@dvmkit/sdk 0.0.0 → 0.1.0-rc.1

package/dist/chunk-KXWROQGK.js

@@ -0,0 +1,74 @@
+// src/lib/url-redact.ts
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var LONG_HEX_RE = /^[0-9a-f]{16,}$/i;
+var NUMERIC_RE = /^\d{4,}$/;
+var BASE58_RE = /^[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{32,}$/;
+var OPAQUE_TOKEN_MIN_LENGTH = 32;
+var OPAQUE_TOKEN_MIN_UNIQUE_CHARS = 8;
+var URL_IN_TEXT_RE = /https?:\/\/[^\s"'`<>]+/gi;
+function redactPath(pathname) {
+  const segments = pathname.split("/");
+  const redacted = segments.map((seg) => {
+    if (!seg) return seg;
+    if (UUID_RE.test(seg)) return ":uuid";
+    if (LONG_HEX_RE.test(seg)) return ":hex";
+    if (NUMERIC_RE.test(seg)) return ":n";
+    if (BASE58_RE.test(seg)) return ":b58";
+    if (isOpaqueToken(seg)) return ":token";
+    return seg;
+  });
+  return redacted.join("/");
+}
+function redactUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return url;
+  }
+  return `${parsed.origin}${redactPath(parsed.pathname)}`;
+}
+function redactUrlsInText(text) {
+  return text.replace(URL_IN_TEXT_RE, (match) => {
+    const trailing = /[.,;:!?)\]}]+$/.exec(match)?.[0] ?? "";
+    const url = trailing.length > 0 ? match.slice(0, -trailing.length) : match;
+    return `${redactUrl(url)}${trailing}`;
+  });
+}
+function isOpaqueToken(segment) {
+  if (segment.length < OPAQUE_TOKEN_MIN_LENGTH) return false;
+  const distinct = /* @__PURE__ */ new Set();
+  for (let index = 0; index < segment.length; index++) {
+    distinct.add(segment.charCodeAt(index));
+    if (distinct.size >= OPAQUE_TOKEN_MIN_UNIQUE_CHARS) return true;
+  }
+  return false;
+}
+
+// src/lib/caller-loggers.ts
+var callerLoggers = buildNoopLoggers();
+function initCallerLoggers(nextLoggers) {
+  callerLoggers = nextLoggers;
+}
+function buildNoopLoggers() {
+  const noopLogger = {
+    // eslint-disable-next-line @typescript-eslint/no-empty-function -- standalone caller has no exporter
+    info() {
+    },
+    async span(_name, _attrs, fn) {
+      return fn();
+    }
+  };
+  return {
+    cashu: noopLogger,
+    lightning: noopLogger,
+    x402: noopLogger
+  };
+}
+
+export {
+  redactUrl,
+  redactUrlsInText,
+  callerLoggers,
+  initCallerLoggers
+};

package/dist/chunk-L4OYF4DQ.js

@@ -0,0 +1,67 @@
+import {
+  withSdkInitLock
+} from "./chunk-S3XAHZQY.js";
+
+// src/sdk/server/postgres-replay-store.ts
+var DEFAULT_TABLE_NAME = "signed_request_replays";
+var DEFAULT_WINDOW_SECONDS = 10 * 60;
+var DEFAULT_GC_SAMPLE_RATE = 0.01;
+var VALID_IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+var PostgresReplayStore = class {
+  pool;
+  tableName;
+  windowSeconds;
+  gcSampleRate;
+  constructor(pool, opts) {
+    const tableName = opts?.tableName ?? DEFAULT_TABLE_NAME;
+    if (!VALID_IDENTIFIER.test(tableName)) {
+      throw new Error(
+        `PostgresReplayStore: tableName must match ${VALID_IDENTIFIER.source}, got "${tableName}"`
+      );
+    }
+    this.pool = pool;
+    this.tableName = tableName;
+    this.windowSeconds = opts?.windowSeconds ?? DEFAULT_WINDOW_SECONDS;
+    this.gcSampleRate = opts?.gcSampleRate ?? DEFAULT_GC_SAMPLE_RATE;
+  }
+  /** Run the CREATE TABLE migration. Idempotent — safe to call repeatedly. */
+  async init() {
+    await withSdkInitLock(this.pool, () => this.createTables());
+  }
+  /** The boot DDL itself — always runs under {@link withSdkInitLock} (internal-review). */
+  async createTables() {
+    await this.pool.query(`
+      CREATE TABLE IF NOT EXISTS ${this.tableName} (
+        pubkey      TEXT NOT NULL,
+        timestamp   BIGINT NOT NULL,
+        nonce       TEXT NOT NULL,
+        recorded_at BIGINT NOT NULL,
+        PRIMARY KEY (pubkey, timestamp, nonce)
+      );
+      CREATE INDEX IF NOT EXISTS ${this.tableName}_recorded_at_idx
+        ON ${this.tableName} (recorded_at);
+    `);
+  }
+  async checkAndRecord(pubkey, timestamp, nonce, now) {
+    const { rowCount } = await this.pool.query(
+      `INSERT INTO ${this.tableName} (pubkey, timestamp, nonce, recorded_at)
+       VALUES ($1, $2, $3, $4)
+       ON CONFLICT DO NOTHING`,
+      [pubkey, timestamp, nonce, now]
+    );
+    if (this.gcSampleRate > 0 && Math.random() < this.gcSampleRate) {
+      this.gcSweep(now);
+    }
+    return rowCount === 0;
+  }
+  gcSweep(now) {
+    const cutoff = now - this.windowSeconds;
+    this.pool.query(`DELETE FROM ${this.tableName} WHERE recorded_at < $1`, [cutoff]).catch((err) => {
+      console.error("PostgresReplayStore GC sweep failed:", err);
+    });
+  }
+};
+
+export {
+  PostgresReplayStore
+};