@phala/pay 0.8.3 → 0.9.1

package/dist/react/index.d.ts

@@ -1,6 +0,0 @@
-export { Checkout, type CheckoutProps } from "./Checkout.js";
-export { DepositAddress, type DepositAddressProps } from "./DepositAddress.js";
-export { useCheckout, type UseCheckoutOptions, type UseCheckoutResult } from "./useCheckout.js";
-export type { Appearance } from "./appearance.js";
-export { NetworkIcon, AssetIcon, type IconProps, type NetworkIconProps, type AssetIconProps } from "./Icons.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/react/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAChG,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/react/index.js

@@ -1,6 +0,0 @@
-"use client";
-export { Checkout } from "./Checkout.js";
-export { DepositAddress } from "./DepositAddress.js";
-export { useCheckout } from "./useCheckout.js";
-export { NetworkIcon, AssetIcon } from "./Icons.js";
-//# sourceMappingURL=index.js.map

package/dist/react/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,QAAQ,EAAsB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,cAAc,EAA4B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAmD,MAAM,kBAAkB,CAAC;AAEhG,OAAO,EAAE,WAAW,EAAE,SAAS,EAA8D,MAAM,YAAY,CAAC"}

package/dist/react/useCheckout.d.ts

@@ -1,9 +0,0 @@
-import { type CheckoutOptions, type CheckoutState } from "../checkout.js";
-export type UseCheckoutOptions = Pick<CheckoutOptions, "clientSecret" | "expectedAddress" | "apiBase" | "pollInterval" | "signal" | "requestTimeout">;
-export interface UseCheckoutResult extends CheckoutState {
-    /** Reads the quote now, for example right after the wallet broadcast the payment. */
-    refresh: () => void;
-}
-/** Follows a quote's public view for as long as the component is mounted. */
-export declare function useCheckout({ clientSecret, expectedAddress, apiBase, pollInterval, signal, requestTimeout, }: UseCheckoutOptions): UseCheckoutResult;
-//# sourceMappingURL=useCheckout.d.ts.map

package/dist/react/useCheckout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useCheckout.d.ts","sourceRoot":"","sources":["../../src/react/useCheckout.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,eAAe,EACf,cAAc,GAAG,iBAAiB,GAAG,SAAS,GAAG,cAAc,GAAG,QAAQ,GAAG,gBAAgB,CAC9F,CAAC;AAEF,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,qFAAqF;IACrF,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAID,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,EAC1B,YAAY,EACZ,eAAe,EACf,OAAO,EACP,YAAY,EACZ,MAAM,EACN,cAAc,GACf,EAAE,kBAAkB,GAAG,iBAAiB,CA6BxC"}

package/dist/react/useCheckout.js

@@ -1,32 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from "react";
-import { createCheckout, } from "../checkout.js";
-const LOADING = { status: "loading", quote: null, error: null };
-/** Follows a quote's public view for as long as the component is mounted. */
-export function useCheckout({ clientSecret, expectedAddress, apiBase, pollInterval, signal, requestTimeout, }) {
-    const [current, setCurrent] = useState({ key: "", state: LOADING });
-    const checkout = useRef(null);
-    const key = `${apiBase} ${clientSecret} ${expectedAddress}`;
-    useEffect(() => {
-        const instance = createCheckout({
-            clientSecret,
-            expectedAddress,
-            apiBase,
-            ...(pollInterval === undefined ? {} : { pollInterval }),
-            ...(signal === undefined ? {} : { signal }),
-            ...(requestTimeout === undefined ? {} : { requestTimeout }),
-        });
-        checkout.current = instance;
-        const unsubscribe = instance.subscribe((state) => setCurrent({ key, state }));
-        return () => {
-            unsubscribe();
-            instance.destroy();
-            checkout.current = null;
-        };
-    }, [key, clientSecret, expectedAddress, apiBase, pollInterval, signal, requestTimeout]);
-    const refresh = useCallback(() => {
-        void checkout.current?.refresh();
-    }, []);
-    // A new client secret starts from `loading`, not from the previous quote's state.
-    return { ...(current.key === key ? current.state : LOADING), refresh };
-}
-//# sourceMappingURL=useCheckout.js.map

package/dist/react/useCheckout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"useCheckout.js","sourceRoot":"","sources":["../../src/react/useCheckout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EACL,cAAc,GAIf,MAAM,gBAAgB,CAAC;AAYxB,MAAM,OAAO,GAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAE/E,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,EAC1B,YAAY,EACZ,eAAe,EACf,OAAO,EACP,YAAY,EACZ,MAAM,EACN,cAAc,GACK;IACnB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAyB,IAAI,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;IAE5D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,QAAQ,GAAG,cAAc,CAAC;YAC9B,YAAY;YACZ,eAAe;YACf,OAAO;YACP,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,GAAG,EAAE;YACV,WAAW,EAAE,CAAC;YACd,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,kFAAkF;IAClF,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/server/addresses.d.ts

@@ -1,78 +0,0 @@
-import { type Address, type Hex } from "viem";
-/**
- * The forwarder `factory` deploys for `treasury` and `salt`: OpenZeppelin 5.x
- * `Clones.predictDeterministicAddressWithImmutableArgs` with `abi.encodePacked(treasury)`, so the
- * address commits to the factory, the implementation, the treasury, and the salt.
- */
-export declare function forwarderAddress(factory: string, implementation: string, treasury: string, salt: Hex): Address;
-/** `keccak256(abi.encode(account, client_reference_id, "quote", quote_id))`: a quote's salt. */
-export declare function quoteSalt(account: string, clientReferenceId: string, quoteId: string): Hex;
-/**
- * `keccak256(abi.encode(account, livemode, client_reference_id, "deposit_address", version))`:
- * a deposit address's salt, the same on every chain.
- */
-export declare function depositAddressSalt(account: string, livemode: boolean, clientReferenceId: string, version: number | bigint): Hex;
-export interface Forwarder {
-    factory: string;
-    implementation: string;
-}
-/** The address of a quote over `treasury`, which you pin yourself (see `verifyQuoteAddress`). */
-export declare function quoteAddress(forwarder: Forwarder, quote: {
-    client_reference_id: string;
-    id: string;
-}, treasury: string, account: string): Address;
-/** A deposit address on the network whose treasury is `treasury`, which you pin yourself. */
-export declare function depositAddress(forwarder: Forwarder, address: {
-    livemode: boolean;
-    client_reference_id: string;
-    version: number;
-}, treasury: string, account: string): Address;
-/** An address the service returned is not the one your pins derive: show nothing to pay. */
-export declare class AddressMismatchError extends Error {
-    readonly name = "AddressMismatchError";
-}
-/**
- * What every address is recomputed from, configured on your server and never read from the
- * service: your account id (`acct_…`), the forwarder `factory` and `implementation` of the
- * attested deployment, and `treasuries`, your own treasury per chain id as you proved it. A
- * compromised service could return another treasury with the address that really derives from
- * it, so the response's `treasury` is never trusted.
- *
- * Live mode requires `treasuries`: without the chain's treasury the check fails closed. In test
- * mode an unpinned chain falls back to the response's treasury with a console warning.
- */
-export interface AddressPins extends Forwarder {
-    account: string;
-    treasuries?: Readonly<Record<number, string>> | undefined;
-}
-/**
- * Recomputes an open quote's address from your pins and returns it, the `expectedAddress` to
- * pass to `<Checkout>`. Throws `AddressMismatchError` unless the quote names your pinned
- * treasury of its chain and its address derives from it; in live mode also when the chain has no
- * pinned treasury.
- */
-export declare function verifyQuoteAddress(pins: AddressPins, quote: {
-    id: string;
-    livemode: boolean;
-    chain_id: number;
-    treasury: string;
-    address: string;
-    client_reference_id: string;
-}): Address;
-/**
- * Recomputes every network of an active deposit address from your pins and returns the address,
- * the same on every network. Throws `AddressMismatchError` as `verifyQuoteAddress` does, for any
- * network.
- */
-export declare function verifyDepositAddress(pins: AddressPins, address: {
-    id: string;
-    livemode: boolean;
-    client_reference_id: string;
-    version: number;
-    networks: readonly {
-        chain_id: number;
-        treasury: string;
-        address: string;
-    }[];
-}): Address;
-//# sourceMappingURL=addresses.d.ts.map

package/dist/server/addresses.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addresses.d.ts","sourceRoot":"","sources":["../../src/server/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAEd;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,GAAG,GACR,OAAO,CAgBT;AAED,gGAAgG;AAChG,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAO1F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,EACjB,iBAAiB,EAAE,MAAM,EACzB,OAAO,EAAE,MAAM,GAAG,MAAM,GACvB,GAAG,CAaL;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAC1B,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAClD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAOT;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC5E,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAOT;AAED,4FAA4F;AAC5F,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAkB,IAAI,0BAA0B;CACjD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;CAC3D;AAwCD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;IACL,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GACA,OAAO,CAST;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE;IACP,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9E,GACA,OAAO,CAgBT"}

package/dist/server/addresses.js

@@ -1,118 +0,0 @@
-import { encodeAbiParameters, getAddress, getContractAddress, keccak256, concat, } from "viem";
-/**
- * The forwarder `factory` deploys for `treasury` and `salt`: OpenZeppelin 5.x
- * `Clones.predictDeterministicAddressWithImmutableArgs` with `abi.encodePacked(treasury)`, so the
- * address commits to the factory, the implementation, the treasury, and the salt.
- */
-export function forwarderAddress(factory, implementation, treasury, salt) {
-    const initCode = concat([
-        "0x61",
-        "0x0041", // runtime length: the 45-byte proxy and the 20 treasury bytes
-        "0x3d81600a3d39f3",
-        "0x363d3d373d3d3d363d73",
-        getAddress(implementation),
-        "0x5af43d82803e903d91602b57fd5bf3",
-        getAddress(treasury),
-    ]);
-    return getContractAddress({
-        opcode: "CREATE2",
-        from: getAddress(factory),
-        salt,
-        bytecodeHash: keccak256(initCode),
-    });
-}
-/** `keccak256(abi.encode(account, client_reference_id, "quote", quote_id))`: a quote's salt. */
-export function quoteSalt(account, clientReferenceId, quoteId) {
-    return keccak256(encodeAbiParameters([{ type: "string" }, { type: "string" }, { type: "string" }, { type: "string" }], [account, clientReferenceId, "quote", quoteId]));
-}
-/**
- * `keccak256(abi.encode(account, livemode, client_reference_id, "deposit_address", version))`:
- * a deposit address's salt, the same on every chain.
- */
-export function depositAddressSalt(account, livemode, clientReferenceId, version) {
-    return keccak256(encodeAbiParameters([
-        { type: "string" },
-        { type: "bool" },
-        { type: "string" },
-        { type: "string" },
-        { type: "uint256" },
-    ], [account, livemode, clientReferenceId, "deposit_address", BigInt(version)]));
-}
-/** The address of a quote over `treasury`, which you pin yourself (see `verifyQuoteAddress`). */
-export function quoteAddress(forwarder, quote, treasury, account) {
-    return forwarderAddress(forwarder.factory, forwarder.implementation, treasury, quoteSalt(account, quote.client_reference_id, quote.id));
-}
-/** A deposit address on the network whose treasury is `treasury`, which you pin yourself. */
-export function depositAddress(forwarder, address, treasury, account) {
-    return forwarderAddress(forwarder.factory, forwarder.implementation, treasury, depositAddressSalt(account, address.livemode, address.client_reference_id, address.version));
-}
-/** An address the service returned is not the one your pins derive: show nothing to pay. */
-export class AddressMismatchError extends Error {
-    name = "AddressMismatchError";
-}
-/**
- * The treasury an address on `chainId` must pay: the pinned one, which the response must name.
- */
-function pinnedTreasury(pins, livemode, chainId, treasury, where) {
-    const pinned = pins.treasuries?.[chainId];
-    if (pinned === undefined) {
-        if (livemode) {
-            throw new AddressMismatchError(`${where}: live mode requires your pinned treasury of chain ${chainId}`);
-        }
-        console.warn(`${where}: no pinned treasury of chain ${chainId}; the service's ${treasury} is trusted (test mode only)`);
-        return treasury;
-    }
-    if (!sameAddress(pinned, treasury)) {
-        throw new AddressMismatchError(`${where} pays a treasury that is not the pinned one`);
-    }
-    return pinned;
-}
-function requirePins(pins, where) {
-    for (const field of ["account", "factory", "implementation"]) {
-        if (typeof pins[field] !== "string" || pins[field] === "") {
-            throw new AddressMismatchError(`${where}: the pinned ${field} is missing`);
-        }
-    }
-}
-function sameAddress(a, b) {
-    return a.toLowerCase() === b.toLowerCase();
-}
-/**
- * Recomputes an open quote's address from your pins and returns it, the `expectedAddress` to
- * pass to `<Checkout>`. Throws `AddressMismatchError` unless the quote names your pinned
- * treasury of its chain and its address derives from it; in live mode also when the chain has no
- * pinned treasury.
- */
-export function verifyQuoteAddress(pins, quote) {
-    const where = `quote ${quote.id}`;
-    requirePins(pins, where);
-    const treasury = pinnedTreasury(pins, quote.livemode, quote.chain_id, quote.treasury, where);
-    const derived = quoteAddress(pins, quote, treasury, pins.account);
-    if (!sameAddress(derived, quote.address)) {
-        throw new AddressMismatchError(`${where} has an address the account cannot derive`);
-    }
-    return derived;
-}
-/**
- * Recomputes every network of an active deposit address from your pins and returns the address,
- * the same on every network. Throws `AddressMismatchError` as `verifyQuoteAddress` does, for any
- * network.
- */
-export function verifyDepositAddress(pins, address) {
-    requirePins(pins, `deposit address ${address.id}`);
-    let first;
-    for (const network of address.networks) {
-        const where = `deposit address ${address.id} on chain ${network.chain_id}`;
-        const treasury = pinnedTreasury(pins, address.livemode, network.chain_id, network.treasury, where);
-        const derived = depositAddress(pins, address, treasury, pins.account);
-        if (!sameAddress(derived, network.address)) {
-            throw new AddressMismatchError(`${where} is not one the account can derive`);
-        }
-        first ??= derived;
-    }
-    if (first === undefined) {
-        throw new AddressMismatchError(`deposit address ${address.id} has no network`);
-    }
-    return first;
-}
-//# sourceMappingURL=addresses.js.map

package/dist/server/addresses.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"addresses.js","sourceRoot":"","sources":["../../src/server/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,MAAM,GAGP,MAAM,MAAM,CAAC;AAEd;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,cAAsB,EACtB,QAAgB,EAChB,IAAS;IAET,MAAM,QAAQ,GAAG,MAAM,CAAC;QACtB,MAAM;QACN,QAAQ,EAAE,8DAA8D;QACxE,kBAAkB;QAClB,wBAAwB;QACxB,UAAU,CAAC,cAAc,CAAC;QAC1B,kCAAkC;QAClC,UAAU,CAAC,QAAQ,CAAC;KACrB,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC;QACxB,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;QACzB,IAAI;QACJ,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,iBAAyB,EAAE,OAAe;IACnF,OAAO,SAAS,CACd,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAChF,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,CAC/C,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,QAAiB,EACjB,iBAAyB,EACzB,OAAwB;IAExB,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,MAAM,EAAE;QAChB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE;KACpB,EACD,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAC3E,CACF,CAAC;AACJ,CAAC;AAOD,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAC1B,SAAoB,EACpB,KAAkD,EAClD,QAAgB,EAChB,OAAe;IAEf,OAAO,gBAAgB,CACrB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,cAAc,EACxB,QAAQ,EACR,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAC5B,SAAoB,EACpB,OAA4E,EAC5E,QAAgB,EAChB,OAAe;IAEf,OAAO,gBAAgB,CACrB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,cAAc,EACxB,QAAQ,EACR,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,CAC5F,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC3B,IAAI,GAAG,sBAAsB,CAAC;CACjD;AAiBD;;GAEG;AACH,SAAS,cAAc,CACrB,IAAiB,EACjB,QAAiB,EACjB,OAAe,EACf,QAAgB,EAChB,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,sDAAsD,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,IAAI,CACV,GAAG,KAAK,iCAAiC,OAAO,mBAAmB,QAAQ,8BAA8B,CAC1G,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB,EAAE,KAAa;IACnD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACtE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,gBAAgB,KAAK,aAAa,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAiB,EACjB,KAOC;IAED,MAAM,KAAK,GAAG,SAAS,KAAK,CAAC,EAAE,EAAE,CAAC;IAClC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,OAMC;IAED,WAAW,CAAC,IAAI,EAAE,mBAAmB,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,KAA0B,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,mBAAmB,OAAO,CAAC,EAAE,aAAa,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,KAAK,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/index.d.ts

@@ -1,12 +0,0 @@
-/**
- * Server-side helpers of `@phala/pay`. Nothing here needs or takes an API key: webhook
- * verification uses your account's public webhook key, and the address and sweep helpers run
- * offline. Call the API itself from your backend with a restricted key (the Python SDK, or any
- * HTTP client with `Authorization: Bearer ppay_rk_…`); never ship a key to a browser. Recompute
- * every address with `verifyQuoteAddress` or `verifyDepositAddress` from the pins you configure
- * yourself before you show it.
- */
-export { WebhookSignatureError, constructEvent, type ConstructEventOptions, type WebhookEvent, } from "./webhook.js";
-export { AddressMismatchError, depositAddress, depositAddressSalt, forwarderAddress, quoteSalt, quoteAddress, verifyDepositAddress, verifyQuoteAddress, type AddressPins, type Forwarder, } from "./addresses.js";
-export { batchChecksum, flushTransaction, flushTransactions, safeBatch, type BatchFile, type BatchFileMeta, type BatchTransaction, type Call, type ForwarderObject, type SafeBatchOptions, } from "./sweeps.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,SAAS,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,IAAI,EACT,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC"}

package/dist/server/index.js

@@ -1,12 +0,0 @@
-/**
- * Server-side helpers of `@phala/pay`. Nothing here needs or takes an API key: webhook
- * verification uses your account's public webhook key, and the address and sweep helpers run
- * offline. Call the API itself from your backend with a restricted key (the Python SDK, or any
- * HTTP client with `Authorization: Bearer ppay_rk_…`); never ship a key to a browser. Recompute
- * every address with `verifyQuoteAddress` or `verifyDepositAddress` from the pins you configure
- * yourself before you show it.
- */
-export { WebhookSignatureError, constructEvent, } from "./webhook.js";
-export { AddressMismatchError, depositAddress, depositAddressSalt, forwarderAddress, quoteSalt, quoteAddress, verifyDepositAddress, verifyQuoteAddress, } from "./addresses.js";
-export { batchChecksum, flushTransaction, flushTransactions, safeBatch, } from "./sweeps.js";
-//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,qBAAqB,EACrB,cAAc,GAGf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,GAGnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,GAOV,MAAM,aAAa,CAAC"}

package/dist/server/sweeps.d.ts

@@ -1,78 +0,0 @@
-import { type Address, type Hex } from "viem";
-/** A contract call as a wallet or the Safe Transaction Builder takes it. */
-export interface Call {
-    to: Address;
-    data: Hex;
-    /** Native value in wei, a decimal string: `"0"` for a flush. */
-    value: string;
-}
-/**
- * `factory.flush(treasury, salts, token)`, encoded offline from the exported forwarders
- * (`GET /v1/forwarders`): every listed forwarder's whole balance of `token` moves to `treasury`,
- * the only address it can pay. Anyone may send it; the sender pays the gas.
- */
-export declare function flushTransaction(factory: string, treasury: string, salts: readonly Hex[], token: string): Call;
-/** A forwarder as `GET /v1/forwarders` returns it. */
-export interface ForwarderObject {
-    chain_id: number;
-    factory: string;
-    treasury: string;
-    salt: string;
-}
-/**
- * Groups forwarders of one chain, such as `GET /v1/forwarders?sweepable=<token>` lists, into
- * `flushTransaction` calls: one per factory and treasury, of at most `maxSalts` forwarders.
- */
-export declare function flushTransactions(forwarders: Iterable<ForwarderObject>, token: string, maxSalts?: number): Call[];
-/**
- * The Safe Transaction Builder's batch file, its `BatchFile` type
- * (safe-global/safe-react-apps, `apps/tx-builder/src/typings/models.ts` at commit
- * e8cccfb9a1042fa2954087988bae59c3b8c81780).
- */
-export interface BatchFile {
-    version: string;
-    chainId: string;
-    createdAt: number;
-    meta: BatchFileMeta;
-    transactions: BatchTransaction[];
-}
-export interface BatchFileMeta {
-    txBuilderVersion?: string;
-    checksum?: string;
-    createdFromSafeAddress?: string;
-    createdFromOwnerAddress?: string;
-    name: string;
-    description?: string;
-}
-export interface BatchTransaction {
-    to: string;
-    value: string;
-    data?: string;
-    contractMethod?: {
-        inputs: unknown[];
-        name: string;
-        payable: boolean;
-    };
-    contractInputsValues?: {
-        [key: string]: string;
-    };
-}
-export interface SafeBatchOptions {
-    name?: string;
-    description?: string;
-    /** Milliseconds; now by default. */
-    createdAt?: number;
-}
-/**
- * A Transaction Builder batch file of `calls` for the Safe `safe` on `chainId`, with the app's
- * `meta.checksum`, so it imports without the "modified since it was generated" warning. A Safe
- * owner imports it in Safe{Wallet} > Apps > Transaction Builder; the owners sign and execute it.
- */
-export declare function safeBatch(chainId: number, safe: string, calls: readonly Call[], options?: SafeBatchOptions): BatchFile;
-/**
- * The Transaction Builder's `meta.checksum` (`apps/tx-builder/src/lib/checksum.ts`): Keccak-256
- * of its key-sorted serialization with `meta.name` set to `null`, over the file without its
- * checksum, as the app's `validateChecksum` recomputes it.
- */
-export declare function batchChecksum(batch: BatchFile): Hex;
-//# sourceMappingURL=sweeps.d.ts.map

package/dist/server/sweeps.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sweeps.d.ts","sourceRoot":"","sources":["../../src/server/sweeps.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAgBd,4EAA4E;AAC5E,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,GAAG,EAAE,EACrB,KAAK,EAAE,MAAM,GACZ,IAAI,CAgBN;AAED,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,QAAQ,CAAC,eAAe,CAAC,EACrC,KAAK,EAAE,MAAM,EACb,QAAQ,SAAM,GACb,IAAI,EAAE,CAyBR;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE;QAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACvE,oBAAoB,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,IAAI,EAAE,EACtB,OAAO,GAAE,gBAAqB,GAC7B,SAAS,CAsBX;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,GAAG,GAAG,CAInD"}

package/dist/server/sweeps.js

@@ -1,117 +0,0 @@
-import { encodeFunctionData, getAddress, isHex, keccak256, stringToBytes, } from "viem";
-const FLUSH_ABI = [
-    {
-        type: "function",
-        name: "flush",
-        stateMutability: "nonpayable",
-        inputs: [
-            { name: "treasury", type: "address" },
-            { name: "salts", type: "bytes32[]" },
-            { name: "token", type: "address" },
-        ],
-        outputs: [],
-    },
-];
-/**
- * `factory.flush(treasury, salts, token)`, encoded offline from the exported forwarders
- * (`GET /v1/forwarders`): every listed forwarder's whole balance of `token` moves to `treasury`,
- * the only address it can pay. Anyone may send it; the sender pays the gas.
- */
-export function flushTransaction(factory, treasury, salts, token) {
-    if (salts.length === 0) {
-        throw new TypeError("flush needs at least one salt");
-    }
-    if (!salts.every((salt) => isHex(salt) && salt.length === 66)) {
-        throw new TypeError("a salt is 32 bytes of hex");
-    }
-    return {
-        to: getAddress(factory),
-        data: encodeFunctionData({
-            abi: FLUSH_ABI,
-            functionName: "flush",
-            args: [getAddress(treasury), salts, getAddress(token)],
-        }),
-        value: "0",
-    };
-}
-/**
- * Groups forwarders of one chain, such as `GET /v1/forwarders?sweepable=<token>` lists, into
- * `flushTransaction` calls: one per factory and treasury, of at most `maxSalts` forwarders.
- */
-export function flushTransactions(forwarders, token, maxSalts = 200) {
-    const groups = new Map();
-    const chains = new Set();
-    for (const forwarder of forwarders) {
-        chains.add(forwarder.chain_id);
-        const factory = getAddress(forwarder.factory);
-        const treasury = getAddress(forwarder.treasury);
-        const key = `${factory}:${treasury}`;
-        const group = groups.get(key) ?? { factory, treasury, salts: [] };
-        if (!isHex(forwarder.salt)) {
-            throw new TypeError("a salt is 32 bytes of hex");
-        }
-        group.salts.push(forwarder.salt);
-        groups.set(key, group);
-    }
-    if (chains.size > 1) {
-        throw new TypeError("a batch of flush calls is for one chain");
-    }
-    const calls = [];
-    for (const { factory, treasury, salts } of groups.values()) {
-        for (let start = 0; start < salts.length; start += maxSalts) {
-            calls.push(flushTransaction(factory, treasury, salts.slice(start, start + maxSalts), token));
-        }
-    }
-    return calls;
-}
-/**
- * A Transaction Builder batch file of `calls` for the Safe `safe` on `chainId`, with the app's
- * `meta.checksum`, so it imports without the "modified since it was generated" warning. A Safe
- * owner imports it in Safe{Wallet} > Apps > Transaction Builder; the owners sign and execute it.
- */
-export function safeBatch(chainId, safe, calls, options = {}) {
-    if (calls.length === 0) {
-        throw new TypeError("a batch needs at least one call");
-    }
-    const batch = {
-        version: "1.0",
-        chainId: String(chainId),
-        createdAt: options.createdAt ?? Date.now(),
-        meta: {
-            name: options.name ?? "Phala Pay sweep",
-            description: options.description ?? "",
-            createdFromSafeAddress: getAddress(safe),
-        },
-        transactions: calls.map((call) => {
-            if (!/^\d+$/.test(call.value) || !isHex(call.data)) {
-                throw new TypeError("a call needs hex data and a decimal value");
-            }
-            return { to: getAddress(call.to), value: call.value, data: call.data };
-        }),
-    };
-    batch.meta.checksum = batchChecksum(batch);
-    return batch;
-}
-/**
- * The Transaction Builder's `meta.checksum` (`apps/tx-builder/src/lib/checksum.ts`): Keccak-256
- * of its key-sorted serialization with `meta.name` set to `null`, over the file without its
- * checksum, as the app's `validateChecksum` recomputes it.
- */
-export function batchChecksum(batch) {
-    const meta = { ...batch.meta, name: null };
-    delete meta["checksum"];
-    return keccak256(stringToBytes(serialize({ ...batch, meta })));
-}
-/** The app's `serializeJSONObject`. */
-function serialize(value) {
-    if (Array.isArray(value)) {
-        return `[${value.map(serialize).join(",")}]`;
-    }
-    if (typeof value === "object" && value !== null) {
-        const record = value;
-        const keys = Object.keys(record).sort();
-        return `{${JSON.stringify(keys)}${keys.map((key) => `${serialize(record[key])},`).join("")}}`;
-    }
-    return JSON.stringify(value === undefined ? null : value);
-}
-//# sourceMappingURL=sweeps.js.map

package/dist/server/sweeps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sweeps.js","sourceRoot":"","sources":["../../src/server/sweeps.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,KAAK,EACL,SAAS,EACT,aAAa,GAGd,MAAM,MAAM,CAAC;AAEd,MAAM,SAAS,GAAG;IAChB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;YACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE;YACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAUX;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAgB,EAChB,KAAqB,EACrB,KAAa;IAEb,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC;QACvB,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,OAAO;YACrB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;SACvD,CAAC;QACF,KAAK,EAAE,GAAG;KACX,CAAC;AACJ,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAqC,EACrC,KAAa,EACb,QAAQ,GAAG,GAAG;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+D,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAuCD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,IAAY,EACZ,KAAsB,EACtB,UAA4B,EAAE;IAE9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAc;QACvB,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC1C,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,iBAAiB;YACvC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;YACtC,sBAAsB,EAAE,UAAU,CAAC,IAAI,CAAC;SACzC;QACD,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACzE,CAAC,CAAC;KACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAgB;IAC5C,MAAM,IAAI,GAA4B,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,uCAAuC;AACvC,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/dist/server/webhook.d.ts

@@ -1,61 +0,0 @@
-/**
- * Standard Webhooks `v1a` verification of Phala Pay deliveries (design D11): an ed25519 signature
- * over `{webhook-id}.{webhook-timestamp}.{body}` by your account's webhook key in the endpoint's
- * mode, pinned from `GET /v1/attestation`. Uses WebCrypto, so it runs on Node 20+, Deno, Bun, and
- * edge runtimes.
- */
-/** A delivery that did not verify: answer `400` and do nothing. */
-export declare class WebhookSignatureError extends Error {
-    readonly name = "WebhookSignatureError";
-}
-/** A verified event. `data.object` is the object the event is about, such as a deposit. */
-export interface WebhookEvent {
-    /** `evt_…`, stable across retries and resends: process each id once. */
-    id: string;
-    object: "event";
-    /** Your account, `acct_…`. */
-    account: string;
-    livemode: boolean;
-    /** Such as `deposit.credited`; claw back a `deposit.reversed` deposit's credit. */
-    type: string;
-    created: number;
-    /** Who caused it: an API key id (`key_…`), `admin`, or `system`. */
-    actor: string;
-    /**
-     * The API request that caused it, with the `Idempotency-Key` it sent; `null` when the
-     * service's own workers did (a payment credited, a quote expired).
-     */
-    request: {
-        id: string;
-        idempotency_key: string | null;
-    } | null;
-    /**
-     * `object` is the object as it was when the event happened, never re-rendered; `*.updated`
-     * events add `previous_attributes`, the former values of what changed.
-     */
-    data: {
-        object: Record<string, unknown>;
-        previous_attributes?: Record<string, unknown>;
-    };
-}
-export interface ConstructEventOptions {
-    /** Your account id, `acct_…`: an event of another account fails closed. */
-    expectedAccount: string;
-    /** The mode of the endpoint receiving it: an event of the other mode fails closed. */
-    expectedLivemode: boolean;
-    /** Finite, non-negative seconds a delivery's timestamp may differ from now; default 300. */
-    tolerance?: number;
-    /** Finite current time in Unix seconds; for tests. */
-    now?: number;
-}
-/**
- * Verifies a delivery and returns its event, as Stripe's `constructEvent` does, failing closed
- * unless a `v1a` signature verifies with one of `publicKeys` (ed25519 keys in Standard Webhooks'
- * `whpk_` form, as `GET /v1/attestation` lists them; pass both while a rotation overlaps), the
- * timestamp is within tolerance, the body's id is the `webhook-id`, and the event is
- * `expectedAccount`'s in `expectedLivemode`.
- *
- * `payload` is the raw request body, before any JSON parsing.
- */
-export declare function constructEvent(payload: string | Uint8Array, headers: Headers | Record<string, string | string[] | undefined>, publicKeys: string | readonly string[], options: ConstructEventOptions): Promise<WebhookEvent>;
-//# sourceMappingURL=webhook.d.ts.map

package/dist/server/webhook.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/server/webhook.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mEAAmE;AACnE,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAkB,IAAI,2BAA2B;CAClD;AAED,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D;;;OAGG;IACH,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC1F;AAED,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,gBAAgB,EAAE,OAAO,CAAC;IAC1B,4FAA4F;IAC5F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EAChE,UAAU,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACtC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAgGvB"}