@mysten-incubation/suipay 0.2.0-dev.0 → 0.2.0-dev.10

package/dist/index.d.ts

@@ -55,6 +55,17 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'indexer.native_settlement_deferred': {
+        readonly surfaces: readonly ["indexer"];
+        readonly status: null;
+        readonly title: "Native settlement is deferred; holding the checkpoint";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'indexer.config_invalid': {
         readonly surfaces: readonly ["indexer"];
         readonly status: null;
@@ -448,7 +459,7 @@ declare const ERRORS: {
         readonly logOnly: true;
     };
     readonly 'service.config_degraded': {
-        readonly surfaces: readonly ["gateway"];
+        readonly surfaces: readonly ["gateway", "console_server"];
         readonly status: null;
         readonly title: "Service started with degraded configuration";
         readonly paymentState: "not_charged";
@@ -457,6 +468,16 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.readiness': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: null;
+        readonly title: "Readiness gauge updated";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'service.bookkeeping_failed': {
         readonly surfaces: readonly ["gateway"];
         readonly status: null;
@@ -467,6 +488,36 @@ declare const ERRORS: {
         readonly user: null;
         readonly logOnly: true;
     };
+    readonly 'service.boot': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Service started";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.lifecycle': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Background work progressed";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
+    readonly 'service.diagnostic': {
+        readonly surfaces: readonly ["gateway", "seller", "indexer"];
+        readonly status: null;
+        readonly title: "Diagnostic detail";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "none";
+        readonly user: null;
+        readonly logOnly: true;
+    };
     readonly 'limit.concurrency_exceeded': {
         readonly surfaces: readonly ["gateway"];
         readonly status: 429;
@@ -2664,6 +2715,55 @@ declare const ERRORS: {
             readonly message: "That web address doesn't exist. Check the spelling and try again.";
         };
     };
+    readonly 'request.recipient_changed': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address changed while its registry was being checked";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Retry this publish";
+            readonly message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked.";
+        };
+    };
+    readonly 'request.recipient_registry_invalid': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Payment registry does not verify for this deployment";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Registry does not match";
+            readonly message: "The payout address's payment registry does not match this deployment. Fix it, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_missing': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 409;
+        readonly title: "Pay-to address has no payment registry";
+        readonly paymentState: "not_charged";
+        readonly retry: "never";
+        readonly nextAction: "fix_request";
+        readonly user: {
+            readonly title: "Create a payment registry";
+            readonly message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again.";
+        };
+    };
+    readonly 'request.recipient_registry_unreadable': {
+        readonly surfaces: readonly ["gateway"];
+        readonly status: 503;
+        readonly title: "Payment registry could not be read";
+        readonly paymentState: "not_charged";
+        readonly retry: "after_delay";
+        readonly retryAfterSeconds: 5;
+        readonly nextAction: "retry_later";
+        readonly user: {
+            readonly title: "Registry unread";
+            readonly message: "The payment registry could not be read just now. Wait a moment and try again.";
+        };
+    };
     readonly 'request.redirect_refused': {
         readonly surfaces: readonly ["console_server", "sdk"];
         readonly status: 422;

package/dist/index.js

@@ -1004,6 +1004,17 @@ var INDEXER_CODES = {
     user: null,
     logOnly: true
   },
+  "indexer.native_settlement_deferred": {
+    surfaces: ["indexer"],
+    status: null,
+    title: "Native settlement is deferred; holding the checkpoint",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: null,
+    logOnly: true
+  },
   "indexer.config_invalid": {
     surfaces: ["indexer"],
     status: null,
@@ -1618,6 +1629,55 @@ var REQUEST_CODES = {
     nextAction: "fix_request",
     user: { title: "Address not found", message: "That web address doesn't exist. Check the spelling and try again." }
   },
+  "request.recipient_changed": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address changed while its registry was being checked",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Retry this publish",
+      message: "The payout address changed while its payment registry was being checked. Retry so the current address is checked."
+    }
+  },
+  "request.recipient_registry_invalid": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Payment registry does not verify for this deployment",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Registry does not match",
+      message: "The payout address's payment registry does not match this deployment. Fix it, then publish again."
+    }
+  },
+  "request.recipient_registry_missing": {
+    surfaces: ["gateway"],
+    status: 409,
+    title: "Pay-to address has no payment registry",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "fix_request",
+    user: {
+      title: "Create a payment registry",
+      message: "This payout address has no payment registry on this network yet. Create it in the seller console, then publish again."
+    }
+  },
+  "request.recipient_registry_unreadable": {
+    surfaces: ["gateway"],
+    status: 503,
+    title: "Payment registry could not be read",
+    paymentState: "not_charged",
+    retry: "after_delay",
+    retryAfterSeconds: 5,
+    nextAction: "retry_later",
+    user: {
+      title: "Registry unread",
+      message: "The payment registry could not be read just now. Wait a moment and try again."
+    }
+  },
   "request.redirect_refused": {
     surfaces: ["console_server", "sdk"],
     status: 422,
@@ -2073,7 +2133,7 @@ var SERVICE_CODES = {
   },
   // Boot or configuration fell back to a degraded mode instead of failing.
   "service.config_degraded": {
-    surfaces: ["gateway"],
+    surfaces: ["gateway", "console_server"],
     status: null,
     title: "Service started with degraded configuration",
     paymentState: "not_charged",
@@ -2082,6 +2142,19 @@ var SERVICE_CODES = {
     user: null,
     logOnly: true
   },
+  // A readiness gauge moved while the process is still serving. Not a degraded
+  // boot: `service.config_degraded` is reserved for that, and for the sample
+  // that actually fails closed.
+  "service.readiness": {
+    surfaces: ["gateway"],
+    status: null,
+    title: "Readiness gauge updated",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
   // A best-effort write (a trace event, a receipt, a delivery record) failed.
   // The request it belongs to keeps its answer.
   "service.bookkeeping_failed": {
@@ -2093,6 +2166,39 @@ var SERVICE_CODES = {
     nextAction: "none",
     user: null,
     logOnly: true
+  },
+  // What a process started with: network, posture, rails, gas pool. Healthy.
+  "service.boot": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Service started",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // A background worker started, stopped, swept or retried on schedule. Healthy.
+  "service.lifecycle": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Background work progressed",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
+  },
+  // Detail about healthy traffic an operator may want when reading a trace.
+  "service.diagnostic": {
+    surfaces: ["gateway", "seller", "indexer"],
+    status: null,
+    title: "Diagnostic detail",
+    paymentState: "not_charged",
+    retry: "never",
+    nextAction: "none",
+    user: null,
+    logOnly: true
   }
 };
 
@@ -2793,6 +2899,238 @@ function newTraceId(randomBytes2 = cryptoRandomBytes) {
   return /^0+$/.test(hex) ? newTraceId(randomBytes2) : hex;
 }
 
+// ../core/dist/errors/context-allowlist.js
+var CONTEXT_ALLOWLIST = /* @__PURE__ */ new Set([
+  // Settlement and request identifiers.
+  "txDigest",
+  "digest",
+  "challengeId",
+  "paymentId",
+  "paymentHash",
+  "paymentKey",
+  "paymentState",
+  "requestId",
+  "traceId",
+  "clientId",
+  "serviceId",
+  "configId",
+  "seedId",
+  "grantId",
+  "grantObjectId",
+  "sameGrantObjectId",
+  "verifiedGrant",
+  "poolObjectId",
+  "packageId",
+  "activePackageId",
+  "expectedPackageId",
+  "actualPackageId",
+  "mandateId",
+  "session",
+  "coinId",
+  "coinIds",
+  "id",
+  "dedupeKey",
+  "hook",
+  // Addresses (public on chain).
+  "owner",
+  "payTo",
+  "recipient",
+  "delegateAddress",
+  // Codes, kinds and states.
+  "code",
+  "innerCode",
+  "requestedCode",
+  "failureCode",
+  "oauthError",
+  "errorKind",
+  "kind",
+  "mode",
+  "effectiveMode",
+  "state",
+  "outcome",
+  "status",
+  "httpStatus",
+  "reason",
+  "action",
+  "stage",
+  "paid",
+  "delivery",
+  "sellerStatus",
+  "sellerCode",
+  "bindingCode",
+  "errorName",
+  "gasStationStatus",
+  "readFailure",
+  "refusal",
+  "refusedAs",
+  "registryCode",
+  "sessionDecision",
+  "settleCode",
+  "signedRequest",
+  "signerCode",
+  "consentCode",
+  "publicReason",
+  "details",
+  "event",
+  "eventType",
+  "surface",
+  "scope",
+  "field",
+  "header",
+  "dependency",
+  "network",
+  "rails",
+  "shard",
+  "metric",
+  // Gateway readiness gauge. Fixed marks only: 0 or 1, and up, down, skipped, unknown.
+  "ready",
+  "grpc",
+  "enoki",
+  "postgres",
+  "alarm",
+  "alert",
+  "from",
+  "to",
+  "expected",
+  "required",
+  "violated",
+  "diverged",
+  "replaced",
+  "suppressed",
+  "unknown",
+  "verified",
+  "verification",
+  "simulation",
+  "isNew",
+  "needsTopup",
+  "operatorCapSet",
+  "wantAgent",
+  "wantGrant",
+  "wantPool",
+  "limitedBy",
+  "peer",
+  // Counts, amounts and timings.
+  "amount",
+  "scanned",
+  "deleted",
+  "intents",
+  "policies",
+  "connections",
+  "events",
+  "maxQueueSize",
+  "bytes",
+  "sha256",
+  "ts",
+  "count",
+  "countRaw",
+  "matchingCount",
+  "registry_field_count",
+  "applied",
+  "attempt",
+  "attempts",
+  "cap",
+  "max",
+  "maxChallenges",
+  "MAX_GAS_COIN_PAGES",
+  "pagesScanned",
+  "size",
+  "free",
+  "used",
+  "fill",
+  "limits",
+  "refills",
+  "refilled",
+  "split",
+  "unconfirmed",
+  "spent",
+  "reserveAfter",
+  "claimedUntilMs",
+  "repaired",
+  "splits",
+  "spend",
+  "reserve",
+  "reserveBalance",
+  "ownerDailyMist",
+  "ownerHourlyMist",
+  "ownerIdentityDailyMist",
+  "delegateDailyMist",
+  "delegateHourlyMist",
+  "delegateIdentityDailyMist",
+  "consecutiveFailures",
+  "failuresInARow",
+  "epochReadFailures",
+  "daysRemaining",
+  "deadline",
+  "delay",
+  "delayMs",
+  "ageMs",
+  "timeoutMs",
+  "nowMs",
+  "switchedAtMs",
+  "observeUntil",
+  "window",
+  "checkpointSeq",
+  "eventSeq",
+  "sampleSubjects",
+  // Operator-facing error text. Redacted and length-capped like every string.
+  "error",
+  "errors",
+  "err",
+  "lastError",
+  "outcomeError",
+  "detail",
+  "raw",
+  "value"
+]);
+var MAX_CONTEXT_STRING = 512;
+var MAX_CONTEXT_ARRAY = 32;
+var MAX_CONTEXT_DEPTH = 4;
+function filterContext(context) {
+  let dropped = 0;
+  const filterValue = (value2, depth) => {
+    if (typeof value2 === "bigint")
+      return value2.toString();
+    if (value2 === null || typeof value2 !== "object")
+      return value2;
+    if (depth >= MAX_CONTEXT_DEPTH) {
+      dropped += 1;
+      return void 0;
+    }
+    if (Array.isArray(value2)) {
+      return value2.slice(0, MAX_CONTEXT_ARRAY).map((item) => filterValue(item, depth + 1));
+    }
+    if (value2 instanceof Date)
+      return value2.toISOString();
+    return filterObject(value2, depth + 1);
+  };
+  const filterObject = (object, depth) => {
+    const out = {};
+    for (const [key, value2] of Object.entries(object)) {
+      if (!CONTEXT_ALLOWLIST.has(key)) {
+        dropped += 1;
+        continue;
+      }
+      const kept = filterValue(value2, depth);
+      if (kept !== void 0)
+        out[key] = kept;
+    }
+    return out;
+  };
+  const value = filterObject(context, 0);
+  return { value, dropped };
+}
+function capContextStrings(value) {
+  if (typeof value === "string") {
+    return value.length > MAX_CONTEXT_STRING ? `${value.slice(0, MAX_CONTEXT_STRING)}\u2026` : value;
+  }
+  if (Array.isArray(value))
+    return value.map(capContextStrings);
+  if (value !== null && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, capContextStrings(v)]));
+  }
+  return value;
+}
+
 // ../core/dist/errors/log.js
 var MAX_CAUSE_DEPTH = 5;
 function causeChain(error) {
@@ -2843,6 +3181,7 @@ function safeStringify(value) {
 function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
   const wantStack = context.withStack ?? (context.httpStatus !== void 0 && context.httpStatus >= 500);
   const stack = wantStack && error instanceof Error && error.stack ? redactSecrets(error.stack) : void 0;
+  const filtered = context.context ? filterContext(context.context) : void 0;
   return {
     level: context.level ?? "error",
     time: now.toISOString(),
@@ -2854,10 +3193,12 @@ function errorLogLine(context, error, now = /* @__PURE__ */ new Date()) {
     trace_id: context.traceId || newTraceId(),
     cause: error === void 0 ? [] : causeChain(error),
     ...stack ? { stack } : {},
-    ...context.context ? { context: redactValue(context.context) } : {}
+    ...filtered ? { context: capContextStrings(redactValue(filtered.value)) } : {},
+    ...filtered && filtered.dropped > 0 ? { context_dropped: filtered.dropped } : {}
   };
 }
 var stderrWriter = (line) => console.error(line);
+var lineShipper = null;
 function logError(context, error, write = stderrWriter) {
   let line;
   let traceId = "";
@@ -2878,6 +3219,12 @@ function logError(context, error, write = stderrWriter) {
     write(line);
   } catch {
   }
+  if (write === stderrWriter && lineShipper) {
+    try {
+      lineShipper.enqueue(line, context.level ?? "error");
+    } catch {
+    }
+  }
 }
 
 // ../core/dist/errors/suipay-error.js
@@ -3340,6 +3687,14 @@ var SERVICE_STATE_TRANSITIONS = Object.freeze([
     to: "payout_change",
     actors: ["system"],
     requires: ["reason_code"]
+  },
+  {
+    id: "T25",
+    dimension: "suspension",
+    from: ["binding_changed"],
+    to: "none",
+    actors: ["system"],
+    requires: ["reason_code"]
   }
 ]);
 
@@ -3739,6 +4094,70 @@ function createSpendAccountChain(options) {
       });
       return kindBytes(tx);
     },
+    async buildCreatePolicyAndGrantKind(input) {
+      if (!input.policy.targets?.length) {
+        throw new Error("create_spend_policy requires at least one target");
+      }
+      if (!input.policy.totalCap || BigInt(input.policy.totalCap) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero total_cap");
+      }
+      if (!input.policy.maxPerPayment || BigInt(input.policy.maxPerPayment) <= 0n) {
+        throw new Error("create_spend_policy requires a non-zero max_per_payment");
+      }
+      if (!input.grant.sessionCap || BigInt(input.grant.sessionCap) <= 0n) {
+        throw new Error("create_grant requires a non-zero session_cap");
+      }
+      if (!input.grant.maxPerPayment || BigInt(input.grant.maxPerPayment) <= 0n) {
+        throw new Error("create_grant requires a non-zero max_per_payment");
+      }
+      const tx = new Transaction2();
+      tx.setSender(input.owner);
+      const targetResults = input.policy.targets.map((t) => {
+        const hash = targetHashBytes(t.targetHash);
+        return tx.moveCall({
+          target: target("new_policy_target"),
+          arguments: [
+            tx.pure.vector("u8", Array.from(hash)),
+            tx.pure.address(t.recipient),
+            tx.pure.u64(BigInt(t.maxPerPayment))
+          ]
+        });
+      });
+      const targetsVec = tx.makeMoveVec({
+        type: `${packageId}::${MODULE}::PolicyTarget`,
+        elements: targetResults
+      });
+      const policyExpires = input.policy.expiresAtMs === void 0 || input.policy.expiresAtMs === null ? 0n : BigInt(input.policy.expiresAtMs);
+      const policyIdResult = tx.moveCall({
+        target: target("create_spend_policy"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          targetsVec,
+          tx.pure.u64(BigInt(input.policy.totalCap)),
+          tx.pure.u64(BigInt(input.policy.maxPerPayment)),
+          tx.pure.u64(policyExpires)
+        ]
+      });
+      const policyIdsVec = tx.makeMoveVec({
+        type: "u64",
+        elements: [policyIdResult]
+      });
+      const grantExpires = input.grant.expiresAtMs === void 0 || input.grant.expiresAtMs === null ? 0n : BigInt(input.grant.expiresAtMs);
+      tx.moveCall({
+        target: target("create_policy_grant"),
+        typeArguments: [input.coinType],
+        arguments: [
+          tx.object(input.poolObjectId),
+          tx.pure.address(input.delegate),
+          tx.pure.option("u64", BigInt(input.grant.sessionCap)),
+          tx.pure.option("u64", BigInt(input.grant.maxPerPayment)),
+          tx.pure.u64(grantExpires),
+          policyIdsVec
+        ]
+      });
+      return kindBytes(tx);
+    },
     async buildPausePolicyKind(input) {
       const tx = new Transaction2();
       tx.setSender(input.owner);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mysten-incubation/suipay",
-  "version": "0.2.0-dev.0",
+  "version": "0.2.0-dev.10",
   "private": false,
   "type": "module",
   "description": "SuiPay embeddable client — quote and pay a 402 from a spend-account grant.",
@@ -37,8 +37,8 @@
     "tsup": "^8.0.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "@cmdoss/suipay-core": "0.1.0",
-    "@cmdoss/suipay-sdk": "0.1.0"
+    "@cmdoss/suipay-sdk": "0.1.0",
+    "@cmdoss/suipay-core": "0.1.0"
   },
   "scripts": {
     "build": "tsup",