@obbyx/x402-obyte 0.0.0-stage → 0.2.0

package/dist/batch/store.d.ts

@@ -0,0 +1,112 @@
+import type { DatabaseSync } from 'node:sqlite';
+/**
+ * Facilitator-side storage for `batch-settlement` (ADR-0003), sharing the
+ * facilitator's SQLite connection (one process per database file).
+ *
+ * - `batch_channels`: per (network, aa) the committed cumulative amount for the
+ *   current period and at most ONE pending commitment (serialization, MVP).
+ * - `batch_commitments`: the journal. `seq` is global and monotonic; the seller's
+ *   watcher reads it by cursor. An entry is `pending` until the watcher has
+ *   durably stored it (ack), then `committed`.
+ *
+ * Amounts are decimal strings (BigInt in code).
+ */
+export interface ChannelRow {
+    readonly key: string;
+    readonly network: string;
+    readonly aa: string;
+    readonly payTo: string;
+    readonly payer: string;
+    readonly asset: string;
+    readonly period: number;
+    readonly committed: bigint;
+    readonly pendingSeq: number | null;
+}
+export type CommitmentState = 'pending' | 'committed';
+export interface CommitmentRow {
+    readonly seq: number;
+    readonly channelKey: string;
+    readonly network: string;
+    readonly aa: string;
+    readonly payTo: string;
+    readonly period: number;
+    readonly amountSpent: bigint;
+    readonly paymentAmount: bigint;
+    readonly binding: string;
+    readonly packageHash: string;
+    readonly packageJson: string;
+    readonly state: CommitmentState;
+}
+export type AppendResult = {
+    ok: true;
+    commitment: CommitmentRow;
+} | {
+    ok: false;
+    reason: 'channel_busy' | 'cumulative_amount_mismatch' | 'period_mismatch';
+    committed: bigint;
+};
+export interface AppendInput {
+    channelKey: string;
+    network: string;
+    aa: string;
+    payTo: string;
+    payer: string;
+    asset: string;
+    period: number;
+    amountSpent: bigint;
+    paymentAmount: bigint;
+    binding: string;
+    packageHash: string;
+    packageJson: string;
+}
+/** Port for batch-settlement storage (node:sqlite here, Prisma in apps/facilitator). */
+export interface BatchStore {
+    channel(key: string): Promise<ChannelRow | undefined>;
+    commitmentByHash(packageHash: string): Promise<CommitmentRow | undefined>;
+    commitment(seq: number): Promise<CommitmentRow | undefined>;
+    journal(payTo: string, cursor: number, limit?: number): Promise<CommitmentRow[]>;
+    /**
+     * Every still-pending entry of a seller, whatever its seq: on reconnect they
+     * are re-delivered even if the watcher's cursor is past them (stored but the
+     * ack was lost, or stored out of order) — otherwise they would stay pending
+     * forever and block their channels.
+     */
+    pending(payTo: string): Promise<CommitmentRow[]>;
+    /** Atomically: check the channel is free and the cumulative rule, append a pending entry. */
+    appendPending(input: AppendInput): Promise<AppendResult>;
+    /**
+     * pending → committed (idempotent); releases the channel. Only commits a
+     * voucher of `owner` (seller + network): a watcher can never ack — and thus
+     * commit — another seller's voucher. Returns undefined if not owned.
+     */
+    commit(seq: number, owner: {
+        payTo: string;
+        network: string;
+    }): Promise<CommitmentRow | undefined>;
+}
+export declare class SqliteBatchStore implements BatchStore {
+    private readonly db;
+    private readonly now;
+    constructor(db: DatabaseSync, now?: () => number);
+    channel(key: string): Promise<ChannelRow | undefined>;
+    private channelSync;
+    commitmentByHash(packageHash: string): Promise<CommitmentRow | undefined>;
+    commitment(seq: number): Promise<CommitmentRow | undefined>;
+    private commitmentSync;
+    /** Journal for one seller after `cursor` (both pending and committed). */
+    pending(payTo: string): Promise<CommitmentRow[]>;
+    journal(payTo: string, cursor: number, limit?: number): Promise<CommitmentRow[]>;
+    /**
+     * Appends a pending commitment if the channel is free and the cumulative
+     * rule holds against the stored state; all in one IMMEDIATE transaction.
+     * A new period (the channel was closed and reopened) resets `committed`.
+     */
+    appendPending(input: AppendInput): Promise<AppendResult>;
+    /** Watcher acked `seq` (durably stored): pending → committed. Idempotent. */
+    commit(seq: number, owner: {
+        payTo: string;
+        network: string;
+    }): Promise<CommitmentRow | undefined>;
+    private tx;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/batch/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/batch/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,WAAW,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GACvC;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,cAAc,GAAG,4BAA4B,GAAG,iBAAiB,CAAC;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wFAAwF;AACxF,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtD,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC1E,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACjF;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACjD,6FAA6F;IAC7F,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD;;;;OAIG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;CACvC;AA6DD,qBAAa,gBAAiB,YAAW,UAAU;IAE/C,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,EAAE,EAAE,YAAY,EAChB,GAAG,GAAE,MAAM,MAA4C;IAKpE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI3D,OAAO,CAAC,WAAW;IAMb,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAOzE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAIjE,OAAO,CAAC,cAAc;IAMtB,0EAA0E;IACpE,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAShD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOnF;;;;OAIG;IACG,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAmF9D,6EAA6E;IACvE,MAAM,CACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAoBrC,OAAO,CAAC,EAAE;CAWX"}

package/dist/batch/store.js

@@ -0,0 +1,198 @@
+import { ObbyxError } from '@obbyx/obyte';
+const SCHEMA = `
+CREATE TABLE IF NOT EXISTS batch_channels (
+  key TEXT PRIMARY KEY,
+  network TEXT NOT NULL,
+  aa TEXT NOT NULL,
+  pay_to TEXT NOT NULL,
+  payer TEXT NOT NULL,
+  asset TEXT NOT NULL,
+  period INTEGER NOT NULL,
+  committed TEXT NOT NULL,
+  pending_seq INTEGER,
+  updated_at INTEGER NOT NULL
+) STRICT;
+CREATE TABLE IF NOT EXISTS batch_commitments (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  channel_key TEXT NOT NULL,
+  network TEXT NOT NULL,
+  aa TEXT NOT NULL,
+  pay_to TEXT NOT NULL,
+  period INTEGER NOT NULL,
+  amount_spent TEXT NOT NULL,
+  payment_amount TEXT NOT NULL,
+  binding TEXT NOT NULL,
+  package_hash TEXT NOT NULL UNIQUE,
+  package_json TEXT NOT NULL,
+  state TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  committed_at INTEGER
+) STRICT;
+CREATE INDEX IF NOT EXISTS batch_commitments_seller ON batch_commitments(pay_to, seq);
+`;
+export class SqliteBatchStore {
+    db;
+    now;
+    constructor(db, now = () => Math.floor(Date.now() / 1000)) {
+        this.db = db;
+        this.now = now;
+        db.exec(SCHEMA);
+    }
+    async channel(key) {
+        return this.channelSync(key);
+    }
+    channelSync(key) {
+        const row = this.db.prepare('SELECT * FROM batch_channels WHERE key = ?').get(key);
+        return row === undefined ? undefined : toChannel(row);
+    }
+    async commitmentByHash(packageHash) {
+        const row = this.db
+            .prepare('SELECT * FROM batch_commitments WHERE package_hash = ?')
+            .get(packageHash);
+        return row === undefined ? undefined : toCommitment(row);
+    }
+    async commitment(seq) {
+        return this.commitmentSync(seq);
+    }
+    commitmentSync(seq) {
+        const row = this.db.prepare('SELECT * FROM batch_commitments WHERE seq = ?').get(seq);
+        return row === undefined ? undefined : toCommitment(row);
+    }
+    /** Journal for one seller after `cursor` (both pending and committed). */
+    async pending(payTo) {
+        const rows = this.db
+            .prepare("SELECT * FROM batch_commitments WHERE pay_to = ? AND state = 'pending' ORDER BY seq")
+            .all(payTo);
+        return rows.map(toCommitment);
+    }
+    async journal(payTo, cursor, limit = 500) {
+        const rows = this.db
+            .prepare('SELECT * FROM batch_commitments WHERE pay_to = ? AND seq > ? ORDER BY seq LIMIT ?')
+            .all(payTo, cursor, limit);
+        return rows.map(toCommitment);
+    }
+    /**
+     * Appends a pending commitment if the channel is free and the cumulative
+     * rule holds against the stored state; all in one IMMEDIATE transaction.
+     * A new period (the channel was closed and reopened) resets `committed`.
+     */
+    async appendPending(input) {
+        return this.tx(() => {
+            let channel = this.channelSync(input.channelKey);
+            const ts = this.now();
+            if (channel === undefined || channel.period < input.period) {
+                if (channel?.pendingSeq != null) {
+                    return {
+                        ok: false,
+                        reason: 'channel_busy',
+                        committed: channel.committed,
+                    };
+                }
+                this.db
+                    .prepare(`INSERT INTO batch_channels (key, network, aa, pay_to, payer, asset, period, committed, pending_seq, updated_at)
+             VALUES (?, ?, ?, ?, ?, ?, ?, '0', NULL, ?)
+             ON CONFLICT(key) DO UPDATE SET period = excluded.period, committed = '0', updated_at = excluded.updated_at`)
+                    .run(input.channelKey, input.network, input.aa, input.payTo, input.payer, input.asset, input.period, ts);
+                channel = this.channelSync(input.channelKey);
+            }
+            if (channel === undefined)
+                throw new ObbyxError('store_inconsistent', 'channel row missing');
+            if (channel.period !== input.period) {
+                return {
+                    ok: false,
+                    reason: 'period_mismatch',
+                    committed: channel.committed,
+                };
+            }
+            if (channel.pendingSeq !== null) {
+                return {
+                    ok: false,
+                    reason: 'channel_busy',
+                    committed: channel.committed,
+                };
+            }
+            if (input.amountSpent !== channel.committed + input.paymentAmount) {
+                return {
+                    ok: false,
+                    reason: 'cumulative_amount_mismatch',
+                    committed: channel.committed,
+                };
+            }
+            const res = this.db
+                .prepare(`INSERT INTO batch_commitments
+            (channel_key, network, aa, pay_to, period, amount_spent, payment_amount, binding, package_hash,
+             package_json, state, created_at)
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending', ?)`)
+                .run(input.channelKey, input.network, input.aa, input.payTo, input.period, input.amountSpent.toString(), input.paymentAmount.toString(), input.binding, input.packageHash, input.packageJson, ts);
+            const seq = Number(res.lastInsertRowid);
+            this.db
+                .prepare('UPDATE batch_channels SET pending_seq = ?, updated_at = ? WHERE key = ?')
+                .run(seq, ts, input.channelKey);
+            const commitment = this.commitmentSync(seq);
+            if (commitment === undefined)
+                throw new ObbyxError('store_inconsistent', 'commitment missing');
+            return { ok: true, commitment };
+        });
+    }
+    /** Watcher acked `seq` (durably stored): pending → committed. Idempotent. */
+    async commit(seq, owner) {
+        return this.tx(() => {
+            const c = this.commitmentSync(seq);
+            if (c === undefined || c.payTo !== owner.payTo || c.network !== owner.network)
+                return undefined;
+            if (c.state === 'committed')
+                return c;
+            const ts = this.now();
+            this.db
+                .prepare("UPDATE batch_commitments SET state = 'committed', committed_at = ? WHERE seq = ?")
+                .run(ts, seq);
+            this.db
+                .prepare(`UPDATE batch_channels SET committed = ?, pending_seq = NULL, updated_at = ?
+            WHERE key = ? AND pending_seq = ? AND period = ?`)
+                .run(c.amountSpent.toString(), ts, c.channelKey, seq, c.period);
+            return this.commitmentSync(seq);
+        });
+    }
+    tx(fn) {
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            const result = fn();
+            this.db.exec('COMMIT');
+            return result;
+        }
+        catch (err) {
+            this.db.exec('ROLLBACK');
+            throw err;
+        }
+    }
+}
+function toChannel(r) {
+    return {
+        key: r.key,
+        network: r.network,
+        aa: r.aa,
+        payTo: r.pay_to,
+        payer: r.payer,
+        asset: r.asset,
+        period: r.period,
+        committed: BigInt(r.committed),
+        pendingSeq: r.pending_seq,
+    };
+}
+function toCommitment(r) {
+    return {
+        seq: r.seq,
+        channelKey: r.channel_key,
+        network: r.network,
+        aa: r.aa,
+        payTo: r.pay_to,
+        period: r.period,
+        amountSpent: BigInt(r.amount_spent),
+        paymentAmount: BigInt(r.payment_amount),
+        binding: r.binding,
+        packageHash: r.package_hash,
+        packageJson: r.package_json,
+        state: r.state,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/batch/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/batch/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA4F1C,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Bd,CAAC;AA6BF,MAAM,OAAO,gBAAgB;IAER;IACA;IAFnB,YACmB,EAAgB,EAChB,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QADvD,OAAE,GAAF,EAAE,CAAc;QAChB,QAAG,GAAH,GAAG,CAAoD;QAExE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,GAAG,CACvD,CAAC;QAC3B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,wDAAwD,CAAC;aACjE,GAAG,CAAC,WAAW,CAAgC,CAAC;QACnD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,GAAG,CACvD,CAAC;QAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,qFAAqF,CACtF;aACA,GAAG,CAAC,KAAK,CAAiC,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,KAAK,GAAG,GAAG;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,mFAAmF,CAAC;aAC5F,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAiC,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,KAAkB;QACpC,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE;YAClB,IAAI,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3D,IAAI,OAAO,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC;oBAChC,OAAO;wBACL,EAAE,EAAE,KAAc;wBAClB,MAAM,EAAE,cAAuB;wBAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;;wHAE4G,CAC7G;qBACA,GAAG,CACF,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,EACZ,EAAE,CACH,CAAC;gBACJ,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;YAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,OAAO;oBACL,EAAE,EAAE,KAAc;oBAClB,MAAM,EAAE,iBAA0B;oBAClC,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAChC,OAAO;oBACL,EAAE,EAAE,KAAc;oBAClB,MAAM,EAAE,cAAuB;oBAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;gBAClE,OAAO;oBACL,EAAE,EAAE,KAAc;oBAClB,MAAM,EAAE,4BAAqC;oBAC7C,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;iBAChB,OAAO,CACN;;;+DAGqD,CACtD;iBACA,GAAG,CACF,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,EAC5B,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,EAC9B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,EACjB,EAAE,CACH,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,yEAAyE,CAAC;iBAClF,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,UAAU,KAAK,SAAS;gBAC1B,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,UAAU,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,MAAM,CACV,GAAW,EACX,KAAyC;QAEzC,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE;YAClB,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAC3E,OAAO,SAAS,CAAC;YACnB,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;gBAAE,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,kFAAkF,CAAC;iBAC3F,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;6DACmD,CACpD;iBACA,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,EAAE,CAAI,EAAW;QACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAe;IAChC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC;AACJ,CAAC"}

package/dist/batch/watcher-protocol.d.ts

@@ -0,0 +1,91 @@
+import { type ObyteNetwork, type Verdict } from '@obbyx/obyte';
+import { z } from 'zod';
+/**
+ * Facilitator ↔ seller-watcher protocol (ADR-0003), JSON over WebSocket at
+ * `/watcher`.
+ *
+ *   F → W  challenge   {challenge}
+ *   W → F  hello       {network, login: signed {purpose, challenge, network, expires}, cursor, bytesBalance}
+ *   F → W  welcome     {seller}               then replays the journal after `cursor`
+ *   F → W  commitment  {seq, ...voucher}      (pending or committed)
+ *   W → F  ack         {seq}                  ONLY after the voucher is durably stored
+ *   W → F  heartbeat   {cursor, bytesBalance, closing?}   closing: channels the seller is closing (no new vouchers)
+ *   F → W  error       {message}              then close
+ *
+ * The login is an Obyte signed message by the seller's address (payTo), so
+ * only the seller's watcher receives that seller's vouchers. Vouchers are
+ * bearer-sensitive (ADR-0001): never log `signedPackage`.
+ */
+export declare const WATCHER_LOGIN_PURPOSE = "obbyx-watcher-login";
+export declare const commitmentMessageSchema: z.ZodObject<{
+    type: z.ZodLiteral<"commitment">;
+    seq: z.ZodNumber;
+    network: z.ZodString;
+    aa: z.ZodString;
+    period: z.ZodNumber;
+    amountSpent: z.ZodString;
+    paymentAmount: z.ZodString;
+    binding: z.ZodString;
+    signedPackage: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    state: z.ZodEnum<{
+        pending: "pending";
+        committed: "committed";
+    }>;
+}, z.core.$strip>;
+export type CommitmentMessage = z.infer<typeof commitmentMessageSchema>;
+export declare const serverMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"challenge">;
+    challenge: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"welcome">;
+    seller: z.ZodString;
+    network: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"commitment">;
+    seq: z.ZodNumber;
+    network: z.ZodString;
+    aa: z.ZodString;
+    period: z.ZodNumber;
+    amountSpent: z.ZodString;
+    paymentAmount: z.ZodString;
+    binding: z.ZodString;
+    signedPackage: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    state: z.ZodEnum<{
+        pending: "pending";
+        committed: "committed";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"error">;
+    message: z.ZodString;
+}, z.core.$strip>], "type">;
+export type ServerMessage = z.infer<typeof serverMessageSchema>;
+export declare const clientMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"hello">;
+    network: z.ZodString;
+    login: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    cursor: z.ZodNumber;
+    bytesBalance: z.ZodString;
+    closing: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"ack">;
+    seq: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"heartbeat">;
+    cursor: z.ZodNumber;
+    bytesBalance: z.ZodString;
+    closing: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>], "type">;
+export type ClientMessage = z.infer<typeof clientMessageSchema>;
+export declare function loginMessage(challenge: string, network: string, now: number): {
+    purpose: string;
+    challenge: string;
+    network: string;
+    expires: number;
+};
+/** Verifies a watcher login; returns the seller address that signed it. */
+export declare function verifyWatcherLogin(login: unknown, expected: {
+    challenge: string;
+    network: ObyteNetwork;
+    now: number;
+}): Verdict<string>;
+//# sourceMappingURL=watcher-protocol.d.ts.map

package/dist/batch/watcher-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watcher-protocol.d.ts","sourceRoot":"","sources":["../../src/batch/watcher-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,OAAO,EAAuC,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAWlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;2BAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;2BAgB9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAWhE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;;EAE3E;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC,MAAM,CAAC,CASjB"}

package/dist/batch/watcher-protocol.js

@@ -0,0 +1,82 @@
+import { accept, reject, verifySignedPackage } from '@obbyx/obyte';
+import { z } from 'zod';
+/**
+ * Facilitator ↔ seller-watcher protocol (ADR-0003), JSON over WebSocket at
+ * `/watcher`.
+ *
+ *   F → W  challenge   {challenge}
+ *   W → F  hello       {network, login: signed {purpose, challenge, network, expires}, cursor, bytesBalance}
+ *   F → W  welcome     {seller}               then replays the journal after `cursor`
+ *   F → W  commitment  {seq, ...voucher}      (pending or committed)
+ *   W → F  ack         {seq}                  ONLY after the voucher is durably stored
+ *   W → F  heartbeat   {cursor, bytesBalance, closing?}   closing: channels the seller is closing (no new vouchers)
+ *   F → W  error       {message}              then close
+ *
+ * The login is an Obyte signed message by the seller's address (payTo), so
+ * only the seller's watcher receives that seller's vouchers. Vouchers are
+ * bearer-sensitive (ADR-0001): never log `signedPackage`.
+ */
+export const WATCHER_LOGIN_PURPOSE = 'obbyx-watcher-login';
+export const commitmentMessageSchema = z.object({
+    type: z.literal('commitment'),
+    seq: z.number().int().positive(),
+    network: z.string(),
+    aa: z.string(),
+    period: z.number().int().positive(),
+    amountSpent: z.string().regex(/^\d+$/),
+    paymentAmount: z.string().regex(/^\d+$/),
+    binding: z.string(),
+    signedPackage: z.record(z.string(), z.unknown()),
+    state: z.enum(['pending', 'committed']),
+});
+export const serverMessageSchema = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('challenge'), challenge: z.string() }),
+    z.object({ type: z.literal('welcome'), seller: z.string(), network: z.string() }),
+    commitmentMessageSchema,
+    z.object({ type: z.literal('error'), message: z.string() }),
+]);
+export const clientMessageSchema = z.discriminatedUnion('type', [
+    z.object({
+        type: z.literal('hello'),
+        network: z.string(),
+        login: z.record(z.string(), z.unknown()),
+        cursor: z.number().int().nonnegative(),
+        bytesBalance: z.string().regex(/^\d+$/),
+        closing: z.array(z.string()).max(10_000).optional(),
+    }),
+    z.object({ type: z.literal('ack'), seq: z.number().int().positive() }),
+    z.object({
+        type: z.literal('heartbeat'),
+        cursor: z.number().int().nonnegative(),
+        bytesBalance: z.string().regex(/^\d+$/),
+        closing: z.array(z.string()).max(10_000).optional(),
+    }),
+]);
+const loginSchema = z
+    .object({
+    purpose: z.literal(WATCHER_LOGIN_PURPOSE),
+    challenge: z.string(),
+    network: z.string(),
+    expires: z.number().int(),
+})
+    .strict();
+export function loginMessage(challenge, network, now) {
+    return { purpose: WATCHER_LOGIN_PURPOSE, challenge, network, expires: now + 60 };
+}
+/** Verifies a watcher login; returns the seller address that signed it. */
+export function verifyWatcherLogin(login, expected) {
+    const verified = verifySignedPackage(login, { network: expected.network });
+    if (!verified.ok)
+        return reject('watcher_login', verified.message);
+    const body = loginSchema.safeParse(verified.value.message);
+    if (!body.success)
+        return reject('watcher_login', 'Malformed login message');
+    if (body.data.challenge !== expected.challenge)
+        return reject('watcher_login', 'Wrong challenge');
+    if (body.data.network !== expected.network.caip2)
+        return reject('watcher_login', 'Wrong network');
+    if (body.data.expires < expected.now)
+        return reject('watcher_login', 'Login expired');
+    return accept(verified.value.signer);
+}
+//# sourceMappingURL=watcher-protocol.js.map

package/dist/batch/watcher-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watcher-protocol.js","sourceRoot":"","sources":["../../src/batch/watcher-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjF,uBAAuB;IACvB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACpD,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,OAAe,EAAE,GAAW;IAC1E,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,QAAmE;IAEnE,MAAM,QAAQ,GAAG,mBAAmB,CAAU,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAClG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAClG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/binding/binding.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Binding of a payment to ONE operation (invariant I1/I2).
+ *
+ * binding = HMAC-SHA256(sellerSecret, canonical{v, sellerId, scheme, quoteId,
+ *           validUntil, method, url, bodyHash, network, asset, amount, payTo})
+ *
+ * - The client signs the binding into its payment (unit data message), so a
+ *   payment cannot be moved to another operation.
+ * - The HMAC makes quotes unforgeable without storing them: on the paid
+ *   request the seller recomputes it from the request and the quote fields.
+ */
+export interface BindingInput {
+    readonly sellerId: string;
+    /** x402 scheme of the offer (a payment of one scheme never counts for another). */
+    readonly scheme: string;
+    readonly quoteId: string;
+    readonly validUntil: number;
+    readonly method: string;
+    /** Path + query string, as requested. */
+    readonly url: string;
+    /** sha256 hex of the request body ('' for none), or a custom fingerprint. */
+    readonly bodyHash: string;
+    readonly network: string;
+    readonly asset: string;
+    readonly amount: string;
+    readonly payTo: string;
+}
+export declare function computeBinding(secret: Uint8Array | string, input: BindingInput): string;
+export declare function bindingsEqual(a: string, b: string): boolean;
+export declare function newQuoteId(): string;
+export declare function sha256Hex(data: string | Uint8Array): string;
+//# sourceMappingURL=binding.d.ts.map

package/dist/binding/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/binding/binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAIvF;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAI3D;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE3D"}

package/dist/binding/binding.js

@@ -0,0 +1,19 @@
+import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { canonical } from '../exact/requirements.js';
+export function computeBinding(secret, input) {
+    return createHmac('sha256', secret)
+        .update(canonical({ v: 1, ...input, method: input.method.toUpperCase() }))
+        .digest('hex');
+}
+export function bindingsEqual(a, b) {
+    const x = Buffer.from(a, 'utf8');
+    const y = Buffer.from(b, 'utf8');
+    return x.length === y.length && timingSafeEqual(x, y);
+}
+export function newQuoteId() {
+    return randomBytes(16).toString('base64url');
+}
+export function sha256Hex(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+//# sourceMappingURL=binding.js.map

package/dist/binding/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/binding/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AA8BrD,MAAM,UAAU,cAAc,CAAC,MAA2B,EAAE,KAAmB;IAC7E,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;SACzE,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAyB;IACjD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC"}

package/dist/coins/composer.d.ts

@@ -0,0 +1,58 @@
+import type obyte from 'obyte';
+import { type Logger } from '@obbyx/obyte/logger';
+import type { CoinReservations } from './reservations.js';
+/**
+ * Input reservation for client-composed units (ADR-0002 "publication").
+ *
+ * Problem: an `exact` unit is signed by the client but broadcast later by the
+ * facilitator. Until the hub knows it, the hub would pick the SAME coins for
+ * the next unit → double spend, one unit becomes bad.
+ *
+ * Solution: our own coin picker, installed on obyte.js's extension point
+ * `client.api.pickDivisibleCoinsForAmount`. It computes the wallet's unspent
+ * outputs from `light/get_history`, skips reserved ones, reserves what it
+ * picks (SQLite, durable) and binds the reservation to the unit hash. Composes
+ * per wallet are serialized. A reservation ends when the unit is seen on the
+ * ledger (its inputs are then spent for the hub) or, if it never appears, only
+ * after `releaseAfterSeconds` (≥ quote validity + the facilitator's publication
+ * window) — never earlier, because a signed unit can still be published.
+ *
+ * Coin rules mirror an ocore light wallet with `spend_unconfirmed: 'own'`:
+ * outputs of OTHER authors must be stable and at or before `last_ball_mci`;
+ * own unstable outputs (change) may be spent.
+ */
+export interface ReservingComposerOptions {
+    readonly client: obyte.Client;
+    readonly network: string;
+    readonly address: string;
+    readonly reservations: CoinReservations;
+    readonly logger: Logger;
+    /** Minimum age before an unpublished unit's inputs are released (s). */
+    readonly releaseAfterSeconds?: number;
+    readonly hubTimeoutMs?: number;
+    readonly now?: () => number;
+}
+/**
+ * Installs the reserving coin picker on an obyte.js client and serializes
+ * composes for the wallet. Use `compose(fn)` around every `client.compose.*`.
+ */
+export declare class ReservingComposer {
+    private readonly options;
+    private queue;
+    private lastPick;
+    private readonly log;
+    private readonly now;
+    constructor(options: ReservingComposerOptions);
+    /** Runs `fn` (which composes exactly one unit) with reservations; returns its unit. */
+    compose<T extends {
+        unit?: unknown;
+    }>(fn: () => Promise<T>, opts?: {
+        holdUntil?: number;
+    }): Promise<T>;
+    /** Releases the inputs of a unit that was composed but provably never sent anywhere. */
+    discard(unit: string): void;
+    /** Ends reservations of units now known to the hub, or provably expired. */
+    sweep(): Promise<void>;
+    private pick;
+}
+//# sourceMappingURL=composer.d.ts.map

package/dist/coins/composer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer.d.ts","sourceRoot":"","sources":["../../src/coins/composer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,qBAAqB,CAAC;AAGhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAMhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEN,OAAO,EAAE,wBAAwB;IAY9D,uFAAuF;IACvF,OAAO,CAAC,CAAC,SAAS;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,EAClC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAChC,OAAO,CAAC,CAAC,CAAC;IAsBb,wFAAwF;IACxF,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3B,4EAA4E;IACtE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAmBd,IAAI;CA6CnB"}