@brninpay/core 0.1.0

package/dist/validation/schemas.js

@@ -0,0 +1,178 @@
+import { z } from 'zod';
+import { PAYMENT_INTENT_STATUSES } from '../types/payment.js';
+export const AddressSchema = z
+    .string({ required_error: 'Address is required' })
+    .regex(/^0x[a-fA-F0-9]{40}$/, 'Address must be a valid 20-byte hex string');
+export const HexSchema = z
+    .string({ required_error: 'Hex value is required' })
+    .regex(/^0x(?:[a-fA-F0-9]{2})*$/, 'Value must be a valid even-length hex string');
+export const TimestampSchema = z
+    .string({ required_error: 'Timestamp is required' })
+    .datetime({ offset: true, message: 'Timestamp must be a valid ISO-8601 string' });
+export const NonNegativeBigIntSchema = z
+    .union([
+    z.bigint(),
+    z.number().int().nonnegative(),
+    z
+        .string()
+        .regex(/^\d+$/, 'Amount must contain only digits'),
+])
+    .transform((value) => BigInt(value));
+export const PositiveBigIntSchema = NonNegativeBigIntSchema.refine((value) => value > 0n, 'Amount must be greater than zero');
+export const PaymentAmountSchema = z.object({
+    currency: z.literal('USDC'),
+    value: PositiveBigIntSchema,
+    decimals: z
+        .number({ required_error: 'Amount decimals are required' })
+        .int('Amount decimals must be an integer')
+        .min(0, 'Amount decimals cannot be negative')
+        .max(18, 'Amount decimals cannot exceed 18'),
+});
+export const PaymentRecipientSchema = z.object({
+    address: AddressSchema,
+    chainId: z
+        .number({ required_error: 'Recipient chainId is required' })
+        .int('Recipient chainId must be an integer')
+        .positive('Recipient chainId must be positive'),
+    ensName: z.string().trim().min(1).nullable().optional(),
+});
+export const PaymentIntentFailureSchema = z.object({
+    code: z.string().trim().min(1, 'Failure code is required'),
+    message: z.string().trim().min(1, 'Failure message is required'),
+    retryable: z.boolean(),
+    detail: z.record(z.unknown()).optional(),
+});
+export const PaymentIntentSchema = z.object({
+    id: z.string().trim().min(1, 'Payment intent id is required'),
+    workspaceId: z.string().trim().min(1, 'workspaceId is required'),
+    actorId: z.string().trim().min(1, 'actorId is required'),
+    status: z.enum(PAYMENT_INTENT_STATUSES),
+    amount: PaymentAmountSchema,
+    recipient: PaymentRecipientSchema,
+    createdAt: TimestampSchema,
+    updatedAt: TimestampSchema,
+    expiresAt: TimestampSchema.nullable().optional(),
+    idempotencyKey: z.string().trim().min(1).nullable().optional(),
+    description: z.string().trim().min(1).nullable().optional(),
+    reference: z.string().trim().min(1).nullable().optional(),
+    transactionHash: HexSchema.nullable().optional(),
+    failure: PaymentIntentFailureSchema.nullable().optional(),
+    metadata: z.record(z.unknown()).optional(),
+});
+export const BudgetPolicySchema = z.object({
+    id: z.string().trim().min(1, 'Policy id is required'),
+    name: z.string().trim().min(1, 'Policy name is required'),
+    enabled: z.boolean(),
+    kind: z.literal('budget'),
+    currency: z.literal('USDC'),
+    limit: PositiveBigIntSchema,
+    softLimit: PositiveBigIntSchema.optional(),
+});
+export const AllowlistPolicySchema = z.object({
+    id: z.string().trim().min(1, 'Policy id is required'),
+    name: z.string().trim().min(1, 'Policy name is required'),
+    enabled: z.boolean(),
+    kind: z.literal('allowlist'),
+    addresses: z.array(AddressSchema).min(1, 'Allowlist must contain at least one address'),
+    chains: z.array(z.number().int().positive()).optional(),
+});
+export const RateLimitPolicySchema = z.object({
+    id: z.string().trim().min(1, 'Policy id is required'),
+    name: z.string().trim().min(1, 'Policy name is required'),
+    enabled: z.boolean(),
+    kind: z.literal('rate_limit'),
+    maxRequests: z.number().int().positive('maxRequests must be positive'),
+    intervalMs: z.number().int().positive('intervalMs must be positive'),
+    burst: z.number().int().positive('burst must be positive').optional(),
+    scope: z.enum(['actor', 'workspace', 'ip']),
+});
+export const PolicyDefinitionSchema = z.discriminatedUnion('kind', [
+    BudgetPolicySchema,
+    AllowlistPolicySchema,
+    RateLimitPolicySchema,
+]);
+export const PolicyEvaluationContextSchema = z.object({
+    actorId: z.string().trim().min(1, 'actorId is required'),
+    workspaceId: z.string().trim().min(1, 'workspaceId is required'),
+    recipient: AddressSchema,
+    chainId: z.number().int().positive('chainId must be positive'),
+    amount: PositiveBigIntSchema,
+    currency: z.literal('USDC'),
+    timestampMs: z.number().int().nonnegative('timestampMs must be non-negative'),
+    spentAmount: NonNegativeBigIntSchema,
+    requestCount: z.number().int().nonnegative('requestCount must be non-negative'),
+    sourceIp: z.string().trim().min(1).optional(),
+});
+export const SmartWalletSchema = z.object({
+    address: AddressSchema,
+    ownerAddress: AddressSchema,
+    chainId: z.number().int().positive('chainId must be positive'),
+    provider: z.enum(['safe', 'kernel', 'circle']),
+    entryPointAddress: AddressSchema,
+    entryPointVersion: z.enum(['v0.6', 'v0.7']),
+    factoryAddress: AddressSchema.optional(),
+    deployed: z.boolean(),
+});
+export const UserOperationCallSchema = z.object({
+    to: AddressSchema,
+    value: NonNegativeBigIntSchema,
+    data: HexSchema,
+});
+export const GasEstimateSchema = z.object({
+    callGasLimit: NonNegativeBigIntSchema,
+    verificationGasLimit: NonNegativeBigIntSchema,
+    preVerificationGas: NonNegativeBigIntSchema,
+    maxFeePerGas: NonNegativeBigIntSchema,
+    maxPriorityFeePerGas: NonNegativeBigIntSchema,
+    paymasterVerificationGasLimit: NonNegativeBigIntSchema.optional(),
+    paymasterPostOpGasLimit: NonNegativeBigIntSchema.optional(),
+});
+export const UserOperationV06Schema = z.object({
+    version: z.literal('v0.6'),
+    sender: AddressSchema,
+    nonce: NonNegativeBigIntSchema,
+    initCode: HexSchema,
+    callData: HexSchema,
+    callGasLimit: NonNegativeBigIntSchema,
+    verificationGasLimit: NonNegativeBigIntSchema,
+    preVerificationGas: NonNegativeBigIntSchema,
+    maxFeePerGas: NonNegativeBigIntSchema,
+    maxPriorityFeePerGas: NonNegativeBigIntSchema,
+    paymasterAndData: HexSchema,
+    signature: HexSchema,
+});
+export const UserOperationV07Schema = z.object({
+    version: z.literal('v0.7'),
+    sender: AddressSchema,
+    nonce: NonNegativeBigIntSchema,
+    factory: z.union([AddressSchema, HexSchema]),
+    factoryData: HexSchema,
+    callData: HexSchema,
+    callGasLimit: NonNegativeBigIntSchema,
+    verificationGasLimit: NonNegativeBigIntSchema,
+    preVerificationGas: NonNegativeBigIntSchema,
+    maxFeePerGas: NonNegativeBigIntSchema,
+    maxPriorityFeePerGas: NonNegativeBigIntSchema,
+    paymaster: z.union([AddressSchema, HexSchema]),
+    paymasterVerificationGasLimit: NonNegativeBigIntSchema,
+    paymasterPostOpGasLimit: NonNegativeBigIntSchema,
+    paymasterData: HexSchema,
+    signature: HexSchema,
+});
+export const UserOperationSchema = z.discriminatedUnion('version', [
+    UserOperationV06Schema,
+    UserOperationV07Schema,
+]);
+export function parseAddress(value) {
+    return AddressSchema.parse(value);
+}
+export function parsePaymentIntent(value) {
+    return PaymentIntentSchema.parse(value);
+}
+export function parsePolicyDefinition(value) {
+    return PolicyDefinitionSchema.parse(value);
+}
+export function parseUserOperation(value) {
+    return UserOperationSchema.parse(value);
+}
+//# sourceMappingURL=schemas.js.map

package/dist/validation/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/validation/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;KACjD,KAAK,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAA;AAE7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;KACnD,KAAK,CAAC,yBAAyB,EAAE,8CAA8C,CAAC,CAAA;AAEnF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;KACnD,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAA;AAEnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,KAAK,CAAC;IACL,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9B,CAAC;SACE,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,EAAE,iCAAiC,CAAC;CACrD,CAAC;KACD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAEtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,MAAM,CAChE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,EACrB,kCAAkC,CACnC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,cAAc,EAAE,8BAA8B,EAAE,CAAC;SAC1D,GAAG,CAAC,oCAAoC,CAAC;SACzC,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,EAAE,EAAE,kCAAkC,CAAC;CAC/C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,cAAc,EAAE,+BAA+B,EAAE,CAAC;SAC3D,GAAG,CAAC,sCAAsC,CAAC;SAC3C,QAAQ,CAAC,oCAAoC,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACvC,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,sBAAsB;IACjC,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,eAAe,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,oBAAoB;IAC3B,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,6CAA6C,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IACrE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;CAC5C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACjE,kBAAkB;IAClB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAChE,SAAS,EAAE,aAAa;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC9D,MAAM,EAAE,oBAAoB;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,kCAAkC,CAAC;IAC7E,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,mCAAmC,CAAC;IAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,aAAa;IACtB,YAAY,EAAE,aAAa;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9C,iBAAiB,EAAE,aAAa;IAChC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,uBAAuB;IAC9B,IAAI,EAAE,SAAS;CAChB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,6BAA6B,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACjE,uBAAuB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,uBAAuB;IAC9B,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,SAAS;IACnB,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,gBAAgB,EAAE,SAAS;IAC3B,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC5C,WAAW,EAAE,SAAS;IACtB,QAAQ,EAAE,SAAS;IACnB,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,kBAAkB,EAAE,uBAAuB;IAC3C,YAAY,EAAE,uBAAuB;IACrC,oBAAoB,EAAE,uBAAuB;IAC7C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC9C,6BAA6B,EAAE,uBAAuB;IACtD,uBAAuB,EAAE,uBAAuB;IAChD,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACjE,sBAAsB;IACtB,sBAAsB;CACvB,CAAC,CAAA;AAEF,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc;IAEd,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC"}

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@brninpay/core",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "fast-check": "^4.8.0",
+    "rimraf": "^6.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rimraf dist tsconfig.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  }
+}

package/src/decision-resolver.ts

@@ -0,0 +1,16 @@
+import type { PolicyResult, AuthorizationDecision } from './types.js'
+
+export class DecisionResolver {
+  static resolve(results: PolicyResult[]): AuthorizationDecision {
+    if (results.length === 0) return 'denied'
+    let hasDeny = false
+    let hasReview = false
+    for (const r of results) {
+      if (r.decision === 'deny') hasDeny = true
+      else if (r.decision === 'review') hasReview = true
+    }
+    if (hasDeny) return 'denied'
+    if (hasReview) return 'pending-review'
+    return 'approved'
+  }
+}

package/src/errors.ts

@@ -0,0 +1,20 @@
+export {
+  ErrorCode,
+  RuntimeeError,
+  ValidationError,
+  AuthorizationError,
+  BudgetExhaustedError,
+  AllowlistDeniedError,
+  RateLimitExceededError,
+  AuthorizationExpiredError,
+  ExecutionError,
+  NetworkError,
+  GasEstimationError,
+  BroadcastError,
+  ReorgDetectedError,
+  HmacVerificationError,
+  isRuntimeeError,
+  serializeError,
+} from './types/errors.js'
+
+export type { ErrorCodeMessage, SerializedError } from './types/errors.js'

package/src/index.ts

@@ -0,0 +1,139 @@
+export type {
+  Actor,
+  Budget,
+  Policy,
+  SettlementDescriptor,
+  Target,
+  Purpose,
+  Intent,
+  BudgetState,
+  PolicyResult,
+  AuthorizationDecision,
+  Authorization,
+  SettlementHint,
+  ExecutionPlan,
+  PolicyContext,
+  PolicyMiddleware,
+  PolicyEvaluator,
+  SimulationResult,
+  SignedTransaction,
+  Receipt,
+  PaymentIntentStatus,
+  PaymentAmount,
+  PaymentRecipient,
+  PaymentIntentFailure,
+  PaymentMetadataValue,
+  PaymentIntent,
+  SerializedBigInt,
+  PolicyDecision,
+  PolicyReason,
+  BasePolicy,
+  BudgetPolicy,
+  AllowlistPolicy,
+  RateLimitPolicy,
+  PolicyDefinition,
+  PolicyEvaluationContext,
+  PolicyEvaluationResult,
+  AggregatedPolicyDecision,
+  Hex,
+  Address,
+  SmartWalletProvider,
+  EntryPointVersion,
+  SmartWallet,
+  UserOperationCall,
+  GasEstimate,
+  UserOperationV06,
+  UserOperationV07,
+  UserOperation,
+} from './types.js'
+
+export {
+  AuthorizationError,
+  BudgetExhaustedError,
+  AllowlistDeniedError,
+  RateLimitExceededError,
+  AuthorizationExpiredError,
+  RuntimeeError,
+  ValidationError,
+  ExecutionError,
+  NetworkError,
+  GasEstimationError,
+  BroadcastError,
+  ReorgDetectedError,
+  HmacVerificationError,
+  isRuntimeeError,
+  serializeError,
+  ErrorCode,
+} from './errors.js'
+export type { ErrorCodeMessage, SerializedError } from './errors.js'
+
+export {
+  PAYMENT_INTENT_STATUSES,
+  PAYMENT_INTENT_TERMINAL_STATUSES,
+  PAYMENT_INTENT_TRANSITIONS,
+  validatePaymentAmount,
+  isPaymentIntentTerminalStatus,
+  canTransitionPaymentIntentStatus,
+  assertValidPaymentIntentTransition,
+  assertPaymentIntent,
+  serializeBigInts,
+  deserializeBigInts,
+  serializePaymentIntent,
+  deserializePaymentIntent,
+  POLICY_DECISIONS,
+  evaluatePolicy,
+  aggregatePolicyDecisions,
+  evaluatePolicies,
+  isUserOperationV06,
+  isUserOperationV07,
+  getUserOperationSender,
+  getUserOperationNonce,
+} from './types.js'
+
+export { DecisionResolver } from './decision-resolver.js'
+
+export { PolicyEngine } from './policy-engine.js'
+
+export {
+  createBudgetCheckPolicy,
+  createAllowlistPolicy,
+  createMaxPerCallPolicy,
+  createRateLimitPolicy,
+} from './policies/index.js'
+
+export {
+  AddressSchema,
+  HexSchema,
+  TimestampSchema,
+  NonNegativeBigIntSchema,
+  PositiveBigIntSchema,
+  PaymentAmountSchema,
+  PaymentRecipientSchema,
+  PaymentIntentFailureSchema,
+  PaymentIntentSchema,
+  BudgetPolicySchema,
+  AllowlistPolicySchema,
+  RateLimitPolicySchema,
+  PolicyDefinitionSchema,
+  PolicyEvaluationContextSchema,
+  SmartWalletSchema,
+  UserOperationCallSchema,
+  GasEstimateSchema,
+  UserOperationV06Schema,
+  UserOperationV07Schema,
+  UserOperationSchema,
+  parseAddress,
+  parsePaymentIntent,
+  parsePolicyDefinition,
+  parseUserOperation,
+} from './validation/schemas.js'
+
+export {
+  sha256Hex,
+  signHmacSha256,
+  verifyHmacSha256,
+  assertValidHmac,
+  generateNonce,
+  validateTimestamp,
+  assertValidTimestamp,
+} from './utils/crypto.js'

package/src/policies/allowlist.ts

@@ -0,0 +1,26 @@
+import type { PolicyContext, PolicyMiddleware, PolicyEvaluator } from '../types.js'
+
+export function createAllowlistPolicy(
+  id: string,
+  version: string,
+  allowedTargets: string[]
+): PolicyEvaluator {
+  const set = new Set(allowedTargets)
+  const middleware: PolicyMiddleware = async (ctx, next) => {
+    if (!set.has(ctx.intent.target)) {
+      return {
+        policyId: id,
+        policyType: 'allowlist',
+        version,
+        decision: 'deny',
+        reason: {
+          code: 'allowlist_denied',
+          message: `Target "${ctx.intent.target}" is not in the allowlist`,
+        },
+        evaluatedAt: new Date().toISOString(),
+      }
+    }
+    return next()
+  }
+  return { id, type: 'allowlist', version, middleware }
+}

package/src/policies/budget-check.ts

@@ -0,0 +1,26 @@
+import type { PolicyContext, PolicyMiddleware, PolicyEvaluator } from '../types.js'
+
+export function createBudgetCheckPolicy(
+  id: string,
+  version: string
+): PolicyEvaluator {
+  const middleware: PolicyMiddleware = async (ctx, next) => {
+    const { intent, budget } = ctx
+    const projected = budget.used + intent.amount
+    if (projected > budget.total) {
+      return {
+        policyId: id,
+        policyType: 'budget-check',
+        version,
+        decision: 'deny',
+        reason: {
+          code: 'budget_exhausted',
+          message: `Budget exhausted: ${budget.used + intent.amount} would exceed ${budget.total} (${budget.period})`,
+        },
+        evaluatedAt: new Date().toISOString(),
+      }
+    }
+    return next()
+  }
+  return { id, type: 'budget-check', version, middleware }
+}

package/src/policies/index.ts

@@ -0,0 +1,4 @@
+export { createBudgetCheckPolicy } from './budget-check.js'
+export { createAllowlistPolicy } from './allowlist.js'
+export { createMaxPerCallPolicy } from './max-per-call.js'
+export { createRateLimitPolicy } from './rate-limit.js'

package/src/policies/max-per-call.ts

@@ -0,0 +1,25 @@
+import type { PolicyContext, PolicyMiddleware, PolicyEvaluator } from '../types.js'
+
+export function createMaxPerCallPolicy(
+  id: string,
+  version: string,
+  maxAmount: bigint
+): PolicyEvaluator {
+  const middleware: PolicyMiddleware = async (ctx, next) => {
+    if (ctx.intent.amount > maxAmount) {
+      return {
+        policyId: id,
+        policyType: 'max-per-call',
+        version,
+        decision: 'deny',
+        reason: {
+          code: 'max_per_call_exceeded',
+          message: `Payment amount ${ctx.intent.amount} exceeds max-per-call limit of ${maxAmount}`,
+        },
+        evaluatedAt: new Date().toISOString(),
+      }
+    }
+    return next()
+  }
+  return { id, type: 'max-per-call', version, middleware }
+}

package/src/policies/rate-limit.ts

@@ -0,0 +1,40 @@
+import type { PolicyMiddleware, PolicyEvaluator } from '../types.js'
+
+export function createRateLimitPolicy(
+  id: string,
+  version: string,
+  maxCalls: number,
+  windowMs: number,
+  store: Map<string, number[]> = new Map()
+): PolicyEvaluator {
+  const middleware: PolicyMiddleware = async (ctx, _next) => {
+    const actorKey = ctx.actor.id
+    const now = Date.now()
+    const timestamps = store.get(actorKey) || []
+    const recent = timestamps.filter((t) => now - t < windowMs)
+    if (recent.length >= maxCalls) {
+      return {
+        policyId: id,
+        policyType: 'rate-limit',
+        version,
+        decision: 'deny',
+        reason: {
+          code: 'rate_limit_exceeded',
+          message: `Rate limit exceeded: ${recent.length} calls in window (max ${maxCalls})`,
+        },
+        evaluatedAt: new Date().toISOString(),
+      }
+    }
+    recent.push(now)
+    store.set(actorKey, recent)
+    return {
+      policyId: id,
+      policyType: 'rate-limit',
+      version,
+      decision: 'pass',
+      reason: { code: 'rate_limit_ok', message: 'Rate limit not exceeded' },
+      evaluatedAt: new Date().toISOString(),
+    }
+  }
+  return { id, type: 'rate-limit', version, middleware }
+}

package/src/policy-engine.ts

@@ -0,0 +1,65 @@
+import type { Actor, Intent, BudgetState, PolicyEvaluator, Authorization } from './types.js'
+import { DecisionResolver } from './decision-resolver.js'
+
+export class PolicyEngine {
+  private readonly evaluators: PolicyEvaluator[]
+
+  constructor(evaluators: PolicyEvaluator[]) {
+    this.evaluators = evaluators
+  }
+
+  async evaluate(
+    actor: Actor,
+    intent: Intent,
+    budget: BudgetState
+  ): Promise<Authorization> {
+    const evaluatedAt = new Date().toISOString()
+    const policyResults = await Promise.all(
+      this.evaluators.map((evaluator) =>
+        this.runEvaluator(evaluator, actor, intent, budget)
+      )
+    )
+    const decision = policyResults.length === 0
+      ? 'approved' as const
+      : DecisionResolver.resolve(policyResults)
+    return {
+      intent,
+      policyResults,
+      decision,
+      evaluatedAt,
+      actorVersion: '1',
+    }
+  }
+
+  private async runEvaluator(
+    evaluator: PolicyEvaluator,
+    actor: Actor,
+    intent: Intent,
+    budget: BudgetState
+  ): Promise<{
+    policyId: string
+    policyType: string
+    version: string
+    decision: 'pass' | 'deny' | 'review'
+    reason: { code: string; message: string }
+    evaluatedAt: string
+  }> {
+    const ctx = {
+      actor,
+      intent,
+      budget,
+      evaluatedPolicies: [],
+    }
+
+    const finalNext = async () => ({
+      policyId: evaluator.id,
+      policyType: evaluator.type,
+      version: evaluator.version,
+      decision: 'pass' as const,
+      reason: { code: 'noop', message: 'No policy applied' },
+      evaluatedAt: new Date().toISOString(),
+    })
+
+    return evaluator.middleware(ctx, finalNext)
+  }
+}