@infantmen-labs/harbor-sdk 0.6.0 → 0.7.1

package/README.md

@@ -1,4 +1,4 @@
-# harbor-sdk
+# @infantmen-labs/harbor-sdk
 
 TypeScript SDK for Harbor bonded refunds on Solana: PDA helpers,
 instruction builders, receipt codec, ed25519 verify, account decoders.
@@ -28,8 +28,9 @@ const ok = verifyEd25519(signer, receiptMessageBytes(receipt), signature);
 
 What it covers: `bondPda` / `bindingPda` / `disputePda` / `receiptPda` /
 `treasuryPda` / `claimPda`, instruction builders for all 11 program
-entrypoints, the frozen 185-byte receipt layout, voucher bytes, and
-zero-dependency account decoders. See `examples/bond-watch` for a
+entrypoints, the receipt-v1 layout (249 bytes; `mint` + `programId`
+domain separators appended — all v0 offsets unchanged), voucher bytes,
+and zero-dependency account decoders. See `examples/bond-watch` for a
 complete third-party monitor built on SDK + web3.js only.
 
 ## Buyer patterns (demand-side integration)
@@ -56,3 +57,35 @@ The proven demand-side flow:
 4. **Resolve via any live keeper.** Any keeper watching the program
    resolves matured disputes; verify onchain (dispute account closed,
    claimant +95%). Operate your own for production (see keeper README).
+
+## Live devnet endpoints
+
+All on Solana devnet, live today — the docs site exposes the demo
+merchant at its own /api (see harbor-orch.vercel.app/docs):
+
+| What | Address |
+|---|---|
+| Harbor program | BuRyKLqCsTLcyLVFEjxTjmF4DryCT3LmVDjwqhduvB4H |
+| Channels program | CHNLxYvVA28MJP9PrFuDXccuoGXAx7jBacfLEkahyGsX |
+| tUSDC mint | HDwpthFfTBi4YyGo1zgd7zxyonE5CZsCizpVqURHGD54 |
+| Demo merchant | GQyf8wvGfpaLZvfvbXonpdiEfAGRvRXz2P6PkWxQ4rLJ |
+| Demo bond | 2G19xBTWXTYM8y6rQCs9ucMkQr36RDX1FucMf22jFLuP |
+
+Devnet tUSDC for testing: POST https://harbor-orch.vercel.app/api/faucet
+with {"address":"<wallet>"} — 50 per drip, 100 lifetime per address,
+5/day per IP (the mint is closed, so this spends a funded pot).
+
+## Receipt v1 migration (from 0.4.x)
+
+receiptMessageBytes now requires two extra fields — mint and programId —
+appended after signer (249 bytes total; every v0 offset unchanged).
+Verification of a v0 receipt fails against the deployed v1 program by
+construction, so migrate when you upgrade. Full layout:
+docs/receipt-schema-v1.md in the repo.
+
+## Docs
+
+- Repo: https://github.com/infantmen-labs/harbor
+- Buyer quickstart + live endpoints: docs/buyer-quickstart.md (repo)
+- On-site integration guide: https://harbor-orch.vercel.app/docs
+- Proof bundle (every claim explorer-clickable): docs/proof-bundle.md (repo)

package/dist/src/adjudicate.d.ts

@@ -0,0 +1,11 @@
+import type { Dispute } from "./accounts";
+export type Action = {
+    kind: "resolve-timeout";
+} | {
+    kind: "pending";
+    why: string;
+};
+/** Pure adjudication: every matured dispute resolves as a timeout refund.
+ * There is no delivered path — receipts are merchant-signed liveness
+ * attestations, never evidence against a claim. */
+export declare function decide(d: Dispute, slot: bigint): Action;

package/dist/src/adjudicate.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decide = decide;
+/** Pure adjudication: every matured dispute resolves as a timeout refund.
+ * There is no delivered path — receipts are merchant-signed liveness
+ * attestations, never evidence against a claim. */
+function decide(d, slot) {
+    if (slot > d.deadlineSlot)
+        return { kind: "resolve-timeout" };
+    return { kind: "pending", why: "within challenge window" };
+}

package/dist/src/index.d.ts

@@ -6,6 +6,7 @@ export * from "./tx";
 export * from "./u64";
 export * from "./channels";
 export * from "./buyer";
+export * from "./adjudicate";
 export * from "./ed25519";
 export * from "./verify";
 export * from "./harbor-ix";

package/dist/src/index.js

@@ -22,6 +22,7 @@ __exportStar(require("./tx"), exports);
 __exportStar(require("./u64"), exports);
 __exportStar(require("./channels"), exports);
 __exportStar(require("./buyer"), exports);
+__exportStar(require("./adjudicate"), exports);
 __exportStar(require("./ed25519"), exports);
 __exportStar(require("./verify"), exports);
 __exportStar(require("./harbor-ix"), exports);

package/dist/src/receipt.d.ts

@@ -9,12 +9,16 @@ export interface ReceiptFields {
     nonce: bigint;
     expirySlot: bigint;
     signer: PublicKey;
+    /** v1 domain separators (appended — every v0 offset unchanged). */
+    mint: PublicKey;
+    programId: PublicKey;
 }
 /** Borsh encoding of the onchain ReceiptMessage. Field order is consensus. */
 export declare function receiptMessageBytes(f: ReceiptFields): Buffer;
-export declare const RECEIPT_MESSAGE_LEN = 185;
+export declare const RECEIPT_MESSAGE_LEN = 249;
 /**
- * Byte offset of expirySlot in the 185-byte receipt message
+ * Byte offset of expirySlot in the 249-byte receipt message (unchanged
+ * from v0 — domain separators were appended after signer)
  * (merchant 32 | binding 32 | cumulative 8 | meter 32 | output 32 |
  * status 1 | nonce 8 | expiry 8 | signer 32).
  */

package/dist/src/receipt.js

@@ -13,7 +13,7 @@ function assertLen(b, n, name) {
 function receiptMessageBytes(f) {
     assertLen(f.meterHash, 32, "meterHash");
     assertLen(f.outputHash, 32, "outputHash");
-    const out = Buffer.alloc(185);
+    const out = Buffer.alloc(249);
     let o = 0;
     f.merchant.toBuffer().copy(out, o);
     o += 32;
@@ -33,11 +33,16 @@ function receiptMessageBytes(f) {
     o += 8;
     f.signer.toBuffer().copy(out, o);
     o += 32;
+    f.mint.toBuffer().copy(out, o);
+    o += 32;
+    f.programId.toBuffer().copy(out, o);
+    o += 32;
     return out;
 }
-exports.RECEIPT_MESSAGE_LEN = 185;
+exports.RECEIPT_MESSAGE_LEN = 249;
 /**
- * Byte offset of expirySlot in the 185-byte receipt message
+ * Byte offset of expirySlot in the 249-byte receipt message (unchanged
+ * from v0 — domain separators were appended after signer)
  * (merchant 32 | binding 32 | cumulative 8 | meter 32 | output 32 |
  * status 1 | nonce 8 | expiry 8 | signer 32).
  */

package/dist/test/vectors.test.js

@@ -21,6 +21,8 @@ const P = (n) => new web3_js_1.PublicKey(Buffer.alloc(32, n));
             nonce: 7n,
             expirySlot: 999n,
             signer: P(1),
+            mint: P(5),
+            programId: P(6),
         };
         const got = (0, index_1.receiptMessageBytes)(f);
         strict_1.default.equal(got.length, index_1.RECEIPT_MESSAGE_LEN);
@@ -47,6 +49,9 @@ const P = (n) => new web3_js_1.PublicKey(Buffer.alloc(32, n));
                 return b;
             })(),
             Buffer.alloc(32, 1),
+            // v1 domain separators (appended — v0 prefix above unchanged).
+            Buffer.alloc(32, 5),
+            Buffer.alloc(32, 6),
         ]);
         strict_1.default.ok(got.equals(exp));
     });
@@ -62,6 +67,8 @@ const P = (n) => new web3_js_1.PublicKey(Buffer.alloc(32, n));
             nonce: 1n,
             expirySlot: 100n,
             signer: new web3_js_1.PublicKey(kp.publicKey),
+            mint: P(5),
+            programId: P(6),
         });
         const sig = (0, index_1.signEd25519)(kp.secretKey, msg);
         strict_1.default.ok((0, index_1.verifyEd25519)(new web3_js_1.PublicKey(kp.publicKey), msg, sig));
@@ -483,6 +490,8 @@ const P = (n) => new web3_js_1.PublicKey(Buffer.alloc(32, n));
         nonce: 7n,
         expirySlot: 999n,
         signer: P(1),
+        mint: P(5),
+        programId: P(6),
     };
     (0, node_test_1.it)("reads back the encoded expiry slot", () => {
         const msg = (0, index_1.receiptMessageBytes)(F);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infantmen-labs/harbor-sdk",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "TypeScript SDK for Harbor bonded refunds on Solana: PDA helpers, instruction builders, receipt codec, ed25519 verify, account decoders.",
   "license": "MIT",
   "keywords": [
@@ -11,7 +11,8 @@
     "anchor"
   ],
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ],
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",