@reapp-sdk/express-middleware 0.1.0

package/README.md

@@ -0,0 +1,206 @@
+# @reapp-sdk/express-middleware 0.1.0
+
+Fail-closed Express middleware for REAPP payment-gated APIs on Stellar.
+
+The middleware issues an x402-style `402` challenge, accepts an `X-PAYMENT`
+settlement proof, and independently verifies the successful Stellar transaction
+before a protected handler runs. The transaction must contain one unambiguous
+payment event from the configured MandateRegistry and one matching SEP-41
+transfer from the mandate user to the configured merchant. Header claims never
+replace contract evidence.
+
+Supports Express 4 and Express 5. Ships as ESM with TypeScript declarations.
+
+## Install
+
+```bash
+npm install @reapp-sdk/express-middleware express
+```
+
+## Quick start
+
+```ts
+import express from "express";
+import {
+  InMemoryRedemptionStore,
+  createReappPaymentMiddleware,
+  getVerifiedPayment,
+} from "@reapp-sdk/express-middleware";
+
+const app = express();
+
+const requirePayment = createReappPaymentMiddleware({
+  merchant: process.env.REAPP_MERCHANT_ADDRESS!,
+  sourceAccount: process.env.REAPP_READ_SOURCE_ADDRESS!,
+  amount: "1.00",
+  resource: "/source/market",
+  // Local development and one-process demos only. See Production replay safety.
+  redemptionStore: new InMemoryRedemptionStore(),
+});
+
+app.get("/source/market", requirePayment, (_request, response) => {
+  const payment = getVerifiedPayment(response);
+  response.json({
+    source: "verified research data",
+    settlement: payment?.txHash,
+    mandate: payment?.mandateId,
+  });
+});
+
+app.listen(4021);
+```
+
+`sourceAccount` is a funded Stellar `G...` address used only to simulate the
+read-only `get_mandate` call. The verifier never signs or submits a transaction.
+
+## What is verified
+
+For each paid retry, the default verifier requires all of the following:
+
+1. The configured RPC reports the exact configured network passphrase.
+2. The transaction hash is valid, successful, and inside the configured ledger
+   freshness window.
+3. Exactly one contract event is emitted by the configured MandateRegistry with
+   topics `payment` and the configured merchant, plus a 32-byte mandate id and
+   an amount meeting the request price.
+4. The event-derived mandate currently stored by the contract names the same
+   merchant and SEP-41 asset and supplies the user and agent identities.
+5. The same transaction contains exactly one matching transfer emitted by that
+   asset, from the mandate user to the merchant, for the exact event amount.
+6. A shared redemption store atomically consumes the network + registry +
+   transaction key before the protected handler runs.
+
+Only the transaction hash crosses from the HTTP adapter into the verifier.
+Caller-supplied `amount` and `mandateId` fields remain wire-format hints; the
+verified values placed in `response.locals` come from Stellar and the contract.
+
+## Production replay safety
+
+`InMemoryRedemptionStore` is intentionally limited to one Node.js process. A
+production deployment must provide a durable `RedemptionStore` whose
+`consumeOnce` operation is linearizable across every worker and host:
+
+```ts
+import type {
+  RedemptionRecord,
+  RedemptionStore,
+} from "@reapp-sdk/express-middleware";
+
+class SharedRedemptionStore implements RedemptionStore {
+  async consumeOnce(
+    record: Readonly<RedemptionRecord>,
+  ): Promise<"consumed" | "duplicate"> {
+    // Perform one atomic set-if-absent in your durable database.
+    // Never delete a consumed key merely because downstream delivery failed.
+    return atomicInsert(record.key, record) ? "consumed" : "duplicate";
+  }
+}
+```
+
+Only the caller that receives `consumed` reaches the protected handler. A store
+error returns `503` and never serves the resource.
+
+## Response behavior
+
+| Condition | Status | Behavior |
+|---|---:|---|
+| No proof or malformed/invalid settlement | `402` | Returns a fresh payment requirement. |
+| Settlement already consumed | `409` | Does not invite a second payment. |
+| RPC, mandate lookup, or redemption store unavailable | `503` | Fails closed with `Retry-After`; retry the same proof. |
+| Verified and atomically consumed | next handler | Stores chain-derived evidence in `response.locals.reappPayment`. |
+
+Challenges and successful responses receive `Cache-Control: private, no-store`
+and `Vary: X-PAYMENT` so a shared cache cannot bypass the payment boundary.
+
+## Request-specific prices
+
+`amount` and `resource` may be resolver functions. The middleware snapshots the
+resolved requirement before any asynchronous verification:
+
+```ts
+const requirePayment = createReappPaymentMiddleware({
+  merchant: MERCHANT,
+  sourceAccount: READ_SOURCE,
+  amount: (request) => priceFor(request.params.id),
+  resource: (request) => `/source/${request.params.id}`,
+  redemptionStore,
+});
+```
+
+Amounts are decimal strings and are converted to integer stroops. Floating-point
+amounts, scientific notation, over-precision, zero, and values outside i128 fail
+closed.
+
+## API
+
+### `createReappPaymentMiddleware(options)`
+
+Creates an Express 4/5 `RequestHandler`.
+
+| Option | Type | Meaning |
+|---|---|---|
+| `merchant` | `string` | Required Stellar address that must receive the transfer. |
+| `amount` | `string \| (request) => string` | Required decimal price. |
+| `redemptionStore` | `RedemptionStore` | Required atomic consume-once store. |
+| `sourceAccount` | `string?` | Funded `G...` address for read-only simulations; required by the default verifier. |
+| `resource` | `string \| (request) => string` | Challenge resource id; defaults to `request.originalUrl`. |
+| `asset` | `string?` | Required SEP-41 emitter; defaults to the configured network's native SAC. |
+| `networkConfig` | `NetworkConfig?` | RPC, passphrase, registry, and native SAC; defaults to REAPP testnet. |
+| `scheme` | `string?` | Wire scheme; defaults to `reapp-soroban`. |
+| `network` | `string?` | Wire network label; defaults to `stellar-testnet`. |
+| `decimals` | `number?` | Asset decimals; defaults to `7`. |
+| `maxProofAgeLedgers` | `number?` | Settlement freshness window; defaults to `120`. |
+| `pollAttempts` | `number?` | `NOT_FOUND` retries; defaults to `15`. |
+| `pollIntervalMs` | `number?` | Retry delay; defaults to `1000`. |
+| `maxHeaderBytes` | `number?` | Strict `X-PAYMENT` size limit; defaults to `8192`. |
+| `allowHttpRpc` | `boolean?` | Development-only plaintext RPC escape hatch; defaults to `false`. |
+| `verifier` | `PaymentVerifier?` | Explicit trusted verifier injection for tests or alternate RPC infrastructure. |
+
+### Runtime exports
+
+| Export | Purpose |
+|---|---|
+| `createReappPaymentMiddleware` | Build the payment boundary. |
+| `getVerifiedPayment(response)` | Read the chain-derived `VerifiedPayment` after the gate. |
+| `InMemoryRedemptionStore` | One-process development/test store. |
+| `createStellarPaymentVerifier` | Build the independent Stellar verifier. |
+| `buildChallenge` | Build the isolated x402-style response object. |
+| `createRedemptionKey` | Create the normalized cross-network replay key. |
+| `extractContractEvents`, `interpretEvents` | Strict V3/V4 Stellar event decoding helpers. |
+| `selectPayment`, `selectTransfer` | Pure fail-closed event selection helpers. |
+
+The package also exports TypeScript types for requirements, verified payments,
+verifiers, redemption records and stores, middleware options, and decoded event
+evidence.
+
+## Wire-format isolation
+
+x402 is evolving. REAPP keeps the HTTP challenge/proof shape in the isolated
+adapter inside `@reapp-sdk/core`; MandateRegistry does not depend on that shape.
+An x402 version change can replace the adapter while the same contract methods,
+storage, and verifier invariants remain intact.
+
+## Current protocol limits
+
+- The settlement proof is bearer data. Atomic consumption prevents two
+  successful redemptions, but a copied proof can race the legitimate requester.
+- The challenge resource is not committed into the current contract event.
+  Exact requester/resource binding requires an authenticated nonce/signature or
+  a future contract/event commitment; this package does not claim that property.
+- `get_mandate` reads current contract state, not a historical state snapshot.
+  Same-transaction registry and token events prove settlement, while current
+  state binds the mandate identities and asset.
+
+## Current contract evidence
+
+The testnet default is the upgradeable simple MandateRegistry:
+
+- Contract: [`CC6JMPDHRPBR2HBLJKRCIKV54HXDV2RFXDKW6MALQKWM6JEAJQHICRWE`](https://stellar.expert/explorer/testnet/contract/CC6JMPDHRPBR2HBLJKRCIKV54HXDV2RFXDKW6MALQKWM6JEAJQHICRWE)
+- WASM SHA-256: `13f7023d4a361b6e49d3d39f61f55c5eeece51a602013a3cddae420d2ce8552b`
+- Reproducible release: [`simple-v0.2.0`](https://github.com/reapp-protocol/reapp-protocol-contracts/releases/tag/simple-v0.2.0_contracts_simple_mandate_registry_mandate-registry_pkg0.2.0_cli25.1.0)
+
+The contract checks and consumes authorization inside `execute_payment` before
+the token transfer. Testnet operations include pause, authority rotation, and a
+24-hour timelocked same-address upgrade path.
+
+Apache-2.0.

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./types.js";
+export * from "./proof-store.js";
+export * from "./verification.js";
+export * from "./middleware.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from "./types.js";
+export * from "./proof-store.js";
+export * from "./verification.js";
+export * from "./middleware.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,8 @@
+import type { RequestHandler, Response } from "express";
+import type { PaymentRequirement, ReappPaymentMiddlewareOptions, VerifiedPayment, X402Challenge } from "./types.js";
+export declare const REAPP_PAYMENT_LOCALS_KEY: "reappPayment";
+export declare function buildChallenge(requirement: PaymentRequirement): X402Challenge;
+export declare function getVerifiedPayment(response: Response): VerifiedPayment | undefined;
+export declare function createRedemptionKey(networkPassphrase: string, registryId: string, txHash: string): string;
+export declare function createReappPaymentMiddleware(options: ReappPaymentMiddlewareOptions): RequestHandler;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAyB,cAAc,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/E,OAAO,KAAK,EACV,kBAAkB,EAClB,6BAA6B,EAE7B,eAAe,EACf,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,wBAAwB,EAAG,cAAuB,CAAC;AA6DhE,wBAAgB,cAAc,CAAC,WAAW,EAAE,kBAAkB,GAAG,aAAa,CAe7E;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,eAAe,GAAG,SAAS,CAElF;AAED,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,MAAM,CAGR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC,cAAc,CAkLhB"}

package/dist/middleware.js

@@ -0,0 +1,243 @@
+import { createHash } from "node:crypto";
+import { Buffer } from "buffer";
+import { Address, StrKey } from "@stellar/stellar-sdk";
+import { X_PAYMENT_HEADER, decodePaymentProof, toStroops } from "@reapp-sdk/core";
+import { TESTNET } from "@reapp-sdk/stellar";
+import { createStellarPaymentVerifier } from "./verification.js";
+export const REAPP_PAYMENT_LOCALS_KEY = "reappPayment";
+const DEFAULT_MAX_HEADER_BYTES = 8_192;
+const DEFAULT_MAX_PROOF_AGE_LEDGERS = 120;
+function exactText(label, value) {
+    if (typeof value !== "string" || value.length === 0 || value.trim() !== value) {
+        throw new Error(`${label} must be a non-empty string without surrounding whitespace.`);
+    }
+    return value;
+}
+function stellarAddress(label, value) {
+    const address = exactText(label, value);
+    try {
+        Address.fromString(address);
+    }
+    catch {
+        throw new Error(`${label} must be a valid Stellar address.`);
+    }
+    return address;
+}
+function resolveRequestValue(label, value, request) {
+    return exactText(label, typeof value === "function" ? value(request) : value);
+}
+function setPrivateResponseHeaders(response) {
+    response.set("cache-control", "private, no-store");
+    response.vary("X-PAYMENT");
+}
+function json(response, status, body, retryAfter) {
+    setPrivateResponseHeaders(response);
+    response.status(status);
+    if (retryAfter)
+        response.set("retry-after", retryAfter);
+    response.json(body);
+}
+function canonicalPaymentHeader(request, maxBytes) {
+    const values = [];
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        const name = request.rawHeaders[index];
+        const value = request.rawHeaders[index + 1];
+        if (name?.toLowerCase() === X_PAYMENT_HEADER && value !== undefined)
+            values.push(value);
+    }
+    if (values.length === 0)
+        return undefined;
+    if (values.length !== 1)
+        throw new Error("multiple X-PAYMENT headers are not allowed");
+    const header = values[0];
+    if (Buffer.byteLength(header, "utf8") > maxBytes) {
+        throw new Error("X-PAYMENT header exceeds the configured size limit");
+    }
+    if (header.length === 0
+        || header.includes(",")
+        || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(header)
+        || Buffer.from(header, "base64").toString("base64") !== header) {
+        throw new Error("X-PAYMENT header is not canonical base64");
+    }
+    return header;
+}
+export function buildChallenge(requirement) {
+    return {
+        x402Version: 1,
+        accepts: [
+            {
+                scheme: requirement.scheme,
+                network: requirement.network,
+                maxAmountRequired: requirement.amount,
+                asset: requirement.asset,
+                payTo: requirement.merchant,
+                resource: requirement.resource,
+                extra: { contract: requirement.registryId },
+            },
+        ],
+    };
+}
+export function getVerifiedPayment(response) {
+    return response.locals[REAPP_PAYMENT_LOCALS_KEY];
+}
+export function createRedemptionKey(networkPassphrase, registryId, txHash) {
+    const networkId = createHash("sha256").update(networkPassphrase, "utf8").digest("hex");
+    return `${networkId}:${registryId.toLowerCase()}:${txHash.toLowerCase()}`;
+}
+export function createReappPaymentMiddleware(options) {
+    if (!options || typeof options !== "object") {
+        throw new Error("REAPP payment middleware options are required.");
+    }
+    if (!options.redemptionStore || typeof options.redemptionStore.consumeOnce !== "function") {
+        throw new Error("redemptionStore with an atomic consumeOnce(record) operation is required.");
+    }
+    const networkConfig = options.networkConfig ?? TESTNET;
+    const merchant = stellarAddress("merchant", options.merchant);
+    const registryId = exactText("networkConfig.mandateRegistryId", networkConfig.mandateRegistryId);
+    if (!StrKey.isValidContract(registryId)) {
+        throw new Error("networkConfig.mandateRegistryId must be a valid Stellar contract address.");
+    }
+    const asset = exactText("asset", options.asset ?? networkConfig.nativeSac);
+    if (!StrKey.isValidContract(asset)) {
+        throw new Error("asset must be a valid Stellar contract address.");
+    }
+    const scheme = exactText("scheme", options.scheme ?? "reapp-soroban");
+    const network = exactText("network", options.network ?? "stellar-testnet");
+    const decimals = options.decimals ?? 7;
+    const maxHeaderBytes = options.maxHeaderBytes ?? DEFAULT_MAX_HEADER_BYTES;
+    const maxProofAgeLedgers = options.maxProofAgeLedgers ?? DEFAULT_MAX_PROOF_AGE_LEDGERS;
+    if (!Number.isInteger(decimals) || decimals < 0 || decimals > 38) {
+        throw new Error("decimals must be an integer from 0 through 38.");
+    }
+    if (!Number.isInteger(maxHeaderBytes) || maxHeaderBytes < 256 || maxHeaderBytes > 65_536) {
+        throw new Error("maxHeaderBytes must be an integer from 256 through 65536.");
+    }
+    if (!Number.isInteger(maxProofAgeLedgers) || maxProofAgeLedgers < 0 || maxProofAgeLedgers > 1_000_000) {
+        throw new Error("maxProofAgeLedgers must be an integer from 0 through 1000000.");
+    }
+    if (typeof options.amount === "string") {
+        const staticAmount = toStroops(exactText("amount", options.amount), decimals);
+        if (staticAmount <= 0n)
+            throw new Error("amount must be greater than zero.");
+    }
+    if (typeof options.resource === "string")
+        exactText("resource", options.resource);
+    const verifier = options.verifier ?? createStellarPaymentVerifier({
+        networkConfig,
+        sourceAccount: options.sourceAccount ?? merchant,
+        pollAttempts: options.pollAttempts,
+        pollIntervalMs: options.pollIntervalMs,
+        maxProofAgeLedgers,
+        allowHttpRpc: options.allowHttpRpc,
+    });
+    const handle = async (request, response, next) => {
+        let requirement;
+        try {
+            const amount = resolveRequestValue("amount", options.amount, request);
+            const amountStroops = toStroops(amount, decimals);
+            if (amountStroops <= 0n)
+                throw new Error("amount must be greater than zero.");
+            const resource = options.resource === undefined
+                ? exactText("resource", request.originalUrl || request.url)
+                : resolveRequestValue("resource", options.resource, request);
+            requirement = Object.freeze({
+                scheme,
+                network,
+                resource,
+                merchant,
+                asset,
+                amount,
+                amountStroops,
+                registryId,
+                decimals,
+            });
+        }
+        catch {
+            json(response, 500, { error: "payment middleware configuration failed closed" });
+            return;
+        }
+        const challenge = buildChallenge(requirement);
+        let header;
+        try {
+            header = canonicalPaymentHeader(request, maxHeaderBytes);
+        }
+        catch (error) {
+            json(response, 402, {
+                error: error instanceof Error ? error.message : "malformed X-PAYMENT proof",
+                ...challenge,
+            });
+            return;
+        }
+        if (!header) {
+            json(response, 402, challenge);
+            return;
+        }
+        let proof;
+        try {
+            proof = decodePaymentProof(header);
+        }
+        catch {
+            json(response, 402, { error: "malformed X-PAYMENT proof", ...challenge });
+            return;
+        }
+        if (proof.scheme !== requirement.scheme) {
+            json(response, 402, { error: "payment proof scheme does not match this API", ...challenge });
+            return;
+        }
+        if (proof.network !== requirement.network) {
+            json(response, 402, { error: "payment proof network does not match this API", ...challenge });
+            return;
+        }
+        if (!/^[0-9a-f]{64}$/i.test(proof.txHash)) {
+            json(response, 402, { error: "payment proof transaction hash is invalid", ...challenge });
+            return;
+        }
+        let verdict;
+        try {
+            // txHash is the only caller-supplied field allowed across this boundary.
+            verdict = await verifier.verify(proof.txHash.toLowerCase(), requirement);
+        }
+        catch {
+            json(response, 503, { error: "payment verification is temporarily unavailable; retry with the same proof", retryable: true }, "1");
+            return;
+        }
+        if (!verdict.ok) {
+            if (verdict.kind === "unavailable") {
+                json(response, 503, { error: `payment verification unavailable: ${verdict.reason}`, retryable: true }, "1");
+            }
+            else {
+                json(response, 402, { error: `payment not verified on-chain: ${verdict.reason}`, ...challenge });
+            }
+            return;
+        }
+        const redemptionKey = createRedemptionKey(networkConfig.networkPassphrase, requirement.registryId, verdict.payment.txHash);
+        let consumed;
+        try {
+            consumed = await options.redemptionStore.consumeOnce(Object.freeze({
+                key: redemptionKey,
+                payment: Object.freeze({ ...verdict.payment }),
+                acceptedThroughLedger: verdict.payment.ledger + maxProofAgeLedgers,
+            }));
+            if (consumed !== "consumed" && consumed !== "duplicate") {
+                throw new Error("redemption store returned an unsupported result");
+            }
+        }
+        catch {
+            json(response, 503, { error: "payment redemption store is unavailable; retry with the same proof", retryable: true }, "1");
+            return;
+        }
+        if (consumed === "duplicate") {
+            json(response, 409, { error: "this payment was already redeemed" });
+            return;
+        }
+        response.locals[REAPP_PAYMENT_LOCALS_KEY] = verdict.payment;
+        setPrivateResponseHeaders(response);
+        next();
+    };
+    // Express 4 does not forward rejected async middleware promises. Always end
+    // the internal promise explicitly and hand unexpected faults to next(error).
+    return (request, response, next) => {
+        void handle(request, response, next).catch(next);
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AASjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAuB,CAAC;AAChE,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAE1C,SAAS,SAAS,CAAC,KAAa,EAAE,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6DAA6D,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAmB,EAAE,OAAgB;IAC/E,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAkB;IACnD,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,IAAI,CAAC,QAAkB,EAAE,MAAc,EAAE,IAAa,EAAE,UAAmB;IAClF,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,UAAU;QAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB,EAAE,QAAgB;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,gBAAgB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;WAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;WACpB,CAAC,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC;WAChF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAA+B;IAC5D,OAAO;QACL,WAAW,EAAE,CAAC;QACd,OAAO,EAAE;YACP;gBACE,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,iBAAiB,EAAE,WAAW,CAAC,MAAM;gBACrC,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,KAAK,EAAE,WAAW,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,UAAU,EAAE;aAC5C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAkB;IACnD,OAAO,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAgC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,iBAAyB,EACzB,UAAkB,EAClB,MAAc;IAEd,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,GAAG,SAAS,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAsC;IAEtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,OAAO,CAAC,eAAe,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,iCAAiC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IACvF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,GAAG,IAAI,cAAc,GAAG,MAAM,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC,IAAI,kBAAkB,GAAG,SAAS,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,YAAY,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC;QAChE,aAAa;QACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;QAChD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,kBAAkB;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,KAAK,EAClB,OAAgB,EAChB,QAAkB,EAClB,IAAkB,EACH,EAAE;QACjB,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,aAAa,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAC7C,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;gBAC3D,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC1B,MAAM;gBACN,OAAO;gBACP,QAAQ;gBACR,QAAQ;gBACR,KAAK;gBACL,MAAM;gBACN,aAAa;gBACb,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;gBAC3E,GAAG,SAAS;aACb,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,yEAAyE;YACzE,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CACF,QAAQ,EACR,GAAG,EACH,EAAE,KAAK,EAAE,4EAA4E,EAAE,SAAS,EAAE,IAAI,EAAE,EACxG,GAAG,CACJ,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,IAAI,CACF,QAAQ,EACR,GAAG,EACH,EAAE,KAAK,EAAE,qCAAqC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EACjF,GAAG,CACJ,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,mBAAmB,CACvC,aAAa,CAAC,iBAAiB,EAC/B,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,OAAO,CAAC,MAAM,CACvB,CAAC;QACF,IAAI,QAAkC,CAAC;QACvC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjE,GAAG,EAAE,aAAa;gBAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC9C,qBAAqB,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB;aACnE,CAAC,CAAC,CAAC;YACJ,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CACF,QAAQ,EACR,GAAG,EACH,EAAE,KAAK,EAAE,oEAAoE,EAAE,SAAS,EAAE,IAAI,EAAE,EAChG,GAAG,CACJ,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5D,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,4EAA4E;IAC5E,6EAA6E;IAC7E,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAQ,EAAE;QACvC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC"}

package/dist/proof-store.d.ts

@@ -0,0 +1,13 @@
+import type { RedemptionRecord, RedemptionStore } from "./types.js";
+/**
+ * Atomic inside one JavaScript process only. It intentionally never expires or
+ * releases a consumed payment. Multi-worker and production deployments must use
+ * a durable shared store implementing the same atomic consume-once contract.
+ */
+export declare class InMemoryRedemptionStore implements RedemptionStore {
+    private readonly records;
+    consumeOnce(record: Readonly<RedemptionRecord>): "consumed" | "duplicate";
+    has(key: string): boolean;
+    get(key: string): Readonly<RedemptionRecord> | undefined;
+}
+//# sourceMappingURL=proof-store.d.ts.map

package/dist/proof-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-store.d.ts","sourceRoot":"","sources":["../src/proof-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;IAEzE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,UAAU,GAAG,WAAW;IAMzE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,SAAS;CAGzD"}

package/dist/proof-store.js

@@ -0,0 +1,21 @@
+/**
+ * Atomic inside one JavaScript process only. It intentionally never expires or
+ * releases a consumed payment. Multi-worker and production deployments must use
+ * a durable shared store implementing the same atomic consume-once contract.
+ */
+export class InMemoryRedemptionStore {
+    records = new Map();
+    consumeOnce(record) {
+        if (this.records.has(record.key))
+            return "duplicate";
+        this.records.set(record.key, Object.freeze({ ...record }));
+        return "consumed";
+    }
+    has(key) {
+        return this.records.has(key);
+    }
+    get(key) {
+        return this.records.get(key);
+    }
+}
+//# sourceMappingURL=proof-store.js.map

package/dist/proof-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-store.js","sourceRoot":"","sources":["../src/proof-store.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACjB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEzE,WAAW,CAAC,MAAkC;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,108 @@
+import type { Request } from "express";
+import type { NetworkConfig } from "@reapp-sdk/stellar";
+/** A request-specific price and the immutable deployment it must settle through. */
+export interface PaymentRequirement {
+    scheme: string;
+    network: string;
+    resource: string;
+    merchant: string;
+    asset: string;
+    amount: string;
+    amountStroops: bigint;
+    registryId: string;
+    decimals: number;
+}
+/** Settlement evidence derived from Stellar, never from caller-supplied proof fields. */
+export interface VerifiedPayment {
+    txHash: string;
+    ledger: number;
+    mandateId: string;
+    user: string;
+    agent: string;
+    amount: string;
+    amountStroops: bigint;
+    merchant: string;
+    asset: string;
+    registryId: string;
+    scheme: string;
+    network: string;
+}
+export type VerificationResult = {
+    ok: true;
+    payment: VerifiedPayment;
+} | {
+    ok: false;
+    kind: "invalid" | "unavailable";
+    reason: string;
+};
+/**
+ * A verifier receives only a transaction hash. Header claims such as amount and
+ * mandate id are deliberately absent so they cannot become authorization data.
+ */
+export interface PaymentVerifier {
+    verify(txHash: string, requirement: PaymentRequirement): Promise<VerificationResult>;
+}
+export type RequestValue = string | ((request: Request) => string);
+export interface RedemptionRecord {
+    /** Network-passphrase hash, registry id, and normalized transaction hash. */
+    key: string;
+    payment: Readonly<VerifiedPayment>;
+    /** The proof was accepted only inside this verifier freshness window. */
+    acceptedThroughLedger: number;
+}
+/**
+ * Production implementations must make consumeOnce linearizable across every
+ * process and host. Only the caller receiving `consumed` may serve the resource.
+ */
+export interface RedemptionStore {
+    consumeOnce(record: Readonly<RedemptionRecord>): "consumed" | "duplicate" | Promise<"consumed" | "duplicate">;
+}
+export interface ReappPaymentMiddlewareOptions {
+    /** Merchant address that must receive the contract-authorized transfer. */
+    merchant: string;
+    /** Price as a human decimal string, or a request-specific resolver. */
+    amount: RequestValue;
+    /** Resource identifier placed in the 402 challenge. Defaults to originalUrl. */
+    resource?: RequestValue;
+    /** SEP-41 asset contract. Defaults to networkConfig.nativeSac. */
+    asset?: string;
+    /** Contract/RPC configuration. Defaults to REAPP testnet. */
+    networkConfig?: NetworkConfig;
+    /** x402 network label. Defaults to stellar-testnet. */
+    network?: string;
+    /** Settlement scheme. Defaults to reapp-soroban. */
+    scheme?: string;
+    /** Asset decimals. Defaults to 7. */
+    decimals?: number;
+    /** Funded G-address used only for read-only contract simulations. */
+    sourceAccount?: string;
+    /** Required atomic redemption store. */
+    redemptionStore: RedemptionStore;
+    /** Optional verifier injection for tests or alternate trusted RPC infrastructure. */
+    verifier?: PaymentVerifier;
+    /** Transaction NOT_FOUND retries for the default verifier. Defaults to 15. */
+    pollAttempts?: number;
+    /** Delay between transaction reads for the default verifier. Defaults to 1000ms. */
+    pollIntervalMs?: number;
+    /** Maximum accepted age in ledgers. Defaults to 120. */
+    maxProofAgeLedgers?: number;
+    /** Maximum X-PAYMENT header bytes. Defaults to 8192. */
+    maxHeaderBytes?: number;
+    /** Explicit development escape hatch for an http:// RPC URL. Defaults to false. */
+    allowHttpRpc?: boolean;
+}
+export interface X402Challenge {
+    x402Version: 1;
+    accepts: Array<{
+        scheme: string;
+        network: string;
+        maxAmountRequired: string;
+        asset: string;
+        payTo: string;
+        resource: string;
+        extra: {
+            contract: string;
+        };
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtF;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnC,yEAAyE;IACzE,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,CACT,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GACjC,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,WAAW,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,6BAA6B;IAC5C,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,eAAe,EAAE,eAAe,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KAC7B,CAAC,CAAC;CACJ"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/verification.d.ts

@@ -0,0 +1,72 @@
+import { Buffer } from "buffer";
+import { xdr } from "@stellar/stellar-sdk";
+import { type NetworkConfig } from "@reapp-sdk/stellar";
+import type { PaymentVerifier } from "./types.js";
+export interface DecodedValue {
+    /** Original ScVal discriminant, retained so string/symbol and numeric types cannot blur. */
+    type: string;
+    value: unknown;
+}
+export interface DecodedEvent {
+    type: string;
+    contractId: string | null;
+    topics: readonly DecodedValue[];
+    data: DecodedValue;
+}
+export interface PaymentCheck {
+    merchant: string;
+    registryId: string;
+    priceStroops: bigint;
+}
+export type PaymentSelection = {
+    ok: true;
+    amount: bigint;
+    mandateId: Buffer;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface LoadedTransaction {
+    status: string;
+    ledger?: number;
+    latestLedger?: number;
+    events?: readonly DecodedEvent[];
+}
+export interface LoadedMandate {
+    user: string;
+    agent: string;
+    merchant: string;
+    asset: string;
+}
+export interface StellarVerifierOptions {
+    networkConfig: NetworkConfig;
+    sourceAccount?: string;
+    pollAttempts?: number;
+    pollIntervalMs?: number;
+    maxProofAgeLedgers?: number;
+    allowHttpRpc?: boolean;
+    /** Injection points used by deterministic tests and alternate trusted RPC stacks. */
+    loadNetworkPassphrase?: () => Promise<string>;
+    loadTransaction?: (txHash: string) => Promise<LoadedTransaction>;
+    loadMandate?: (mandateId: Buffer) => Promise<LoadedMandate>;
+    wait?: (milliseconds: number) => Promise<void>;
+}
+export declare function extractContractEvents(meta: xdr.TransactionMeta): xdr.ContractEvent[];
+export declare function interpretEvents(events: readonly xdr.ContractEvent[]): DecodedEvent[];
+/** Pure, fail-closed selection of one unambiguous registry payment event. */
+export declare function selectPayment(decoded: readonly DecodedEvent[], check: PaymentCheck): PaymentSelection;
+export interface TransferCheck {
+    asset: string;
+    user: string;
+    merchant: string;
+    amount: bigint;
+}
+/** Require exactly one matching SEP-41 transfer emitted by the configured asset. */
+export declare function selectTransfer(decoded: readonly DecodedEvent[], check: TransferCheck): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function createStellarPaymentVerifier(options: StellarVerifierOptions): PaymentVerifier;
+//# sourceMappingURL=verification.d.ts.map

package/dist/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAA8B,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,KAAK,EAEV,eAAe,EAEhB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IAChC,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qFAAqF;IACrF,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,aAAa,EAAE,CAUpF;AAaD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,aAAa,EAAE,GAAG,YAAY,EAAE,CAuBpF;AAoBD,6EAA6E;AAC7E,wBAAgB,aAAa,CAC3B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,KAAK,EAAE,YAAY,GAClB,gBAAgB,CAgClB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,KAAK,EAAE,aAAa,GACnB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAgB9C;AAaD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAuL7F"}

package/dist/verification.js

@@ -0,0 +1,327 @@
+import { Buffer } from "buffer";
+import { rpc, scValToNative, StrKey } from "@stellar/stellar-sdk";
+import { Client } from "@reapp-sdk/stellar";
+export function extractContractEvents(meta) {
+    try {
+        return meta.v4().operations().flatMap((operation) => operation.events());
+    }
+    catch {
+        try {
+            return meta.v3().sorobanMeta()?.events() ?? [];
+        }
+        catch {
+            throw new Error("unsupported Stellar transaction metadata version");
+        }
+    }
+}
+function decodeScVal(value) {
+    const type = value.switch().name;
+    if (type === "scvVec") {
+        return {
+            type,
+            value: (value.vec() ?? []).map((entry) => decodeScVal(entry)),
+        };
+    }
+    return { type, value: scValToNative(value) };
+}
+export function interpretEvents(events) {
+    return events.map((event) => {
+        const rawContractId = event.contractId();
+        const contractId = rawContractId
+            ? StrKey.encodeContract(rawContractId)
+            : null;
+        try {
+            const body = event.body().v0();
+            return {
+                type: event.type().name,
+                contractId,
+                topics: body.topics().map((topic) => decodeScVal(topic)),
+                data: decodeScVal(body.data()),
+            };
+        }
+        catch {
+            return {
+                type: event.type().name,
+                contractId,
+                topics: [],
+                data: { type: "malformed", value: null },
+            };
+        }
+    });
+}
+function exactValue(value, type, expected) {
+    return value?.type === type && value.value === expected;
+}
+function paymentPayload(event) {
+    if (event.data.type !== "scvVec" || !Array.isArray(event.data.value))
+        return undefined;
+    const values = event.data.value;
+    if (values.length !== 2)
+        return undefined;
+    const idValue = values[0];
+    const amountValue = values[1];
+    if (idValue?.type !== "scvBytes" || amountValue?.type !== "scvI128")
+        return undefined;
+    if (!(Buffer.isBuffer(idValue.value) || idValue.value instanceof Uint8Array))
+        return undefined;
+    if (typeof amountValue.value !== "bigint")
+        return undefined;
+    const mandateId = Buffer.from(idValue.value);
+    if (mandateId.length !== 32 || amountValue.value <= 0n)
+        return undefined;
+    return { mandateId, amount: amountValue.value };
+}
+/** Pure, fail-closed selection of one unambiguous registry payment event. */
+export function selectPayment(decoded, check) {
+    if (decoded.length === 0) {
+        return { ok: false, reason: "transaction carried no Soroban contract events" };
+    }
+    const eligible = [];
+    let largestUnderpayment;
+    for (const event of decoded) {
+        if (event.type !== "contract" || event.contractId !== check.registryId)
+            continue;
+        if (event.topics.length !== 2)
+            continue;
+        if (!exactValue(event.topics[0], "scvSymbol", "payment"))
+            continue;
+        if (!exactValue(event.topics[1], "scvAddress", check.merchant))
+            continue;
+        const payload = paymentPayload(event);
+        if (!payload)
+            continue;
+        if (payload.amount < check.priceStroops) {
+            if (largestUnderpayment === undefined || payload.amount > largestUnderpayment) {
+                largestUnderpayment = payload.amount;
+            }
+            continue;
+        }
+        eligible.push(payload);
+    }
+    if (eligible.length > 1) {
+        return { ok: false, reason: "transaction contains multiple eligible registry payments" };
+    }
+    const selected = eligible[0];
+    if (selected)
+        return { ok: true, ...selected };
+    if (largestUnderpayment !== undefined) {
+        return { ok: false, reason: `paid ${largestUnderpayment} stroops, below the price` };
+    }
+    return { ok: false, reason: "no trusted registry payment to this merchant in that transaction" };
+}
+/** Require exactly one matching SEP-41 transfer emitted by the configured asset. */
+export function selectTransfer(decoded, check) {
+    let matches = 0;
+    for (const event of decoded) {
+        if (event.type !== "contract" || event.contractId !== check.asset)
+            continue;
+        if (event.topics.length < 3)
+            continue;
+        if (!exactValue(event.topics[0], "scvSymbol", "transfer"))
+            continue;
+        if (!exactValue(event.topics[1], "scvAddress", check.user))
+            continue;
+        if (!exactValue(event.topics[2], "scvAddress", check.merchant))
+            continue;
+        if (event.data.type !== "scvI128" || event.data.value !== check.amount)
+            continue;
+        matches += 1;
+    }
+    if (matches === 1)
+        return { ok: true };
+    if (matches > 1) {
+        return { ok: false, reason: "transaction contains multiple matching asset transfers" };
+    }
+    return { ok: false, reason: "transaction lacks the matching transfer from mandate user to merchant" };
+}
+function formatStroops(value, decimals) {
+    if (decimals === 0)
+        return value.toString();
+    const scale = 10n ** BigInt(decimals);
+    const whole = value / scale;
+    const fraction = (value % scale).toString().padStart(decimals, "0").replace(/0+$/, "");
+    return fraction.length === 0 ? whole.toString() : `${whole}.${fraction}`;
+}
+const defaultWait = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds));
+export function createStellarPaymentVerifier(options) {
+    const pollAttempts = options.pollAttempts ?? 15;
+    const pollIntervalMs = options.pollIntervalMs ?? 1_000;
+    const maxProofAgeLedgers = options.maxProofAgeLedgers ?? 120;
+    if (!Number.isInteger(pollAttempts) || pollAttempts < 0) {
+        throw new Error("pollAttempts must be a non-negative integer.");
+    }
+    if (!Number.isInteger(pollIntervalMs) || pollIntervalMs < 0) {
+        throw new Error("pollIntervalMs must be a non-negative integer.");
+    }
+    if (!Number.isInteger(maxProofAgeLedgers) || maxProofAgeLedgers < 0) {
+        throw new Error("maxProofAgeLedgers must be a non-negative integer.");
+    }
+    const network = options.networkConfig;
+    let rpcUrl;
+    try {
+        rpcUrl = new URL(network.rpcUrl);
+    }
+    catch {
+        throw new Error("networkConfig.rpcUrl must be an absolute URL.");
+    }
+    const allowHttp = options.allowHttpRpc === true;
+    if (rpcUrl.protocol !== "https:" && !(allowHttp && rpcUrl.protocol === "http:")) {
+        throw new Error("RPC must use https:// unless allowHttpRpc is explicitly enabled for development.");
+    }
+    const server = new rpc.Server(network.rpcUrl, { allowHttp });
+    const loadNetworkPassphrase = options.loadNetworkPassphrase
+        ?? (async () => (await server.getNetwork()).passphrase);
+    const defaultTransactionLoader = async (txHash) => {
+        const transaction = await server.getTransaction(txHash);
+        if (transaction.status !== "SUCCESS") {
+            return {
+                status: transaction.status,
+                latestLedger: transaction.latestLedger,
+                ledger: "ledger" in transaction ? transaction.ledger : undefined,
+            };
+        }
+        return {
+            status: transaction.status,
+            ledger: transaction.ledger,
+            latestLedger: transaction.latestLedger,
+            events: interpretEvents(extractContractEvents(transaction.resultMetaXdr)),
+        };
+    };
+    let defaultMandateLoader;
+    if (!options.loadMandate) {
+        if (!options.sourceAccount || !StrKey.isValidEd25519PublicKey(options.sourceAccount)) {
+            throw new Error("sourceAccount must be a funded Stellar account address (G...).");
+        }
+        const refuseSigning = async () => {
+            throw new Error("REAPP payment verification is read-only and never signs.");
+        };
+        const client = new Client({
+            contractId: network.mandateRegistryId,
+            rpcUrl: network.rpcUrl,
+            networkPassphrase: network.networkPassphrase,
+            publicKey: options.sourceAccount,
+            signTransaction: refuseSigning,
+            allowHttp,
+        });
+        defaultMandateLoader = async (mandateId) => {
+            const mandate = (await client.get_mandate({ mandate_id: mandateId })).result.unwrap();
+            return {
+                user: mandate.user,
+                agent: mandate.agent,
+                merchant: mandate.merchant,
+                asset: mandate.asset,
+            };
+        };
+    }
+    const loadTransaction = options.loadTransaction ?? defaultTransactionLoader;
+    const loadMandate = options.loadMandate ?? defaultMandateLoader;
+    if (!loadMandate)
+        throw new Error("loadMandate or sourceAccount is required.");
+    const wait = options.wait ?? defaultWait;
+    return {
+        async verify(txHash, requirement) {
+            const normalizedTxHash = txHash.toLowerCase();
+            if (!/^[0-9a-f]{64}$/.test(normalizedTxHash)) {
+                return { ok: false, kind: "invalid", reason: "proof transaction hash is not 64 hex characters" };
+            }
+            try {
+                const rpcPassphrase = await loadNetworkPassphrase();
+                if (rpcPassphrase !== network.networkPassphrase) {
+                    return { ok: false, kind: "unavailable", reason: "RPC network passphrase does not match configuration" };
+                }
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    kind: "unavailable",
+                    reason: `RPC network identity read failed: ${error instanceof Error ? error.message : String(error)}`,
+                };
+            }
+            let transaction;
+            try {
+                for (let attempt = 0; attempt <= pollAttempts; attempt += 1) {
+                    transaction = await loadTransaction(normalizedTxHash);
+                    if (transaction.status !== "NOT_FOUND")
+                        break;
+                    if (attempt < pollAttempts)
+                        await wait(pollIntervalMs);
+                }
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    kind: "unavailable",
+                    reason: `transaction RPC read failed: ${error instanceof Error ? error.message : String(error)}`,
+                };
+            }
+            if (!transaction || transaction.status === "NOT_FOUND") {
+                return { ok: false, kind: "unavailable", reason: "transaction was not found before the verification timeout" };
+            }
+            if (transaction.status !== "SUCCESS") {
+                return { ok: false, kind: "invalid", reason: `transaction is ${transaction.status}, not SUCCESS` };
+            }
+            if (!Number.isSafeInteger(transaction.ledger) || !Number.isSafeInteger(transaction.latestLedger)) {
+                return { ok: false, kind: "unavailable", reason: "RPC omitted safe transaction freshness ledger numbers" };
+            }
+            const ledger = transaction.ledger;
+            const latestLedger = transaction.latestLedger;
+            if (ledger > latestLedger) {
+                return { ok: false, kind: "unavailable", reason: "transaction ledger is ahead of the RPC latest ledger" };
+            }
+            if (latestLedger - ledger > maxProofAgeLedgers) {
+                return { ok: false, kind: "invalid", reason: "transaction is outside the accepted proof freshness window" };
+            }
+            const events = transaction.events ?? [];
+            const selected = selectPayment(events, {
+                merchant: requirement.merchant,
+                registryId: requirement.registryId,
+                priceStroops: requirement.amountStroops,
+            });
+            if (!selected.ok)
+                return { ok: false, kind: "invalid", reason: selected.reason };
+            let mandate;
+            try {
+                mandate = await loadMandate(selected.mandateId);
+            }
+            catch (error) {
+                return {
+                    ok: false,
+                    kind: "unavailable",
+                    reason: `mandate read failed: ${error instanceof Error ? error.message : String(error)}`,
+                };
+            }
+            if (mandate.merchant !== requirement.merchant) {
+                return { ok: false, kind: "invalid", reason: "stored mandate merchant does not match this API" };
+            }
+            if (mandate.asset !== requirement.asset) {
+                return { ok: false, kind: "invalid", reason: "stored mandate asset does not match this API" };
+            }
+            const transfer = selectTransfer(events, {
+                asset: mandate.asset,
+                user: mandate.user,
+                merchant: mandate.merchant,
+                amount: selected.amount,
+            });
+            if (!transfer.ok)
+                return { ok: false, kind: "invalid", reason: transfer.reason };
+            return {
+                ok: true,
+                payment: {
+                    txHash: normalizedTxHash,
+                    ledger,
+                    mandateId: selected.mandateId.toString("hex"),
+                    user: mandate.user,
+                    agent: mandate.agent,
+                    amount: formatStroops(selected.amount, requirement.decimals),
+                    amountStroops: selected.amount,
+                    merchant: mandate.merchant,
+                    asset: mandate.asset,
+                    registryId: requirement.registryId,
+                    scheme: requirement.scheme,
+                    network: requirement.network,
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=verification.js.map

package/dist/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAO,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAsB,MAAM,oBAAoB,CAAC;AA0DhE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAgB;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;IACjC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAY,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAoC;IAClE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa;YAC9B,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,aAAkC,CAAC;YAC3D,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI;gBACvB,UAAU;gBACV,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxD,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC/B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI;gBACvB,UAAU;gBACV,MAAM,EAAE,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;aACzC,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAA+B,EAAE,IAAY,EAAE,QAAiB;IAClF,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB;IACzC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAuB,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,WAAW,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,IAAI,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,WAAW,CAAC,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAC3B,OAAgC,EAChC,KAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,QAAQ,GAAiD,EAAE,CAAC;IAClE,IAAI,mBAAuC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAAE,SAAS;QACjF,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;YAAE,SAAS;QACnE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACzE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,IAAI,mBAAmB,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBAC9E,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;YACvC,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC/C,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,mBAAmB,2BAA2B,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;AACnG,CAAC;AASD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAC5B,OAAgC,EAChC,KAAoB;IAEpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK;YAAE,SAAS;QAC5E,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC;YAAE,SAAS;QACpE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACrE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACzE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM;YAAE,SAAS;QACjF,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uEAAuE,EAAE,CAAC;AACxG,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAAgB;IACpD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAE,EAAE,CAC3C,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAEpE,MAAM,UAAU,4BAA4B,CAAC,OAA+B;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,GAAG,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB;WACtD,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,wBAAwB,GAAG,KAAK,EAAE,MAAc,EAA8B,EAAE;QACpF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,MAAM,EAAE,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,MAAM,EAAE,eAAe,CAAC,qBAAqB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;SAC1E,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,oBAAiF,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,IAAoB,EAAE;YAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,UAAU,EAAE,OAAO,CAAC,iBAAiB;YACrC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,eAAe,EAAE,aAAa;YAC9B,SAAS;SACV,CAAC,CAAC;QACH,oBAAoB,GAAG,KAAK,EAAE,SAAiB,EAA0B,EAAE;YACzE,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtF,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAEzC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,WAA+B;YAC1D,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;YACnG,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;gBACpD,IAAI,aAAa,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;oBAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;gBAC3G,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACtG,CAAC;YACJ,CAAC;YAED,IAAI,WAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;oBAC5D,WAAW,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC,CAAC;oBACtD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW;wBAAE,MAAM;oBAC9C,IAAI,OAAO,GAAG,YAAY;wBAAE,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACjG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;YACjH,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,WAAW,CAAC,MAAM,eAAe,EAAE,CAAC;YACrG,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;YAC7G,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAgB,CAAC;YAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,YAAsB,CAAC;YACxD,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;gBAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;YAC5G,CAAC;YACD,IAAI,YAAY,GAAG,MAAM,GAAG,kBAAkB,EAAE,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAC;YAC9G,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE;gBACrC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,aAAa;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAEjF,IAAI,OAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACzF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;YACnG,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;YAChG,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE;gBACtC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAEjF,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACP,MAAM,EAAE,gBAAgB;oBACxB,MAAM;oBACN,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;oBAC5D,aAAa,EAAE,QAAQ,CAAC,MAAM;oBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;iBAC7B;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@reapp-sdk/express-middleware",
+  "version": "0.1.0",
+  "description": "Fail-closed Express middleware for REAPP x402 APIs with independent on-chain settlement verification.",
+  "keywords": [
+    "reapp",
+    "express",
+    "middleware",
+    "x402",
+    "stellar",
+    "soroban",
+    "agent-payments",
+    "payment-verification"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "node --import tsx --test src/middleware.test.ts src/verification.test.ts"
+  },
+  "dependencies": {
+    "@reapp-sdk/core": "^0.2.2",
+    "@reapp-sdk/stellar": "^0.2.1",
+    "@stellar/stellar-sdk": "^14.5.0",
+    "buffer": "6.0.3"
+  },
+  "peerDependencies": {
+    "express": "^4.18.0 || ^5.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "@types/express": "^5.0.6",
+    "express": "^5.2.1",
+    "typescript": "^5.7.2"
+  },
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}