@resvary/sdk 0.5.0-alpha.1

package/dist/receipts/webhooks.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Signed webhook helpers for invoice and receipt events.
+ */
+import type { WebhookEvent, WebhookEventType } from './types.js';
+export interface WebhookSignature {
+    timestamp: number;
+    signature: string;
+    header: string;
+}
+export declare function createWebhookEvent<TData>(type: WebhookEventType, data: TData, createdAt?: number): WebhookEvent<TData>;
+export declare function signWebhookEvent(event: WebhookEvent, secret: string, timestamp?: number): WebhookSignature;
+export declare function verifyWebhookSignature(params: {
+    payload: WebhookEvent | string;
+    header: string;
+    secret: string;
+    toleranceSeconds?: number;
+    now?: number;
+}): boolean;
+export declare function serializeWebhookPayload(event: WebhookEvent): string;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/receipts/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/receipts/webhooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EACtC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,KAAK,EACX,SAAS,SAAa,GACrB,YAAY,CAAC,KAAK,CAAC,CAOrB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,SAAgC,GACxC,gBAAgB,CASlB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAkBV;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAEnE"}

package/dist/receipts/webhooks.js

@@ -0,0 +1,72 @@
+/**
+ * Signed webhook helpers for invoice and receipt events.
+ */
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { serializeReceiptStoreValue } from './serialization.js';
+export function createWebhookEvent(type, data, createdAt = Date.now()) {
+    return {
+        id: `evt_${randomBytes(12).toString('hex')}`,
+        type,
+        createdAt,
+        data,
+    };
+}
+export function signWebhookEvent(event, secret, timestamp = Math.floor(Date.now() / 1000)) {
+    const payload = serializeWebhookPayload(event);
+    const signature = createWebhookSignature(payload, secret, timestamp);
+    return {
+        timestamp,
+        signature,
+        header: `t=${timestamp},v1=${signature}`,
+    };
+}
+export function verifyWebhookSignature(params) {
+    const parsed = parseWebhookSignatureHeader(params.header);
+    if (!parsed) {
+        return false;
+    }
+    const now = params.now ?? Math.floor(Date.now() / 1000);
+    const toleranceSeconds = params.toleranceSeconds ?? 300;
+    if (Math.abs(now - parsed.timestamp) > toleranceSeconds) {
+        return false;
+    }
+    const payload = typeof params.payload === 'string'
+        ? params.payload
+        : serializeWebhookPayload(params.payload);
+    const expected = createWebhookSignature(payload, params.secret, parsed.timestamp);
+    return timingSafeStringEqual(expected, parsed.signature);
+}
+export function serializeWebhookPayload(event) {
+    return serializeReceiptStoreValue(event);
+}
+function createWebhookSignature(payload, secret, timestamp) {
+    return createHmac('sha256', secret)
+        .update(`${timestamp}.${payload}`)
+        .digest('hex');
+}
+function parseWebhookSignatureHeader(header) {
+    const parts = Object.fromEntries(header.split(',').map((part) => {
+        const [key, value] = part.split('=');
+        return [key, value];
+    }));
+    if (!parts.t || !parts.v1) {
+        return null;
+    }
+    const timestamp = Number(parts.t);
+    if (!Number.isSafeInteger(timestamp)) {
+        return null;
+    }
+    return {
+        timestamp,
+        signature: parts.v1,
+    };
+}
+function timingSafeStringEqual(a, b) {
+    const aBuffer = Buffer.from(a);
+    const bBuffer = Buffer.from(b);
+    if (aBuffer.length !== bBuffer.length) {
+        return false;
+    }
+    return timingSafeEqual(aBuffer, bBuffer);
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/receipts/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/receipts/webhooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAShE,MAAM,UAAU,kBAAkB,CAChC,IAAsB,EACtB,IAAW,EACX,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;IAEtB,OAAO;QACL,EAAE,EAAE,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC5C,IAAI;QACJ,SAAS;QACT,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAmB,EACnB,MAAc,EACd,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEzC,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAErE,OAAO;QACL,SAAS;QACT,SAAS;QACT,MAAM,EAAE,KAAK,SAAS,OAAO,SAAS,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAMtC;IACC,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC;IACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAChD,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAElF,OAAO,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmB;IACzD,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,MAAc,EAAE,SAAiB;IAChF,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,EAAE;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS,EAAE,CAAS;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Core type definitions for Resvary.
+ */
+/** Supported x402 protocol versions */
+export type X402Version = 1 | 2;
+/** Supported payment schemes */
+export type PaymentScheme = 'exact' | 'upto';
+/** Network configuration for Arc or other EVM chains */
+export interface NetworkConfig {
+    /** Chain ID (e.g., 5042002 for Arc Testnet) */
+    readonly chainId: number;
+    /** RPC endpoint URL */
+    readonly rpcUrl: string;
+    /** Human-readable network name */
+    readonly name: string;
+    /** USDC contract address on this network */
+    readonly usdcAddress: `0x${string}`;
+    /** Block explorer URL */
+    readonly explorerUrl: string;
+    /** CCTP Domain ID for cross-chain operations */
+    readonly cctpDomainId?: number;
+}
+/** Payment requirements returned in 402 response */
+export interface PaymentRequirements {
+    /** x402 protocol version */
+    x402Version: X402Version;
+    /** Payment scheme type */
+    scheme: PaymentScheme;
+    /** Target network identifier */
+    network: string;
+    /** Payment amount in USDC (human-readable, e.g., "0.001") */
+    maxAmountRequired: string;
+    /** Seller's payment receiving address */
+    payTo: `0x${string}`;
+    /** Human-readable description of what's being purchased */
+    description?: string;
+    /** Additional resource metadata */
+    resource?: string;
+    /** MIME type of the resource */
+    mimeType?: string;
+    /** Expiration timestamp (Unix seconds) */
+    expiry?: number;
+}
+/** Payment payload sent in X-PAYMENT header */
+export interface PaymentPayload {
+    /** x402 protocol version */
+    x402Version: X402Version;
+    /** Payment scheme */
+    scheme: PaymentScheme;
+    /** Target network */
+    network: string;
+    /** Signed payment authorization */
+    payload: {
+        /** EIP-3009 transferWithAuthorization signature */
+        signature: `0x${string}`;
+        /** Authorization details */
+        authorization: {
+            /** Buyer's address */
+            from: `0x${string}`;
+            /** Seller's address */
+            to: `0x${string}`;
+            /** Payment amount in smallest unit (6 decimals for USDC) */
+            value: string;
+            /** Authorization valid-after timestamp */
+            validAfter: string;
+            /** Authorization valid-before timestamp */
+            validBefore: string;
+            /** Unique nonce to prevent replay */
+            nonce: `0x${string}`;
+        };
+    };
+}
+/** Result of a payment verification */
+export interface PaymentResult {
+    /** Whether payment was successfully verified */
+    success: boolean;
+    /** Transaction hash if settled on-chain */
+    transactionHash?: `0x${string}`;
+    /** Settlement status */
+    settlementStatus: 'pending' | 'batched' | 'settled' | 'failed';
+    /** Amount paid in USDC */
+    amount: string;
+    /** Buyer's address */
+    from: `0x${string}`;
+    /** Timestamp of payment */
+    timestamp: number;
+}
+/** Configuration for a paywalled endpoint */
+export interface EndpointConfig {
+    /** Price in USDC per unit (depends on pricing model) */
+    price: string;
+    /** Network identifier (default: 'arc-testnet') */
+    network?: string;
+    /** Human-readable endpoint description */
+    description?: string;
+    /** Payment scheme (default: 'exact') */
+    scheme?: PaymentScheme;
+    /** Custom payment verification function */
+    verifyPayment?: (payload: PaymentPayload) => Promise<PaymentResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,uCAAuC;AACvC,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;AAEhC,gCAAgC;AAChC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAE7C,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uBAAuB;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;IACpC,yBAAyB;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,4BAA4B;IAC5B,WAAW,EAAE,WAAW,CAAC;IACzB,0BAA0B;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,WAAW,EAAE,WAAW,CAAC;IACzB,qBAAqB;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,OAAO,EAAE;QACP,mDAAmD;QACnD,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;QACzB,4BAA4B;QAC5B,aAAa,EAAE;YACb,sBAAsB;YACtB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACpB,uBAAuB;YACvB,EAAE,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,4DAA4D;YAC5D,KAAK,EAAE,MAAM,CAAC;YACd,0CAA0C;YAC1C,UAAU,EAAE,MAAM,CAAC;YACnB,2CAA2C;YAC3C,WAAW,EAAE,MAAM,CAAC;YACpB,qCAAqC;YACrC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;SACtB,CAAC;KACH,CAAC;CACH;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,eAAe,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAChC,wBAAwB;IACxB,gBAAgB,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC/D,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;IACpB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;CACrE"}

package/dist/types.js

@@ -0,0 +1,5 @@
+/**
+ * Core type definitions for Resvary.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,116 @@
+{
+  "name": "@resvary/sdk",
+  "version": "0.5.0-alpha.1",
+  "description": "Prepaid credits and usage billing SDK for AI products",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./middleware": {
+      "types": "./dist/middleware/index.d.ts",
+      "import": "./dist/middleware/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./billing": {
+      "types": "./dist/billing/index.d.ts",
+      "import": "./dist/billing/index.js"
+    },
+    "./credits": {
+      "types": "./dist/credits/index.d.ts",
+      "import": "./dist/credits/index.js"
+    },
+    "./pricing": {
+      "types": "./dist/pricing/index.d.ts",
+      "import": "./dist/pricing/index.js"
+    },
+    "./funding/arc": {
+      "types": "./dist/funding/arc.d.ts",
+      "import": "./dist/funding/arc.js"
+    },
+    "./funding": {
+      "types": "./dist/funding/index.d.ts",
+      "import": "./dist/funding/index.js"
+    },
+    "./gateway": {
+      "types": "./dist/gateway/index.d.ts",
+      "import": "./dist/gateway/index.js"
+    },
+    "./receipts": {
+      "types": "./dist/receipts/index.d.ts",
+      "import": "./dist/receipts/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "alpha"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "node -e \"const fs=require('node:fs');fs.rmSync('dist',{recursive:true,force:true});fs.rmSync('tsconfig.tsbuildinfo',{force:true})\"",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "ai-credits",
+    "prepaid-credits",
+    "usage-metering",
+    "ledger",
+    "arc",
+    "circle",
+    "usdc",
+    "nanopayments",
+    "x402",
+    "billing",
+    "middleware",
+    "paid-api",
+    "micropayments",
+    "usage-based-billing",
+    "receipts",
+    "invoices",
+    "webhooks"
+  ],
+  "author": "horn111",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/horn111/resvary.git",
+    "directory": "packages/sdk"
+  },
+  "homepage": "https://github.com/horn111/resvary#readme",
+  "bugs": {
+    "url": "https://github.com/horn111/resvary/issues"
+  },
+  "dependencies": {
+    "viem": "^2.55.8"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0",
+    "next": ">=14.0.0"
+  },
+  "peerDependenciesMeta": {
+    "express": {
+      "optional": true
+    },
+    "next": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^4.1.10"
+  }
+}