@dvmkit/sdk 0.0.0 → 0.1.0-rc.2

package/dist/memory-credit-ledger-I2G64DDK.js

@@ -0,0 +1,9 @@
+import {
+  MemoryCreditLedger
+} from "./chunk-OJ5WFIB2.js";
+import "./chunk-365P52XQ.js";
+import "./chunk-H25M54MI.js";
+import "./chunk-S3XAHZQY.js";
+export {
+  MemoryCreditLedger
+};

package/dist/mpp-secret-state-WNAQQ6K4.js

@@ -0,0 +1,127 @@
+import {
+  withSdkInitLock
+} from "./chunk-S3XAHZQY.js";
+
+// src/sdk/server/mpp-secret-state.ts
+var DEFAULT_ROTATION_WINDOW_MS = 5 * 60 * 1e3;
+async function initMppSecretStateTable(db) {
+  await withSdkInitLock(db, () => createMppSecretStateTable(db));
+}
+async function createMppSecretStateTable(db) {
+  await db.query(`
+    CREATE TABLE IF NOT EXISTS mpp_secret_state (
+      singleton           BOOLEAN PRIMARY KEY DEFAULT TRUE,
+      active_secret       TEXT NOT NULL,
+      previous_secret     TEXT,
+      previous_expires_at BIGINT,
+      rapid_rotation_at   BIGINT,
+      updated_at          BIGINT NOT NULL,
+      CONSTRAINT mpp_secret_state_singleton CHECK (singleton)
+    );
+  `);
+}
+async function loadMppSecretState(db, now = Date.now()) {
+  const { rows } = await db.query(
+    `SELECT active_secret, previous_secret, previous_expires_at, rapid_rotation_at
+       FROM mpp_secret_state
+       WHERE singleton = TRUE`
+  );
+  if (rows.length === 0) return null;
+  const row = rows[0];
+  const previousExpiresAt = row.previous_expires_at == null ? null : Number(row.previous_expires_at);
+  const previous = row.previous_secret != null && previousExpiresAt != null && previousExpiresAt > now ? { secret: row.previous_secret, expiresAtMs: previousExpiresAt } : null;
+  const rapidRotationAtRaw = row.rapid_rotation_at == null ? null : Number(row.rapid_rotation_at);
+  const rapidRotationAtMs = rapidRotationAtRaw != null && previous != null ? rapidRotationAtRaw : null;
+  return {
+    active: row.active_secret,
+    previous,
+    rapidRotationAtMs
+  };
+}
+async function applyMppSecretRotation(db, envSecret, rotationWindowMs, now = Date.now()) {
+  const client = await db.connect();
+  try {
+    await client.query("BEGIN");
+    const lockedRead = async () => {
+      const { rows: rows2 } = await client.query(
+        `SELECT active_secret, previous_secret, previous_expires_at, rapid_rotation_at
+           FROM mpp_secret_state
+           WHERE singleton = TRUE
+           FOR UPDATE`
+      );
+      return rows2;
+    };
+    let rows = await lockedRead();
+    if (rows.length === 0) {
+      const inserted = await client.query(
+        `INSERT INTO mpp_secret_state
+           (singleton, active_secret, previous_secret, previous_expires_at, rapid_rotation_at, updated_at)
+           VALUES (TRUE, $1, NULL, NULL, NULL, $2)
+           ON CONFLICT (singleton) DO NOTHING`,
+        [envSecret, now]
+      );
+      if ((inserted.rowCount ?? 0) > 0) {
+        await client.query("COMMIT");
+        return {
+          state: { active: envSecret, previous: null, rapidRotationAtMs: null },
+          rapidRotation: false
+        };
+      }
+      rows = await lockedRead();
+      if (rows.length === 0) {
+        throw new Error(
+          "mpp_secret_state: cold-boot insert conflicted but no row is visible afterwards"
+        );
+      }
+    }
+    const row = rows[0];
+    if (row.active_secret === envSecret) {
+      await client.query("COMMIT");
+      const previousExpiresAt2 = row.previous_expires_at == null ? null : Number(row.previous_expires_at);
+      const previous = row.previous_secret != null && previousExpiresAt2 != null && previousExpiresAt2 > now ? { secret: row.previous_secret, expiresAtMs: previousExpiresAt2 } : null;
+      const rapidRotationAtRaw = row.rapid_rotation_at == null ? null : Number(row.rapid_rotation_at);
+      const rapidRotationAtMs = rapidRotationAtRaw != null && previous != null ? rapidRotationAtRaw : null;
+      return {
+        state: { active: envSecret, previous, rapidRotationAtMs },
+        rapidRotation: false
+      };
+    }
+    const prevExpiresAtPrior = row.previous_expires_at == null ? null : Number(row.previous_expires_at);
+    const rapidRotation = row.previous_secret != null && prevExpiresAtPrior != null && prevExpiresAtPrior > now;
+    const previousExpiresAt = now + rotationWindowMs;
+    const rapidRotationAt = rapidRotation ? now : null;
+    await client.query(
+      `UPDATE mpp_secret_state
+         SET active_secret = $1,
+             previous_secret = $2,
+             previous_expires_at = $3,
+             rapid_rotation_at = $4,
+             updated_at = $5
+         WHERE singleton = TRUE`,
+      [envSecret, row.active_secret, previousExpiresAt, rapidRotationAt, now]
+    );
+    await client.query("COMMIT");
+    return {
+      state: {
+        active: envSecret,
+        previous: { secret: row.active_secret, expiresAtMs: previousExpiresAt },
+        rapidRotationAtMs: rapidRotationAt
+      },
+      rapidRotation
+    };
+  } catch (err) {
+    try {
+      await client.query("ROLLBACK");
+    } catch {
+    }
+    throw err;
+  } finally {
+    client.release();
+  }
+}
+export {
+  DEFAULT_ROTATION_WINDOW_MS,
+  applyMppSecretRotation,
+  initMppSecretStateTable,
+  loadMppSecretState
+};

package/dist/mpp-setup-MOBWGTWJ.js

@@ -0,0 +1,30 @@
+import {
+  MPPX_HMAC_MISMATCH_REASON,
+  TEMPO_SETTLEMENT_IN_FLIGHT,
+  TEMPO_SETTLEMENT_LEASE_FIELD,
+  TEMPO_SETTLEMENT_LEASE_MS,
+  TEMPO_SETTLEMENT_LEASE_OWNER_FIELD,
+  TEMPO_USDC_MAINNET,
+  _testing,
+  advertisedMethods,
+  challengeMeta,
+  createDualKeyMppxFromOpts,
+  createMppFromOpts,
+  parseMppMethodsAllowlist,
+  wrapMppx
+} from "./chunk-5GFED3GJ.js";
+export {
+  MPPX_HMAC_MISMATCH_REASON,
+  TEMPO_SETTLEMENT_IN_FLIGHT,
+  TEMPO_SETTLEMENT_LEASE_FIELD,
+  TEMPO_SETTLEMENT_LEASE_MS,
+  TEMPO_SETTLEMENT_LEASE_OWNER_FIELD,
+  TEMPO_USDC_MAINNET,
+  _testing,
+  advertisedMethods,
+  challengeMeta,
+  createDualKeyMppxFromOpts,
+  createMppFromOpts,
+  parseMppMethodsAllowlist,
+  wrapMppx
+};