@obbyx/sdk 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alexander Ponomarev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,90 @@
-# Temporary Holding Version
+# @obbyx/sdk
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Accept and make [x402](https://x402.org) payments on [Obyte](https://obyte.org).
+
+```sh
+npm i @obbyx/sdk @x402/core obyte
+npm i express            # for ObytePaywall
+```
+
+## Sell: `ObytePaywall` (Express)
+
+```ts
+import express from 'express';
+import { HTTPFacilitatorClient } from '@x402/core/http';
+import { createLogger } from '@obbyx/obyte/logger';
+import { ConsumedProofsStore, ObytePaywall } from '@obbyx/sdk';
+
+const paywall = new ObytePaywall({
+  facilitator: new HTTPFacilitatorClient({ url: 'https://your-facilitator.example' }),
+  network: 'obyte:testnet',
+  payTo: 'YOUR_OBYTE_ADDRESS',
+  sellerId: 'my-api',
+  secret: process.env.SELLER_SECRET!, // ≥ 32 chars, HMAC key of request bindings
+  store: new ConsumedProofsStore('./data/proofs.db'),
+  logger: createLogger(),
+});
+
+const app = express();
+app.use(express.json());
+app.post(
+  '/api/answer',
+  paywall.paid({ price: { amount: '20000' } }, async () => ({ body: { answer: 42 } })),
+);
+```
+
+One payment pays one operation (binding over method, URL, body and price); the
+handler runs once; a repeated request with the same payment gets the stored
+response. Optional: payment channels (`batch`), `payment-identifier`,
+`authorization` flow.
+
+## Sell with the official `@x402/express`: `ObyteExactServer`
+
+```ts
+import { paymentMiddleware, x402ResourceServer } from '@x402/express';
+import { ConsumedProofsStore, ObyteExactServer } from '@obbyx/sdk';
+
+const server = new x402ResourceServer(new HTTPFacilitatorClient({ url })).register(
+  'obyte:testnet',
+  new ObyteExactServer({
+    sellerId: 'api',
+    secret: SELLER_SECRET,
+    proofs: new ConsumedProofsStore('proofs.db'),
+    logger,
+  }),
+);
+app.use(
+  paymentMiddleware(
+    {
+      'GET /x': {
+        accepts: { scheme: 'exact', network: 'obyte:testnet', payTo, price: '20000 bytes' },
+      },
+    },
+    server,
+  ),
+);
+```
+
+## Buy: `payingFetch` with budgets
+
+```ts
+import { SpendingBudget, payingFetch } from '@obbyx/sdk';
+
+const { response, payment } = await payingFetch(
+  url,
+  { method: 'GET' },
+  {
+    mechanisms: { exact /*, batch */ }, // from @obbyx/x402-obyte
+    network: 'obyte:testnet',
+    maxAmount: new Map([['base', 50_000n]]), // per call
+    budget: new SpendingBudget({ total: new Map([['base', 1_000_000n]]) }),
+    logger,
+  },
+);
+```
+
+Never pays twice: a pending payment is retried with the same payment; unknown
+outcomes stay counted against the budget; a channel is used when one is open,
+otherwise `exact`.
+
+Docs: [github.com/Taump/obbyx](https://github.com/Taump/obbyx). Node.js ≥ 24. MIT.

package/dist/client/budget.d.ts

@@ -0,0 +1,43 @@
+import { ObbyxError } from '@obbyx/obyte';
+/**
+ * Spending limits for a paying client (agents, services).
+ *
+ * - `perCall`: the most one request may cost, per asset.
+ * - `total`: the most all requests may cost together, per asset.
+ *
+ * Amounts are RESERVED before a payment is signed (atomically: the event loop
+ * runs reserve() to completion), so concurrent calls can never overshoot the
+ * total. A reservation is then:
+ * - `spent` when the seller confirmed the payment,
+ * - `released` when the payment was definitely not made,
+ * - left in place when the outcome is unknown (invariant I7): the budget never
+ *   under-counts a payment that may still settle.
+ */
+export interface BudgetLimits {
+    readonly perCall?: ReadonlyMap<string, bigint>;
+    readonly total?: ReadonlyMap<string, bigint>;
+}
+export interface BudgetReservation {
+    readonly id: number;
+    readonly asset: string;
+    readonly amount: bigint;
+}
+export declare class BudgetExceededError extends ObbyxError {
+    constructor(message: string, details: Record<string, unknown>);
+}
+export declare class SpendingBudget {
+    private readonly limits;
+    private readonly spent;
+    private readonly reserved;
+    private nextId;
+    constructor(limits: BudgetLimits);
+    reserve(asset: string, amount: bigint): BudgetReservation;
+    /** The payment settled: the amount is spent. */
+    spend(r: BudgetReservation): void;
+    /** The payment was definitely not made: give the amount back. */
+    release(r: BudgetReservation): void;
+    /** Spent + reserved (unknown outcomes included) for an asset. */
+    used(asset: string): bigint;
+    remaining(asset: string): bigint | undefined;
+}
+//# sourceMappingURL=budget.d.ts.map

package/dist/client/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/client/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,mBAAoB,SAAQ,UAAU;gBACrC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAG9D;AAED,qBAAa,cAAc;IAKb,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,MAAM,CAAK;gBAEU,MAAM,EAAE,YAAY;IAEjD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB;IAyBzD,gDAAgD;IAChD,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI;IAKjC,iEAAiE;IACjE,OAAO,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI;IAInC,iEAAiE;IACjE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAM3B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAI7C"}

package/dist/client/budget.js

@@ -0,0 +1,56 @@
+import { ObbyxError } from '@obbyx/obyte';
+export class BudgetExceededError extends ObbyxError {
+    constructor(message, details) {
+        super('budget_exceeded', message, { details });
+    }
+}
+export class SpendingBudget {
+    limits;
+    spent = new Map();
+    reserved = new Map();
+    nextId = 1;
+    constructor(limits) {
+        this.limits = limits;
+    }
+    reserve(asset, amount) {
+        const perCall = this.limits.perCall?.get(asset);
+        if (perCall !== undefined && amount > perCall) {
+            throw new BudgetExceededError(`Price ${amount} exceeds the per-call limit ${perCall} (${asset})`, {
+                asset,
+                amount: amount.toString(),
+                perCall: perCall.toString(),
+            });
+        }
+        const total = this.limits.total?.get(asset);
+        const committed = this.used(asset);
+        if (total !== undefined && committed + amount > total) {
+            throw new BudgetExceededError(`Paying ${amount} would exceed the total budget ${total} (${asset}); already used or reserved: ${committed}`, { asset, amount: amount.toString(), total: total.toString(), used: committed.toString() });
+        }
+        const reservation = { id: this.nextId++, asset, amount };
+        this.reserved.set(reservation.id, reservation);
+        return reservation;
+    }
+    /** The payment settled: the amount is spent. */
+    spend(r) {
+        if (!this.reserved.delete(r.id))
+            return;
+        this.spent.set(r.asset, (this.spent.get(r.asset) ?? 0n) + r.amount);
+    }
+    /** The payment was definitely not made: give the amount back. */
+    release(r) {
+        this.reserved.delete(r.id);
+    }
+    /** Spent + reserved (unknown outcomes included) for an asset. */
+    used(asset) {
+        let sum = this.spent.get(asset) ?? 0n;
+        for (const r of this.reserved.values())
+            if (r.asset === asset)
+                sum += r.amount;
+        return sum;
+    }
+    remaining(asset) {
+        const total = this.limits.total?.get(asset);
+        return total === undefined ? undefined : total - this.used(asset);
+    }
+}
+//# sourceMappingURL=budget.js.map

package/dist/client/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/client/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA2B1C,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACjD,YAAY,OAAe,EAAE,OAAgC;QAC3D,KAAK,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAKI;IAJZ,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,GAAG,CAAC,CAAC;IAEnB,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD,OAAO,CAAC,KAAa,EAAE,MAAc;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,mBAAmB,CAC3B,SAAS,MAAM,+BAA+B,OAAO,KAAK,KAAK,GAAG,EAClE;gBACE,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;aAC5B,CACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAC3B,UAAU,MAAM,kCAAkC,KAAK,KAAK,KAAK,gCAAgC,SAAS,EAAE,EAC5G,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,CAAoB;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,iEAAiE;IACjE,OAAO,CAAC,CAAoB;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC,KAAa;QAChB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;gBAAE,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;QAC/E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/client/paying-fetch.d.ts

@@ -0,0 +1,46 @@
+import type { SettleResponse } from '@x402/core/types';
+import { ObbyxError } from '@obbyx/obyte';
+import { type Logger } from '@obbyx/obyte/logger';
+import type { SpendingBudget } from './budget.js';
+import { type BatchObyteClient, type ExactObyteClient } from '@obbyx/x402-obyte';
+/**
+ * fetch() that pays x402 `exact` Obyte payments (buyer side).
+ *
+ * - Pays only offers within `maxAmount` (atomic units per asset).
+ * - Redirects are not followed automatically: a payment is never re-sent to
+ *   another origin.
+ * - `settlement_pending` is retried with the SAME payment (never a new one)
+ *   until `pendingTimeoutMs`; if still unknown, it throws `PaymentPendingError`
+ *   carrying the payment header so the caller can retry later (I7).
+ */
+export interface PayingFetchOptions {
+    /** Payment mechanisms; a channel (batch) is preferred when one exists to the seller. */
+    readonly mechanisms: {
+        readonly exact?: ExactObyteClient;
+        readonly batch?: BatchObyteClient;
+    };
+    readonly network: string;
+    readonly maxAmount: ReadonlyMap<string, bigint>;
+    readonly logger: Logger;
+    readonly pendingTimeoutMs?: number;
+    /** Shared spending budget (per-call and total limits, reserved atomically). */
+    readonly budget?: SpendingBudget;
+    readonly fetch?: typeof fetch;
+}
+export interface PaidResponse {
+    readonly response: Response;
+    readonly payment?: SettleResponse;
+    /** Base64 PAYMENT-SIGNATURE that was sent, for retries of the same operation. */
+    readonly paymentHeader?: string;
+}
+export declare class PaymentPendingError extends ObbyxError {
+    readonly paymentHeader: string;
+    readonly transaction: string;
+    constructor(paymentHeader: string, transaction: string);
+}
+export declare function payingFetch(url: string, init: RequestInit & {
+    paymentHeader?: string;
+    /** x402 payment-identifier for this operation (reuse it when retrying after a lost response). */
+    paymentId?: string;
+}, options: PayingFetchOptions): Promise<PaidResponse>;
+//# sourceMappingURL=paying-fetch.d.ts.map

package/dist/client/paying-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paying-fetch.d.ts","sourceRoot":"","sources":["../../src/client/paying-fetch.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAuC,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAqB,cAAc,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAEL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC9F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,qBAAa,mBAAoB,SAAQ,UAAU;IAE/C,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM;gBADnB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM;CAO/B;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAAG;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAsGvB"}

package/dist/client/paying-fetch.js

@@ -0,0 +1,186 @@
+import { z } from 'zod';
+import { decodePaymentRequiredHeader, decodePaymentResponseHeader, decodePaymentSignatureHeader, encodePaymentSignatureHeader, } from '@x402/core/http';
+import { ObbyxError } from '@obbyx/obyte';
+import { moduleLogger } from '@obbyx/obyte/logger';
+import { BATCH_SCHEME, EXACT_SCHEME, } from '@obbyx/x402-obyte';
+export class PaymentPendingError extends ObbyxError {
+    paymentHeader;
+    transaction;
+    constructor(paymentHeader, transaction) {
+        super('settlement_pending', `Payment ${transaction} is not final yet; retry the same request later with the same payment`);
+        this.paymentHeader = paymentHeader;
+        this.transaction = transaction;
+    }
+}
+export async function payingFetch(url, init, options) {
+    const log = moduleLogger(options.logger, 'sdk.fetch');
+    const doFetch = options.fetch ?? fetch;
+    const request = (header) => doFetch(url, {
+        ...init,
+        redirect: 'manual',
+        headers: { ...headersOf(init.headers), ...(header ? { 'PAYMENT-SIGNATURE': header } : {}) },
+    });
+    let header = init.paymentHeader;
+    let reservation;
+    let response = await request(header);
+    if (response.status !== 402 && header === undefined)
+        return { response };
+    if (header === undefined) {
+        const required = response.headers.get('PAYMENT-REQUIRED');
+        if (required === null)
+            throw new ObbyxError('invalid_402', '402 without PAYMENT-REQUIRED header');
+        const offer = decodePaymentRequiredHeader(required);
+        // Offers in preference order (channel first). A channel that turns out to
+        // be unusable before anything is signed (not funded, closing, exhausted,
+        // busy) falls through to the next offer, normally `exact`.
+        let accepted;
+        let result;
+        let lastChannelError;
+        for (const candidate of chooseOffers(offer.accepts, options)) {
+            const mechanism = candidate.scheme === BATCH_SCHEME ? options.mechanisms.batch : options.mechanisms.exact;
+            if (mechanism === undefined)
+                continue;
+            log.info({
+                url,
+                scheme: candidate.scheme,
+                payTo: candidate.payTo,
+                asset: candidate.asset,
+                amount: candidate.amount,
+            }, 'paying for request');
+            // Reserve the price BEFORE signing: concurrent calls cannot overshoot the budget.
+            reservation = options.budget?.reserve(candidate.asset, BigInt(candidate.amount));
+            try {
+                result = await mechanism.createPaymentPayload(2, candidate);
+                accepted = candidate;
+                break;
+            }
+            catch (err) {
+                if (reservation)
+                    options.budget?.release(reservation); // nothing was signed or sent
+                reservation = undefined;
+                if (err instanceof ObbyxError && CHANNEL_UNUSABLE.has(err.code)) {
+                    lastChannelError = err;
+                    log.info({ reason: err.code, detail: err.message }, 'channel unusable; trying the next offer');
+                    continue;
+                }
+                throw err;
+            }
+        }
+        if (accepted === undefined || result === undefined) {
+            // Nothing else to pay with: report why the channel could not (e.g. payment_pending).
+            throw lastChannelError ?? new ObbyxError('no_acceptable_offer', 'No offer could be paid');
+        }
+        const payload = {
+            x402Version: 2,
+            resource: offer.resource,
+            accepted,
+            payload: result.payload,
+            ...(offer.extensions ? { extensions: withPaymentId(offer.extensions, init.paymentId) } : {}),
+        };
+        header = encodePaymentSignatureHeader(payload);
+        response = await request(header);
+    }
+    const deadline = Date.now() + (options.pendingTimeoutMs ?? 120_000);
+    for (;;) {
+        const settle = readSettle(response);
+        if (response.status !== 402 || settle?.errorReason !== 'settlement_pending') {
+            const accepted = acceptedOf(header);
+            if (accepted?.scheme === BATCH_SCHEME)
+                options.mechanisms.batch?.onSettled(accepted, settle);
+            if (reservation !== undefined && options.budget !== undefined) {
+                // I7: spend on success; release ONLY on a definite refusal (402: the
+                // payment was not used). Anything else (5xx, 409, no settlement info)
+                // is an unknown outcome: the reservation stays counted.
+                if (settle?.success === true || (response.ok && settle === undefined))
+                    options.budget.spend(reservation);
+                else if (response.status === 402)
+                    options.budget.release(reservation);
+            }
+            return { response, ...(settle ? { payment: settle } : {}), paymentHeader: header };
+        }
+        if (Date.now() > deadline)
+            throw new PaymentPendingError(header, settle.transaction);
+        const retryAfterMs = Math.min(15, Number(response.headers.get('Retry-After') ?? 5)) * 1000;
+        const wait = Math.max(0, Math.min(retryAfterMs, deadline - Date.now()));
+        log.info({ transaction: settle.transaction, waitMs: wait }, 'settlement pending; retrying with the same payment');
+        await response.body?.cancel();
+        await new Promise((r) => setTimeout(r, wait));
+        response = await request(header);
+    }
+}
+/** An offer from an untrusted seller: integer amount in smallest units, strings elsewhere. */
+const offerShape = z
+    .object({
+    scheme: z.string(),
+    network: z.string(),
+    asset: z.string(),
+    amount: z.string().regex(/^\d{1,30}$/),
+    payTo: z.string(),
+    maxTimeoutSeconds: z.number().int().positive(),
+    extra: z.record(z.string(), z.unknown()),
+})
+    .loose();
+/** Channel states in which the client signs nothing and can pay another way. */
+const CHANNEL_UNUSABLE = new Set([
+    'channel_not_funded',
+    'channel_closing',
+    'channel_exhausted',
+    'payment_pending',
+]);
+/** Usable offers within the spending limit, a channel first (instant, no per-call fee). */
+function chooseOffers(accepts, options) {
+    const usable = (a) => offerShape.safeParse(a).success &&
+        a.network === options.network &&
+        ((a.scheme === BATCH_SCHEME && options.mechanisms.batch?.hasChannel(a) === true) ||
+            (a.scheme === EXACT_SCHEME && options.mechanisms.exact !== undefined));
+    const candidates = [
+        ...accepts.filter((a) => a.scheme === BATCH_SCHEME),
+        ...accepts.filter((a) => a.scheme !== BATCH_SCHEME),
+    ].filter(usable);
+    if (candidates.length === 0) {
+        throw new ObbyxError('no_acceptable_offer', `No usable offer on ${options.network}`);
+    }
+    const affordable = candidates.filter((offer) => {
+        const max = options.maxAmount.get(offer.asset);
+        return max !== undefined && BigInt(offer.amount) <= max;
+    });
+    if (affordable.length === 0) {
+        const prices = candidates.map((c) => `${c.amount} ${c.asset}`).join(', ');
+        throw new ObbyxError('amount_over_limit', `Price (${prices}) exceeds your spending limit`);
+    }
+    return affordable;
+}
+/** Echoes the seller's extensions; fills the payment-identifier id if declared. */
+function withPaymentId(extensions, id) {
+    const declared = extensions['payment-identifier'];
+    if (declared === undefined)
+        return extensions;
+    const paymentId = id ?? `pay_${globalThis.crypto.randomUUID().replaceAll('-', '')}`;
+    return {
+        ...extensions,
+        'payment-identifier': { ...declared, info: { ...declared.info, id: paymentId } },
+    };
+}
+function acceptedOf(header) {
+    try {
+        return decodePaymentSignatureHeader(header).accepted;
+    }
+    catch {
+        return undefined;
+    }
+}
+function readSettle(response) {
+    const header = response.headers.get('PAYMENT-RESPONSE');
+    if (header === null)
+        return undefined;
+    try {
+        return decodePaymentResponseHeader(header);
+    }
+    catch {
+        return undefined;
+    }
+}
+function headersOf(headers) {
+    return Object.fromEntries(new Headers(headers).entries());
+}
+//# sourceMappingURL=paying-fetch.js.map

package/dist/client/paying-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paying-fetch.js","sourceRoot":"","sources":["../../src/client/paying-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EACL,YAAY,EAEZ,YAAY,GAEb,MAAM,mBAAmB,CAAC;AA+B3B,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IAEtC;IACA;IAFX,YACW,aAAqB,EACrB,WAAmB;QAE5B,KAAK,CACH,oBAAoB,EACpB,WAAW,WAAW,uEAAuE,CAC9F,CAAC;QANO,kBAAa,GAAb,aAAa,CAAQ;QACrB,gBAAW,GAAX,WAAW,CAAQ;IAM9B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,IAIC,EACD,OAA2B;IAE3B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,MAAe,EAAE,EAAE,CAClC,OAAO,CAAC,GAAG,EAAE;QACX,GAAG,IAAI;QACP,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC5F,CAAC,CAAC;IAEL,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,WAA0C,CAAC;IAC/C,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAEzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IAAI,QAAQ,KAAK,IAAI;YACnB,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QACpD,0EAA0E;QAC1E,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,QAAyC,CAAC;QAC9C,IAAI,MAAiF,CAAC;QACtF,IAAI,gBAAwC,CAAC;QAC7C,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,SAAS,GACb,SAAS,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1F,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS;YACtC,GAAG,CAAC,IAAI,CACN;gBACE,GAAG;gBACH,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,EACD,oBAAoB,CACrB,CAAC;YACF,kFAAkF;YAClF,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC5D,QAAQ,GAAG,SAAS,CAAC;gBACrB,MAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,WAAW;oBAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B;gBACpF,WAAW,GAAG,SAAS,CAAC;gBACxB,IAAI,GAAG,YAAY,UAAU,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChE,gBAAgB,GAAG,GAAG,CAAC;oBACvB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,EACzC,yCAAyC,CAC1C,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnD,qFAAqF;YACrF,MAAM,gBAAgB,IAAI,IAAI,UAAU,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAmB;YAC9B,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC;QACF,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC/C,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC;IACpE,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,WAAW,KAAK,oBAAoB,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,QAAQ,EAAE,MAAM,KAAK,YAAY;gBAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7F,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9D,qEAAqE;gBACrE,sEAAsE;gBACtE,wDAAwD;gBACxD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,MAAM,KAAK,SAAS,CAAC;oBACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;qBAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;oBAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACrF,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CACN,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,EACjD,oDAAoD,CACrD,CAAC;QACF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACzC,CAAC;KACD,KAAK,EAAE,CAAC;AAEX,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,oBAAoB;IACpB,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,2FAA2F;AAC3F,SAAS,YAAY,CACnB,OAA8B,EAC9B,OAA2B;IAE3B,MAAM,MAAM,GAAG,CAAC,CAAsB,EAAE,EAAE,CACxC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO;QAC/B,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAC7B,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YAC9E,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG;QACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;QACnD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC;KACpD,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,sBAAsB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,UAAU,MAAM,+BAA+B,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CACpB,UAAmC,EACnC,EAAsB;IAEtB,MAAM,QAAQ,GAAG,UAAU,CAAC,oBAAoB,CACA,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,IAAI,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;IACpF,OAAO;QACL,GAAG,UAAU;QACb,oBAAoB,EAAE,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,CAAC;QACH,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B;IAChD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { type BindingInput, bindingsEqual, computeBinding, newQuoteId, sha256Hex, } from './seller/binding.js';
+export { ConsumedProofsStore, type ProofRecord, type ProofState, type StoredResponse, } from './seller/consumed-proofs.js';
+export { ObytePaywall, type ObytePaywallOptions, type PaidHandler, type PaidResult, type PaidRouteOptions, type PaywallScheme, type RoutePrice, } from './seller/paywall.js';
+export { type PaidResponse, PaymentPendingError, type PayingFetchOptions, payingFetch, } from './client/paying-fetch.js';
+export { type BudgetLimits, BudgetExceededError, type BudgetReservation, SpendingBudget, } from './client/budget.js';
+export { ObyteExactServer, type ObyteExactServerOptions } from './seller/x402-server.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,aAAa,EACb,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { bindingsEqual, computeBinding, newQuoteId, sha256Hex, } from './seller/binding.js';
+export { ConsumedProofsStore, } from './seller/consumed-proofs.js';
+export { ObytePaywall, } from './seller/paywall.js';
+export { PaymentPendingError, payingFetch, } from './client/paying-fetch.js';
+export { BudgetExceededError, SpendingBudget, } from './client/budget.js';
+export { ObyteExactServer } from './seller/x402-server.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,aAAa,EACb,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,GAIpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,YAAY,GAOb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,mBAAmB,EAEnB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,mBAAmB,EAEnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAgC,MAAM,yBAAyB,CAAC"}

package/dist/seller/binding.d.ts

@@ -0,0 +1,2 @@
+export { type BindingInput, bindingsEqual, computeBinding, newQuoteId, sha256Hex, } from '@obbyx/x402-obyte';
+//# sourceMappingURL=binding.d.ts.map

package/dist/seller/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/seller/binding.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,YAAY,EACjB,aAAa,EACb,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC"}

package/dist/seller/binding.js

@@ -0,0 +1,3 @@
+// Moved to @obbyx/x402-obyte (shared by the paywall and the @x402 server adapter).
+export { bindingsEqual, computeBinding, newQuoteId, sha256Hex, } from '@obbyx/x402-obyte';
+//# sourceMappingURL=binding.js.map

package/dist/seller/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/seller/binding.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAEL,aAAa,EACb,cAAc,EACd,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC"}

package/dist/seller/consumed-proofs.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Seller-side registry of consumed payment proofs (invariant I3).
+ *
+ * Keyed by `<caip2>:unit:<hash>`, so it holds even when several APIs or
+ * facilitators serve the same payTo. Each proof serves exactly one operation
+ * (its binding); a repeat of that operation gets the stored response.
+ *
+ *   upfront:       settling → paid_not_served → serving → served
+ *                      └────→ failed                 └──→ paid_not_served (handler failed)
+ *   authorization: settling → serving → awaiting_settle → served
+ *                                 │              └──────→ failed (handler already ran)
+ *                                 └──→ settling (handler failed; nothing settled)
+ *
+ *   serving older than the lease (crash) → paid_not_served | settling (reclaimStale)
+ *
+ * Transitions are compare-and-set, so concurrent requests with the same proof
+ * never run the handler twice.
+ */
+export type ProofState = 'settling' | 'paid_not_served' | 'serving' | 'served' | 'failed'
+/** authorization flow: the handler ran, its response waits for the settlement. */
+ | 'awaiting_settle';
+export interface StoredResponse {
+    readonly status: number;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: Uint8Array;
+}
+export interface ProofRecord {
+    readonly key: string;
+    readonly binding: string;
+    readonly state: ProofState;
+    readonly paymentResponse: string | null;
+    readonly response: StoredResponse | null;
+    readonly updatedAt: number;
+}
+export declare class ConsumedProofsStore {
+    private readonly now;
+    private readonly db;
+    constructor(path: string, now?: () => number);
+    /**
+     * x402 `payment-identifier`: remembers which proof served a client-chosen id
+     * for one operation fingerprint. Returns the stored mapping (existing or new).
+     */
+    bindPaymentId(scopeId: string, fingerprint: string, proofKey: string): {
+        fingerprint: string;
+        proofKey: string;
+        created: boolean;
+    };
+    /** Compare-and-set: moves the id only if it still points at `previous` (one winner). */
+    rebindPaymentId(scopeId: string, previous: string, proofKey: string): boolean;
+    close(): void;
+    get(key: string): ProofRecord | undefined;
+    /** Inserts the proof in `settling` unless it exists; returns the stored record. */
+    begin(key: string, binding: string): {
+        created: boolean;
+        record: ProofRecord;
+    };
+    /** Compare-and-set; returns false if the proof is not in `from`. */
+    transition(key: string, from: ProofState, to: ProofState, patch?: {
+        paymentResponse?: string;
+        response?: StoredResponse;
+    }): boolean;
+    /**
+     * Records a SETTLED payment as paid (`settling → paid_not_served`), also when
+     * a concurrent request removed or moved its row meanwhile: the payment did
+     * settle, so it must stay servable once. Atomic; returns the stored state.
+     */
+    markSettled(key: string, binding: string, paymentResponse: string): ProofState;
+    /**
+     * Recovers a proof stuck in `serving` (the process died while the handler
+     * ran): after `leaseSeconds` it goes back to `paid_not_served` (already
+     * settled) or `settling` (authorization flow, not settled yet), so the SAME
+     * payment can complete the operation. Compare-and-set: one winner.
+     */
+    reclaimStale(key: string, leaseSeconds: number): boolean;
+    /** Removes a proof that never reached the network (e.g. rejected at verification). */
+    forget(key: string, state: ProofState): void;
+}
+//# sourceMappingURL=consumed-proofs.d.ts.map

package/dist/seller/consumed-proofs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumed-proofs.d.ts","sourceRoot":"","sources":["../../src/seller/consumed-proofs.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,UAAU,GAClB,UAAU,GACV,iBAAiB,GACjB,SAAS,GACT,QAAQ,GACR,QAAQ;AACV,kFAAkF;GAChF,iBAAiB,CAAC;AAEtB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAaD,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;gBAGhC,IAAI,EAAE,MAAM,EACK,GAAG,GAAE,MAAM,MAA4C;IA2B1E;;;OAGG;IACH,aAAa,CACX,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;IAmB9D,wFAAwF;IACxF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAO7E,KAAK,IAAI,IAAI;IAIb,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAMzC,mFAAmF;IACnF,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE;IAa9E,oEAAoE;IACpE,UAAU,CACR,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,UAAU,EACd,KAAK,GAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,cAAc,CAAA;KAAO,GAClE,OAAO;IAwBV;;;;OAIG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,UAAU;IAuB9E;;;;;OAKG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAYxD,sFAAsF;IACtF,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;CAG7C"}