@routedock/routedock 0.1.1 → 0.2.0

package/dist/ProviderRegistry-BJ9oJLVz.d.cts

@@ -0,0 +1,142 @@
+import { usdcToStroops } from '@routedock/nulth-sdk';
+import { m as SpendStore, a as DailySpend, R as RetryPolicy } from './RouteDockClient-B1roCa8h.cjs';
+import { ClientStellarSigner } from '@x402/stellar';
+import { R as RouteDockManifest, c as PaymentResult } from './types-DmhmfLzP.cjs';
+import { Keypair } from '@stellar/stellar-sdk';
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * USDC conversion — canonical implementation lives in @routedock/nulth-sdk and is
+ * re-exported here so SDK consumers (client, provider) share one converter.
+ *
+ * @routedock/routedock already depends on @routedock/nulth-sdk, so re-exporting
+ * (rather than defining a parallel helper) keeps a single source of truth.
+ */
+
+/**
+ * @deprecated Use {@link usdcToStroops} — the same validated bigint converter.
+ * Kept as a thin alias so existing call sites keep working during migration.
+ */
+declare const usdcToUnits: typeof usdcToStroops;
+
+/**
+ * File-backed durable {@link SpendStore}.
+ *
+ * Persists the daily spend accumulator to a JSON file on disk, preserving
+ * cumulative spending totals across process restarts, crashes, and redeploys.
+ *
+ * ### Error semantics
+ * - File absent (ENOENT): returns null — legitimately no spend recorded yet.
+ * - File present but unreadable or malformed: throws — a safety control must
+ *   fail closed, not assume nothing was spent.
+ *
+ * ### Write atomicity
+ * Writes go to `<filePath>.tmp` first, then `fs.rename` onto the target.
+ * `rename` is atomic within a filesystem, so there is no window where the
+ * target file is truncated but not yet fully written.
+ */
+declare class FileSpendStore implements SpendStore {
+    readonly filePath: string;
+    constructor(filePath: string);
+    read(): Promise<DailySpend | null>;
+    write(state: DailySpend): Promise<void>;
+}
+
+type Network = 'testnet' | 'mainnet';
+declare class X402Client {
+    private readonly network;
+    private readonly retryPolicy?;
+    private readonly httpClient;
+    private readonly signer;
+    constructor(secretKeyOrSigner: string | ClientStellarSigner, network: Network, retryPolicy?: RetryPolicy | undefined);
+    /** Replace signer (e.g. swap to Nulth ZK account payer before pay) */
+    withSigner(signer: ClientStellarSigner): X402Client;
+    pay(url: string, manifest: RouteDockManifest): Promise<PaymentResult>;
+}
+
+declare class MppChargeClient {
+    private readonly keypair;
+    private readonly network;
+    private readonly retryPolicy?;
+    constructor(keypair: Keypair, network: 'testnet' | 'mainnet', retryPolicy?: RetryPolicy | undefined);
+    pay(url: string, manifest: RouteDockManifest): Promise<PaymentResult>;
+}
+
+interface OnChainProviderInfo {
+    account: string;
+    endpoint: string;
+    tags: string[];
+}
+declare class OnChainRegistry {
+    private readonly horizon;
+    private readonly knownAccounts;
+    private readonly timeoutMs;
+    constructor(options: {
+        horizonUrl: string;
+        knownAccounts: string[];
+        timeoutMs?: number;
+    });
+    /**
+     * stellar-sdk 14.6.1 has no way to cancel the underlying Horizon request, so
+     * we stop waiting on it instead: the promise returned here rejects once
+     * `timeoutMs` elapses, even though the request may still be in flight. The
+     * timer is always cleared, including on the error path.
+     */
+    private loadAccountWithTimeout;
+    listProviders(): Promise<OnChainProviderInfo[]>;
+}
+
+interface ProviderRecord {
+    name: string;
+    description: string | undefined;
+    base_url: string;
+    modes: string[];
+    tags: string[];
+    network: string;
+    payee: string;
+    source: 'supabase' | 'onchain';
+    /**
+     * True only when the provider was verified out-of-band — for on-chain
+     * records the payee is the account that published the endpoint, for
+     * supabase records only rows flagged `verified` are returned.
+     */
+    verified: boolean;
+}
+interface ProviderRegistryConfig {
+    supabase?: SupabaseClient;
+    onChain: {
+        horizonUrl: string;
+        knownAccounts: string[];
+        /**
+         * Optional explicit network override. When omitted it is derived from the
+         * Horizon URL: URLs containing `testnet` map to 'testnet', everything else
+         * defaults to 'mainnet'.
+         */
+        network?: 'testnet' | 'mainnet';
+        /**
+         * Per-account timeout for on-chain account loads, in milliseconds.
+         * Defaults to 10000 ms.
+         */
+        timeoutMs?: number;
+    };
+}
+declare class ProviderRegistry {
+    private readonly supabase;
+    private readonly onChain;
+    private readonly network;
+    constructor(config: ProviderRegistryConfig);
+    listProviders(): Promise<ProviderRecord[]>;
+    private trySupabase;
+    private tryOnChain;
+    /**
+     * Fetch a provider's manifest bound to the record's payee. The record's
+     * `payee` (from supabase `verified` rows or the on-chain registry account)
+     * is the out-of-band trust anchor: the fetched manifest's `payee` must
+     * equal it, otherwise `RouteDockSignatureError` is thrown. This closes the
+     * gap where the registry never cross-checked the on-chain payee against
+     * the manifest payee.
+     */
+    fetchProviderManifest(record: ProviderRecord): Promise<RouteDockManifest>;
+}
+
+export { FileSpendStore as F, MppChargeClient as M, type OnChainProviderInfo as O, type ProviderRecord as P, X402Client as X, OnChainRegistry as a, ProviderRegistry as b, type ProviderRegistryConfig as c, usdcToUnits as u };

package/dist/ProviderRegistry-C50nyhaF.d.ts

@@ -0,0 +1,142 @@
+import { usdcToStroops } from '@routedock/nulth-sdk';
+import { m as SpendStore, a as DailySpend, R as RetryPolicy } from './RouteDockClient-BbkqjhMG.js';
+import { ClientStellarSigner } from '@x402/stellar';
+import { R as RouteDockManifest, c as PaymentResult } from './types-DmhmfLzP.js';
+import { Keypair } from '@stellar/stellar-sdk';
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * USDC conversion — canonical implementation lives in @routedock/nulth-sdk and is
+ * re-exported here so SDK consumers (client, provider) share one converter.
+ *
+ * @routedock/routedock already depends on @routedock/nulth-sdk, so re-exporting
+ * (rather than defining a parallel helper) keeps a single source of truth.
+ */
+
+/**
+ * @deprecated Use {@link usdcToStroops} — the same validated bigint converter.
+ * Kept as a thin alias so existing call sites keep working during migration.
+ */
+declare const usdcToUnits: typeof usdcToStroops;
+
+/**
+ * File-backed durable {@link SpendStore}.
+ *
+ * Persists the daily spend accumulator to a JSON file on disk, preserving
+ * cumulative spending totals across process restarts, crashes, and redeploys.
+ *
+ * ### Error semantics
+ * - File absent (ENOENT): returns null — legitimately no spend recorded yet.
+ * - File present but unreadable or malformed: throws — a safety control must
+ *   fail closed, not assume nothing was spent.
+ *
+ * ### Write atomicity
+ * Writes go to `<filePath>.tmp` first, then `fs.rename` onto the target.
+ * `rename` is atomic within a filesystem, so there is no window where the
+ * target file is truncated but not yet fully written.
+ */
+declare class FileSpendStore implements SpendStore {
+    readonly filePath: string;
+    constructor(filePath: string);
+    read(): Promise<DailySpend | null>;
+    write(state: DailySpend): Promise<void>;
+}
+
+type Network = 'testnet' | 'mainnet';
+declare class X402Client {
+    private readonly network;
+    private readonly retryPolicy?;
+    private readonly httpClient;
+    private readonly signer;
+    constructor(secretKeyOrSigner: string | ClientStellarSigner, network: Network, retryPolicy?: RetryPolicy | undefined);
+    /** Replace signer (e.g. swap to Nulth ZK account payer before pay) */
+    withSigner(signer: ClientStellarSigner): X402Client;
+    pay(url: string, manifest: RouteDockManifest): Promise<PaymentResult>;
+}
+
+declare class MppChargeClient {
+    private readonly keypair;
+    private readonly network;
+    private readonly retryPolicy?;
+    constructor(keypair: Keypair, network: 'testnet' | 'mainnet', retryPolicy?: RetryPolicy | undefined);
+    pay(url: string, manifest: RouteDockManifest): Promise<PaymentResult>;
+}
+
+interface OnChainProviderInfo {
+    account: string;
+    endpoint: string;
+    tags: string[];
+}
+declare class OnChainRegistry {
+    private readonly horizon;
+    private readonly knownAccounts;
+    private readonly timeoutMs;
+    constructor(options: {
+        horizonUrl: string;
+        knownAccounts: string[];
+        timeoutMs?: number;
+    });
+    /**
+     * stellar-sdk 14.6.1 has no way to cancel the underlying Horizon request, so
+     * we stop waiting on it instead: the promise returned here rejects once
+     * `timeoutMs` elapses, even though the request may still be in flight. The
+     * timer is always cleared, including on the error path.
+     */
+    private loadAccountWithTimeout;
+    listProviders(): Promise<OnChainProviderInfo[]>;
+}
+
+interface ProviderRecord {
+    name: string;
+    description: string | undefined;
+    base_url: string;
+    modes: string[];
+    tags: string[];
+    network: string;
+    payee: string;
+    source: 'supabase' | 'onchain';
+    /**
+     * True only when the provider was verified out-of-band — for on-chain
+     * records the payee is the account that published the endpoint, for
+     * supabase records only rows flagged `verified` are returned.
+     */
+    verified: boolean;
+}
+interface ProviderRegistryConfig {
+    supabase?: SupabaseClient;
+    onChain: {
+        horizonUrl: string;
+        knownAccounts: string[];
+        /**
+         * Optional explicit network override. When omitted it is derived from the
+         * Horizon URL: URLs containing `testnet` map to 'testnet', everything else
+         * defaults to 'mainnet'.
+         */
+        network?: 'testnet' | 'mainnet';
+        /**
+         * Per-account timeout for on-chain account loads, in milliseconds.
+         * Defaults to 10000 ms.
+         */
+        timeoutMs?: number;
+    };
+}
+declare class ProviderRegistry {
+    private readonly supabase;
+    private readonly onChain;
+    private readonly network;
+    constructor(config: ProviderRegistryConfig);
+    listProviders(): Promise<ProviderRecord[]>;
+    private trySupabase;
+    private tryOnChain;
+    /**
+     * Fetch a provider's manifest bound to the record's payee. The record's
+     * `payee` (from supabase `verified` rows or the on-chain registry account)
+     * is the out-of-band trust anchor: the fetched manifest's `payee` must
+     * equal it, otherwise `RouteDockSignatureError` is thrown. This closes the
+     * gap where the registry never cross-checked the on-chain payee against
+     * the manifest payee.
+     */
+    fetchProviderManifest(record: ProviderRecord): Promise<RouteDockManifest>;
+}
+
+export { FileSpendStore as F, MppChargeClient as M, type OnChainProviderInfo as O, type ProviderRecord as P, X402Client as X, OnChainRegistry as a, ProviderRegistry as b, type ProviderRegistryConfig as c, usdcToUnits as u };