@plural_pinelabs/mpp-seller-sdk 0.1.0

package/dist/server/capture-client.js

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaptureClient = void 0;
+const node_crypto_1 = require("node:crypto");
+const environments_js_1 = require("../config/environments.js");
+const errors_js_1 = require("../utils/errors.js");
+const fetch_helpers_js_1 = require("../utils/fetch-helpers.js");
+const auth_manager_js_1 = require("./auth-manager.js");
+class CaptureClient {
+    baseUrl;
+    timeoutMs;
+    maxRetries;
+    initialRetryDelayMs;
+    logger;
+    auth;
+    constructor(config) {
+        this.baseUrl = (config.baseUrl ?? environments_js_1.DEFAULT_BASE_URL).replace(/\/+$/, "");
+        this.timeoutMs = config.requestTimeoutMs;
+        this.maxRetries = config.maxRetries;
+        this.initialRetryDelayMs = config.initialRetryDelayMs;
+        this.logger = config.logger;
+        this.auth = new auth_manager_js_1.AuthManager(config.clientId, config.clientSecret, this.baseUrl, this.timeoutMs, this.logger, this.maxRetries, this.initialRetryDelayMs, config.accessToken);
+    }
+    async capture(options) {
+        const idempotencyKey = options.idempotencyKey ?? (0, node_crypto_1.randomUUID)();
+        const customerReference = resolveCustomerReference(options);
+        const authToken = await this.auth.getAccessToken();
+        const headers = {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${authToken}`,
+            "Idempotency-Key": idempotencyKey,
+        };
+        const response = await (0, fetch_helpers_js_1.requestWithRetry)({
+            method: "POST",
+            url: `${this.baseUrl}/mpp/v1/debit`,
+            headers,
+            body: JSON.stringify({
+                type: options.paymentType ?? "SBMD",
+                customer_reference: customerReference,
+                merchant_order_reference: options.merchantOrderReference ?? `mpr-${(0, node_crypto_1.randomUUID)().replace(/-/g, "").slice(0, 12)}`,
+                amount: String(options.amount.value),
+                currency: options.amount.currency,
+                payment_token: options.token,
+            }),
+            timeoutMs: this.timeoutMs,
+            logger: this.logger,
+            maxRetries: this.maxRetries,
+            initialRetryDelayMs: this.initialRetryDelayMs,
+        });
+        if (response.status >= 400) {
+            let errBody;
+            try {
+                errBody = (await response.json());
+            }
+            catch {
+                throw new errors_js_1.MppCaptureError(`Capture failed with status ${response.status}`);
+            }
+            const errObj = errBody.error ?? {};
+            throw new errors_js_1.MppCaptureError(`Capture failed: ${errObj.message ?? "unknown error"}`, errors_js_1.MppError.fromResponse(response.status, errBody));
+        }
+        const payload = (await response.json());
+        const data = (typeof payload === "object" && payload !== null
+            ? payload.data ?? payload
+            : {});
+        return dictToCaptureResult(data);
+    }
+}
+exports.CaptureClient = CaptureClient;
+function resolveCustomerReference(options) {
+    const metadata = (options.metadata ?? {});
+    const customerReference = (options.customerReference ??
+        metadata.customer_reference ??
+        metadata.customerReference ??
+        "").trim();
+    if (!customerReference) {
+        throw new errors_js_1.MppCaptureError("CaptureOptions: customerReference is required for MPP V2 debit");
+    }
+    return customerReference;
+}
+function dictToCaptureResult(data) {
+    let amt = (data.amount ?? {});
+    if (typeof amt !== "object" || amt === null) {
+        amt = { value: amt, currency: data.currency ?? "INR" };
+    }
+    const metadata = (data.metadata ?? {});
+    const sbmdData = (metadata.sbmd_data ?? {});
+    const captureId = metadata.external_capture_id ??
+        data.capture_id ??
+        data.debit_id ??
+        data.payment_id ??
+        "";
+    const amount = {
+        value: Number(amt.value ?? 0) || 0,
+        currency: amt.currency ?? data.currency ?? "INR",
+    };
+    return {
+        capture_id: captureId,
+        object: data.object ?? "debit",
+        mandate_id: data.authorization_id ??
+            data.mandate_id ??
+            data.pre_authorization_id ??
+            "",
+        token_id: data.token_id ?? data.payment_token ?? "",
+        customer_id: data.customer_id ?? data.customer_reference ?? "",
+        merchant_id: data.merchant_id ?? "",
+        order_id: data.oms_order_id ??
+            data.order_id ??
+            data.merchant_order_reference ??
+            "",
+        order_status: data.order_status ?? data.status ?? "",
+        payment_id: data.payment_id ??
+            data.oms_payment_id ??
+            data.debit_id ??
+            "",
+        payment_status: metadata.upstream_payment_status ??
+            data.payment_status ??
+            data.status ??
+            "",
+        amount,
+        upi_txn_id: sbmdData.upi_txn_id ?? data.upi_txn_id ?? "",
+        receipt: data.receipt ?? {
+            reference: data.payment_id ?? "",
+            oms_payment_id: data.oms_payment_id ?? "",
+            external_payment_id: metadata.external_payment_id ?? "",
+        },
+        description: data.description ?? null,
+        merchant_order_reference: data.merchant_order_reference ?? null,
+        metadata: data.metadata ?? null,
+        settled_at: sbmdData.settled_at ?? data.settled_at ?? "",
+        created_at: data.created_at ?? "",
+        raw: data,
+    };
+}
+//# sourceMappingURL=capture-client.js.map

package/dist/server/capture-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-client.js","sourceRoot":"","sources":["../../src/server/capture-client.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,+DAA6D;AAG7D,kDAA+D;AAC/D,gEAA6D;AAC7D,uDAAgD;AAEhD,MAAa,aAAa;IACP,OAAO,CAAS;IAChB,SAAS,CAAiB;IAC1B,UAAU,CAAiB;IAC3B,mBAAmB,CAAiB;IACpC,MAAM,CAAoB;IAC1B,IAAI,CAAc;IAEnC,YAAY,MAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,kCAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,6BAAW,CACzB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,mBAAmB,EACxB,MAAM,CAAC,WAAW,CACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC9D,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEnD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;YACpC,iBAAiB,EAAE,cAAc;SAClC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAA,mCAAgB,EAAC;YACtC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;YACnC,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM;gBACnC,kBAAkB,EAAE,iBAAiB;gBACrC,wBAAwB,EACtB,OAAO,CAAC,sBAAsB,IAAI,OAAO,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACxF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;gBACpC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,aAAa,EAAE,OAAO,CAAC,KAAK;aAC7B,CAAC;YACF,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,OAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,2BAAe,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,GAAI,OAAO,CAAC,KAAiC,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,2BAAe,CACvB,mBAAoB,MAAM,CAAC,OAAkB,IAAI,eAAe,EAAE,EAClE,oBAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAChD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACnE,MAAM,IAAI,GACR,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAC9C,CAAC,CAAE,OAAO,CAAC,IAAgC,IAAI,OAAO;YACtD,CAAC,CAAC,EAAE,CAA4B,CAAC;QAErC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AA9ED,sCA8EC;AAED,SAAS,wBAAwB,CAAC,OAAuB;IACvD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA2B,CAAC;IACpE,MAAM,iBAAiB,GAAG,CACxB,OAAO,CAAC,iBAAiB;QACzB,QAAQ,CAAC,kBAAkB;QAC3B,QAAQ,CAAC,iBAAiB;QAC1B,EAAE,CACH,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,2BAAe,CAAC,gEAAgE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B;IACxD,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAG,IAAI,CAAC,QAAmB,IAAI,KAAK,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;IACvE,MAAM,SAAS,GACZ,QAAQ,CAAC,mBAA8B;QACvC,IAAI,CAAC,UAAqB;QAC1B,IAAI,CAAC,QAAmB;QACxB,IAAI,CAAC,UAAqB;QAC3B,EAAE,CAAC;IAEL,MAAM,MAAM,GAAW;QACrB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAClC,QAAQ,EAAG,GAAG,CAAC,QAAmB,IAAK,IAAI,CAAC,QAAmB,IAAI,KAAK;KACzE,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,MAAM,EAAG,IAAI,CAAC,MAAiB,IAAI,OAAO;QAC1C,UAAU,EACP,IAAI,CAAC,gBAA2B;YAChC,IAAI,CAAC,UAAqB;YAC1B,IAAI,CAAC,oBAA+B;YACrC,EAAE;QACJ,QAAQ,EAAG,IAAI,CAAC,QAAmB,IAAK,IAAI,CAAC,aAAwB,IAAI,EAAE;QAC3E,WAAW,EAAG,IAAI,CAAC,WAAsB,IAAK,IAAI,CAAC,kBAA6B,IAAI,EAAE;QACtF,WAAW,EAAG,IAAI,CAAC,WAAsB,IAAI,EAAE;QAC/C,QAAQ,EACL,IAAI,CAAC,YAAuB;YAC5B,IAAI,CAAC,QAAmB;YACxB,IAAI,CAAC,wBAAmC;YACzC,EAAE;QACJ,YAAY,EAAG,IAAI,CAAC,YAAuB,IAAK,IAAI,CAAC,MAAiB,IAAI,EAAE;QAC5E,UAAU,EACP,IAAI,CAAC,UAAqB;YAC1B,IAAI,CAAC,cAAyB;YAC9B,IAAI,CAAC,QAAmB;YACzB,EAAE;QACJ,cAAc,EACX,QAAQ,CAAC,uBAAkC;YAC3C,IAAI,CAAC,cAAyB;YAC9B,IAAI,CAAC,MAAiB;YACvB,EAAE;QACJ,MAAM;QACN,UAAU,EAAG,QAAQ,CAAC,UAAqB,IAAK,IAAI,CAAC,UAAqB,IAAI,EAAE;QAChF,OAAO,EAAG,IAAI,CAAC,OAAmC,IAAI;YACpD,SAAS,EAAG,IAAI,CAAC,UAAqB,IAAI,EAAE;YAC5C,cAAc,EAAG,IAAI,CAAC,cAAyB,IAAI,EAAE;YACrD,mBAAmB,EAAG,QAAQ,CAAC,mBAA8B,IAAI,EAAE;SACpE;QACD,WAAW,EAAG,IAAI,CAAC,WAAsB,IAAI,IAAI;QACjD,wBAAwB,EAAG,IAAI,CAAC,wBAAmC,IAAI,IAAI;QAC3E,QAAQ,EAAG,IAAI,CAAC,QAAmC,IAAI,IAAI;QAC3D,UAAU,EAAG,QAAQ,CAAC,UAAqB,IAAK,IAAI,CAAC,UAAqB,IAAI,EAAE;QAChF,UAAU,EAAG,IAAI,CAAC,UAAqB,IAAI,EAAE;QAC7C,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC"}

package/dist/server/challenge-generator.d.ts

@@ -0,0 +1,10 @@
+import type { ChallengeResult } from "../types/challenge.js";
+import type { ChargeOptions, PluralSellerConfig } from "../types/config.js";
+export declare class ChallengeGenerator {
+    private readonly secretKey;
+    private readonly realm;
+    private readonly defaultExpiry;
+    constructor(config: PluralSellerConfig);
+    generate(options: ChargeOptions): ChallengeResult;
+}
+//# sourceMappingURL=challenge-generator.d.ts.map

package/dist/server/challenge-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-generator.d.ts","sourceRoot":"","sources":["../../src/server/challenge-generator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAGV,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAS5E,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,kBAAkB;IAMtC,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,eAAe;CAqDlD"}

package/dist/server/challenge-generator.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChallengeGenerator = void 0;
+const environments_js_1 = require("../config/environments.js");
+const base64url_js_1 = require("../utils/base64url.js");
+const hmac_sig_js_1 = require("../utils/hmac-sig.js");
+const DEFAULT_EXPIRY_SECONDS = 300;
+const PAYMENT_METHOD = "plural";
+const PAYMENT_INTENT = "charge";
+const PAYMENT_SCHEME = "exact";
+class ChallengeGenerator {
+    secretKey;
+    realm;
+    defaultExpiry;
+    constructor(config) {
+        this.secretKey = config.challengeSecretKey;
+        this.realm = config.realm ?? environments_js_1.DEFAULT_REALM;
+        this.defaultExpiry = config.defaultChallengeExpirySeconds ?? DEFAULT_EXPIRY_SECONDS;
+    }
+    generate(options) {
+        const expirySeconds = options.challengeExpirySeconds ?? this.defaultExpiry;
+        const expiresDt = new Date(Date.now() + expirySeconds * 1000);
+        const expires = expiresDt.toISOString().replace(/(\.\d{3})\d*Z$/, "$1Z");
+        const amountMajor = (options.amount.value / 100).toFixed(2);
+        const request = {
+            scheme: PAYMENT_SCHEME,
+            amount: amountMajor,
+            currency: options.amount.currency,
+            resource: options.resource,
+        };
+        const requestBase64 = (0, base64url_js_1.encodeJson)(request);
+        const challengeId = (0, hmac_sig_js_1.computeChallengeId)(this.secretKey, this.realm, PAYMENT_METHOD, PAYMENT_INTENT, requestBase64, expires);
+        const challenge = {
+            id: challengeId,
+            realm: this.realm,
+            method: PAYMENT_METHOD,
+            intent: PAYMENT_INTENT,
+            request,
+            expires,
+        };
+        const encoded = (0, base64url_js_1.encodeJson)({
+            id: challenge.id,
+            realm: challenge.realm,
+            method: challenge.method,
+            intent: challenge.intent,
+            request,
+            expires: challenge.expires,
+        });
+        const problemDetails = {
+            type: `${this.realm}/errors/payment-required`,
+            title: "Payment Required",
+            status: 402,
+            detail: `This resource requires payment of ₹${amountMajor} ${options.amount.currency}`,
+            challengeId,
+        };
+        return { challenge, encoded, problemDetails };
+    }
+}
+exports.ChallengeGenerator = ChallengeGenerator;
+//# sourceMappingURL=challenge-generator.js.map

package/dist/server/challenge-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-generator.js","sourceRoot":"","sources":["../../src/server/challenge-generator.ts"],"names":[],"mappings":";;;AAAA,+DAA0D;AAQ1D,wDAAmD;AACnD,sDAA0D;AAE1D,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAa,kBAAkB;IACZ,SAAS,CAAS;IAClB,KAAK,CAAS;IACd,aAAa,CAAS;IAEvC,YAAY,MAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,+BAAa,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,6BAA6B,IAAI,sBAAsB,CAAC;IACtF,CAAC;IAED,QAAQ,CAAC,OAAsB;QAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,aAAa,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC;QAC9D,MAAM,OAAO,GACX,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAqB;YAChC,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QAEF,MAAM,aAAa,GAAG,IAAA,yBAAU,EAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAA,gCAAkB,EACpC,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,OAAO,CACR,CAAC;QAEF,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,cAAc;YACtB,OAAO;YACP,OAAO;SACR,CAAC;QAEF,MAAM,OAAO,GAAG,IAAA,yBAAU,EAAC;YACzB,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO;YACP,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;QAEH,MAAM,cAAc,GAAmB;YACrC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,0BAA0B;YAC7C,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,sCAAsC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;YACtF,WAAW;SACZ,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAChD,CAAC;CACF;AAhED,gDAgEC"}

package/dist/server/credential-verifier.d.ts

@@ -0,0 +1,10 @@
+import type { PluralSellerConfig } from "../types/config.js";
+import type { VerificationResult } from "../types/credential.js";
+export declare class CredentialVerifier {
+    private readonly secretKey;
+    private readonly realm;
+    constructor(config: PluralSellerConfig);
+    verify(authorizationHeader?: string | null): VerificationResult;
+    private static extractPayload;
+}
+//# sourceMappingURL=credential-verifier.d.ts.map

package/dist/server/credential-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-verifier.d.ts","sourceRoot":"","sources":["../../src/server/credential-verifier.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAIV,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAMhC,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,MAAM,EAAE,kBAAkB;IAKtC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,kBAAkB;IAmG/D,OAAO,CAAC,MAAM,CAAC,cAAc;CAO9B"}

package/dist/server/credential-verifier.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialVerifier = void 0;
+const environments_js_1 = require("../config/environments.js");
+const base64url_js_1 = require("../utils/base64url.js");
+const hmac_sig_js_1 = require("../utils/hmac-sig.js");
+const PAYMENT_HEADER_PREFIX = "Payment ";
+class CredentialVerifier {
+    secretKey;
+    realm;
+    constructor(config) {
+        this.secretKey = config.challengeSecretKey;
+        this.realm = config.realm ?? environments_js_1.DEFAULT_REALM;
+    }
+    verify(authorizationHeader) {
+        const encoded = CredentialVerifier.extractPayload(authorizationHeader ?? "");
+        if (!encoded) {
+            return {
+                valid: false,
+                error: "Invalid Authorization header format. Expected: Payment <base64url>",
+            };
+        }
+        let raw;
+        try {
+            raw = (0, base64url_js_1.decodeJson)(encoded);
+        }
+        catch {
+            return {
+                valid: false,
+                error: "Failed to decode credential from Authorization header",
+            };
+        }
+        let credential;
+        try {
+            credential = dictToCredential(raw);
+        }
+        catch {
+            return {
+                valid: false,
+                error: "Credential contains an incomplete challenge",
+            };
+        }
+        const challenge = credential.challenge;
+        if (!challenge.id || !challenge.realm || !challenge.method || !challenge.request) {
+            return {
+                valid: false,
+                credential,
+                error: "Credential contains an incomplete challenge",
+            };
+        }
+        if (challenge.realm !== this.realm) {
+            return {
+                valid: false,
+                credential,
+                error: `Challenge realm mismatch. Expected "${this.realm}", got "${challenge.realm}"`,
+            };
+        }
+        if (challenge.method !== "plural") {
+            return {
+                valid: false,
+                credential,
+                error: `Unsupported payment method: ${challenge.method}`,
+            };
+        }
+        let expiresMs;
+        try {
+            expiresMs = isoToEpochMs(challenge.expires);
+        }
+        catch {
+            return { valid: false, credential, error: "Challenge has expired" };
+        }
+        if (expiresMs <= Date.now()) {
+            return { valid: false, credential, error: "Challenge has expired" };
+        }
+        const requestDict = {
+            scheme: challenge.request.scheme,
+            amount: challenge.request.amount,
+            currency: challenge.request.currency,
+            resource: challenge.request.resource,
+        };
+        const requestBase64 = (0, base64url_js_1.encodeJson)(requestDict);
+        const expectedId = (0, hmac_sig_js_1.computeChallengeId)(this.secretKey, challenge.realm, challenge.method, challenge.intent, requestBase64, challenge.expires);
+        if (challenge.id !== expectedId) {
+            return {
+                valid: false,
+                credential,
+                error: "Challenge HMAC verification failed. The challenge was not generated by this server.",
+            };
+        }
+        if (!credential.payload?.token) {
+            return {
+                valid: false,
+                credential,
+                error: "Credential missing payment token",
+            };
+        }
+        return { valid: true, credential };
+    }
+    static extractPayload(header) {
+        const trimmed = header.trim();
+        if (trimmed.startsWith(PAYMENT_HEADER_PREFIX)) {
+            return trimmed.slice(PAYMENT_HEADER_PREFIX.length).trim() || null;
+        }
+        return null;
+    }
+}
+exports.CredentialVerifier = CredentialVerifier;
+function dictToCredential(raw) {
+    const ch = raw.challenge ?? {};
+    const req = ch.request ?? {};
+    const payload = raw.payload ?? {};
+    const challenge = {
+        id: ch.id ?? "",
+        realm: ch.realm ?? "",
+        method: ch.method ?? "",
+        intent: ch.intent ?? "",
+        request: {
+            scheme: req.scheme ?? "",
+            amount: req.amount ?? "",
+            currency: req.currency ?? "",
+            resource: req.resource ?? "",
+        },
+        expires: ch.expires ?? "",
+    };
+    const credPayload = {
+        type: "token",
+        token: payload.token ?? "",
+        customer_reference: payload.customer_reference ?? null,
+    };
+    return {
+        challenge,
+        source: raw.source ?? "",
+        payload: credPayload,
+    };
+}
+function isoToEpochMs(iso) {
+    const d = new Date(iso);
+    if (isNaN(d.getTime()))
+        throw new Error(`Invalid date: ${iso}`);
+    return d.getTime();
+}
+//# sourceMappingURL=credential-verifier.js.map

package/dist/server/credential-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-verifier.js","sourceRoot":"","sources":["../../src/server/credential-verifier.ts"],"names":[],"mappings":";;;AAAA,+DAA0D;AAS1D,wDAA+D;AAC/D,sDAA0D;AAE1D,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEzC,MAAa,kBAAkB;IACZ,SAAS,CAAS;IAClB,KAAK,CAAS;IAE/B,YAAY,MAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,+BAAa,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,mBAAmC;QACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,cAAc,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oEAAoE;aAC5E,CAAC;QACJ,CAAC;QAED,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,yBAAU,EAAC,OAAO,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,uDAAuD;aAC/D,CAAC;QACJ,CAAC;QAED,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,6CAA6C;aACrD,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACjF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU;gBACV,KAAK,EAAE,6CAA6C;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU;gBACV,KAAK,EAAE,uCAAuC,IAAI,CAAC,KAAK,WAAW,SAAS,CAAC,KAAK,GAAG;aACtF,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU;gBACV,KAAK,EAAE,+BAA+B,SAAS,CAAC,MAAM,EAAE;aACzD,CAAC;QACJ,CAAC;QAED,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;YAChC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;YAChC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ;YACpC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ;SACrC,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,yBAAU,EAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAA,gCAAkB,EACnC,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,MAAM,EAChB,aAAa,EACb,SAAS,CAAC,OAAO,CAClB,CAAC;QAEF,IAAI,SAAS,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU;gBACV,KAAK,EAAE,qFAAqF;aAC7F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU;gBACV,KAAK,EAAE,kCAAkC;aAC1C,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,cAAc,CAAC,MAAc;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnHD,gDAmHC;AAED,SAAS,gBAAgB,CAAC,GAA4B;IACpD,MAAM,EAAE,GAAI,GAAG,CAAC,SAAqC,IAAI,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAI,EAAE,CAAC,OAAmC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAI,GAAG,CAAC,OAAmC,IAAI,EAAE,CAAC;IAE/D,MAAM,SAAS,GAAwB;QACrC,EAAE,EAAG,EAAE,CAAC,EAAa,IAAI,EAAE;QAC3B,KAAK,EAAG,EAAE,CAAC,KAAgB,IAAI,EAAE;QACjC,MAAM,EAAG,EAAE,CAAC,MAAiB,IAAI,EAAE;QACnC,MAAM,EAAG,EAAE,CAAC,MAAiB,IAAI,EAAE;QACnC,OAAO,EAAE;YACP,MAAM,EAAG,GAAG,CAAC,MAAiB,IAAI,EAAE;YACpC,MAAM,EAAG,GAAG,CAAC,MAAiB,IAAI,EAAE;YACpC,QAAQ,EAAG,GAAG,CAAC,QAAmB,IAAI,EAAE;YACxC,QAAQ,EAAG,GAAG,CAAC,QAAmB,IAAI,EAAE;SACrB;QACrB,OAAO,EAAG,EAAE,CAAC,OAAkB,IAAI,EAAE;KACtC,CAAC;IAEF,MAAM,WAAW,GAAsB;QACrC,IAAI,EAAE,OAAO;QACb,KAAK,EAAG,OAAO,CAAC,KAAgB,IAAI,EAAE;QACtC,kBAAkB,EAAG,OAAO,CAAC,kBAA6B,IAAI,IAAI;KACnE,CAAC;IAEF,OAAO;QACL,SAAS;QACT,MAAM,EAAG,GAAG,CAAC,MAAiB,IAAI,EAAE;QACpC,OAAO,EAAE,WAAW;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/dist/server/grant-token-verifier.d.ts

@@ -0,0 +1,15 @@
+import type { GrantVerificationResult, SellerGrantexConfig } from "../types/grantex.js";
+export declare const GRANTEX_TOKEN_HEADER = "X-Grantex-Token";
+export declare class GrantTokenVerifier {
+    private readonly jwksUrl;
+    private readonly cacheTtlMs;
+    private readonly requiredScopes;
+    private jwks;
+    private cacheExpiresAt;
+    constructor(config: SellerGrantexConfig);
+    verify(grantToken: string): Promise<GrantVerificationResult>;
+    private validateClaims;
+    private static hasScope;
+    private getJwks;
+}
+//# sourceMappingURL=grant-token-verifier.d.ts.map

package/dist/server/grant-token-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-token-verifier.d.ts","sourceRoot":"","sources":["../../src/server/grant-token-verifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoB,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1G,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAGtD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAW;IAC1C,OAAO,CAAC,IAAI,CAA2D;IACvE,OAAO,CAAC,cAAc,CAAK;gBAEf,MAAM,EAAE,mBAAmB;IAMjC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAsClE,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,MAAM,CAAC,QAAQ;IAYvB,OAAO,CAAC,OAAO;CAQhB"}

package/dist/server/grant-token-verifier.js

@@ -0,0 +1,155 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GrantTokenVerifier = exports.GRANTEX_TOKEN_HEADER = void 0;
+const jose = __importStar(require("jose"));
+exports.GRANTEX_TOKEN_HEADER = "X-Grantex-Token";
+const DEFAULT_JWKS_CACHE_TTL_MS = 3_600_000;
+class GrantTokenVerifier {
+    jwksUrl;
+    cacheTtlMs;
+    requiredScopes;
+    jwks = null;
+    cacheExpiresAt = 0;
+    constructor(config) {
+        this.jwksUrl = config.jwksUrl;
+        this.cacheTtlMs = config.jwksCacheTtlMs ?? DEFAULT_JWKS_CACHE_TTL_MS;
+        this.requiredScopes = [...(config.requiredScopes ?? [])];
+    }
+    async verify(grantToken) {
+        try {
+            const header = jose.decodeProtectedHeader(grantToken);
+            if (header.alg !== "RS256") {
+                return {
+                    valid: false,
+                    error: `Unsupported algorithm: ${header.alg}. Expected RS256`,
+                };
+            }
+            const jwks = this.getJwks();
+            let result;
+            try {
+                result = await jose.jwtVerify(grantToken, jwks, {
+                    algorithms: ["RS256"],
+                });
+            }
+            catch (err) {
+                if (err instanceof jose.errors.JWTExpired) {
+                    return { valid: false, error: "Grant token has expired" };
+                }
+                if (err instanceof jose.errors.JWTClaimValidationFailed && String(err).includes("nbf")) {
+                    return { valid: false, error: "Grant token is not yet valid" };
+                }
+                if (err instanceof jose.errors.JWSSignatureVerificationFailed) {
+                    return { valid: false, error: "Invalid grant token signature" };
+                }
+                return { valid: false, error: `Grant token verification failed: ${err}` };
+            }
+            const claims = dictToClaims(result.payload);
+            const err = this.validateClaims(claims);
+            if (err)
+                return { valid: false, error: err };
+            return { valid: true, claims };
+        }
+        catch (err) {
+            return { valid: false, error: `Grant token verification failed: ${err}` };
+        }
+    }
+    validateClaims(claims) {
+        const now = Math.floor(Date.now() / 1000);
+        if (!claims.grnt)
+            return "Missing grant ID (grnt)";
+        if (!claims.sub)
+            return "Missing subject (sub)";
+        if (!claims.agt)
+            return "Missing agent ID (agt)";
+        if (!claims.iss)
+            return "Missing issuer (iss)";
+        if (!claims.scp || claims.scp.length === 0)
+            return "Missing or empty scopes (scp)";
+        if (claims.exp && claims.exp < now) {
+            const iso = new Date(claims.exp * 1000).toISOString().replace(/\.\d{3}Z$/, "Z");
+            return `Grant expired at ${iso}`;
+        }
+        if (claims.nbf && claims.nbf > now) {
+            const iso = new Date(claims.nbf * 1000).toISOString().replace(/\.\d{3}Z$/, "Z");
+            return `Grant not yet valid until ${iso}`;
+        }
+        for (const required of this.requiredScopes) {
+            if (!GrantTokenVerifier.hasScope(claims.scp, required)) {
+                return `Missing required scope: ${required}`;
+            }
+        }
+        return null;
+    }
+    static hasScope(scopes, required) {
+        if (scopes.includes(required))
+            return true;
+        const parts = required.split(":");
+        for (const scope of scopes) {
+            const scopeParts = scope.split(":");
+            if (scopeParts.length >= 2 && parts.length >= 2 && scopeParts[0] === parts[0] && scopeParts[1] === "*") {
+                return true;
+            }
+        }
+        return false;
+    }
+    getJwks() {
+        const now = Date.now();
+        if (!this.jwks || now >= this.cacheExpiresAt) {
+            this.jwks = jose.createRemoteJWKSet(new URL(this.jwksUrl));
+            this.cacheExpiresAt = now + this.cacheTtlMs;
+        }
+        return this.jwks;
+    }
+}
+exports.GrantTokenVerifier = GrantTokenVerifier;
+function dictToClaims(raw) {
+    return {
+        iss: raw.iss ?? "",
+        sub: raw.sub ?? "",
+        agt: raw.agt ?? "",
+        scp: raw.scp ?? [],
+        grnt: raw.grnt ?? "",
+        iat: raw.iat ?? 0,
+        exp: raw.exp ?? 0,
+        dev: raw.dev ?? null,
+        nbf: raw.nbf ?? null,
+        parentAgt: raw.parentAgt ?? null,
+        parentGrnt: raw.parentGrnt ?? null,
+        delegationDepth: raw.delegationDepth ?? null,
+        raw,
+    };
+}
+//# sourceMappingURL=grant-token-verifier.js.map

package/dist/server/grant-token-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-token-verifier.js","sourceRoot":"","sources":["../../src/server/grant-token-verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAGhB,QAAA,oBAAoB,GAAG,iBAAiB,CAAC;AACtD,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAE5C,MAAa,kBAAkB;IACZ,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,cAAc,CAAW;IAClC,IAAI,GAAsD,IAAI,CAAC;IAC/D,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,yBAAyB,CAAC;QACrE,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBAC3B,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,0BAA0B,MAAM,CAAC,GAAG,kBAAkB;iBAC9D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE;oBAC9C,UAAU,EAAE,CAAC,OAAO,CAAC;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBAC5D,CAAC;gBACD,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;gBACjE,CAAC;gBACD,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC;oBAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;gBAClE,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,GAAG,EAAE,EAAE,CAAC;YAC5E,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,OAAkC,CAAC,CAAC;YACvE,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,GAAG,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAAwB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,yBAAyB,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,uBAAuB,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,wBAAwB,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,sBAAsB,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAEnF,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAChF,OAAO,oBAAoB,GAAG,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAChF,OAAO,6BAA6B,GAAG,EAAE,CAAC;QAC5C,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvD,OAAO,2BAA2B,QAAQ,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,MAAgB,EAAE,QAAgB;QACxD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvG,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAhGD,gDAgGC;AAED,SAAS,YAAY,CAAC,GAA4B;IAChD,OAAO;QACL,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,EAAE;QAC9B,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,EAAE;QAC9B,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,EAAE;QAC9B,GAAG,EAAG,GAAG,CAAC,GAAgB,IAAI,EAAE;QAChC,IAAI,EAAG,GAAG,CAAC,IAAe,IAAI,EAAE;QAChC,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,CAAC;QAC7B,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,CAAC;QAC7B,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,IAAI;QAChC,GAAG,EAAG,GAAG,CAAC,GAAc,IAAI,IAAI;QAChC,SAAS,EAAG,GAAG,CAAC,SAAoB,IAAI,IAAI;QAC5C,UAAU,EAAG,GAAG,CAAC,UAAqB,IAAI,IAAI;QAC9C,eAAe,EAAG,GAAG,CAAC,eAA0B,IAAI,IAAI;QACxD,GAAG;KACJ,CAAC;AACJ,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,8 @@
+export { PluralMPP, PluralMPPInstance } from "./plural-mpp.js";
+export { ChallengeGenerator } from "./challenge-generator.js";
+export { CredentialVerifier } from "./credential-verifier.js";
+export { CaptureClient } from "./capture-client.js";
+export { AuthManager } from "./auth-manager.js";
+export { GrantTokenVerifier, GRANTEX_TOKEN_HEADER } from "./grant-token-verifier.js";
+export { buildReceiptData, buildReceiptHeader, buildFailureReceiptData, } from "./receipt-builder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildFailureReceiptData = exports.buildReceiptHeader = exports.buildReceiptData = exports.GRANTEX_TOKEN_HEADER = exports.GrantTokenVerifier = exports.AuthManager = exports.CaptureClient = exports.CredentialVerifier = exports.ChallengeGenerator = exports.PluralMPPInstance = exports.PluralMPP = void 0;
+var plural_mpp_js_1 = require("./plural-mpp.js");
+Object.defineProperty(exports, "PluralMPP", { enumerable: true, get: function () { return plural_mpp_js_1.PluralMPP; } });
+Object.defineProperty(exports, "PluralMPPInstance", { enumerable: true, get: function () { return plural_mpp_js_1.PluralMPPInstance; } });
+var challenge_generator_js_1 = require("./challenge-generator.js");
+Object.defineProperty(exports, "ChallengeGenerator", { enumerable: true, get: function () { return challenge_generator_js_1.ChallengeGenerator; } });
+var credential_verifier_js_1 = require("./credential-verifier.js");
+Object.defineProperty(exports, "CredentialVerifier", { enumerable: true, get: function () { return credential_verifier_js_1.CredentialVerifier; } });
+var capture_client_js_1 = require("./capture-client.js");
+Object.defineProperty(exports, "CaptureClient", { enumerable: true, get: function () { return capture_client_js_1.CaptureClient; } });
+var auth_manager_js_1 = require("./auth-manager.js");
+Object.defineProperty(exports, "AuthManager", { enumerable: true, get: function () { return auth_manager_js_1.AuthManager; } });
+var grant_token_verifier_js_1 = require("./grant-token-verifier.js");
+Object.defineProperty(exports, "GrantTokenVerifier", { enumerable: true, get: function () { return grant_token_verifier_js_1.GrantTokenVerifier; } });
+Object.defineProperty(exports, "GRANTEX_TOKEN_HEADER", { enumerable: true, get: function () { return grant_token_verifier_js_1.GRANTEX_TOKEN_HEADER; } });
+var receipt_builder_js_1 = require("./receipt-builder.js");
+Object.defineProperty(exports, "buildReceiptData", { enumerable: true, get: function () { return receipt_builder_js_1.buildReceiptData; } });
+Object.defineProperty(exports, "buildReceiptHeader", { enumerable: true, get: function () { return receipt_builder_js_1.buildReceiptHeader; } });
+Object.defineProperty(exports, "buildFailureReceiptData", { enumerable: true, get: function () { return receipt_builder_js_1.buildFailureReceiptData; } });
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;AAAA,iDAA+D;AAAtD,0GAAA,SAAS,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AACrC,mEAA8D;AAArD,4HAAA,kBAAkB,OAAA;AAC3B,mEAA8D;AAArD,4HAAA,kBAAkB,OAAA;AAC3B,yDAAoD;AAA3C,kHAAA,aAAa,OAAA;AACtB,qDAAgD;AAAvC,8GAAA,WAAW,OAAA;AACpB,qEAAqF;AAA5E,6HAAA,kBAAkB,OAAA;AAAE,+HAAA,oBAAoB,OAAA;AACjD,2DAI8B;AAH5B,sHAAA,gBAAgB,OAAA;AAChB,wHAAA,kBAAkB,OAAA;AAClB,6HAAA,uBAAuB,OAAA"}

package/dist/server/plural-mpp.d.ts

@@ -0,0 +1,26 @@
+import type { CaptureOptions, CaptureResult } from "../types/capture.js";
+import type { ChallengeResult } from "../types/challenge.js";
+import type { ChargeOptions, PluralSellerConfig } from "../types/config.js";
+import type { VerificationResult } from "../types/credential.js";
+import type { GrantVerificationResult } from "../types/grantex.js";
+import { CaptureClient } from "./capture-client.js";
+import { ChallengeGenerator } from "./challenge-generator.js";
+import { CredentialVerifier } from "./credential-verifier.js";
+import { GrantTokenVerifier } from "./grant-token-verifier.js";
+export declare class PluralMPPInstance {
+    private readonly challengeGenerator;
+    private readonly credentialVerifier;
+    private readonly captureClient;
+    private readonly grantVerifier;
+    constructor(challengeGenerator: ChallengeGenerator, credentialVerifier: CredentialVerifier, captureClient: CaptureClient, grantVerifier: GrantTokenVerifier | null);
+    generateChallenge(options: ChargeOptions): ChallengeResult;
+    verifyCredential(authorizationHeader?: string | null): VerificationResult;
+    capture(options: CaptureOptions): Promise<CaptureResult>;
+    buildReceiptHeader(captureResult: CaptureResult, challengeId: string): string;
+    buildReceiptData(captureResult: CaptureResult, challengeId: string): import("../types/capture.js").ReceiptData;
+    verifyGrantToken(grantToken: string): Promise<GrantVerificationResult | null>;
+}
+export declare class PluralMPP {
+    static create(config: PluralSellerConfig): PluralMPPInstance;
+}
+//# sourceMappingURL=plural-mpp.d.ts.map