@dvmkit/sdk 0.21.2 → 0.22.0

package/dist/server/index.js

@@ -1,6 +1,6 @@
 import {
   PostgresReplayStore
-} from "../chunk-2HSWWHXK.js";
+} from "../chunk-HEH7YUGE.js";
 import {
   PostgresKVStore
 } from "../chunk-V5ZRATJH.js";
@@ -18,7 +18,7 @@ import {
   parseNwcUri,
   validateX402Env,
   withNwcPool
-} from "../chunk-D2MGOQIS.js";
+} from "../chunk-CUWSJQGT.js";
 import {
   MemoryKVStore
 } from "../chunk-SDK6KDJN.js";
@@ -36,6 +36,7 @@ import {
   MemoryX402ExactSettlementStore,
   PostgresX402ExactSettlementStore,
   REQUEST_ID_FIELD,
+  STRIPE_CREDIT_MIN_MICRO,
   X402ExactIntentConflictError,
   X402ExactSettlementEvidenceMissingError,
   X402ExactSettlementNotReadyError,
@@ -53,11 +54,13 @@ import {
   clientUpgradeRequired,
   createDVMServer,
   createPlatformTempoObserverHealth,
+  createStripeRefundApi,
   createX402BatchSettlementServer,
   creditEnvelopeIgnoreFields,
   devModeSkipsPaymentVerification,
   drawSettlementRef,
   extractCreditEnvelope,
+  fiatMicroToMethodAmount,
   fundingCommitment,
   handleCreditRequest,
   hasInvalidRequestId,
@@ -83,30 +86,30 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-VIAMJ6GS.js";
+} from "../chunk-JINZMDNK.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
   ProcessedPaymentReplayError
 } from "../chunk-XRLKGCAW.js";
-import "../chunk-62JG4AF7.js";
-import "../chunk-3V6CSTWB.js";
+import "../chunk-DY5QIHJA.js";
+import "../chunk-3DGIRHP2.js";
 import {
   MemoryCreditLedger
-} from "../chunk-B27E7JIR.js";
+} from "../chunk-HVZIITWW.js";
 import {
   PostgresJobStore
-} from "../chunk-Y746QPX7.js";
+} from "../chunk-SQOVLAJ2.js";
 import {
   SignedRequestError,
   carriesSignedEnvelope,
   createDefaultReplayStore,
   createSignedRequestVerifier,
   signedRequestInput
-} from "../chunk-6GZF7VDO.js";
+} from "../chunk-DLRPKEAM.js";
 import {
   isStreamableJobStore
-} from "../chunk-WWKFG6TM.js";
+} from "../chunk-5NMHZIIU.js";
 import {
   ContentHoldError,
   baselineContentExpiry,
@@ -117,23 +120,23 @@ import {
   IMPLICIT_CREDIT_TTL_MS,
   generateEphemeralReceiptKey,
   receiptPubkeyFromSecret
-} from "../chunk-IUFVIIPF.js";
+} from "../chunk-EQIP6TFD.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
   resolveRpcOverride,
   x402NetworkToCaip2
-} from "../chunk-NUDHO4HV.js";
+} from "../chunk-LABJSMSJ.js";
 import {
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader
 } from "../chunk-SXL44PL5.js";
-import "../chunk-NRE4NOCY.js";
+import "../chunk-JMTLK2SZ.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-LWF4ABYF.js";
-import "../chunk-XWG54M6T.js";
+import "../chunk-EHBUAJ5M.js";
+import "../chunk-UVRBD5GR.js";
 import {
   CreditLedger,
   CreditLedgerError,
@@ -141,7 +144,7 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-JOSNSNS7.js";
+} from "../chunk-SEIMPHIP.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SDK_INIT_ADVISORY_LOCK,
@@ -150,25 +153,26 @@ import {
 import "../chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "../chunk-LSANCGLP.js";
+} from "../chunk-L35WYOH2.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
 import "../chunk-H3GGFEE5.js";
 import {
+  MPPX_HMAC_MISMATCH_REASON,
   TEMPO_MODERATO_CHAIN_ID,
   TEMPO_MODERATO_RPC,
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
   TempoSettlementReadiness,
   resolveTempoNetwork
-} from "../chunk-27QB2D3Z.js";
+} from "../chunk-LCNRFKP7.js";
 import {
   initLoggers
-} from "../chunk-7KNFEDFW.js";
+} from "../chunk-ZH5CLGO6.js";
 import "../chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "../chunk-MA55LUNR.js";
+} from "../chunk-2WWVI32F.js";
 
 // src/sdk/server/cashu-env.ts
 async function resolveCashuOptsFromEnv(env, pool, cashuModeHint) {
@@ -286,6 +290,243 @@ function safeInteger(value) {
   return number;
 }
 
+// src/sdk/server/stripe-credit.ts
+import { randomBytes } from "crypto";
+import { Credential, Errors as MppxErrors, PaymentRequest } from "mppx";
+import { Mppx } from "mppx/server";
+import { charge as stripeCharge } from "mppx/stripe/server";
+function stripeCreditConfigFromEnv(env) {
+  const secretKey = env.DVMKIT_STRIPE_SECRET_KEY?.trim();
+  const networkId = env.DVMKIT_STRIPE_NETWORK_ID?.trim();
+  if (!secretKey && !networkId) return void 0;
+  if (!secretKey) {
+    throw new Error(
+      "DVMKIT_STRIPE_NETWORK_ID is set but DVMKIT_STRIPE_SECRET_KEY is not. Card credit needs both."
+    );
+  }
+  if (!networkId) {
+    throw new Error(
+      "DVMKIT_STRIPE_SECRET_KEY is set but DVMKIT_STRIPE_NETWORK_ID is not. Card credit needs both: the network id is your Stripe profile id (profile_\u2026)."
+    );
+  }
+  const hmacSecret = env.DVMKIT_TEMPO_SECRET_KEY;
+  if (!hmacSecret) {
+    throw new Error(
+      "Card credit requires DVMKIT_TEMPO_SECRET_KEY: it binds MPP challenges for both Tempo and card credit. Generate one with 'openssl rand -hex 32'."
+    );
+  }
+  return { secretKey, networkId, hmacSecret };
+}
+function createStripeCreditRail(opts) {
+  const apiBase = opts.apiBase ?? "https://api.stripe.com";
+  const fetchImpl = opts.fetch ?? fetch;
+  const build = (client, secretKey) => Mppx.create({
+    methods: [
+      stripeCharge({
+        client,
+        networkId: opts.networkId,
+        paymentMethodTypes: ["card"],
+        currency: "usd",
+        decimals: 2
+      })
+    ],
+    secretKey
+  });
+  const issuer = build(unusedClient, opts.hmacSecret);
+  return {
+    networkId: opts.networkId,
+    refunds: createStripeRefundApi({ secretKey: opts.secretKey, apiBase, fetch: fetchImpl }),
+    ...opts.chargeJournal && { chargeJournal: opts.chargeJournal },
+    async issueChallenge({ amountMicro, resourcePath, expires }) {
+      return issuer.challenge.stripe.charge({
+        amount: fiatMicroToMethodAmount(amountMicro, "stripe"),
+        expires,
+        meta: { path: resourcePath, nonce: randomBytes(16).toString("hex") }
+      });
+    },
+    async charge(serialized, { amountMicro, resourcePath }) {
+      let credential;
+      try {
+        credential = Credential.deserialize(serialized);
+      } catch {
+        return invalidCredential("the credential is not a well-formed MPP credential");
+      }
+      if (credential.challenge.method !== "stripe" || credential.challenge.intent !== "charge") {
+        return invalidCredential("the credential is not for a stripe charge challenge");
+      }
+      const attempt = {};
+      const journal = opts.chargeJournal;
+      const beforeCharge = journal ? async () => {
+        try {
+          await journal.record(credential.challenge.id);
+        } catch (err) {
+          attempt.journalFailed = true;
+          diagnosticConsole.warn({ event: "card_charge_journal_failed" });
+          throw err;
+        }
+      } : void 0;
+      const amount = fiatMicroToMethodAmount(amountMicro, "stripe");
+      const broadcast = (secretKey) => build(fetchClient({ apiBase, secretKey: opts.secretKey, fetchImpl, attempt, beforeCharge }), secretKey).broadcastCredential(serialized, {
+        request: { amount },
+        meta: { path: resourcePath, nonce: readNonce(credential.challenge) }
+      });
+      try {
+        let receipt;
+        try {
+          receipt = await broadcast(opts.hmacSecret);
+        } catch (err) {
+          const previous = !attempt.called && isHmacMismatch(err) ? await opts.previousHmacSecret?.() : void 0;
+          if (!previous) throw err;
+          receipt = await broadcast(previous);
+        }
+        if (!attempt.paymentIntentId || receipt.reference !== attempt.paymentIntentId) {
+          return {
+            ok: false,
+            reason: "indeterminate",
+            message: "the charge succeeded without a PaymentIntent this server observed"
+          };
+        }
+        if (attempt.amount !== amountMicro / 1e4 || attempt.currency !== "usd") {
+          return {
+            ok: false,
+            reason: "mismatch",
+            message: "the PaymentIntent's amount or currency is not this top-up's",
+            paymentIntentId: attempt.paymentIntentId
+          };
+        }
+        return { ok: true, paymentIntentId: attempt.paymentIntentId, replayed: attempt.replayed === true };
+      } catch (err) {
+        if (attempt.journalFailed) {
+          return {
+            ok: false,
+            reason: "unavailable",
+            message: "the charge attempt could not be recorded, so this request did not charge the card"
+          };
+        }
+        if (!attempt.called) return invalidCredential(credentialFailure(err));
+        const stripeError = attempt.failure?.codes;
+        const known = {
+          ...stripeError && { stripeError },
+          ...attempt.paymentIntentId && { paymentIntentId: attempt.paymentIntentId }
+        };
+        if (stripeError?.type === "card_error") {
+          return { ok: false, reason: "declined", message: "the card was declined", ...known };
+        }
+        if (attempt.failure?.status === 400 && stripeError?.type === "invalid_request_error") {
+          return {
+            ok: false,
+            reason: "token_unusable",
+            message: "Stripe refused the shared payment token; nothing was charged",
+            ...known
+          };
+        }
+        if (attempt.status === "requires_action") {
+          return {
+            ok: false,
+            reason: "requires_action",
+            message: "the card requires an authentication step",
+            ...known
+          };
+        }
+        return {
+          ok: false,
+          reason: "indeterminate",
+          message: attempt.failure ? `Stripe answered HTTP ${attempt.failure.status} without confirming the charge` : attempt.status ? `the PaymentIntent is ${attempt.status}, not succeeded` : "Stripe could not be reached or its answer was lost",
+          ...known
+        };
+      }
+    }
+  };
+}
+var unusedClient = {
+  paymentIntents: {
+    create() {
+      return Promise.reject(new Error("the challenge issuer never charges"));
+    }
+  }
+};
+function fetchClient(args) {
+  return {
+    paymentIntents: {
+      async create(params, options) {
+        await args.beforeCharge?.();
+        args.attempt.called = true;
+        const response = await args.fetchImpl(`${args.apiBase}/v1/payment_intents`, {
+          method: "POST",
+          headers: {
+            Authorization: `Basic ${Buffer.from(`${args.secretKey}:`).toString("base64")}`,
+            "Content-Type": "application/x-www-form-urlencoded",
+            ...options.idempotencyKey && { "Idempotency-Key": options.idempotencyKey },
+            ...options.apiVersion && { "Stripe-Version": options.apiVersion },
+            ...options.stripeAccount && { "Stripe-Account": options.stripeAccount }
+          },
+          body: formEncode(params)
+        });
+        const body = await response.json().catch(() => ({}));
+        if (!response.ok) {
+          const enumField = (value) => typeof value === "string" && /^[a-z0-9_]{1,64}$/.test(value) ? value : void 0;
+          const type = enumField(body.error?.type);
+          const code = enumField(body.error?.code);
+          const declineCode = enumField(body.error?.decline_code);
+          args.attempt.failure = {
+            status: response.status,
+            codes: { ...type && { type }, ...code && { code }, ...declineCode && { declineCode } }
+          };
+          const intent = body.error?.payment_intent?.id;
+          if (typeof intent === "string" && /^pi_[A-Za-z0-9]+$/.test(intent)) {
+            args.attempt.paymentIntentId = intent;
+          }
+          throw new Error(`Stripe answered HTTP ${response.status}`);
+        }
+        if (typeof body.id !== "string" || typeof body.status !== "string") {
+          throw new Error("Stripe returned a PaymentIntent without an id or status");
+        }
+        args.attempt.paymentIntentId = body.id;
+        args.attempt.status = body.status;
+        if (typeof body.amount === "number") args.attempt.amount = body.amount;
+        if (typeof body.currency === "string") args.attempt.currency = body.currency;
+        args.attempt.replayed = response.headers.get("idempotent-replayed") === "true";
+        return { id: body.id, status: body.status };
+      }
+    }
+  };
+}
+function formEncode(params) {
+  const out = new URLSearchParams();
+  const visit = (key, value) => {
+    if (value === void 0 || value === null) return;
+    if (Array.isArray(value)) {
+      value.forEach((item, index) => visit(`${key}[${index}]`, item));
+    } else if (typeof value === "object") {
+      for (const [child, nested] of Object.entries(value)) visit(`${key}[${child}]`, nested);
+    } else {
+      out.set(key, String(value));
+    }
+  };
+  for (const [key, value] of Object.entries(params)) visit(key, value);
+  return out;
+}
+function readNonce(challenge) {
+  let meta;
+  try {
+    meta = challenge.opaque ? PaymentRequest.deserialize(challenge.opaque) : challenge.meta;
+  } catch {
+    return "";
+  }
+  return typeof meta?.nonce === "string" ? meta.nonce : "";
+}
+function invalidCredential(message) {
+  return { ok: false, reason: "invalid_credential", message };
+}
+function credentialFailure(err) {
+  if (isHmacMismatch(err)) return "the challenge was not issued by this server";
+  if (err instanceof MppxErrors.PaymentExpiredError) return "the challenge has expired";
+  return "the credential does not match this top-up's challenge";
+}
+function isHmacMismatch(err) {
+  return err instanceof MppxErrors.InvalidChallengeError && err.message.includes(MPPX_HMAC_MISMATCH_REASON);
+}
+
 // src/sdk/server/payment-mode.ts
 function resolvePaymentMode(opts) {
   const active = (rail, configured, ready) => ({
@@ -1195,7 +1436,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-POZJNFJU.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-ESEAN7JL.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;
@@ -1283,16 +1524,18 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     const tempoObserverHealth = createPlatformTempoObserverHealth(envMaybe);
     void tempoObserverHealth?.refresh();
     const receiptKey = envMaybe.DVMKIT_RECEIPT_KEY ?? (opts.devMode ? generateEphemeralReceiptKey().secret : void 0);
+    let stripeCredit = opts.stripeCredit;
+    const stripeCreditConfig = stripeCredit ? void 0 : stripeCreditConfigFromEnv(envMaybe);
     let mpp = opts.mpp;
     let mppSecretState = null;
     let tempoChargeBackend = "user-supplied";
     const mppTempoRecipient = envMaybe.DVMKIT_TEMPO_RECIPIENT;
     if (!mpp && mppTempoRecipient) {
-      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-DBYDXISN.js");
+      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-3YZMURZL.js");
       tempoChargeBackend = pgPool ? "postgres" : "memory";
       let tempoCharge;
       if (pgPool) {
-        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-P7ZBR3GG.js");
+        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-SOIRMEFJ.js");
         const chargeStore = new PostgresTempoChargeStore(pgPool);
         tempoChargeStore = chargeStore;
         pendingInits.push(chargeStore.init());
@@ -1312,7 +1555,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-ZVRBAMLG.js"),
+          import("../tempo-session-store-UBDFFHDG.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1464,8 +1707,22 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         mpp = createMppFromOpts(mppOpts, env);
       }
     }
+    if (stripeCreditConfig) {
+      let previousHmacSecret;
+      if (pgPool) {
+        const { initMppSecretStateTable, applyMppSecretRotation, loadMppSecretState, DEFAULT_ROTATION_WINDOW_MS } = await import("../mpp-secret-state-B5GCILVH.js");
+        if (!mppSecretState) {
+          await initMppSecretStateTable(pgPool);
+          mppSecretState = (await applyMppSecretRotation(pgPool, stripeCreditConfig.hmacSecret, DEFAULT_ROTATION_WINDOW_MS)).state;
+        }
+        const localPool = pgPool;
+        previousHmacSecret = async () => (await loadMppSecretState(localPool))?.previous?.secret;
+      }
+      const chargeJournal = pgPool ? await (await import("../card-charge-journal-SKMBEPRM.js")).createPostgresCardChargeJournal(pgPool) : void 0;
+      stripeCredit = createStripeCreditRail({ ...stripeCreditConfig, previousHmacSecret, chargeJournal });
+    }
     const fxSource = envMaybe.DVMKIT_FX_SOURCE;
-    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-FGPVRNTL.js");
+    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-RP5CGW6I.js");
     const fxFetcher = opts.fx ?? createFxFetcher({ source: resolveFxSourceFromEnv(envMaybe) });
     const hostRailConfigured = (opts.paymentMethods?.length ?? 0) > 0 || (effectiveMints?.length ?? 0) > 0 || !!x402WithDualServe || !!mpp;
     if (mounts.some((entry) => mountNeedsFx(entry, hostRailConfigured))) warmFxSnapshot(fxFetcher);
@@ -1475,7 +1732,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     assertReceiptIdentity(envMaybe, opts.builder, receiptKey, cashuOpts.dvmId, opts.devMode);
     let sharedPgReplayStore;
     if (pgPool) {
-      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-JQYAKG47.js");
+      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-6SVCZ475.js");
       const store2 = new PostgresReplayStore2(pgPool);
       pendingInits.push(store2.init());
       sharedPgReplayStore = store2;
@@ -1503,13 +1760,13 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     }
     let sharedPgConsumedStore;
     if (pgPool) {
-      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-IPWPJ6V7.js");
+      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-Y336KNIB.js");
       const consumedStore = new PostgresConsumedCredentialStore(pgPool);
       pendingInits.push(consumedStore.init());
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-M3EBVMOP.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-S76KU53A.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1518,7 +1775,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-WL2VKLE3.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-5KXHOWB2.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();
@@ -1633,6 +1890,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         x402: descX402WithDualServe,
         x402FacilitatorHealth: descX402Health,
         mpp: descMpp,
+        stripeCredit,
         consumedCredentialStore: opts.consumedCredentialStore ?? sharedPgConsumedStore,
         adminCashuNonceStore: sharedPgConsumedStore,
         cashuMode: cashuOpts.cashuMode,
@@ -1706,6 +1964,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       x402: bootX402,
       x402Support: bootX402Support,
       lightningReceive,
+      stripeCredit,
       fxSource,
       hasPlatformToken: !!platformToken,
       hasDvmId: !!cashuOpts.dvmId,
@@ -2030,6 +2289,9 @@ function logBootSummary(s) {
   diagnosticConsole.log(
     `  LN receive:    ${s.lightningReceive ? `receive-only NWC (${s.lightningReceive.available() ? "reachable" : "unreachable \u2014 omitted from the funding menu"})` : "(unconfigured)"}`
   );
+  diagnosticConsole.log(
+    `  Card credit:   ${s.stripeCredit ? `stripe (network ${s.stripeCredit.networkId})` : "(unconfigured)"}`
+  );
   diagnosticConsole.log(
     `  Platform rep.: ${revenueReporterBannerState({
       platformUrl: s.platformUrl,
@@ -2181,6 +2443,7 @@ export {
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
   SSRFError,
+  STRIPE_CREDIT_MIN_MICRO,
   SignedRequestError,
   X402ExactIntentConflictError,
   X402ExactSettlementEvidenceMissingError,
@@ -2203,6 +2466,7 @@ export {
   createDVMHost,
   createPinnedFetch,
   createSignedRequestVerifier,
+  createStripeCreditRail,
   createX402BatchSettlementServer,
   creditEnvelopeIgnoreFields,
   drawSettlementRef,