@envarai/envarpay 0.2.0-alpha.2 → 0.2.0-alpha.20

package/dist/commerce/buyer-store.js

@@ -1,168 +0,0 @@
-import { DatabaseSync } from 'node:sqlite';
-import { chmodSync, mkdirSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { atomic } from './config.js';
-import { CommerceError } from './types.js';
-/** One wallet ledger, one process. Unknown authorizations retain cumulative budget. */
-export class BuyerStore {
-    db;
-    owner;
-    constructor(path) {
-        if (path !== ':memory:') {
-            mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
-            this.owner = new DatabaseSync(path + '.owner.sqlite3');
-            chmodSync(path + '.owner.sqlite3', 0o600);
-            try {
-                this.owner.exec('PRAGMA busy_timeout=0; BEGIN EXCLUSIVE');
-            }
-            catch {
-                this.owner.close();
-                throw new CommerceError('store_locked', 'Buyer ledger already has an active process');
-            }
-        }
-        try {
-            this.db = new DatabaseSync(path);
-            if (path !== ':memory:')
-                chmodSync(path, 0o600);
-            this.db.exec(`PRAGMA journal_mode=WAL; PRAGMA synchronous=FULL; PRAGMA busy_timeout=5000;
-        CREATE TABLE IF NOT EXISTS buyer_meta(version INTEGER NOT NULL);
-        INSERT INTO buyer_meta SELECT 1 WHERE NOT EXISTS(SELECT 1 FROM buyer_meta);
-        CREATE TABLE IF NOT EXISTS buyer_purchases(
-          id TEXT PRIMARY KEY, caller TEXT NOT NULL, message_id TEXT NOT NULL,
-          currency TEXT NOT NULL, amount TEXT NOT NULL, budget_state TEXT NOT NULL,
-          record_json TEXT NOT NULL, UNIQUE(caller,message_id), UNIQUE(message_id)
-        );`);
-            if (this.db.prepare('SELECT version FROM buyer_meta').get()?.version !== 1)
-                throw new CommerceError('store_version', 'Unsupported buyer ledger version');
-            // Never resume signing after a crash: no second nonce may be created.
-            for (const row of this.db.prepare('SELECT record_json FROM buyer_purchases').all()) {
-                const record = JSON.parse(String(row.record_json));
-                if (record.state === 'signing' || record.state === 'submitted')
-                    this.update(record.id, { state: 'unknown', paymentState: ['confirmed', 'not_required'].includes(record.paymentState) ? record.paymentState : 'unknown', errorCode: 'interrupted_purchase' });
-            }
-        }
-        catch (error) {
-            this.owner?.close();
-            throw error;
-        }
-    }
-    close() { this.db.close(); if (this.owner) {
-        this.owner.exec('ROLLBACK');
-        this.owner.close();
-    } }
-    transaction(fn) {
-        this.db.exec('BEGIN IMMEDIATE');
-        try {
-            const result = fn();
-            this.db.exec('COMMIT');
-            return result;
-        }
-        catch (error) {
-            this.db.exec('ROLLBACK');
-            throw error;
-        }
-    }
-    get(id, caller) {
-        const row = this.db.prepare('SELECT record_json FROM buyer_purchases WHERE id=? AND caller=?').get(id, caller);
-        return row ? JSON.parse(String(row.record_json)) : undefined;
-    }
-    assertMessageOwner(caller, messageId) {
-        const row = this.db.prepare('SELECT caller FROM buyer_purchases WHERE message_id=?').get(messageId);
-        if (row && row.caller !== caller)
-            throw new CommerceError('purchase_conflict', 'Message ID is already reserved to another caller');
-    }
-    find(caller, messageId) {
-        const row = this.db.prepare('SELECT record_json FROM buyer_purchases WHERE caller=? AND message_id=?').get(caller, messageId);
-        return row ? JSON.parse(String(row.record_json)) : undefined;
-    }
-    insert(value) {
-        return this.transaction(() => {
-            this.assertMessageOwner(value.caller, value.messageId);
-            const prior = this.find(value.caller, value.messageId);
-            if (prior) {
-                if (prior.fingerprint !== value.fingerprint)
-                    throw new CommerceError('purchase_conflict', 'Message ID already identifies another purchase');
-                return prior;
-            }
-            const now = new Date().toISOString();
-            const record = { ...value, id: randomUUID(), createdAt: now, updatedAt: now, state: 'previewed', paymentState: 'quoted', executionState: 'not_started' };
-            this.db.prepare('INSERT INTO buyer_purchases VALUES(?,?,?,?,?,?,?)').run(record.id, record.caller, record.messageId, record.quote.currency ?? '', record.quote.amount, 'none', JSON.stringify(record));
-            return record;
-        });
-    }
-    update(id, patch) {
-        const row = this.db.prepare('SELECT record_json FROM buyer_purchases WHERE id=?').get(id);
-        if (!row)
-            throw new CommerceError('purchase_not_found', 'Purchase not found');
-        const record = { ...JSON.parse(String(row.record_json)), ...patch, updatedAt: new Date().toISOString() };
-        this.db.prepare('UPDATE buyer_purchases SET record_json=? WHERE id=?').run(JSON.stringify(record), id);
-        return record;
-    }
-    pendingTasks() {
-        return this.db.prepare('SELECT record_json FROM buyer_purchases').all()
-            .map(row => JSON.parse(String(row.record_json)))
-            .filter(record => record.task?.id && ['working', 'unknown'].includes(record.executionState));
-    }
-    usage(currency) {
-        let reserved = 0n, spent = 0n;
-        for (const row of this.db.prepare("SELECT amount,budget_state FROM buyer_purchases WHERE currency=? AND budget_state!='none'").all(currency)) {
-            if (row.budget_state === 'spent')
-                spent += BigInt(String(row.amount));
-            else
-                reserved += BigInt(String(row.amount));
-        }
-        return { reserved: reserved.toString(), spent: spent.toString() };
-    }
-    reserve(id, caller, policy) {
-        return this.transaction(() => {
-            const record = this.get(id, caller);
-            if (!record)
-                throw new CommerceError('purchase_not_found', 'Purchase not found');
-            if (record.state !== 'previewed')
-                return { record, fresh: false };
-            const limit = policy.budgets.find(b => b.currency === record.quote.currency);
-            const usage = this.usage(record.quote.currency ?? '');
-            if (!limit || BigInt(usage.reserved) + BigInt(usage.spent) + atomic(record.quote.amount) > atomic(limit.maxTotal))
-                throw new CommerceError('budget_exceeded', 'Cumulative wallet budget is exhausted or reserved');
-            this.db.prepare("UPDATE buyer_purchases SET budget_state='reserved' WHERE id=?").run(id);
-            return { record: this.update(id, { state: 'signing', paymentState: 'reserved' }), fresh: true };
-        });
-    }
-    beginFree(id, caller) {
-        return this.transaction(() => {
-            const record = this.get(id, caller);
-            if (!record || record.protocol !== 'free' || record.quote.amount !== '0' || record.quote.currency !== null || record.quote.recipient !== null)
-                throw new CommerceError('free_purchase_binding', 'Invalid original free purchase');
-            if (record.state !== 'previewed')
-                return { record, fresh: false };
-            return { record: this.update(id, { state: 'submitted', paymentState: 'not_required' }), fresh: true };
-        });
-    }
-    rejectBeforeSigning(id, caller, errorCode) {
-        return this.transaction(() => {
-            const record = this.get(id, caller);
-            if (!record || record.state !== 'signing' || record.credentialRef || record.nonce)
-                throw new CommerceError('authorization_may_exist', 'Cannot release an existing or ambiguous authorization');
-            this.db.prepare("UPDATE buyer_purchases SET budget_state='none' WHERE id=? AND budget_state='reserved'").run(id);
-            return this.update(id, { state: 'failed', paymentState: 'rejected', executionState: 'not_started', errorCode });
-        });
-    }
-    rejectExpiredAuthorization(id, caller) {
-        return this.transaction(() => {
-            const record = this.get(id, caller);
-            if (!record || record.protocol === 'mpp' || record.protocol === 'free' || !record.credentialRef || !record.nonce)
-                throw new CommerceError('authorization_recovery_required', 'Original x402 authorization is required');
-            if (record.paymentState === 'confirmed')
-                return record;
-            this.db.prepare("UPDATE buyer_purchases SET budget_state='none' WHERE id=? AND budget_state='reserved'").run(id);
-            return this.update(id, { state: 'failed', paymentState: 'rejected', errorCode: 'authorization_expired_unused', rejectionEvidence: { kind: 'finalized_expired_unused', checkedAt: new Date().toISOString(), nonce: record.nonce } });
-        });
-    }
-    confirmed(id, receipt) {
-        return this.transaction(() => {
-            this.db.prepare("UPDATE buyer_purchases SET budget_state='spent' WHERE id=? AND budget_state IN ('reserved','spent')").run(id);
-            return this.update(id, { paymentState: 'confirmed', receipt });
-        });
-    }
-}

package/dist/commerce/buyer.d.ts

@@ -1,132 +0,0 @@
-import type { ClientEvmSigner } from '@x402/evm';
-import type { PaymentPayload, PaymentRequirements, SettleResponse } from '@x402/core/types';
-import { type BuyerPolicy, type Input, type StandardA2APeer } from './types.js';
-import { CredentialVault } from './vault.js';
-import { BuyerStore, type BuyerQuote } from './buyer-store.js';
-import { type MppBuyerOptions, type MppReceipt } from './mpp-client.js';
-export interface BuyerPreviewInput {
-    cardUrl: string;
-    messageId: string;
-    input: Input;
-    offerId: string;
-}
-export interface BuyerConfirmInput {
-    previewId: string;
-    quoteToken: string;
-    messageId: string;
-}
-export interface CommerceBuyerOptions {
-    policy: BuyerPolicy;
-    store: BuyerStore;
-    vault?: CredentialVault;
-    signer?: ClientEvmSigner;
-    mpp?: MppBuyerOptions;
-    peerTokens: Readonly<Record<string, string>>;
-    /** Override sibling /a2a only when the local wallet owner explicitly allows it. */
-    peerEndpoints?: Readonly<Record<string, string>>;
-    verifyReceipt?: (receipt: SettleResponse, payload: PaymentPayload, requirements: PaymentRequirements) => Promise<boolean>;
-    checkpoint?: (requirements: PaymentRequirements) => Promise<string>;
-    proveExpiredUnused?: (payload: PaymentPayload, requirements: PaymentRequirements) => Promise<boolean>;
-    findOriginalReceipt?: (payload: PaymentPayload, requirements: PaymentRequirements, fromBlock: string) => Promise<SettleResponse | undefined>;
-    fetchImpl?: typeof fetch;
-}
-export interface BuyerSnapshot {
-    id: string;
-    quoteToken: string;
-    messageId: string;
-    payer: string;
-    state: string;
-    quote: BuyerQuote;
-    paymentState: string;
-    executionState: string;
-    task?: Record<string, unknown>;
-    result?: unknown;
-    errorCode?: string;
-    continuation?: {
-        messageId: string;
-        state: 'pending' | 'unknown' | 'resolved';
-        input: Input;
-    };
-    receipt?: SettleResponse | MppReceipt;
-    nonce?: string;
-    createdAt: string;
-    updatedAt: string;
-}
-/** Independent x402 wallet; payment and execution state are deliberately separate. */
-export declare class CommerceBuyer {
-    private readonly options;
-    readonly policy: BuyerPolicy;
-    private readonly fetchImpl;
-    private readonly active;
-    private timer?;
-    private readonly previews;
-    constructor(options: CommerceBuyerOptions);
-    /** Background observation only; never signs, replays credentials or changes reservations. */
-    start(intervalMs?: number): void;
-    stop(): Promise<void>;
-    policySnapshot(): {
-        capabilities: ("free" | "x402" | "mpp")[];
-        state: string;
-        payer: string | undefined;
-        budgets: {
-            reserved: string;
-            spent: string;
-            currency: string;
-            maxTotal: string;
-            period: "cumulative";
-        }[];
-        policyVersion: 1;
-        paymentsEnabled: boolean;
-        approval: "per_purchase" | "within_preapproved_limits";
-        peers: (StandardA2APeer | {
-            id: string;
-            cardUrl: string;
-            mode?: "envarpay";
-            protocol: "x402" | "mpp";
-            currency: string;
-            recipient: string;
-            maxPerPurchase: string;
-        } | {
-            id: string;
-            cardUrl: string;
-            mode?: "envarpay";
-            protocol: "free";
-            currency: null;
-            recipient: null;
-            maxPerPurchase: "0";
-        })[];
-    };
-    private peer;
-    private endpoint;
-    private scopedFetch;
-    private record;
-    private snapshot;
-    get(caller: string, id: string): BuyerSnapshot;
-    preview(caller: string, input: BuyerPreviewInput): Promise<BuyerSnapshot>;
-    private prepare;
-    private prepareStandard;
-    private prepareFree;
-    private replayFree;
-    private prepareMpp;
-    private mppCredential;
-    private purchaseMpp;
-    private savedMpp;
-    private verifyMpp;
-    private replayMpp;
-    private recoverMpp;
-    private assertCurrentPolicy;
-    confirm(caller: string, input: BuyerConfirmInput): Promise<BuyerSnapshot>;
-    private exclusive;
-    private purchase;
-    private saved;
-    private verify;
-    private task;
-    private replay;
-    private client;
-    private observe;
-    continue(caller: string, id: string, input: {
-        messageId: string;
-        input: Input;
-    }): Promise<BuyerSnapshot>;
-    recover(caller: string, id: string): Promise<BuyerSnapshot>;
-}