@envarai/envarpay 0.2.0-alpha.2 → 0.2.0-alpha.20

package/dist/commerce/chain.d.ts

@@ -1,24 +0,0 @@
-import type { PaymentPayload, PaymentRequirements, SettleResponse } from '@x402/core/types';
-export interface ExpiredUnusedProof {
-    expiredUnused: true;
-    network: string;
-    asset: string;
-    payer: string;
-    nonce: string;
-    validAfter: string;
-    validBefore: string;
-    blockNumber: string;
-    blockHash: string;
-    blockTimestamp: string;
-    finality: 'finalized';
-    authorizationUsed: false;
-}
-/** Checks the canonical chain receipt and exact official-token Transfer. */
-export declare function evmReceiptVerifier(rpcUrls: Readonly<Record<string, string>>, confirmations?: number): (receipt: SettleResponse, payload: PaymentPayload, requirements: PaymentRequirements) => Promise<boolean>;
-/** Locate an original EIP-3009 settlement even when facilitator lost its tx response. */
-export declare function evmSettlementRecovery(rpcUrls: Readonly<Record<string, string>>): {
-    expiredUnusedProof: (payload: PaymentPayload, requirements: PaymentRequirements) => Promise<ExpiredUnusedProof | undefined>;
-    proveExpiredUnused: (payload: PaymentPayload, requirements: PaymentRequirements) => Promise<boolean>;
-    checkpoint: (requirements: PaymentRequirements) => Promise<string>;
-    findOriginalReceipt: (payload: PaymentPayload, requirements: PaymentRequirements, fromBlock: string) => Promise<SettleResponse | undefined>;
-};

package/dist/commerce/chain.js

@@ -1,146 +0,0 @@
-import { createPublicClient, http, decodeEventLog, parseAbi } from 'viem';
-import { CommerceError } from './types.js';
-import { validateUrl } from './config.js';
-const abi = parseAbi(['event Transfer(address indexed from, address indexed to, uint256 value)']);
-const authorizationAbi = parseAbi(['event AuthorizationUsed(address indexed authorizer, bytes32 indexed nonce)']);
-const authorizationStateAbi = parseAbi(['function authorizationState(address authorizer,bytes32 nonce) view returns (bool)']);
-const officialUsdc = {
-    'eip155:84532': '0x036cbd53842c5426634e7929541ec2318f3dcf7e',
-    'eip155:8453': '0x833589fcd6edb6e08f4c7c32d4f71b54bda02913',
-};
-/** Checks the canonical chain receipt and exact official-token Transfer. */
-export function evmReceiptVerifier(rpcUrls, confirmations = 2) {
-    if (!Number.isInteger(confirmations) || confirmations < 1)
-        throw new CommerceError('confirmation_policy', 'Positive confirmation depth required');
-    return async (receipt, payload, requirements) => {
-        const rpc = rpcUrls[requirements.network];
-        if (!rpc)
-            throw new CommerceError('rpc_missing', 'Configure the settlement network RPC');
-        validateUrl(rpc, true);
-        const chainId = Number(requirements.network.split(':')[1]);
-        if (!Number.isSafeInteger(chainId) || !/^0x[0-9a-fA-F]{64}$/.test(receipt.transaction) || receipt.network !== requirements.network)
-            return false;
-        const client = createPublicClient({ transport: http(rpc, { timeout: 15000, retryCount: 0 }) });
-        if (await client.getChainId() !== chainId)
-            return false;
-        const mined = await client.getTransactionReceipt({ hash: receipt.transaction });
-        if (mined.status !== 'success')
-            return false;
-        const block = await client.getBlock({ blockNumber: mined.blockNumber });
-        if (block.hash !== mined.blockHash)
-            return false;
-        const latest = await client.getBlockNumber();
-        if (latest - mined.blockNumber + 1n < BigInt(confirmations))
-            return false;
-        const auth = payload.payload.authorization;
-        if (!auth?.from || !auth.nonce || auth.to?.toLowerCase() !== requirements.payTo.toLowerCase() || auth.value !== requirements.amount)
-            return false;
-        if (receipt.payer && receipt.payer.toLowerCase() !== auth.from.toLowerCase())
-            return false;
-        const matches = mined.logs.filter(log => {
-            if (log.address.toLowerCase() !== requirements.asset.toLowerCase())
-                return false;
-            try {
-                const event = decodeEventLog({ abi, data: log.data, topics: log.topics });
-                return event.args.from.toLowerCase() === auth.from.toLowerCase() && event.args.to.toLowerCase() === requirements.payTo.toLowerCase() && event.args.value === BigInt(requirements.amount);
-            }
-            catch {
-                return false;
-            }
-        });
-        const authorizations = mined.logs.filter(log => {
-            if (log.address.toLowerCase() !== requirements.asset.toLowerCase())
-                return false;
-            try {
-                const event = decodeEventLog({ abi: authorizationAbi, data: log.data, topics: log.topics });
-                return event.args.authorizer.toLowerCase() === auth.from.toLowerCase() && event.args.nonce.toLowerCase() === auth.nonce.toLowerCase();
-            }
-            catch {
-                return false;
-            }
-        });
-        return matches.length === 1 && authorizations.length === 1;
-    };
-}
-/** Locate an original EIP-3009 settlement even when facilitator lost its tx response. */
-export function evmSettlementRecovery(rpcUrls) {
-    const clientFor = async (requirements) => {
-        const rpc = rpcUrls[requirements.network];
-        if (!rpc)
-            throw new CommerceError('rpc_missing', 'Configure the settlement network RPC');
-        validateUrl(rpc, true);
-        const client = createPublicClient({ transport: http(rpc, { timeout: 15000, retryCount: 0 }) });
-        if (await client.getChainId() !== Number(requirements.network.split(':')[1]))
-            throw new CommerceError('rpc_network', 'RPC network does not match frozen requirements');
-        return client;
-    };
-    const expiredUnusedProof = async (payload, requirements) => {
-        try {
-            const asset = officialUsdc[requirements.network];
-            if (!asset || typeof requirements.asset !== 'string' || requirements.asset.toLowerCase() !== asset)
-                return undefined;
-            const auth = payload.payload?.authorization;
-            if (!auth || !/^0x[0-9a-fA-F]{40}$/.test(auth.from ?? '') || !/^0x[0-9a-fA-F]{64}$/.test(auth.nonce ?? '') ||
-                auth.to?.toLowerCase() !== requirements.payTo.toLowerCase() || auth.value !== requirements.amount ||
-                !/^(0|[1-9][0-9]{0,77})$/.test(auth.validAfter ?? '') || !/^(0|[1-9][0-9]{0,77})$/.test(auth.validBefore ?? ''))
-                return undefined;
-            const validAfter = BigInt(auth.validAfter), validBefore = BigInt(auth.validBefore);
-            if (validAfter >= validBefore || validBefore >= 2n ** 256n)
-                return undefined;
-            const client = await clientFor(requirements);
-            const finalized = await client.getBlock({ blockTag: 'finalized' });
-            if (finalized.number === null || !/^0x[0-9a-fA-F]{64}$/.test(finalized.hash ?? '') ||
-                finalized.timestamp < validBefore || finalized.timestamp < validAfter)
-                return undefined;
-            // A missing nonce log is not proof. Read the official token's state at
-            // the exact finalized block, after this authorization can no longer execute.
-            const used = await client.readContract({ address: asset, abi: authorizationStateAbi, functionName: 'authorizationState',
-                args: [auth.from, auth.nonce], blockNumber: finalized.number });
-            if (used !== false)
-                return undefined;
-            const canonical = await client.getBlock({ blockNumber: finalized.number });
-            if (canonical.hash !== finalized.hash || canonical.number !== finalized.number || canonical.timestamp !== finalized.timestamp)
-                return undefined;
-            return { expiredUnused: true, network: requirements.network, asset, payer: auth.from.toLowerCase(), nonce: auth.nonce.toLowerCase(),
-                validAfter: auth.validAfter, validBefore: auth.validBefore, blockNumber: finalized.number.toString(),
-                blockHash: finalized.hash, blockTimestamp: finalized.timestamp.toString(), finality: 'finalized', authorizationUsed: false };
-        }
-        catch {
-            // Unsupported finalized tags, archive state gaps, malformed return values
-            // and network errors retain the original unknown operation and its budget.
-            return undefined;
-        }
-    };
-    return {
-        expiredUnusedProof,
-        proveExpiredUnused: async (payload, requirements) => !!await expiredUnusedProof(payload, requirements),
-        checkpoint: async (requirements) => {
-            const client = await clientFor(requirements);
-            const block = await client.getBlockNumber();
-            return (block > 12n ? block - 12n : 0n).toString();
-        },
-        findOriginalReceipt: async (payload, requirements, fromBlock) => {
-            if (!/^(0|[1-9][0-9]*)$/.test(fromBlock))
-                throw new CommerceError('recovery_checkpoint', 'Invalid original chain checkpoint');
-            const auth = payload.payload.authorization;
-            if (!/^0x[0-9a-fA-F]{40}$/.test(auth?.from ?? '') || !/^0x[0-9a-fA-F]{64}$/.test(auth?.nonce ?? ''))
-                throw new CommerceError('invalid_payment', 'Missing original EIP-3009 identity');
-            const client = await clientFor(requirements);
-            const latest = await client.getBlockNumber();
-            // Bounded per reconciliation. Very old operations need an operator/archive
-            // RPC lookup; never reinterpret incomplete search as proof of non-payment.
-            if (latest - BigInt(fromBlock) > 100000n)
-                throw new CommerceError('archive_reconciliation_required', 'Original authorization requires an archive log lookup');
-            for (let start = BigInt(fromBlock); start <= latest; start += 2000n) {
-                const end = start + 1999n < latest ? start + 1999n : latest;
-                const logs = await client.getLogs({ address: requirements.asset, event: authorizationAbi[0], args: { authorizer: auth.from, nonce: auth.nonce }, fromBlock: start, toBlock: end, strict: true });
-                const settled = logs.filter(log => !log.removed && log.transactionHash);
-                if (settled.length > 1)
-                    throw new CommerceError('ambiguous_receipt', 'Multiple authorization events require manual reconciliation');
-                if (settled.length === 1)
-                    return { success: true, transaction: settled[0].transactionHash, network: requirements.network, payer: auth.from };
-            }
-            return undefined;
-        },
-    };
-}

package/dist/commerce/client-runtime.d.ts

@@ -1,8 +0,0 @@
-/** Node.js buyer runtime. Does not initialize seller storage or any signer. */
-export * from './buyer-store.js';
-export * from './buyer.js';
-export * from './management.js';
-export * from './vault.js';
-export * from './chain.js';
-export type { MppBuyerOptions, MppTokenOperation, MppVerificationContext, MppReceipt } from './mpp-client.js';
-export * from './peer-proxy.js';

package/dist/commerce/client-runtime.js

@@ -1,7 +0,0 @@
-/** Node.js buyer runtime. Does not initialize seller storage or any signer. */
-export * from './buyer-store.js';
-export * from './buyer.js';
-export * from './management.js';
-export * from './vault.js';
-export * from './chain.js';
-export * from './peer-proxy.js';

package/dist/commerce/management.d.ts

@@ -1,14 +0,0 @@
-import { CommerceBuyer } from './buyer.js';
-export interface BuyerManagementOptions {
-    buyer: CommerceBuyer;
-    authenticate: (request: Request) => Promise<string | null>;
-    origin: string;
-}
-/** Private API: authentication binds every purchase to its caller. No CORS or public wallet proxy. */
-export declare class BuyerManagement {
-    private readonly options;
-    readonly origin: string;
-    constructor(options: BuyerManagementOptions);
-    handle(request: Request): Promise<Response>;
-}
-export declare function listenBuyerManagement(management: BuyerManagement, origin?: string, host?: string, port?: number): import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>;

package/dist/commerce/management.js

@@ -1,138 +0,0 @@
-import { createServer } from 'node:http';
-import { Readable } from 'node:stream';
-import { CommerceError } from './types.js';
-import { validateUrl } from './config.js';
-const loopback = (host) => ['localhost', '127.0.0.1', '[::1]', '::1'].includes(host);
-const headers = { 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff' };
-async function jsonBody(request) {
-    if (!request.headers.get('Content-Type')?.toLowerCase().startsWith('application/json'))
-        throw new CommerceError('invalid_content_type', 'Send application/json');
-    let size = 0;
-    const chunks = [];
-    if (request.body) {
-        const reader = request.body.getReader();
-        for (;;) {
-            const { value, done } = await reader.read();
-            if (done)
-                break;
-            size += value.byteLength;
-            if (size > 1024 * 1024) {
-                await reader.cancel();
-                throw new CommerceError('request_too_large', 'Management request exceeds 1 MiB');
-            }
-            chunks.push(value);
-        }
-    }
-    let value;
-    try {
-        value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    }
-    catch {
-        throw new CommerceError('invalid_json', 'Valid JSON object required');
-    }
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        throw new CommerceError('invalid_json', 'Valid JSON object required');
-    return value;
-}
-function exactKeys(value, expected) {
-    if (Object.keys(value).some(key => !expected.includes(key)) || expected.some(key => !Object.hasOwn(value, key)))
-        throw new CommerceError('invalid_request', 'Request fields do not match this management operation');
-}
-/** Private API: authentication binds every purchase to its caller. No CORS or public wallet proxy. */
-export class BuyerManagement {
-    options;
-    origin;
-    constructor(options) {
-        this.options = options;
-        const url = validateUrl(options.origin, true);
-        if (url.pathname !== '/' || url.search || (!loopback(url.hostname) && url.protocol !== 'https:'))
-            throw new CommerceError('management_origin', 'Use a loopback origin or an explicitly configured HTTPS management origin');
-        this.origin = url.origin;
-    }
-    async handle(request) {
-        const url = new URL(request.url);
-        if (url.origin !== this.origin || (request.headers.get('Host') && request.headers.get('Host') !== url.host))
-            return Response.json({ error: 'invalid_host' }, { status: 421, headers });
-        if (request.headers.get('Origin') && request.headers.get('Origin') !== this.origin)
-            return Response.json({ error: 'origin_not_allowed' }, { status: 403, headers });
-        if (request.method === 'OPTIONS')
-            return Response.json({ error: 'method_not_allowed' }, { status: 405, headers });
-        try {
-            const caller = await this.options.authenticate(request);
-            if (!caller)
-                return Response.json({ error: 'authentication_required' }, { status: 401, headers: { ...headers, 'WWW-Authenticate': 'Bearer' } });
-            if (url.search)
-                throw new CommerceError('invalid_request', 'Management query parameters are not supported');
-            if (request.method === 'GET' && url.pathname === '/management/v1/policy')
-                return Response.json(this.options.buyer.policySnapshot(), { headers });
-            if (request.method === 'POST' && url.pathname === '/management/v1/purchases/preview') {
-                const body = await jsonBody(request);
-                exactKeys(body, ['cardUrl', 'messageId', 'input', 'offerId']);
-                return Response.json(await this.options.buyer.preview(caller, body), { headers });
-            }
-            if (request.method === 'POST' && url.pathname === '/management/v1/purchases/confirm') {
-                const body = await jsonBody(request);
-                exactKeys(body, ['previewId', 'quoteToken', 'messageId']);
-                if (['previewId', 'quoteToken', 'messageId'].some(key => typeof body[key] !== 'string'))
-                    throw new CommerceError('invalid_request', 'Confirmation identifiers must be strings');
-                return Response.json(await this.options.buyer.confirm(caller, body), { headers });
-            }
-            const match = /^\/management\/v1\/purchases\/([0-9a-f-]{36})(\/(?:recover|continue))?$/.exec(url.pathname);
-            if (match && request.method === 'GET' && !match[2])
-                return Response.json(this.options.buyer.get(caller, match[1]), { headers });
-            if (match && request.method === 'POST' && match[2] === '/continue') {
-                const body = await jsonBody(request);
-                exactKeys(body, ['messageId', 'input']);
-                if (typeof body.messageId !== 'string')
-                    throw new CommerceError('invalid_request', 'Continuation message ID must be a string');
-                return Response.json(await this.options.buyer.continue(caller, match[1], body), { headers });
-            }
-            if (match && request.method === 'POST' && match[2] === '/recover') {
-                if (request.body) {
-                    const body = await jsonBody(request);
-                    exactKeys(body, []);
-                }
-                return Response.json(await this.options.buyer.recover(caller, match[1]), { headers });
-            }
-            return Response.json({ error: 'not_found' }, { status: 404, headers });
-        }
-        catch (error) {
-            const code = error instanceof CommerceError ? error.code : 'request_failed';
-            const status = code === 'purchase_not_found' ? 404 : code === 'request_too_large' ? 413 : ['purchase_conflict', 'quote_expired', 'approval_mismatch', 'budget_exceeded', 'payments_disabled'].includes(code) ? 409 : 400;
-            return Response.json({ error: code }, { status, headers });
-        }
-    }
-}
-export function listenBuyerManagement(management, origin = management.origin, host = '127.0.0.1', port = 4021) {
-    if (new URL(origin).origin !== management.origin || (!loopback(host) && new URL(origin).protocol !== 'https:'))
-        throw new CommerceError('management_bind', 'Remote management requires an explicit HTTPS reverse proxy origin');
-    const server = createServer(async (req, res) => {
-        try {
-            if (req.headers.host !== new URL(origin).host) {
-                res.writeHead(421, headers);
-                res.end('{"error":"invalid_host"}');
-                return;
-            }
-            const incoming = new Headers();
-            for (const [key, value] of Object.entries(req.headers))
-                if (value !== undefined)
-                    incoming.set(key, Array.isArray(value) ? value.join(',') : value);
-            const request = new Request(new URL(req.url ?? '/', origin), { method: req.method, headers: incoming, ...(req.method !== 'GET' && req.method !== 'HEAD' ? { body: Readable.toWeb(req), duplex: 'half' } : {}) });
-            const response = await management.handle(request);
-            res.writeHead(response.status, Object.fromEntries(response.headers));
-            if (response.body)
-                Readable.fromWeb(response.body).pipe(res);
-            else
-                res.end();
-        }
-        catch {
-            if (!res.headersSent)
-                res.writeHead(500, headers);
-            res.end('{"error":"request_failed"}');
-        }
-    });
-    server.requestTimeout = 30000;
-    server.headersTimeout = 15000;
-    server.listen(port, host);
-    return server;
-}

package/dist/commerce/mpp-client.d.ts

@@ -1,59 +0,0 @@
-import { Challenge, Receipt } from 'mppx';
-import { charge } from 'mppx/stripe/client';
-import type { BuyerQuote } from './buyer-store.js';
-export type MppReceipt = Receipt.Receipt & {
-    amount: string;
-    currency: 'usd';
-    merchant: string;
-    accountId?: string;
-    livemode: boolean;
-};
-export interface MppTokenOperation {
-    operationId: string;
-    idempotencyKey: string;
-    purchaseId: string;
-    quote: BuyerQuote;
-    mode: 'test' | 'live';
-    amount: string;
-    currency: string;
-    networkId: string;
-    expiresAt: number;
-    paymentMethod: string;
-    metadata?: Record<string, string>;
-    challenge: Challenge.Challenge;
-}
-export interface MppVerificationContext {
-    purchaseId: string;
-    quote: BuyerQuote;
-    mode: 'test' | 'live';
-    operationId: string;
-}
-export interface MppBuyerOptions {
-    /** Stable private buyer/PSP identity; never inferred from seller metadata. */
-    payer: string;
-    mode: 'test' | 'live';
-    paymentMethod: string;
-    createToken: (operation: MppTokenOperation) => Promise<string>;
-    /** Read the original operation only; never create another SPT on absence. */
-    recoverToken?: (operation: MppTokenOperation) => Promise<string | undefined>;
-    /** Independently read provider state and match account/mode/merchant/amount/order. */
-    verifyReceipt: (receipt: MppReceipt, context: MppVerificationContext) => Promise<boolean>;
-}
-export interface SavedMppAuthorization {
-    protocol: 'mpp';
-    credential: string;
-    challenge: Challenge.Challenge;
-    fingerprint: string;
-    operationId: string;
-}
-export interface SavedMppToken {
-    protocol: 'mpp-token';
-    token: string;
-    fingerprint: string;
-    operationId: string;
-}
-/** Native SDK preparation only; no fetch polyfill or automatic payment retry. */
-export declare function prepareMppCredential(challenge: Challenge.Challenge, paymentMethod: string, createToken: (parameters: charge.OnChallengeParameters) => Promise<string>): Promise<string>;
-export declare function validateMppCredential(value: string, challenge: Challenge.Challenge): void;
-export declare function assertMppDigest(challenge: Challenge.Challenge, body: string): void;
-export declare function publicMppReceipt(value: MppReceipt): MppReceipt;

package/dist/commerce/mpp-client.js

@@ -1,24 +0,0 @@
-import { Challenge, Credential } from 'mppx';
-import { Mppx } from 'mppx/client';
-import { charge } from 'mppx/stripe/client';
-import { createHash } from 'node:crypto';
-import { CommerceError } from './types.js';
-/** Native SDK preparation only; no fetch polyfill or automatic payment retry. */
-export async function prepareMppCredential(challenge, paymentMethod, createToken) {
-    const client = Mppx.create({ polyfill: false, maxPaymentRetries: 0, methods: [charge({ paymentMethod, createToken })] });
-    const payment = await client.preparePayment(new Response(null, { status: 402, headers: { 'WWW-Authenticate': Challenge.serialize(challenge) } }));
-    return payment.createCredential();
-}
-export function validateMppCredential(value, challenge) {
-    const credential = Credential.deserialize(value);
-    const payload = credential.payload;
-    if (Challenge.serialize(credential.challenge) !== Challenge.serialize(challenge) || payload.externalId !== challenge.request.externalId || typeof payload.spt !== 'string' || !/^spt_[A-Za-z0-9_]+$/.test(payload.spt))
-        throw new CommerceError('mpp_credential_binding', 'Native MPP credential differs from the original challenge');
-}
-export function assertMppDigest(challenge, body) {
-    if (challenge.digest && challenge.digest !== `sha-256=:${createHash('sha256').update(body).digest('base64')}:`)
-        throw new CommerceError('mpp_request_digest', 'MPP challenge is bound to different request bytes');
-}
-export function publicMppReceipt(value) {
-    return { method: value.method, status: value.status, reference: value.reference, timestamp: value.timestamp, ...(value.externalId ? { externalId: value.externalId } : {}), amount: value.amount, currency: value.currency, merchant: value.merchant, livemode: value.livemode, ...(value.accountId ? { accountId: value.accountId } : {}) };
-}

package/dist/commerce/mpp-runtime.d.ts

@@ -1,3 +0,0 @@
-/** Opt-in MPP server adapter. Account eligibility is checked at startup. */
-export * from './mpp.js';
-export * from './stripe-provider.js';

package/dist/commerce/mpp-runtime.js

@@ -1,3 +0,0 @@
-/** Opt-in MPP server adapter. Account eligibility is checked at startup. */
-export * from './mpp.js';
-export * from './stripe-provider.js';

package/dist/commerce/mpp.d.ts

@@ -1,53 +0,0 @@
-import { CommerceStore, type OrderRecord } from './store.js';
-import { CredentialVault } from './vault.js';
-import type { GateResult } from './x402.js';
-export interface StripeIntent {
-    id: string;
-    status: string;
-    amount: number;
-    amount_received?: number;
-    currency: string;
-    livemode: boolean;
-    metadata: Record<string, string>;
-    lastResponse?: {
-        headers?: Record<string, string>;
-    };
-}
-export interface StripeProvider {
-    accountId: string;
-    merchantProfile: string;
-    mode: 'test' | 'live';
-    assertReady(): Promise<void>;
-    create(params: Record<string, unknown>, options: {
-        idempotencyKey: string;
-        apiVersion: string;
-    }): Promise<StripeIntent>;
-    retrieve(id: string): Promise<StripeIntent>;
-    findOriginal(orderId: string): Promise<StripeIntent | undefined>;
-}
-export interface MppGateOptions {
-    store: CommerceStore;
-    vault: CredentialVault;
-    origin: string;
-    hmacSecret: string;
-    providers: Readonly<Record<string, StripeProvider>>;
-}
-/** Native MPP Stripe charge; only a verified PSP success may queue a task. */
-export declare class MppGate {
-    private options;
-    constructor(options: MppGateOptions);
-    merchantRecipient(accountRef: string): string | undefined;
-    check(): Promise<void>;
-    private provider;
-    private optionsFor;
-    private runtime;
-    private bound;
-    private verified;
-    private receipt;
-    private headers;
-    recover(orderId: string, caller: string): Promise<{
-        state: string;
-        taskId: string;
-    }>;
-    handle(request: Request, order: OrderRecord): Promise<GateResult>;
-}