannel[], _bosonprotocol_x402_actions.ActionChannel[]>;
@@ -241,29 +382,51 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
         getSellersByAddress: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
         getBuyers: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough">>>;
-    exchangeFulfillmentOptionStore: z.ZodOptional<z.ZodType<Map<unknown, unknown>, z.ZodTypeDef, Map<unknown, unknown>>>;
-    fulfillmentRecoveryStore: z.ZodOptional<z.ZodType<Map<unknown, unknown>, z.ZodTypeDef, Map<unknown, unknown>>>;
+    exchangeFulfillmentOptionStore: z.ZodOptional<z.ZodType<Store<readonly string[]>, z.ZodTypeDef, Store<readonly string[]>>>;
+    fulfillmentRecoveryStore: z.ZodOptional<z.ZodType<Store<FulfillmentRecoveryEntry>, z.ZodTypeDef, Store<FulfillmentRecoveryEntry>>>;
+    logger: z.ZodOptional<z.ZodObject<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough">>>;
     fulfillmentChannels: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">>, "many">, z.objectOutputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[], z.objectInputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[]>>;
+    mode: z.ZodOptional<z.ZodEnum<["development", "production"]>>;
 }, "strict", z.ZodTypeAny, {
     chainId: number;
     network: string;
@@ -277,6 +440,12 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
     };
     facilitator: {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     };
     signer: {
         address: string;
@@ -293,13 +462,21 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
         getSellersByAddress: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
         getBuyers: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
-    exchangeFulfillmentOptionStore?: Map<unknown, unknown> | undefined;
-    fulfillmentRecoveryStore?: Map<unknown, unknown> | undefined;
+    exchangeFulfillmentOptionStore?: Store<readonly string[]> | undefined;
+    fulfillmentRecoveryStore?: Store<FulfillmentRecoveryEntry> | undefined;
+    logger?: z.objectOutputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     fulfillmentChannels?: z.objectOutputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[] | undefined;
+    mode?: "production" | "development" | undefined;
 }, {
     chainId: number;
     network: string;
@@ -313,6 +490,12 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
     };
     facilitator: {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     };
     signer: {
         address: string;
@@ -329,13 +512,21 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
         getSellersByAddress: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
         getBuyers: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
-    exchangeFulfillmentOptionStore?: Map<unknown, unknown> | undefined;
-    fulfillmentRecoveryStore?: Map<unknown, unknown> | undefined;
+    exchangeFulfillmentOptionStore?: Store<readonly string[]> | undefined;
+    fulfillmentRecoveryStore?: Store<FulfillmentRecoveryEntry> | undefined;
+    logger?: z.objectInputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     fulfillmentChannels?: z.objectInputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[] | undefined;
+    mode?: "production" | "development" | undefined;
 }>, {
     chainId: number;
     network: string;
@@ -349,6 +540,12 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
     };
     facilitator: {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     };
     signer: {
         address: string;
@@ -365,13 +562,21 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
         getSellersByAddress: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
         getBuyers: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
-    exchangeFulfillmentOptionStore?: Map<unknown, unknown> | undefined;
-    fulfillmentRecoveryStore?: Map<unknown, unknown> | undefined;
+    exchangeFulfillmentOptionStore?: Store<readonly string[]> | undefined;
+    fulfillmentRecoveryStore?: Store<FulfillmentRecoveryEntry> | undefined;
+    logger?: z.objectOutputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     fulfillmentChannels?: z.objectOutputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[] | undefined;
+    mode?: "production" | "development" | undefined;
 }, {
     chainId: number;
     network: string;
@@ -385,6 +590,12 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
     };
     facilitator: {
         url: string;
+        timeoutMs?: number | undefined;
+        retry?: {
+            attempts: number;
+            backoffMs: number;
+        } | undefined;
+        idempotencyKey?: ((...args: unknown[]) => string) | undefined;
     };
     signer: {
         address: string;
@@ -401,13 +612,21 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
         getSellersByAddress: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
         getBuyers: z.ZodFunction<z.ZodTuple<[z.ZodUnknown], z.ZodUnknown>, z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
-    exchangeFulfillmentOptionStore?: Map<unknown, unknown> | undefined;
-    fulfillmentRecoveryStore?: Map<unknown, unknown> | undefined;
+    exchangeFulfillmentOptionStore?: Store<readonly string[]> | undefined;
+    fulfillmentRecoveryStore?: Store<FulfillmentRecoveryEntry> | undefined;
+    logger?: z.objectInputType<{
+        debug: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        info: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        warn: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        error: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
     fulfillmentChannels?: z.objectInputType<{
         id: z.ZodString;
         validate: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
         onCommit: z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>;
+        onFulfill: z.ZodOptional<z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>>;
     }, z.ZodTypeAny, "passthrough">[] | undefined;
+    mode?: "production" | "development" | undefined;
 }>;
 /**
  * Cross-field invariant: `config.escrow` and
@@ -416,4 +635,4 @@ declare const x402bServerConfigSchema: z.ZodEffects<z.ZodObject<{
  */
 declare function assertChannelRegistryEscrowMatch(config: X402bServerConfig): void;
 
-export { type CoreSdkBuyerEntity as C, type FulfillmentRecoveryEntry as F, type RedeemFulfillmentChannel as R, type SellerSigner as S, type X402bServerConfig as X, type CoreSdkFundsEntity as a, type CoreSdkReadAdapter as b, type CoreSdkSellerEntity as c, asCoreSdkReadAdapter as d, assertChannelRegistryEscrowMatch as e, x402bServerConfigSchema as x };
+export { type CoreSdkReadAdapter as C, type FulfillmentRecoveryEntry as F, type RedeemFulfillmentChannel as R, type SellerSigner as S, type X402bServerConfig as X, type CoreSdkBuyerEntity as a, type CoreSdkFundsEntity as b, type CoreSdkSellerEntity as c, type FulfillmentResult as d, type Store as e, asCoreSdkReadAdapter as f, assertChannelRegistryEscrowMatch as g, isStore as i, mapAsStore as m, x402bServerConfigSchema as x };

package/dist/cjs/facilitator/index.d.ts

@@ -1,4 +1,4 @@
-export { C as CreateFacilitatorClientOptions, F as FacilitatorClient, a as FetchLike, c as createFacilitatorClient } from '../client-tnrpqVMW.js';
+export { C as CreateFacilitatorClientOptions, a as FacilitatorClient, F as FacilitatorRetryOptions, b as FetchLike, I as IDEMPOTENCY_KEY_HEADER, c as createFacilitatorClient } from '../client-B2yejopi.js';
 import { FacilitatorErrorCode } from '@bosonprotocol/x402-facilitator';
 export { FacilitatorErrorCode, FacilitatorPerformActionInput, FacilitatorPerformActionResult, FacilitatorSettleInput, FacilitatorSettleResult, FacilitatorVerifyInput, FacilitatorVerifyResult } from '@bosonprotocol/x402-facilitator';