@contextvm/sdk 0.12.4 → 0.13.0

package/dist/esm/payments/server-explicit-gating.js

@@ -0,0 +1,189 @@
+import { isJsonRpcRequest } from './types.js';
+import { computeCanonicalInvocationIdentity } from './canonical-identity.js';
+import { buildProcessorsByPmi, matchPricedCapability, resolveAndInitiatePayment, } from './server-payments-utils.js';
+import { createLogger } from '../core/utils/logger.js';
+import { withTimeout } from '../core/utils/utils.js';
+import { PAYMENT_PENDING_ERROR_CODE, PAYMENT_REQUIRED_ERROR_CODE, } from './constants.js';
+export function createExplicitGatingMiddleware(params) {
+    var _a;
+    const { options, authorizationStore, sendResponse } = params;
+    const logger = createLogger('server-explicit-gating');
+    const processorsByPmi = (_a = params.processorsByPmi) !== null && _a !== void 0 ? _a : buildProcessorsByPmi(options.processors, logger);
+    return async (message, ctx, forward) => {
+        var _a;
+        // Only gate requests.
+        if (!isJsonRpcRequest(message)) {
+            await forward(message);
+            return;
+        }
+        if (ctx.paymentInteraction !== 'explicit_gating') {
+            await forward(message);
+            return;
+        }
+        const priced = matchPricedCapability(message, options.pricedCapabilities);
+        if (!priced) {
+            await forward(message);
+            return;
+        }
+        const requestEventId = String(message.id);
+        const identity = computeCanonicalInvocationIdentity(ctx.clientPubkey, message.method, message.params);
+        // 1. Try to claim an existing authorization
+        if (authorizationStore.claim(identity)) {
+            logger.debug('authorization claimed, forwarding request', {
+                requestEventId,
+                method: message.method,
+            });
+            await forward(message);
+            return;
+        }
+        const paymentTtlMs = (_a = options.paymentTtlMs) !== null && _a !== void 0 ? _a : 300000;
+        // 2. Try to set pending state atomically
+        // We use a safe default TTL here, but will override it below if the payment option has a specific TTL
+        if (!authorizationStore.trySetPending(identity, paymentTtlMs)) {
+            logger.debug('payment already pending, returning -32043', {
+                requestEventId,
+            });
+            const errorResponse = {
+                jsonrpc: '2.0',
+                id: message.id,
+                error: {
+                    code: PAYMENT_PENDING_ERROR_CODE,
+                    message: 'Payment Pending',
+                    data: {
+                        instructions: 'A payment is already pending for this invocation. Retry the same request later with exactly the same method and params.',
+                        // Suggest a short polling interval (e.g. 2 seconds) rather than the full TTL
+                        retry_after: Math.min(2, Math.max(1, Math.ceil(authorizationStore.getPendingRemainingMs(identity) / 1000))),
+                    },
+                },
+            };
+            await sendResponse(ctx.clientPubkey, errorResponse, requestEventId);
+            return;
+        }
+        // 3. Resolve price and initiate new payment
+        try {
+            const initResult = await resolveAndInitiatePayment({
+                message,
+                priced,
+                requestEventId,
+                clientPubkey: ctx.clientPubkey,
+                clientPmis: ctx.clientPmis,
+                options,
+                processorsByPmi,
+            });
+            if (initResult.kind === 'rejected') {
+                logger.info('payment rejected', {
+                    requestEventId,
+                    pmi: initResult.pmi,
+                    amount: priced.amount,
+                    reason: initResult.message,
+                });
+                authorizationStore.clearPending(identity);
+                // Spec: When a capability is rejected by policy, return a standard error.
+                // We'll use -32000 (Internal error or application-defined error) since CEP-8 doesn't specify a special rejection code.
+                const errorResponse = {
+                    jsonrpc: '2.0',
+                    id: message.id,
+                    error: {
+                        code: -32000,
+                        message: initResult.message || 'Payment rejected by policy',
+                    },
+                };
+                await sendResponse(ctx.clientPubkey, errorResponse, requestEventId);
+                return;
+            }
+            if (initResult.kind === 'waived') {
+                logger.debug('payment waived, forwarding priced request', {
+                    requestEventId,
+                    method: message.method,
+                });
+                authorizationStore.clearPending(identity);
+                await forward(message);
+                return;
+            }
+            const { paymentRequired, mergedMeta, processor, verifyTimeoutMs } = initResult;
+            // Use the strict verification timeout bound for polling
+            const pollingTimeoutMs = Math.min(verifyTimeoutMs, paymentTtlMs);
+            // Note: use the original payment request's TTL as the limit for the grant, not the verify timeout.
+            // verifyTimeoutMs includes standard bounds, but for grants we want to honor the
+            // payment option's TTL explicitly if it is smaller, or the fallback paymentTtlMs.
+            const grantTtlMs = paymentRequired.ttl !== undefined
+                ? paymentRequired.ttl * 1000
+                : paymentTtlMs;
+            // Update pending with the precise TTL
+            authorizationStore.updatePendingTtl(identity, grantTtlMs);
+            const errorResponse = {
+                jsonrpc: '2.0',
+                id: message.id,
+                error: {
+                    code: PAYMENT_REQUIRED_ERROR_CODE,
+                    message: 'Payment Required',
+                    data: {
+                        instructions: 'Payment is required to process this request. Pay one of the offered options, then retry the same request with exactly the same method and params.',
+                        payment_options: [
+                            {
+                                amount: paymentRequired.amount,
+                                pmi: paymentRequired.pmi,
+                                pay_req: paymentRequired.pay_req,
+                                description: paymentRequired.description,
+                                ttl: paymentRequired.ttl,
+                                _meta: mergedMeta,
+                            },
+                        ],
+                    },
+                },
+            };
+            logger.info('payment required error sent', {
+                requestEventId,
+                pmi: paymentRequired.pmi,
+                amount: paymentRequired.amount,
+                ttl: paymentRequired.ttl,
+            });
+            await sendResponse(ctx.clientPubkey, errorResponse, requestEventId);
+            // Start async verification
+            // Do not await this, we must let the middleware chain return the error response.
+            (async () => {
+                const controller = new AbortController();
+                try {
+                    logger.debug('verifying explicit payment', {
+                        requestEventId,
+                        pmi: paymentRequired.pmi,
+                        timeoutMs: pollingTimeoutMs,
+                    });
+                    await withTimeout(processor.verifyPayment({
+                        pay_req: paymentRequired.pay_req,
+                        requestEventId,
+                        clientPubkey: ctx.clientPubkey,
+                        abortSignal: controller.signal,
+                    }), pollingTimeoutMs, 'verifyPayment timed out');
+                    logger.info('explicit payment accepted, granting authorization', {
+                        requestEventId,
+                        pmi: paymentRequired.pmi,
+                        amount: paymentRequired.amount,
+                    });
+                    authorizationStore.grant(identity, grantTtlMs);
+                }
+                catch (err) {
+                    logger.info('explicit payment verification failed or timed out', {
+                        requestEventId,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                    authorizationStore.clearPending(identity);
+                }
+                finally {
+                    controller.abort();
+                }
+            })().catch((err) => {
+                logger.error('unhandled exception in async payment verification', {
+                    requestEventId,
+                    pmi: paymentRequired.pmi,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            });
+        }
+        catch (err) {
+            authorizationStore.clearPending(identity);
+            throw err;
+        }
+    };
+}
+//# sourceMappingURL=server-explicit-gating.js.map

package/dist/esm/payments/server-explicit-gating.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-explicit-gating.js","sourceRoot":"","sources":["../../../src/payments/server-explicit-gating.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C,OAAO,EAAE,kCAAkC,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AAcxB,MAAM,UAAU,8BAA8B,CAC5C,MAAsC;;IAEtC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;IACtD,MAAM,eAAe,GACnB,MAAA,MAAM,CAAC,eAAe,mCAAI,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE7E,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;;QACrC,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,kBAAkB,KAAK,iBAAiB,EAAE,CAAC;YACjD,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,kCAAkC,CACjD,GAAG,CAAC,YAAY,EAChB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,CACf,CAAC;QAEF,4CAA4C;QAC5C,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,cAAc;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,MAAO,CAAC;QAErD,yCAAyC;QACzC,sGAAsG;QACtG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,cAAc;aACf,CAAC,CAAC;YACH,MAAM,aAAa,GAAyB;gBAC1C,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,iBAAiB;oBAC1B,IAAI,EAAE;wBACJ,YAAY,EACV,yHAAyH;wBAC3H,6EAA6E;wBAC7E,WAAW,EAAE,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,GAAG,CACN,CAAC,EACD,IAAI,CAAC,IAAI,CACP,kBAAkB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAC1D,CACF,CACF;qBACF;iBACF;aACF,CAAC;YACF,MAAM,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC;gBACjD,OAAO;gBACP,MAAM;gBACN,cAAc;gBACd,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO;gBACP,eAAe;aAChB,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;oBAC9B,cAAc;oBACd,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,UAAU,CAAC,OAAO;iBAC3B,CAAC,CAAC;gBAEH,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAE1C,0EAA0E;gBAC1E,uHAAuH;gBACvH,MAAM,aAAa,GAAyB;oBAC1C,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,4BAA4B;qBAC5D;iBACF,CAAC;gBACF,MAAM,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBACxD,cAAc;oBACd,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBAEH,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,GAC/D,UAAU,CAAC;YAEb,wDAAwD;YACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;YAEjE,mGAAmG;YACnG,gFAAgF;YAChF,kFAAkF;YAClF,MAAM,UAAU,GACd,eAAe,CAAC,GAAG,KAAK,SAAS;gBAC/B,CAAC,CAAC,eAAe,CAAC,GAAG,GAAG,IAAI;gBAC5B,CAAC,CAAC,YAAY,CAAC;YAEnB,sCAAsC;YACtC,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAE1D,MAAM,aAAa,GAAyB;gBAC1C,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,kBAAkB;oBAC3B,IAAI,EAAE;wBACJ,YAAY,EACV,mJAAmJ;wBACrJ,eAAe,EAAE;4BACf;gCACE,MAAM,EAAE,eAAe,CAAC,MAAM;gCAC9B,GAAG,EAAE,eAAe,CAAC,GAAG;gCACxB,OAAO,EAAE,eAAe,CAAC,OAAO;gCAChC,WAAW,EAAE,eAAe,CAAC,WAAW;gCACxC,GAAG,EAAE,eAAe,CAAC,GAAG;gCACxB,KAAK,EAAE,UAAU;6BAClB;yBACF;qBACF;iBACF;aACF,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACzC,cAAc;gBACd,GAAG,EAAE,eAAe,CAAC,GAAG;gBACxB,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,GAAG,EAAE,eAAe,CAAC,GAAG;aACzB,CAAC,CAAC;YAEH,MAAM,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YAEpE,2BAA2B;YAC3B,iFAAiF;YACjF,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wBACzC,cAAc;wBACd,GAAG,EAAE,eAAe,CAAC,GAAG;wBACxB,SAAS,EAAE,gBAAgB;qBAC5B,CAAC,CAAC;oBAEH,MAAM,WAAW,CACf,SAAS,CAAC,aAAa,CAAC;wBACtB,OAAO,EAAE,eAAe,CAAC,OAAO;wBAChC,cAAc;wBACd,YAAY,EAAE,GAAG,CAAC,YAAY;wBAC9B,WAAW,EAAE,UAAU,CAAC,MAAM;qBAC/B,CAAC,EACF,gBAAgB,EAChB,yBAAyB,CAC1B,CAAC;oBAEF,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;wBAC/D,cAAc;wBACd,GAAG,EAAE,eAAe,CAAC,GAAG;wBACxB,MAAM,EAAE,eAAe,CAAC,MAAM;qBAC/B,CAAC,CAAC;oBAEH,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACjD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;wBAC/D,cAAc;wBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;oBACH,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC5C,CAAC;wBAAS,CAAC;oBACT,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjB,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;oBAChE,cAAc;oBACd,GAAG,EAAE,eAAe,CAAC,GAAG;oBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/payments/server-payments-utils.d.ts

@@ -0,0 +1,39 @@
+import type { JSONRPCRequest } from '@contextvm/mcp-sdk/types.js';
+import { type Logger } from '../core/utils/logger.js';
+import type { PricedCapability, ResolvePriceRejection, ResolvePriceResult, PaymentProcessor, PaymentRequired } from './types.js';
+/** Builds the PMI → processor map, warning once on duplicate PMIs. */
+export declare function buildProcessorsByPmi(processors: readonly PaymentProcessor[], logger: Logger): Map<string, PaymentProcessor>;
+export declare function matchPricedCapability(message: JSONRPCRequest, priced: readonly PricedCapability[]): PricedCapability | undefined;
+export type InitiationResult = {
+    kind: 'rejected';
+    pmi: string;
+    amount: number;
+    message?: string;
+    quote: ResolvePriceRejection;
+} | {
+    kind: 'waived';
+} | {
+    kind: 'payment_required';
+    processor: PaymentProcessor;
+    paymentRequired: PaymentRequired;
+    mergedMeta: Record<string, unknown> | undefined;
+    verifyTimeoutMs: number;
+};
+export declare function resolveAndInitiatePayment(params: {
+    message: JSONRPCRequest;
+    priced: PricedCapability;
+    requestEventId: string;
+    clientPubkey: string;
+    clientPmis: readonly string[] | undefined;
+    options: {
+        processors: readonly PaymentProcessor[];
+        resolvePrice?: (params: {
+            capability: PricedCapability;
+            request: JSONRPCRequest;
+            clientPubkey: string;
+            requestEventId: string;
+        }) => Promise<ResolvePriceResult>;
+    };
+    processorsByPmi: Map<string, PaymentProcessor>;
+}): Promise<InitiationResult>;
+//# sourceMappingURL=server-payments-utils.d.ts.map

package/dist/esm/payments/server-payments-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-payments-utils.d.ts","sourceRoot":"","sources":["../../../src/payments/server-payments-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EAErB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,sEAAsE;AACtE,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,gBAAgB,EAAE,EACvC,MAAM,EAAE,MAAM,GACb,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAW/B;AAiBD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,gBAAgB,GAAG,SAAS,CAQ9B;AAsDD,MAAM,MAAM,gBAAgB,GACxB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,GACD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAChD,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEN,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC1C,OAAO,EAAE;QACP,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;QACxC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;YACtB,UAAU,EAAE,gBAAgB,CAAC;YAC7B,OAAO,EAAE,cAAc,CAAC;YACxB,YAAY,EAAE,MAAM,CAAC;YACrB,cAAc,EAAE,MAAM,CAAC;SACxB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;KACnC,CAAC;IACF,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAChD,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyD5B"}

package/dist/esm/payments/server-payments-utils.js

@@ -0,0 +1,117 @@
+/** Builds the PMI → processor map, warning once on duplicate PMIs. */
+export function buildProcessorsByPmi(processors, logger) {
+    const seenProcessorPmis = new Set();
+    for (const p of processors) {
+        if (seenProcessorPmis.has(p.pmi)) {
+            logger.warn('duplicate PMI processor registered, last one wins', {
+                pmi: p.pmi,
+            });
+        }
+        seenProcessorPmis.add(p.pmi);
+    }
+    return new Map(processors.map((p) => [p.pmi, p]));
+}
+function getVerificationTimeoutMs(params) {
+    // CEP-8 TTL is in seconds. If TTL is absent, default is 5 minutes.
+    const ttlSeconds = params.ttlSeconds;
+    if (ttlSeconds === undefined) {
+        return 5 * 60 * 1000;
+    }
+    if (!Number.isFinite(ttlSeconds) || ttlSeconds <= 0) {
+        return 5 * 60 * 1000;
+    }
+    const ms = ttlSeconds * 1000;
+    return Number.isFinite(ms) ? Math.floor(ms) : 5 * 60 * 1000;
+}
+export function matchPricedCapability(message, priced) {
+    const capabilityName = getCapabilityNameForPricing(message);
+    return priced.find((p) => {
+        if (p.method !== message.method)
+            return false;
+        if (p.name === undefined)
+            return true;
+        return p.name === capabilityName;
+    });
+}
+function getCapabilityNameForPricing(message) {
+    const params = message.params;
+    switch (message.method) {
+        case 'tools/call':
+        case 'prompts/get': {
+            const name = params === null || params === void 0 ? void 0 : params.name;
+            return typeof name === 'string' ? name : undefined;
+        }
+        case 'resources/read': {
+            const uri = params === null || params === void 0 ? void 0 : params.uri;
+            return typeof uri === 'string' ? uri : undefined;
+        }
+        default:
+            return undefined;
+    }
+}
+function isResolvePriceRejection(quote) {
+    return 'reject' in quote && quote.reject;
+}
+function isResolvePriceWaiver(quote) {
+    return 'waive' in quote && quote.waive;
+}
+function resolvePaymentProcessor(clientPmis, processorsByPmi, processors) {
+    const chosenPmi = clientPmis
+        ? clientPmis.find((pmi) => processorsByPmi.has(pmi))
+        : undefined;
+    const chosenProcessor = chosenPmi
+        ? processorsByPmi.get(chosenPmi)
+        : processors[0];
+    if (!chosenProcessor) {
+        throw new Error('No payment processors configured');
+    }
+    return chosenProcessor;
+}
+export async function resolveAndInitiatePayment(params) {
+    var _a, _b;
+    const processor = resolvePaymentProcessor(params.clientPmis, params.processorsByPmi, params.options.processors);
+    const quote = params.options.resolvePrice
+        ? await params.options.resolvePrice({
+            capability: params.priced,
+            request: params.message,
+            clientPubkey: params.clientPubkey,
+            requestEventId: params.requestEventId,
+        })
+        : { amount: params.priced.amount, description: params.priced.description };
+    if (isResolvePriceRejection(quote)) {
+        return {
+            kind: 'rejected',
+            pmi: processor.pmi,
+            amount: params.priced.amount,
+            message: quote.message,
+            quote,
+        };
+    }
+    if (isResolvePriceWaiver(quote)) {
+        return { kind: 'waived' };
+    }
+    const resolvedQuote = quote;
+    const paymentRequired = await processor.createPaymentRequired({
+        amount: resolvedQuote.amount,
+        description: resolvedQuote.description,
+        requestEventId: params.requestEventId,
+        clientPubkey: params.clientPubkey,
+    });
+    const mergedMeta = resolvedQuote.meta === undefined && paymentRequired._meta === undefined
+        ? undefined
+        : {
+            ...((_a = paymentRequired._meta) !== null && _a !== void 0 ? _a : {}),
+            ...((_b = resolvedQuote.meta) !== null && _b !== void 0 ? _b : {}),
+        };
+    const verifyTimeoutMs = getVerificationTimeoutMs({
+        ttlSeconds: paymentRequired.ttl,
+    });
+    return {
+        kind: 'payment_required',
+        processor,
+        paymentRequired,
+        mergedMeta,
+        verifyTimeoutMs,
+    };
+}
+//# sourceMappingURL=server-payments-utils.js.map

package/dist/esm/payments/server-payments-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-payments-utils.js","sourceRoot":"","sources":["../../../src/payments/server-payments-utils.ts"],"names":[],"mappings":"AAWA,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAClC,UAAuC,EACvC,MAAc;IAEd,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBAC/D,GAAG,EAAE,CAAC,CAAC,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,wBAAwB,CAAC,MAEjC;IACC,mEAAmE;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAuB,EACvB,MAAmC;IAEnC,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAE5D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAuB;IAEvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;IAErE,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,CAAC;YAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,GAAG,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,CAAC;YACxB,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAyB;IAEzB,OAAO,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAyB;IAEzB,OAAO,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;AACzC,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAyC,EACzC,eAA8C,EAC9C,UAAuC;IAEvC,MAAM,SAAS,GAAG,UAAU;QAC1B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,eAAe,GAAG,SAAS;QAC/B,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAElB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAgB/C;;IACC,MAAM,SAAS,GAAG,uBAAuB,CACvC,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,OAAO,CAAC,UAAU,CAC1B,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY;QACvC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;YAChC,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;QACJ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAE7E,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK;SACN,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC;IAC5B,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC;QAC5D,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IAEH,MAAM,UAAU,GACd,aAAa,CAAC,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,KAAK,SAAS;QACrE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,GAAG,CAAC,MAAA,eAAe,CAAC,KAAK,mCAAI,EAAE,CAAC;YAChC,GAAG,CAAC,MAAA,aAAa,CAAC,IAAI,mCAAI,EAAE,CAAC;SAC9B,CAAC;IAER,MAAM,eAAe,GAAG,wBAAwB,CAAC;QAC/C,UAAU,EAAE,eAAe,CAAC,GAAG;KAChC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,SAAS;QACT,eAAe;QACf,UAAU;QACV,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/esm/payments/server-payments.d.ts

@@ -1,4 +1,4 @@
-import { CorrelatedNotificationSender, PaymentProcessor, PricedCapability, ResolvePriceFn, ServerMiddlewareFn } from './types.js';
+import type { CorrelatedNotificationSender, PaymentInteractionPolicy, PaymentProcessor, PricedCapability, ResolvePriceFn, ServerMiddlewareFn } from './types.js';
 export interface ServerPaymentsOptions {
     processors: readonly PaymentProcessor[];
     pricedCapabilities: readonly PricedCapability[];
@@ -21,6 +21,13 @@ export interface ServerPaymentsOptions {
      * @default 1000
      */
     maxPendingPayments?: number;
+    /**
+     * Server-side policy for which payment interaction lifecycles this server
+     * accepts. `optional` mirrors the client's requested mode (the default);
+     * `transparent` makes the server transparent-only.
+     * @default 'optional'
+     */
+    paymentInteraction?: PaymentInteractionPolicy;
 }
 /**
  * Creates a server-side middleware that gates priced requests until payment is verified.
@@ -28,5 +35,7 @@ export interface ServerPaymentsOptions {
 export declare function createServerPaymentsMiddleware(params: {
     sender: CorrelatedNotificationSender;
     options: ServerPaymentsOptions;
+    /** Pre-built PMI → processor map. Built locally when omitted (standalone use). */
+    processorsByPmi?: Map<string, PaymentProcessor>;
 }): ServerMiddlewareFn;
 //# sourceMappingURL=server-payments.d.ts.map

package/dist/esm/payments/server-payments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-payments.d.ts","sourceRoot":"","sources":["../../../src/payments/server-payments.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAE5B,gBAAgB,EAGhB,gBAAgB,EAIhB,cAAc,EACd,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAWpB,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACxC,kBAAkB,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAEhD,6EAA6E;IAC7E,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AA6HD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,4BAA4B,CAAC;IACrC,OAAO,EAAE,qBAAqB,CAAC;CAChC,GAAG,kBAAkB,CA6NrB"}
+{"version":3,"file":"server-payments.d.ts","sourceRoot":"","sources":["../../../src/payments/server-payments.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAE5B,wBAAwB,EACxB,gBAAgB,EAGhB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAgBpB,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACxC,kBAAkB,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAEhD,6EAA6E;IAC7E,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;CAC/C;AA+DD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,4BAA4B,CAAC;IACrC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,kFAAkF;IAClF,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACjD,GAAG,kBAAkB,CA8LrB"}