@brninpay/core 0.1.0

package/dist/types/policy.js

@@ -0,0 +1,194 @@
+import { ValidationError } from './errors.js';
+export const POLICY_DECISIONS = ['allow', 'deny', 'review'];
+function assertBasePolicy(policy) {
+    if (!policy.id.trim()) {
+        throw new ValidationError('Policy id is required', { field: 'id' });
+    }
+    if (!policy.name.trim()) {
+        throw new ValidationError('Policy name is required', { field: 'name' });
+    }
+}
+function normalizeAddress(address) {
+    return address.toLowerCase();
+}
+export function evaluatePolicy(policy, context) {
+    assertBasePolicy(policy);
+    if (!policy.enabled) {
+        return {
+            policyId: policy.id,
+            decision: 'allow',
+            reason: {
+                code: 'policy_disabled',
+                message: `Policy ${policy.name} is disabled`,
+            },
+        };
+    }
+    switch (policy.kind) {
+        case 'budget': {
+            if (policy.currency !== context.currency) {
+                return {
+                    policyId: policy.id,
+                    decision: 'deny',
+                    reason: {
+                        code: 'budget_currency_mismatch',
+                        message: `Budget policy ${policy.name} only allows ${policy.currency}`,
+                    },
+                };
+            }
+            const nextSpend = context.spentAmount + context.amount;
+            if (nextSpend > policy.limit) {
+                return {
+                    policyId: policy.id,
+                    decision: 'deny',
+                    reason: {
+                        code: 'budget_limit_exceeded',
+                        message: `Budget policy ${policy.name} would exceed its hard limit`,
+                        detail: {
+                            limit: policy.limit.toString(),
+                            spentAmount: context.spentAmount.toString(),
+                            requestedAmount: context.amount.toString(),
+                        },
+                    },
+                };
+            }
+            if (policy.softLimit !== undefined && nextSpend > policy.softLimit) {
+                return {
+                    policyId: policy.id,
+                    decision: 'review',
+                    reason: {
+                        code: 'budget_soft_limit_exceeded',
+                        message: `Budget policy ${policy.name} exceeded its soft limit`,
+                        detail: {
+                            softLimit: policy.softLimit.toString(),
+                            nextSpend: nextSpend.toString(),
+                        },
+                    },
+                };
+            }
+            return {
+                policyId: policy.id,
+                decision: 'allow',
+                reason: {
+                    code: 'budget_ok',
+                    message: `Budget policy ${policy.name} approved the request`,
+                },
+            };
+        }
+        case 'allowlist': {
+            const addressAllowed = policy.addresses
+                .map((address) => normalizeAddress(address))
+                .includes(normalizeAddress(context.recipient));
+            if (!addressAllowed) {
+                return {
+                    policyId: policy.id,
+                    decision: 'deny',
+                    reason: {
+                        code: 'recipient_not_allowlisted',
+                        message: `Recipient ${context.recipient} is not allowlisted by ${policy.name}`,
+                    },
+                };
+            }
+            if (policy.chains && !policy.chains.includes(context.chainId)) {
+                return {
+                    policyId: policy.id,
+                    decision: 'deny',
+                    reason: {
+                        code: 'chain_not_allowlisted',
+                        message: `Chain ${context.chainId} is not allowlisted by ${policy.name}`,
+                    },
+                };
+            }
+            return {
+                policyId: policy.id,
+                decision: 'allow',
+                reason: {
+                    code: 'allowlist_ok',
+                    message: `Allowlist policy ${policy.name} approved the request`,
+                },
+            };
+        }
+        case 'rate_limit': {
+            if (!Number.isInteger(policy.maxRequests) || policy.maxRequests <= 0) {
+                throw new ValidationError('Rate limit maxRequests must be a positive integer', {
+                    field: 'maxRequests',
+                    value: policy.maxRequests,
+                });
+            }
+            if (!Number.isInteger(policy.intervalMs) || policy.intervalMs <= 0) {
+                throw new ValidationError('Rate limit intervalMs must be a positive integer', {
+                    field: 'intervalMs',
+                    value: policy.intervalMs,
+                });
+            }
+            const nextCount = context.requestCount + 1;
+            if (nextCount > policy.maxRequests) {
+                return {
+                    policyId: policy.id,
+                    decision: 'deny',
+                    reason: {
+                        code: 'rate_limit_exceeded',
+                        message: `Rate limit policy ${policy.name} denied the request`,
+                        detail: {
+                            scope: policy.scope,
+                            maxRequests: policy.maxRequests,
+                            requestCount: context.requestCount,
+                        },
+                    },
+                };
+            }
+            if (policy.burst !== undefined && nextCount > policy.burst) {
+                return {
+                    policyId: policy.id,
+                    decision: 'review',
+                    reason: {
+                        code: 'rate_limit_burst_review',
+                        message: `Rate limit policy ${policy.name} exceeded its preferred burst`,
+                        detail: {
+                            burst: policy.burst,
+                            requestCount: nextCount,
+                        },
+                    },
+                };
+            }
+            return {
+                policyId: policy.id,
+                decision: 'allow',
+                reason: {
+                    code: 'rate_limit_ok',
+                    message: `Rate limit policy ${policy.name} approved the request`,
+                },
+            };
+        }
+    }
+}
+export function aggregatePolicyDecisions(evaluations) {
+    const denyResult = evaluations.find((evaluation) => evaluation.decision === 'deny');
+    if (denyResult) {
+        return {
+            decision: 'deny',
+            reasons: evaluations
+                .filter((evaluation) => evaluation.decision === 'deny')
+                .map((evaluation) => evaluation.reason),
+            evaluations: [...evaluations],
+        };
+    }
+    const reviewResult = evaluations.find((evaluation) => evaluation.decision === 'review');
+    if (reviewResult) {
+        return {
+            decision: 'review',
+            reasons: evaluations
+                .filter((evaluation) => evaluation.decision === 'review')
+                .map((evaluation) => evaluation.reason),
+            evaluations: [...evaluations],
+        };
+    }
+    return {
+        decision: 'allow',
+        reasons: evaluations.map((evaluation) => evaluation.reason),
+        evaluations: [...evaluations],
+    };
+}
+export function evaluatePolicies(policies, context) {
+    return aggregatePolicyDecisions(policies.map((policy) => evaluatePolicy(policy, context)));
+}
+//# sourceMappingURL=policy.js.map

package/dist/types/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAG7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAgEpE,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,OAAO,OAAO,CAAC,WAAW,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAwB,EACxB,OAAgC;IAEhC,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAExB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE;gBACN,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,cAAc;aAC7C;SACF,CAAA;IACH,CAAC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzC,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE;wBACN,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,iBAAiB,MAAM,CAAC,IAAI,gBAAgB,MAAM,CAAC,QAAQ,EAAE;qBACvE;iBACF,CAAA;YACH,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAA;YACtD,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE;wBACN,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,iBAAiB,MAAM,CAAC,IAAI,8BAA8B;wBACnE,MAAM,EAAE;4BACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;4BAC9B,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;4BAC3C,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;yBAC3C;qBACF;iBACF,CAAA;YACH,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnE,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE;wBACN,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,iBAAiB,MAAM,CAAC,IAAI,0BAA0B;wBAC/D,MAAM,EAAE;4BACN,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;4BACtC,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;yBAChC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE;oBACN,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,iBAAiB,MAAM,CAAC,IAAI,uBAAuB;iBAC7D;aACF,CAAA;QACH,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS;iBACpC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;iBAC3C,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;YAEhD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE;wBACN,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EAAE,aAAa,OAAO,CAAC,SAAS,0BAA0B,MAAM,CAAC,IAAI,EAAE;qBAC/E;iBACF,CAAA;YACH,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9D,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE;wBACN,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,SAAS,OAAO,CAAC,OAAO,0BAA0B,MAAM,CAAC,IAAI,EAAE;qBACzE;iBACF,CAAA;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE;oBACN,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,oBAAoB,MAAM,CAAC,IAAI,uBAAuB;iBAChE;aACF,CAAA;QACH,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE;oBAC7E,KAAK,EAAE,aAAa;oBACpB,KAAK,EAAE,MAAM,CAAC,WAAW;iBAC1B,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE;oBAC5E,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,MAAM,CAAC,UAAU;iBACzB,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,CAAC,CAAA;YAC1C,IAAI,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnC,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE;wBACN,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,qBAAqB,MAAM,CAAC,IAAI,qBAAqB;wBAC9D,MAAM,EAAE;4BACN,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,WAAW,EAAE,MAAM,CAAC,WAAW;4BAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;yBACnC;qBACF;iBACF,CAAA;YACH,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3D,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE;wBACN,IAAI,EAAE,yBAAyB;wBAC/B,OAAO,EAAE,qBAAqB,MAAM,CAAC,IAAI,+BAA+B;wBACxE,MAAM,EAAE;4BACN,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,YAAY,EAAE,SAAS;yBACxB;qBACF;iBACF,CAAA;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE;oBACN,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,qBAAqB,MAAM,CAAC,IAAI,uBAAuB;iBACjE;aACF,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,WAA8C;IAE9C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAA;IACnF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,WAAW;iBACjB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC;iBACtD,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YACzC,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;SAC9B,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IACvF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,WAAW;iBACjB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC;iBACxD,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YACzC,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;SAC9B,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3D,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;KAC9B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAqC,EACrC,OAAgC;IAEhC,OAAO,wBAAwB,CAC7B,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAC1D,CAAA;AACH,CAAC"}

package/dist/types/wallet.d.ts

@@ -0,0 +1,66 @@
+export type Hex = `0x${string}`;
+export type Address = `0x${string}`;
+export type SmartWalletProvider = 'safe' | 'kernel' | 'circle';
+export type EntryPointVersion = 'v0.6' | 'v0.7';
+export interface SmartWallet {
+    address: Address;
+    ownerAddress: Address;
+    chainId: number;
+    provider: SmartWalletProvider;
+    entryPointAddress: Address;
+    entryPointVersion: EntryPointVersion;
+    factoryAddress?: Address;
+    deployed: boolean;
+}
+export interface UserOperationCall {
+    to: Address;
+    value: bigint;
+    data: Hex;
+}
+export interface GasEstimate {
+    callGasLimit: bigint;
+    verificationGasLimit: bigint;
+    preVerificationGas: bigint;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+    paymasterVerificationGasLimit?: bigint;
+    paymasterPostOpGasLimit?: bigint;
+}
+export interface UserOperationV06 {
+    version: 'v0.6';
+    sender: Address;
+    nonce: bigint;
+    initCode: Hex;
+    callData: Hex;
+    callGasLimit: bigint;
+    verificationGasLimit: bigint;
+    preVerificationGas: bigint;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+    paymasterAndData: Hex;
+    signature: Hex;
+}
+export interface UserOperationV07 {
+    version: 'v0.7';
+    sender: Address;
+    nonce: bigint;
+    factory: Address | Hex;
+    factoryData: Hex;
+    callData: Hex;
+    callGasLimit: bigint;
+    verificationGasLimit: bigint;
+    preVerificationGas: bigint;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+    paymaster: Address | Hex;
+    paymasterVerificationGasLimit: bigint;
+    paymasterPostOpGasLimit: bigint;
+    paymasterData: Hex;
+    signature: Hex;
+}
+export type UserOperation = UserOperationV06 | UserOperationV07;
+export declare function isUserOperationV06(value: UserOperation): value is UserOperationV06;
+export declare function isUserOperationV07(value: UserOperation): value is UserOperationV07;
+export declare function getUserOperationSender(value: UserOperation): Address;
+export declare function getUserOperationNonce(value: UserOperation): bigint;
+//# sourceMappingURL=wallet.d.ts.map

package/dist/types/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/types/wallet.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAA;AAC/B,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAA;AAEnC,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAC9D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAA;AAE/C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,OAAO,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,GAAG,CAAA;CACV;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,GAAG,CAAA;IACb,QAAQ,EAAE,GAAG,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,GAAG,CAAA;IACrB,SAAS,EAAE,GAAG,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,GAAG,GAAG,CAAA;IACtB,WAAW,EAAE,GAAG,CAAA;IAChB,QAAQ,EAAE,GAAG,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,OAAO,GAAG,GAAG,CAAA;IACxB,6BAA6B,EAAE,MAAM,CAAA;IACrC,uBAAuB,EAAE,MAAM,CAAA;IAC/B,aAAa,EAAE,GAAG,CAAA;IAClB,SAAS,EAAE,GAAG,CAAA;CACf;AAED,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;AAE/D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,gBAAgB,CAElF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,gBAAgB,CAElF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAEpE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAElE"}

package/dist/types/wallet.js

@@ -0,0 +1,13 @@
+export function isUserOperationV06(value) {
+    return value.version === 'v0.6';
+}
+export function isUserOperationV07(value) {
+    return value.version === 'v0.7';
+}
+export function getUserOperationSender(value) {
+    return value.sender;
+}
+export function getUserOperationNonce(value) {
+    return value.nonce;
+}
+//# sourceMappingURL=wallet.js.map

package/dist/types/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/types/wallet.ts"],"names":[],"mappings":"AAqEA,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IACzD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACxD,OAAO,KAAK,CAAC,KAAK,CAAA;AACpB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,117 @@
+export interface Actor {
+    id: string;
+    name: string;
+    status: 'active' | 'frozen' | 'depleted';
+    createdAt: string;
+}
+export interface Budget {
+    id: string;
+    actorId: string;
+    amount: bigint;
+    used: bigint;
+    currency: 'USDC';
+    period: 'monthly' | 'total';
+    resetAt: string;
+}
+export interface Policy {
+    id: string;
+    actorId: string;
+    type: string;
+    version: string;
+    config: Record<string, unknown>;
+    priority: number;
+}
+export interface SettlementDescriptor {
+    address: string;
+    chain: string;
+    asset: string;
+}
+export interface Target {
+    id: string;
+    actorId: string;
+    name: string;
+    settlement: SettlementDescriptor;
+}
+export interface Purpose {
+    type: string;
+    id: string;
+    description?: string;
+}
+export interface Intent {
+    target: string;
+    amount: bigint;
+    purpose: Purpose;
+    idempotencyKey?: string;
+}
+export interface BudgetState {
+    total: bigint;
+    used: bigint;
+    remaining: bigint;
+    period: string;
+    currency: string;
+}
+export interface PolicyResult {
+    policyId: string;
+    policyType: string;
+    version: string;
+    decision: 'pass' | 'deny' | 'review';
+    reason: {
+        code: string;
+        message: string;
+    };
+    evaluatedAt: string;
+}
+export type AuthorizationDecision = 'approved' | 'denied' | 'pending-review';
+export interface Authorization {
+    intent: Intent;
+    policyResults: PolicyResult[];
+    decision: AuthorizationDecision;
+    evaluatedAt: string;
+    actorVersion: string;
+}
+export interface SettlementHint {
+    preferredChain?: string;
+    deadline?: string;
+    gasStrategy?: string;
+}
+export interface ExecutionPlan {
+    authorization: Authorization;
+    settlementHints: SettlementHint;
+}
+export interface PolicyContext {
+    actor: Actor;
+    intent: Intent;
+    budget: BudgetState;
+    evaluatedPolicies: PolicyResult[];
+}
+export type PolicyMiddleware = (ctx: PolicyContext, next: () => Promise<PolicyResult>) => Promise<PolicyResult>;
+export interface PolicyEvaluator {
+    id: string;
+    type: string;
+    version: string;
+    middleware: PolicyMiddleware;
+}
+export interface SimulationResult {
+    decision: AuthorizationDecision;
+    policyResults: PolicyResult[];
+    estimatedGas?: bigint;
+    estimatedCost?: bigint;
+}
+export interface SignedTransaction {
+    serialized: `0x${string}`;
+    hash: `0x${string}`;
+}
+export interface Receipt {
+    txHash: `0x${string}`;
+    status: 'confirmed' | 'failed';
+    blockNumber: bigint;
+    gasUsed: bigint;
+    effectiveGasPrice: bigint;
+}
+export type { PaymentIntentStatus, PaymentAmount, PaymentRecipient, PaymentIntentFailure, PaymentMetadataValue, PaymentIntent, SerializedBigInt, } from './types/payment.js';
+export { PAYMENT_INTENT_STATUSES, PAYMENT_INTENT_TERMINAL_STATUSES, PAYMENT_INTENT_TRANSITIONS, validatePaymentAmount, isPaymentIntentTerminalStatus, canTransitionPaymentIntentStatus, assertValidPaymentIntentTransition, assertPaymentIntent, serializeBigInts, deserializeBigInts, serializePaymentIntent, deserializePaymentIntent, } from './types/payment.js';
+export type { PolicyDecision, PolicyReason, BasePolicy, BudgetPolicy, AllowlistPolicy, RateLimitPolicy, PolicyDefinition, PolicyEvaluationContext, PolicyEvaluationResult, AggregatedPolicyDecision, } from './types/policy.js';
+export { POLICY_DECISIONS, evaluatePolicy, aggregatePolicyDecisions, evaluatePolicies, } from './types/policy.js';
+export type { Hex, Address, SmartWalletProvider, EntryPointVersion, SmartWallet, UserOperationCall, GasEstimate, UserOperationV06, UserOperationV07, UserOperation, } from './types/wallet.js';
+export { isUserOperationV06, isUserOperationV07, getUserOperationSender, getUserOperationNonce, } from './types/wallet.js';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAA;IACxC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,GAAG,OAAO,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,oBAAoB,CAAA;CACjC;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,QAAQ,GAAG,gBAAgB,CAAA;AAE5E,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,YAAY,EAAE,CAAA;IAC7B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,aAAa,CAAA;IAC5B,eAAe,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,WAAW,CAAA;IACnB,iBAAiB,EAAE,YAAY,EAAE,CAAA;CAClC;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,KAC9B,OAAO,CAAC,YAAY,CAAC,CAAA;AAE1B,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,gBAAgB,CAAA;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAA;IACzB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,KAAK,MAAM,EAAE,CAAA;IACrB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AAED,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,EAC7B,gCAAgC,EAChC,kCAAkC,EAClC,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAE3B,YAAY,EACV,cAAc,EACd,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAE1B,YAAY,EACV,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,GACd,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,mBAAmB,CAAA"}

package/dist/types.js

@@ -0,0 +1,4 @@
+export { PAYMENT_INTENT_STATUSES, PAYMENT_INTENT_TERMINAL_STATUSES, PAYMENT_INTENT_TRANSITIONS, validatePaymentAmount, isPaymentIntentTerminalStatus, canTransitionPaymentIntentStatus, assertValidPaymentIntentTransition, assertPaymentIntent, serializeBigInts, deserializeBigInts, serializePaymentIntent, deserializePaymentIntent, } from './types/payment.js';
+export { POLICY_DECISIONS, evaluatePolicy, aggregatePolicyDecisions, evaluatePolicies, } from './types/policy.js';
+export { isUserOperationV06, isUserOperationV07, getUserOperationSender, getUserOperationNonce, } from './types/wallet.js';
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA2IA,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,EAC7B,gCAAgC,EAChC,kCAAkC,EAClC,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAe3B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAe1B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,mBAAmB,CAAA"}

package/dist/utils/crypto.d.ts

@@ -0,0 +1,25 @@
+export interface HmacSignatureOptions {
+    secret: string | Uint8Array;
+    message: string | Uint8Array;
+    encoding?: 'hex' | 'base64';
+}
+export interface TimestampValidationOptions {
+    nowMs?: number;
+    maxSkewMs?: number;
+}
+export interface TimestampValidationResult {
+    valid: boolean;
+    ageMs: number;
+}
+export declare function sha256Hex(value: string | Uint8Array): Promise<`0x${string}`>;
+export declare function signHmacSha256({ secret, message, encoding, }: HmacSignatureOptions): Promise<string>;
+export declare function verifyHmacSha256(options: HmacSignatureOptions & {
+    signature: string;
+}): Promise<boolean>;
+export declare function assertValidHmac(options: HmacSignatureOptions & {
+    signature: string;
+}): Promise<void>;
+export declare function generateNonce(byteLength?: number): string;
+export declare function validateTimestamp(value: string | number | Date, options?: TimestampValidationOptions): TimestampValidationResult;
+export declare function assertValidTimestamp(value: string | number | Date, options?: TimestampValidationOptions): void;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/utils/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IAC3B,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;IAC5B,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAgFD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAGlF;AAED,wBAAsB,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,QAAgB,GACjB,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAIxC;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,oBAAoB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,oBAAoB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAgB,aAAa,CAAC,UAAU,SAAK,GAAG,MAAM,CAUrD;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAC7B,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CAoB3B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAC7B,OAAO,GAAE,0BAA+B,GACvC,IAAI,CAQN"}

package/dist/utils/crypto.js

@@ -0,0 +1,119 @@
+import { HmacVerificationError, ValidationError } from '../types/errors.js';
+const textEncoder = new TextEncoder();
+function getCrypto() {
+    if (!globalThis.crypto?.subtle) {
+        throw new Error('Web Crypto API is not available in the current runtime');
+    }
+    return globalThis.crypto;
+}
+function toUint8Array(value) {
+    return typeof value === 'string' ? textEncoder.encode(value) : value;
+}
+function toBufferSource(value) {
+    return Uint8Array.from(toUint8Array(value));
+}
+function bytesToHex(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+function hexToBytes(value) {
+    if (!/^[0-9a-f]+$/i.test(value) || value.length % 2 !== 0) {
+        throw new ValidationError('Hex signatures must use an even-length hexadecimal string', {
+            value,
+        });
+    }
+    const bytes = new Uint8Array(value.length / 2);
+    for (let index = 0; index < value.length; index += 2) {
+        bytes[index / 2] = Number.parseInt(value.slice(index, index + 2), 16);
+    }
+    return bytes;
+}
+function bytesToBase64(bytes) {
+    const binary = Array.from(bytes, (byte) => String.fromCharCode(byte)).join('');
+    return btoa(binary);
+}
+function base64ToBytes(value) {
+    const binary = atob(value);
+    return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function decodeSignature(value, encoding) {
+    return encoding === 'hex' ? hexToBytes(value) : base64ToBytes(value);
+}
+function encodeBytes(value, encoding) {
+    return encoding === 'hex' ? bytesToHex(value) : bytesToBase64(value);
+}
+function timingSafeEqual(left, right) {
+    if (left.length !== right.length) {
+        return false;
+    }
+    let mismatch = 0;
+    for (let index = 0; index < left.length; index += 1) {
+        mismatch |= left[index] ^ right[index];
+    }
+    return mismatch === 0;
+}
+async function importHmacKey(secret) {
+    return getCrypto().subtle.importKey('raw', toBufferSource(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+}
+export async function sha256Hex(value) {
+    const digest = await getCrypto().subtle.digest('SHA-256', toBufferSource(value));
+    return `0x${bytesToHex(new Uint8Array(digest))}`;
+}
+export async function signHmacSha256({ secret, message, encoding = 'hex', }) {
+    const key = await importHmacKey(secret);
+    const signature = await getCrypto().subtle.sign('HMAC', key, toBufferSource(message));
+    return encodeBytes(new Uint8Array(signature), encoding);
+}
+export async function verifyHmacSha256(options) {
+    const expected = await signHmacSha256(options);
+    try {
+        const receivedBuffer = decodeSignature(options.signature, options.encoding ?? 'hex');
+        const expectedBuffer = decodeSignature(expected, options.encoding ?? 'hex');
+        return timingSafeEqual(receivedBuffer, expectedBuffer);
+    }
+    catch {
+        return false;
+    }
+}
+export async function assertValidHmac(options) {
+    if (!(await verifyHmacSha256(options))) {
+        throw new HmacVerificationError('HMAC signature verification failed');
+    }
+}
+export function generateNonce(byteLength = 16) {
+    if (!Number.isInteger(byteLength) || byteLength < 16) {
+        throw new ValidationError('Nonce byte length must be an integer greater than or equal to 16', {
+            byteLength,
+        });
+    }
+    const bytes = new Uint8Array(byteLength);
+    getCrypto().getRandomValues(bytes);
+    return bytesToHex(bytes);
+}
+export function validateTimestamp(value, options = {}) {
+    const nowMs = options.nowMs ?? Date.now();
+    const maxSkewMs = options.maxSkewMs ?? 5 * 60 * 1000;
+    const timestampMs = value instanceof Date ? value.getTime() : new Date(value).getTime();
+    if (Number.isNaN(timestampMs)) {
+        throw new ValidationError('Timestamp must be a valid date value', { value });
+    }
+    if (!Number.isInteger(maxSkewMs) || maxSkewMs < 0) {
+        throw new ValidationError('maxSkewMs must be a non-negative integer', {
+            maxSkewMs,
+        });
+    }
+    const ageMs = nowMs - timestampMs;
+    return {
+        valid: Math.abs(ageMs) <= maxSkewMs,
+        ageMs,
+    };
+}
+export function assertValidTimestamp(value, options = {}) {
+    const result = validateTimestamp(value, options);
+    if (!result.valid) {
+        throw new ValidationError('Timestamp is outside the allowed clock skew window', {
+            ageMs: result.ageMs,
+            maxSkewMs: options.maxSkewMs ?? 5 * 60 * 1000,
+        });
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/utils/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAkB3E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;AAErC,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAA;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,KAA0B;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,KAA0B;IAChD,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,2DAA2D,EAAE;YACrF,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAA0B;IAChE,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,QAA0B;IAChE,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB,EAAE,KAAiB;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC;IAED,OAAO,QAAQ,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAA2B;IACtD,OAAO,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,cAAc,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAA0B;IACxD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IAChF,OAAO,KAAK,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,QAAQ,GAAG,KAAK,GACK;IACrB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IACrF,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqD;IAErD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAA;IAE9C,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAA;QACpF,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAA;QAC3E,OAAO,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAqD;IAErD,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAU,GAAG,EAAE;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,kEAAkE,EAAE;YAC5F,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAA;IACxC,SAAS,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAA6B,EAC7B,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;IACpD,MAAM,WAAW,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;IAEvF,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE;YACpE,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,GAAG,WAAW,CAAA;IACjC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS;QACnC,KAAK;KACN,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAA6B,EAC7B,UAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE;YAC9E,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;SAC9C,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}