@mcpaid/sdk 2.0.0

package/dist/settlement/nonce-store.js

@@ -0,0 +1,125 @@
+/**
+ * ToolPay Nonce Store & Replay Prevention Engine
+ * Manages atomic challenge nonces, expiration TTLs, and prevents replay attacks.
+ */
+import { randomUUID } from 'node:crypto';
+export const DEFAULT_CHALLENGE_TTL_SECONDS = 120; // 2 minutes
+export const MAX_STORED_NONCES = 10_000;
+export class NonceStore {
+    store = new Map();
+    ttlSeconds;
+    opCount = 0;
+    constructor(ttlSeconds = DEFAULT_CHALLENGE_TTL_SECONDS) {
+        this.ttlSeconds = ttlSeconds;
+    }
+    /**
+     * Generates a unique, cryptographically random challenge nonce and stores the challenge data.
+     */
+    createChallenge(challengeDataOmitNonce, customTtlSeconds, nowSec = Math.floor(Date.now() / 1000)) {
+        this.opCount++;
+        // Auto-prune periodically (every 50 creations) or if capacity reached
+        if (this.opCount % 50 === 0 || this.store.size >= MAX_STORED_NONCES) {
+            this.pruneExpired(nowSec);
+            // If still over capacity, evict oldest 100 entries to prevent memory exhaustion
+            if (this.store.size >= MAX_STORED_NONCES) {
+                const iter = this.store.keys();
+                for (let i = 0; i < 100; i++) {
+                    const next = iter.next();
+                    if (next.done)
+                        break;
+                    this.store.delete(next.value);
+                }
+            }
+        }
+        const nonce = randomUUID();
+        const ttl = customTtlSeconds ?? this.ttlSeconds;
+        const expiresAt = nowSec + ttl;
+        const challengeData = {
+            ...challengeDataOmitNonce,
+            challengeNonce: nonce,
+            expiresAt,
+        };
+        this.store.set(nonce, {
+            data: challengeData,
+            status: 'PENDING',
+            createdAt: Date.now(),
+        });
+        return challengeData;
+    }
+    /**
+     * Checks if a challenge nonce is present in memory.
+     */
+    hasChallenge(nonce) {
+        return this.store.has(nonce);
+    }
+    /**
+     * Records or restores an existing challenge into the store (e.g. from KV across isolates).
+     */
+    recordChallenge(challenge) {
+        this.store.set(challenge.challengeNonce, {
+            data: challenge,
+            status: 'PENDING',
+            createdAt: Date.now(),
+        });
+    }
+    /**
+     * Validates that a nonce exists, is pending, and has not expired without consuming it.
+     */
+    peekChallenge(nonce, nowSec = Math.floor(Date.now() / 1000)) {
+        const record = this.store.get(nonce);
+        if (!record) {
+            throw new Error(`Invalid challenge nonce: "${nonce}" not found`);
+        }
+        if (record.status === 'EXPENDED') {
+            throw new Error(`Replay attack detected: challenge nonce "${nonce}" has already been used`);
+        }
+        if (record.status === 'EXPIRED' || nowSec > record.data.expiresAt) {
+            record.status = 'EXPIRED';
+            throw new Error(`Challenge nonce "${nonce}" has expired (expired at ${record.data.expiresAt}, current ${nowSec})`);
+        }
+        return record.data;
+    }
+    /**
+     * Consumes a validated nonce, transitioning it to EXPENDED.
+     */
+    consumeChallenge(nonce) {
+        const record = this.store.get(nonce);
+        if (!record) {
+            throw new Error(`Invalid challenge nonce: "${nonce}" not found`);
+        }
+        if (record.status === 'EXPENDED') {
+            throw new Error(`Replay attack detected: challenge nonce "${nonce}" has already been used`);
+        }
+        record.status = 'EXPENDED';
+        record.expendedAt = Date.now();
+    }
+    /**
+     * Verifies that a nonce exists, is pending, and has not expired.
+     * Atomically marks it as EXPENDED.
+     */
+    verifyAndConsume(nonce, nowSec = Math.floor(Date.now() / 1000)) {
+        const data = this.peekChallenge(nonce, nowSec);
+        this.consumeChallenge(nonce);
+        return data;
+    }
+    /**
+     * Checks the status of a nonce without consuming it.
+     */
+    getChallenge(nonce) {
+        return this.store.get(nonce);
+    }
+    /**
+     * Garbage collects expired nonces.
+     */
+    pruneExpired(nowSec = Math.floor(Date.now() / 1000)) {
+        let pruned = 0;
+        for (const [nonce, record] of this.store.entries()) {
+            if (nowSec > record.data.expiresAt + 300) { // keep 5 mins post-expiration for audit
+                this.store.delete(nonce);
+                pruned += 1;
+            }
+        }
+        return pruned;
+    }
+}
+//# sourceMappingURL=nonce-store.js.map

package/dist/settlement/nonce-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-store.js","sourceRoot":"","sources":["../../src/settlement/nonce-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC,CAAC,YAAY;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,MAAM,OAAO,UAAU;IACb,KAAK,GAAiC,IAAI,GAAG,EAAE,CAAC;IAChD,UAAU,CAAS;IACnB,OAAO,GAAW,CAAC,CAAC;IAE5B,YAAY,aAAqB,6BAA6B;QAC5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,eAAe,CACpB,sBAA+E,EAC/E,gBAAyB,EACzB,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACpE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1B,gFAAgF;YAChF,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,IAAI;wBAAE,MAAM;oBACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,GAAG,GAAG,CAAC;QAE/B,MAAM,aAAa,GAAsB;YACvC,GAAG,sBAAsB;YACzB,cAAc,EAAE,KAAK;YACrB,SAAS;SACV,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE;YACpB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,eAAe,CAAC,SAA4B;QACjD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE;YACvC,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,aAAa,CAAC,KAAa,EAAE,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,aAAa,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,yBAAyB,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,6BAA6B,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,MAAM,GAAG,CAAC,CAAC;QACrH,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,gBAAgB,CAAC,KAAa;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,aAAa,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,yBAAyB,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAC3B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACI,gBAAgB,CAAC,KAAa,EAAE,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,wCAAwC;gBAClF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/settlement/onchain-verifier.d.ts

@@ -0,0 +1,41 @@
+/**
+ * ToolPay On-Chain Settlement Verifier
+ * Verifies direct on-chain crypto transfers (e.g. USDC on Base L2) against 402 challenge parameters.
+ */
+import { X402ChallengeData } from '../types/x402.js';
+export interface OnChainTransactionData {
+    txHash: string;
+    from: string;
+    to: string;
+    amountMicro: bigint;
+    tokenAddress?: string;
+    chainId: number;
+    confirmed: boolean;
+    blockTimestampSec: number;
+}
+export interface OnChainRpcProvider {
+    getTransaction(txHash: string): Promise<OnChainTransactionData | null>;
+}
+export declare class OnChainVerifier {
+    private rpcProvider;
+    private claimedTxHashes;
+    private maxBlockAgeSec;
+    constructor(rpcProvider: OnChainRpcProvider, maxBlockAgeSec?: number, // max 3 minutes old
+    claimedTxHashes?: Set<string>);
+    isTxClaimed(txHash: string): boolean;
+    claimTx(txHash: string): void;
+    /**
+     * Validates an on-chain transaction against a challenge.
+     */
+    verifyTransaction(params: {
+        txHash: string;
+        signerWallet: string;
+        challenge: X402ChallengeData;
+        nowSec?: number;
+    }): Promise<{
+        valid: boolean;
+        error?: string;
+        txData?: OnChainTransactionData;
+    }>;
+}
+//# sourceMappingURL=onchain-verifier.d.ts.map

package/dist/settlement/onchain-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain-verifier.d.ts","sourceRoot":"","sources":["../../src/settlement/onchain-verifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;CACxE;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,eAAe,CAA0B;IACjD,OAAO,CAAC,cAAc,CAAS;gBAG7B,WAAW,EAAE,kBAAkB,EAC/B,cAAc,GAAE,MAAY,EAAE,oBAAoB;IAClD,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IASxB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIpC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIpC;;OAEG;IACU,iBAAiB,CAAC,MAAM,EAAE;QACrC,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,iBAAiB,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CAiGjF"}

package/dist/settlement/onchain-verifier.js

@@ -0,0 +1,114 @@
+/**
+ * ToolPay On-Chain Settlement Verifier
+ * Verifies direct on-chain crypto transfers (e.g. USDC on Base L2) against 402 challenge parameters.
+ */
+export class OnChainVerifier {
+    rpcProvider;
+    claimedTxHashes = new Set();
+    maxBlockAgeSec;
+    constructor(rpcProvider, maxBlockAgeSec = 180, // max 3 minutes old
+    claimedTxHashes) {
+        this.rpcProvider = rpcProvider;
+        this.maxBlockAgeSec = maxBlockAgeSec;
+        if (claimedTxHashes) {
+            this.claimedTxHashes = claimedTxHashes;
+        }
+    }
+    isTxClaimed(txHash) {
+        return this.claimedTxHashes.has(txHash.toLowerCase());
+    }
+    claimTx(txHash) {
+        this.claimedTxHashes.add(txHash.toLowerCase());
+    }
+    /**
+     * Validates an on-chain transaction against a challenge.
+     */
+    async verifyTransaction(params) {
+        const now = params.nowSec || Math.floor(Date.now() / 1000);
+        const txHashNormalized = params.txHash.toLowerCase();
+        // 1. Check double-spend / txHash replay & atomically claim before async fetch
+        if (this.claimedTxHashes.has(txHashNormalized)) {
+            return {
+                valid: false,
+                error: `Transaction ${params.txHash} has already been claimed for another payment`,
+            };
+        }
+        this.claimedTxHashes.add(txHashNormalized);
+        try {
+            // 2. Fetch transaction from RPC
+            const tx = await this.rpcProvider.getTransaction(params.txHash);
+            if (!tx) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return { valid: false, error: `Transaction ${params.txHash} not found on network` };
+            }
+            // 3. Verify confirmation
+            if (!tx.confirmed) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return { valid: false, error: `Transaction ${params.txHash} is still pending confirmation` };
+            }
+            // 4. Verify chain ID
+            if (tx.chainId !== params.challenge.chainId) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Transaction chain ID mismatch (expected ${params.challenge.chainId}, got ${tx.chainId})`,
+                };
+            }
+            // 5. Verify token address if specified in challenge
+            if (params.challenge.tokenAddress && tx.tokenAddress) {
+                if (tx.tokenAddress.toLowerCase() !== params.challenge.tokenAddress.toLowerCase()) {
+                    this.claimedTxHashes.delete(txHashNormalized);
+                    return {
+                        valid: false,
+                        error: `Transaction token mismatch (expected ${params.challenge.tokenAddress}, got ${tx.tokenAddress})`,
+                    };
+                }
+            }
+            // 6. Verify recipient
+            if (tx.to.toLowerCase() !== params.challenge.recipientWallet.toLowerCase()) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Transaction recipient mismatch (expected ${params.challenge.recipientWallet}, got ${tx.to})`,
+                };
+            }
+            // 7. Verify sender
+            if (tx.from.toLowerCase() !== params.signerWallet.toLowerCase()) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Transaction sender mismatch (expected ${params.signerWallet}, got ${tx.from})`,
+                };
+            }
+            // 8. Verify amount
+            if (tx.amountMicro < params.challenge.amountMicro) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Insufficient transaction amount (expected ${params.challenge.amountMicro} micro-units, received ${tx.amountMicro})`,
+                };
+            }
+            // 9. Verify timestamp bounds (not in future beyond clock skew, and not too old)
+            if (tx.blockTimestampSec > now + 300) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Transaction block timestamp is in the future (${tx.blockTimestampSec} > ${now})`,
+                };
+            }
+            if (now - tx.blockTimestampSec > this.maxBlockAgeSec) {
+                this.claimedTxHashes.delete(txHashNormalized);
+                return {
+                    valid: false,
+                    error: `Transaction is too old (${now - tx.blockTimestampSec}s > ${this.maxBlockAgeSec}s allowed)`,
+                };
+            }
+            return { valid: true, txData: tx };
+        }
+        catch (err) {
+            this.claimedTxHashes.delete(txHashNormalized);
+            return { valid: false, error: `RPC provider error during verification: ${err.message}` };
+        }
+    }
+}
+//# sourceMappingURL=onchain-verifier.js.map

package/dist/settlement/onchain-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain-verifier.js","sourceRoot":"","sources":["../../src/settlement/onchain-verifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,MAAM,OAAO,eAAe;IAClB,WAAW,CAAqB;IAChC,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;IACzC,cAAc,CAAS;IAE/B,YACE,WAA+B,EAC/B,iBAAyB,GAAG,EAAE,oBAAoB;IAClD,eAA6B;QAE7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACzC,CAAC;IACH,CAAC;IAEM,WAAW,CAAC,MAAc;QAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IAEM,OAAO,CAAC,MAAc;QAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,iBAAiB,CAAC,MAK9B;QACC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAErD,8EAA8E;QAC9E,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,eAAe,MAAM,CAAC,MAAM,+CAA+C;aACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,MAAM,uBAAuB,EAAE,CAAC;YACtF,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,MAAM,gCAAgC,EAAE,CAAC;YAC/F,CAAC;YAED,qBAAqB;YACrB,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,2CAA2C,MAAM,CAAC,SAAS,CAAC,OAAO,SAAS,EAAE,CAAC,OAAO,GAAG;iBACjG,CAAC;YACJ,CAAC;YAED,oDAAoD;YACpD,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;gBACrD,IAAI,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;oBAClF,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC9C,OAAO;wBACL,KAAK,EAAE,KAAK;wBACZ,KAAK,EAAE,wCAAwC,MAAM,CAAC,SAAS,CAAC,YAAY,SAAS,EAAE,CAAC,YAAY,GAAG;qBACxG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,IAAI,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,4CAA4C,MAAM,CAAC,SAAS,CAAC,eAAe,SAAS,EAAE,CAAC,EAAE,GAAG;iBACrG,CAAC;YACJ,CAAC;YAED,mBAAmB;YACnB,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;gBAChE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,yCAAyC,MAAM,CAAC,YAAY,SAAS,EAAE,CAAC,IAAI,GAAG;iBACvF,CAAC;YACJ,CAAC;YAED,mBAAmB;YACnB,IAAI,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAClD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,6CAA6C,MAAM,CAAC,SAAS,CAAC,WAAW,0BAA0B,EAAE,CAAC,WAAW,GAAG;iBAC5H,CAAC;YACJ,CAAC;YAED,gFAAgF;YAChF,IAAI,EAAE,CAAC,iBAAiB,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;gBACrC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,iDAAiD,EAAE,CAAC,iBAAiB,MAAM,GAAG,GAAG;iBACzF,CAAC;YACJ,CAAC;YAED,IAAI,GAAG,GAAG,EAAE,CAAC,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,2BAA2B,GAAG,GAAG,EAAE,CAAC,iBAAiB,OAAO,IAAI,CAAC,cAAc,YAAY;iBACnG,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;CACF"}

package/dist/settlement/payment-orchestrator.d.ts

@@ -0,0 +1,59 @@
+/**
+ * ToolPay Payment Orchestrator
+ * Coordinates challenges, multi-scheme verification, replay defense, and financial ledger settlement.
+ */
+import { NonceStore } from './nonce-store.js';
+import { PermitVerifier } from './permit-verifier.js';
+import { OnChainVerifier } from './onchain-verifier.js';
+import { BaseContractClient } from './base-contract-client.js';
+import { SessionWalletManager } from './session-wallet.js';
+import { FeeCalculator } from '../fee/fee-calculator.js';
+import { FeeLedger } from '../fee/fee-ledger.js';
+import { X402ChallengeData, X402ChallengeHeaders, X402ErrorResponse, PaymentProof } from '../types/x402.js';
+import { ServerPricingConfig, ToolPricingRule } from '../types/pricing.js';
+import { TransactionRecord } from '../types/ledger.js';
+export declare class PaymentOrchestrator {
+    nonceStore: NonceStore;
+    permitVerifier: PermitVerifier;
+    onChainVerifier: OnChainVerifier;
+    baseContractClient?: BaseContractClient;
+    routerContractAddress?: string;
+    sessionWalletManager: SessionWalletManager;
+    feeCalculator: FeeCalculator;
+    feeLedger: FeeLedger;
+    constructor(params: {
+        nonceStore: NonceStore;
+        permitVerifier: PermitVerifier;
+        onChainVerifier: OnChainVerifier;
+        baseContractClient?: BaseContractClient;
+        routerContractAddress?: string;
+        sessionWalletManager: SessionWalletManager;
+        feeCalculator: FeeCalculator;
+        feeLedger: FeeLedger;
+    });
+    getLedger(): FeeLedger;
+    /**
+     * Generates a payment challenge for a paid MCP tool call.
+     * Calculates gross price, platform cut, developer payout, and creates a unique nonce.
+     */
+    generateChallenge(serverConfig: ServerPricingConfig, toolRule: ToolPricingRule, resolvedGrossMicro: bigint): {
+        challengeData: X402ChallengeData;
+        headers: X402ChallengeHeaders;
+        errorResponse: X402ErrorResponse;
+    };
+    /**
+     * Verifies an incoming payment proof and commits the settlement to the ledger.
+     * Validates toolName, serverId, and gross price bindings before settlement.
+     * Uses verify-first, consume-last ordering so transient errors do not burn nonces.
+     */
+    verifyAndSettle(proof: PaymentProof, nowSec?: number, expected?: {
+        serverId?: string;
+        toolName?: string;
+        minAmountMicro?: bigint;
+    }): Promise<{
+        success: boolean;
+        record?: TransactionRecord;
+        error?: string;
+    }>;
+}
+//# sourceMappingURL=payment-orchestrator.d.ts.map

package/dist/settlement/payment-orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-orchestrator.d.ts","sourceRoot":"","sources":["../../src/settlement/payment-orchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAIvD,qBAAa,mBAAmB;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC;gBAEhB,MAAM,EAAE;QAClB,UAAU,EAAE,UAAU,CAAC;QACvB,cAAc,EAAE,cAAc,CAAC;QAC/B,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;QACxC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,aAAa,EAAE,aAAa,CAAC;QAC7B,SAAS,EAAE,SAAS,CAAC;KACtB;IAWM,SAAS,IAAI,SAAS;IAI7B;;;OAGG;IACI,iBAAiB,CACtB,YAAY,EAAE,mBAAmB,EACjC,QAAQ,EAAE,eAAe,EACzB,kBAAkB,EAAE,MAAM,GACzB;QAAE,aAAa,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,oBAAoB,CAAC;QAAC,aAAa,EAAE,iBAAiB,CAAA;KAAE;IAyHxG;;;;OAIG;IACU,eAAe,CAC1B,KAAK,EAAE,YAAY,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA8I7E"}

package/dist/settlement/payment-orchestrator.js

@@ -0,0 +1,282 @@
+/**
+ * ToolPay Payment Orchestrator
+ * Coordinates challenges, multi-scheme verification, replay defense, and financial ledger settlement.
+ */
+import { getChainIdForNetwork } from '../utils/units.js';
+import { randomUUID } from 'node:crypto';
+export class PaymentOrchestrator {
+    nonceStore;
+    permitVerifier;
+    onChainVerifier;
+    baseContractClient;
+    routerContractAddress;
+    sessionWalletManager;
+    feeCalculator;
+    feeLedger;
+    constructor(params) {
+        this.nonceStore = params.nonceStore;
+        this.permitVerifier = params.permitVerifier;
+        this.onChainVerifier = params.onChainVerifier;
+        this.baseContractClient = params.baseContractClient;
+        this.routerContractAddress = params.routerContractAddress;
+        this.sessionWalletManager = params.sessionWalletManager;
+        this.feeCalculator = params.feeCalculator;
+        this.feeLedger = params.feeLedger;
+    }
+    getLedger() {
+        return this.feeLedger;
+    }
+    /**
+     * Generates a payment challenge for a paid MCP tool call.
+     * Calculates gross price, platform cut, developer payout, and creates a unique nonce.
+     */
+    generateChallenge(serverConfig, toolRule, resolvedGrossMicro) {
+        const feeConfig = serverConfig.platformFee;
+        const split = this.feeCalculator.calculateSplit(resolvedGrossMicro, serverConfig.payoutWallet, feeConfig);
+        const chainId = getChainIdForNetwork(serverConfig.network);
+        // If on Base and router address is configured, route payments through the ToolPayRouter contract
+        const recipientWallet = (serverConfig.network === 'base' || serverConfig.network === 'base-sepolia') && this.routerContractAddress
+            ? this.routerContractAddress
+            : serverConfig.payoutWallet;
+        const challengeData = this.nonceStore.createChallenge({
+            serverId: serverConfig.serverId,
+            toolName: toolRule.toolName,
+            priceUsd: split.grossUsd,
+            amountMicro: split.grossMicro,
+            currency: serverConfig.currency,
+            recipientWallet,
+            verifyingContract: (serverConfig.network === 'base' || serverConfig.network === 'base-sepolia') && this.routerContractAddress
+                ? this.routerContractAddress
+                : undefined,
+            developerWallet: serverConfig.payoutWallet,
+            platformTreasuryWallet: split.platformTreasuryWallet,
+            platformFeeBasisPoints: split.platformFeeBasisPoints,
+            platformCutMicro: split.platformFeeMicro,
+            developerCutMicro: split.developerPayoutMicro,
+            network: serverConfig.network,
+            chainId,
+            tokenAddress: (serverConfig.currency === 'USDC' && chainId === 8453)
+                ? '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'
+                : undefined,
+        });
+        const headers = {
+            'X-Payment-Required': 'true',
+            'X-Payment-Amount': challengeData.priceUsd,
+            'X-Payment-Currency': challengeData.currency,
+            'X-Payment-Recipient': challengeData.recipientWallet,
+            'X-Payment-Network': challengeData.network,
+            'X-Payment-Chain-Id': challengeData.chainId.toString(),
+            'X-Payment-Nonce': challengeData.challengeNonce,
+            'X-Payment-Expires': challengeData.expiresAt.toString(),
+            'X-Payment-Platform-Fee-Bps': challengeData.platformFeeBasisPoints.toString(),
+        };
+        const isTestnet = challengeData.network === 'base-sepolia';
+        const fundingHint = isTestnet
+            ? ' Claim free testnet USDC at https://faucet.circle.com (select Base Sepolia).'
+            : ' To fund on Base Mainnet, send native USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913) via Coinbase or https://bridge.base.org.';
+        const errorResponse = {
+            status: 402,
+            headers: headers,
+            body: {
+                error: {
+                    code: 402,
+                    message: `Payment Required: Tool "${toolRule.toolName}" costs ${challengeData.priceUsd} ${challengeData.currency} on Base (${challengeData.network}). ` +
+                        `To authorize payments for this agent, set AGENT_PRIVATE_KEY=0x... in your project .env file (or run the MCP bridge with --key <private-key>).` +
+                        fundingHint +
+                        ` Once configured, your agent will automatically sign zero-friction micro-permits and execute paid tools seamlessly.`,
+                    data: {
+                        serverId: challengeData.serverId,
+                        toolName: challengeData.toolName,
+                        priceUsd: challengeData.priceUsd,
+                        amountMicro: challengeData.amountMicro.toString(),
+                        currency: challengeData.currency,
+                        recipientWallet: challengeData.recipientWallet,
+                        developerWallet: challengeData.developerWallet || challengeData.recipientWallet,
+                        platformTreasuryWallet: challengeData.platformTreasuryWallet,
+                        platformFeeBasisPoints: challengeData.platformFeeBasisPoints,
+                        platformCutMicro: challengeData.platformCutMicro.toString(),
+                        developerCutMicro: challengeData.developerCutMicro.toString(),
+                        network: challengeData.network,
+                        chainId: challengeData.chainId,
+                        tokenAddress: challengeData.tokenAddress,
+                        challengeNonce: challengeData.challengeNonce,
+                        expiresAt: challengeData.expiresAt,
+                        instructions: {
+                            summary: `Tool "${toolRule.toolName}" is monetized and requires ${challengeData.priceUsd} ${challengeData.currency} on Base (${challengeData.network}).`,
+                            steps: [
+                                'Set AGENT_PRIVATE_KEY=0x... in your project .env file (or pass --key <private-key> to the mcpaid bridge).',
+                                isTestnet
+                                    ? 'Fund your agent wallet with free testnet USDC: https://faucet.circle.com (select Base Sepolia).'
+                                    : 'Fund your agent wallet with native USDC on Base (Chain ID 8453): withdraw directly from Coinbase (selecting Base network) or bridge at https://bridge.base.org.',
+                                'Re-run your query; the agent bridge will automatically sign zero-gas EIP-712 permits to authorize and execute the tool.',
+                            ],
+                            network: challengeData.network,
+                            chainId: challengeData.chainId,
+                            currency: challengeData.currency,
+                            cost: `${challengeData.priceUsd} ${challengeData.currency}`,
+                            fundingGuide: {
+                                network: isTestnet ? 'Base Sepolia Testnet (84532)' : 'Base Mainnet (8453)',
+                                usdcTokenAddress: isTestnet
+                                    ? '0x036CbD53842c5426634e7929541eC2318f3dCF7e'
+                                    : '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',
+                                methods: isTestnet
+                                    ? [
+                                        'Claim 10 free testnet USDC at https://faucet.circle.com (select Base Sepolia).',
+                                        'Optional testnet gas from Superchain Faucet: https://console.optimism.io/faucet.',
+                                    ]
+                                    : [
+                                        'Coinbase Direct: Withdraw USDC directly to your agent wallet using the "Base" network (0 gas fee).',
+                                        'Official Base Bridge: Bridge USDC or ETH from Ethereum Mainnet at https://bridge.base.org.',
+                                        'DEX Swap: Swap ETH/tokens to USDC on Aerodrome or Uniswap on Base.',
+                                    ],
+                            },
+                        },
+                    },
+                },
+            },
+        };
+        return { challengeData, headers, errorResponse };
+    }
+    /**
+     * Verifies an incoming payment proof and commits the settlement to the ledger.
+     * Validates toolName, serverId, and gross price bindings before settlement.
+     * Uses verify-first, consume-last ordering so transient errors do not burn nonces.
+     */
+    async verifyAndSettle(proof, nowSec, expected) {
+        let challenge;
+        // 1. Peek nonce from store without consuming it yet (anti-replay check)
+        try {
+            challenge = this.nonceStore.peekChallenge(proof.challengeNonce, nowSec);
+        }
+        catch (err) {
+            return { success: false, error: err.message };
+        }
+        // 1b. Bind payment proof to expected context (Critical 1)
+        if (expected?.serverId && challenge.serverId !== expected.serverId) {
+            return {
+                success: false,
+                error: `Server ID mismatch: challenge issued for server "${challenge.serverId}", but request is for "${expected.serverId}"`,
+            };
+        }
+        if (expected?.toolName && challenge.toolName !== expected.toolName) {
+            return {
+                success: false,
+                error: `Tool name mismatch: challenge issued for tool "${challenge.toolName}", but request is for "${expected.toolName}"`,
+            };
+        }
+        if (expected?.minAmountMicro !== undefined && challenge.amountMicro < expected.minAmountMicro) {
+            return {
+                success: false,
+                error: `Underpayment: challenge amount ${challenge.amountMicro} is less than required tool price ${expected.minAmountMicro}`,
+            };
+        }
+        // 2. Route verification by scheme
+        let settlementRef;
+        if (proof.scheme === 'eip712-permit') {
+            if (!proof.signature || proof.deadline === undefined) {
+                return { success: false, error: 'Missing EIP-712 signature or deadline in payment proof' };
+            }
+            try {
+                const verifyRes = await this.permitVerifier.verifyPermit({
+                    signerWallet: proof.signerWallet,
+                    signature: proof.signature,
+                    challenge,
+                    deadlineSec: proof.deadline,
+                    amountMicro: proof.maxAmountMicro ?? challenge.amountMicro,
+                    nowSec,
+                });
+                if (!verifyRes.valid) {
+                    return { success: false, error: verifyRes.error };
+                }
+                settlementRef = proof.signature;
+            }
+            catch (err) {
+                return { success: false, error: `Permit verification error: ${err.message}` };
+            }
+        }
+        else if (proof.scheme === 'onchain-tx') {
+            if (!proof.txHash) {
+                return { success: false, error: 'Missing txHash in onchain-tx payment proof' };
+            }
+            try {
+                let verifyRes;
+                if (this.baseContractClient &&
+                    this.routerContractAddress &&
+                    challenge.recipientWallet.toLowerCase() === this.routerContractAddress.toLowerCase()) {
+                    const contractRes = await this.baseContractClient.verifyContractPayment({
+                        txHash: proof.txHash,
+                        challenge,
+                        signerWallet: proof.signerWallet,
+                    });
+                    verifyRes = { valid: contractRes.valid, error: contractRes.error };
+                }
+                else {
+                    verifyRes = await this.onChainVerifier.verifyTransaction({
+                        txHash: proof.txHash,
+                        signerWallet: proof.signerWallet,
+                        challenge,
+                        nowSec,
+                    });
+                }
+                if (!verifyRes.valid) {
+                    return { success: false, error: verifyRes.error };
+                }
+                settlementRef = proof.txHash;
+            }
+            catch (err) {
+                return { success: false, error: `On-chain verification error: ${err.message}` };
+            }
+        }
+        else if (proof.scheme === 'session-wallet') {
+            if (!proof.sessionId) {
+                return { success: false, error: 'Missing sessionId in session-wallet payment proof' };
+            }
+            try {
+                const deductRes = this.sessionWalletManager.deductPayment({
+                    sessionId: proof.sessionId,
+                    agentWallet: proof.signerWallet,
+                    amountMicro: challenge.amountMicro,
+                });
+                if (!deductRes.success) {
+                    return { success: false, error: deductRes.error };
+                }
+                settlementRef = proof.sessionId;
+            }
+            catch (err) {
+                return { success: false, error: `Session deduction error: ${err.message}` };
+            }
+        }
+        else {
+            return { success: false, error: `Unsupported payment scheme: ${proof.scheme}` };
+        }
+        // 3. Atomically consume the challenge nonce ONLY after verification succeeds (Critical 5)
+        try {
+            this.nonceStore.consumeChallenge(proof.challengeNonce);
+        }
+        catch (err) {
+            return { success: false, error: err.message };
+        }
+        // 4. Commit transaction to financial ledger with exact platform cut
+        const record = this.feeLedger.recordTransaction({
+            transactionId: `tx_${randomUUID()}`,
+            serverId: challenge.serverId,
+            toolName: challenge.toolName,
+            agentWallet: proof.signerWallet,
+            developerWallet: challenge.developerWallet || challenge.recipientWallet,
+            platformTreasuryWallet: challenge.platformTreasuryWallet,
+            scheme: proof.scheme,
+            grossAmountMicro: challenge.amountMicro,
+            platformFeeMicro: challenge.platformCutMicro,
+            developerPayoutMicro: challenge.developerCutMicro,
+            platformFeeBasisPoints: challenge.platformFeeBasisPoints,
+            settlementRef,
+            idempotencyKey: proof.idempotencyKey,
+            timestamp: (nowSec ? nowSec * 1000 : undefined),
+        });
+        return {
+            success: true,
+            record,
+        };
+    }
+}
+//# sourceMappingURL=payment-orchestrator.js.map