@metalntwx/metal-pay 0.2.0 → 0.3.1

package/dist/node.js

@@ -0,0 +1,97 @@
+import { DatabaseSync } from "node:sqlite";
+import { mkdir, open, readFile, rename } from "node:fs/promises";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+import { createClearingSigner } from "./clearing-codec.js";
+/** A persistent P-256 account and receipt journal for a single server process. */
+export async function openClearingWallet(directory) {
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    // SQLite holds an OS lock for the wallet lifetime and releases it on crash.
+    const owner = new DatabaseSync(join(directory, "owner.sqlite"));
+    try {
+        owner.exec("PRAGMA locking_mode=EXCLUSIVE; BEGIN EXCLUSIVE; CREATE TABLE IF NOT EXISTS owner (id INTEGER)");
+    }
+    catch (error) {
+        owner.close();
+        throw new Error("clearing wallet is already in use", { cause: error });
+    }
+    try {
+        const keyPath = join(directory, "account.key");
+        let key;
+        try {
+            key = (await readFile(keyPath, "utf8")).trim();
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            for (;;) {
+                key = `0x${randomBytes(32).toString("hex")}`;
+                try {
+                    createClearingSigner(key);
+                    break;
+                }
+                catch {
+                    /* Rejection sample the scalar. */
+                }
+            }
+            const file = await open(keyPath, "wx", 0o600);
+            try {
+                await file.writeFile(key);
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+        }
+        const parent = await open(directory, "r");
+        try {
+            await parent.sync();
+        }
+        finally {
+            await parent.close();
+        }
+        const signer = createClearingSigner(key);
+        const statePath = join(directory, "payments.json");
+        const store = {
+            async load() {
+                try {
+                    return JSON.parse(await readFile(statePath, "utf8"));
+                }
+                catch (error) {
+                    if (error.code === "ENOENT")
+                        return null;
+                    throw error;
+                }
+            },
+            async save(state) {
+                const file = await open(statePath + ".next", "w", 0o600);
+                try {
+                    await file.writeFile(JSON.stringify(state));
+                    await file.sync();
+                }
+                finally {
+                    await file.close();
+                }
+                await rename(statePath + ".next", statePath);
+                const parent = await open(directory, "r");
+                try {
+                    await parent.sync();
+                }
+                finally {
+                    await parent.close();
+                }
+            },
+        };
+        return {
+            signer,
+            store,
+            async close() {
+                owner.close();
+            },
+        };
+    }
+    catch (error) {
+        owner.close();
+        throw error;
+    }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@metalntwx/metal-pay",
-  "version": "0.2.0",
-  "description": "Agent payments on Metal for the official x402 packages: the Metal devnet and testnet as `exact`-scheme networks priced in `*USDZ` for payers and sellers, a one-call payment client with a spending limit, Metal's seller token, the clearing lane for payers who pay per call without a transaction each time, and mandates, which let an agent pay from its owner's account within limits Metal enforces.",
+  "version": "0.3.1",
+  "description": "Agent payments on Metal for the official x402 packages: native Bajillion clearing, on-chain exact payments, durable payer wallets, seller integration, and mandates, which let an agent pay from its owner's account within limits Metal enforces.",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -9,6 +9,9 @@
     "directory": "sdks/metal-pay"
   },
   "type": "module",
+  "engines": {
+    "node": "^22.13.0 || >=23.4.0"
+  },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -16,9 +19,9 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./file-storage": {
-      "types": "./dist/file-storage.d.ts",
-      "default": "./dist/file-storage.js"
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "default": "./dist/node.js"
     },
     "./mandates": {
       "types": "./dist/mandates/index.d.ts",
@@ -26,21 +29,25 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "src"
   ],
   "dependencies": {
-    "@noble/curves": "^1.9.1",
-    "@x402/core": "^2.21.0",
-    "@x402/evm": "^2.21.0",
-    "@x402/fetch": "^2.21.0"
+    "@noble/curves": "1.9.7"
   },
   "peerDependencies": {
+    "@x402/core": ">=2.28.0 <3",
+    "@x402/evm": ">=2.28.0 <3",
+    "@x402/fetch": ">=2.28.0 <3",
     "viem": "^2"
   },
   "devDependencies": {
     "@metalntwx/metal-ts": "0.3.2",
     "@types/node": "^24.13.2",
-    "@x402/hono": "2.21.0",
+    "@x402/core": "2.28.0",
+    "@x402/evm": "2.28.0",
+    "@x402/fetch": "2.28.0",
+    "@x402/hono": "2.28.0",
     "hono": "4.13.7",
     "tsx": "^4.23.0",
     "typescript": "~6.0.2",