@run402/sdk 4.112.0 → 4.114.0

package/dist/node/vendor/x402-lnbtc/validation.js

@@ -0,0 +1,165 @@
+import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { parseBindingExtra } from "./binding.js";
+import { decodeInvoice } from "./bolt11.js";
+import { ASSET, ASSET_TRANSFER_METHOD, Errors, LnbtcError, PAYMENT_FLOW, SCHEME, } from "./constants.js";
+const POSITIVE_INTEGER = /^[1-9][0-9]*$/;
+const COMPRESSED_PUBKEY = /^0[23][0-9a-f]{64}$/;
+/**
+ * Throws an {@link LnbtcError} with the given reason.
+ *
+ * @param reason - Stable reason
+ * @returns Never returns
+ */
+export function reject(reason) {
+    throw new LnbtcError(reason);
+}
+/**
+ * Validates the core requirement terms (step 2 of facilitator validation).
+ *
+ * @param req - Payment requirements
+ * @param networks - Supported networks mapped to BOLT11 currency
+ */
+export function validateCoreTerms(req, networks) {
+    if (req.scheme !== SCHEME)
+        reject(Errors.unsupportedScheme);
+    if (!isSupportedNetwork(req.network, networks))
+        reject(Errors.unsupportedNetwork);
+    if (req.asset !== ASSET)
+        reject(Errors.asset);
+    if (typeof req.amount !== "string" || !POSITIVE_INTEGER.test(req.amount))
+        reject(Errors.amount);
+    if (!Number.isSafeInteger(req.maxTimeoutSeconds) || req.maxTimeoutSeconds <= 0) {
+        reject(Errors.maxTimeout);
+    }
+    if (!isCompressedPubkey(req.payTo))
+        reject(Errors.payToMalformed);
+}
+/**
+ * Validates the transfer method and payment flow of an `extra` object.
+ *
+ * @param extra - Requirements `extra`
+ */
+export function validateMethodAndFlow(extra) {
+    // Only an omitted method defaults; an explicit value (even null) must be "bolt11".
+    const method = extra?.assetTransferMethod === undefined ? ASSET_TRANSFER_METHOD : extra.assetTransferMethod;
+    if (method !== ASSET_TRANSFER_METHOD)
+        reject(Errors.assetTransferMethod);
+    if (extra?.paymentFlow !== PAYMENT_FLOW)
+        reject(Errors.paymentFlow);
+}
+/**
+ * Validates every requirement field a client or server checks before paying or
+ * issuing: core terms, method, flow, and binding fields.
+ *
+ * @param req - Payment requirements
+ * @param networks - Supported networks mapped to BOLT11 currency
+ * @returns The validated binding fields
+ */
+export function validateRequirements(req, networks) {
+    validateCoreTerms(req, networks);
+    validateMethodAndFlow(req.extra);
+    return parseBindingExtra(req.extra);
+}
+/**
+ * Strictly decodes an invoice and checks it against the requirements: the
+ * facilitator's step 5, and the client and server pre-payment checks except
+ * expiry (see {@link checkExpiry}).
+ *
+ * @param invoice - BOLT11 invoice text
+ * @param req - Requirements whose terms the invoice must match
+ * @param expectedRequestHash - The expected request hash, lowercase hex
+ * @param networks - Supported networks mapped to BOLT11 currency
+ * @param options - Time and expiry policy
+ * @returns The decoded invoice
+ */
+export function validateInvoice(invoice, req, expectedRequestHash, networks, options) {
+    if (invoice === undefined || invoice === null || invoice === "")
+        reject(Errors.invoiceMissing);
+    if (typeof invoice !== "string")
+        reject(Errors.invoiceDecodeFailed);
+    let decoded;
+    try {
+        decoded = decodeInvoice(invoice);
+    }
+    catch {
+        reject(Errors.invoiceDecodeFailed);
+    }
+    if (decoded.descriptionHashes.length !== 1 || decoded.inlineDescriptionCount !== 0) {
+        reject(Errors.invoiceDescription);
+    }
+    if (decoded.descriptionHashes[0] !== expectedRequestHash)
+        reject(Errors.invoiceRequestMismatch);
+    if (decoded.payee !== req.payTo)
+        reject(Errors.invoicePayeeMismatch);
+    if (decoded.currency !== networks[req.network])
+        reject(Errors.invoiceCurrencyMismatch);
+    if (decoded.amountMsat !== BigInt(req.amount))
+        reject(Errors.invoiceAmountMismatch);
+    if (decoded.expirySeconds !== req.maxTimeoutSeconds)
+        reject(Errors.invoiceExpiryMismatch);
+    if (decoded.timestamp > options.now + options.skew)
+        reject(Errors.invoiceCreatedInFuture);
+    return decoded;
+}
+/**
+ * Applies an expiry policy to a decoded invoice.
+ *
+ * @param invoice - Decoded invoice
+ * @param options - Validation time and skew
+ * @param policy - `unexpired`: the invoice must not have expired at `now`
+ *   (client, server). `settlement`: the paid-but-expired window, valid through
+ *   `invoice_end + skew` inclusive (facilitator).
+ */
+export function checkExpiry(invoice, options, policy) {
+    const end = invoice.timestamp + invoice.expirySeconds;
+    const expired = policy === "settlement" ? options.now > end + options.skew : options.now >= end;
+    if (expired)
+        reject(Errors.invoiceExpired);
+}
+/**
+ * Checks that a network is one of the configured networks (own keys only, so
+ * names such as `constructor` never match).
+ *
+ * @param network - Candidate network
+ * @param networks - Supported networks mapped to BOLT11 currency
+ * @returns Whether the network is supported
+ */
+export function isSupportedNetwork(network, networks) {
+    return typeof network === "string" && Object.prototype.hasOwnProperty.call(networks, network);
+}
+/**
+ * Validates a clock-skew allowance.
+ *
+ * @param skew - Seconds
+ */
+export function validateSkew(skew) {
+    if (!Number.isSafeInteger(skew) || skew < 0) {
+        throw new RangeError("clock skew must be a non-negative integer number of seconds");
+    }
+}
+/**
+ * Checks for a lowercase compressed secp256k1 public key on the curve.
+ *
+ * @param value - Candidate
+ * @returns Whether it is valid
+ */
+export function isCompressedPubkey(value) {
+    if (typeof value !== "string" || !COMPRESSED_PUBKEY.test(value))
+        return false;
+    try {
+        secp256k1.Point.fromHex(value).assertValidity();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Current Unix time in whole seconds.
+ *
+ * @returns Seconds since the epoch
+ */
+export function unixNow() {
+    return Math.floor(Date.now() / 1000);
+}
+//# sourceMappingURL=validation.js.map

package/dist/node/vendor/x402-lnbtc/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/node/vendor/x402-lnbtc/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAA4B,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,KAAK,EACL,qBAAqB,EACrB,MAAM,EACN,UAAU,EAEV,YAAY,EACZ,MAAM,GACP,MAAM,gBAAgB,CAAC;AAExB,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,MAAwB;IAC7C,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAwB,EACxB,QAA0C;IAE1C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA0C;IAC9E,mFAAmF;IACnF,MAAM,MAAM,GACV,KAAK,EAAE,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC/F,IAAI,MAAM,KAAK,qBAAqB;QAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzE,IAAI,KAAK,EAAE,WAAW,KAAK,YAAY;QAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAwB,EACxB,QAA0C;IAE1C,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAgB,EAChB,GAAwB,EACxB,mBAA2B,EAC3B,QAA0C,EAC1C,OAA4B;IAE5B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACpE,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,sBAAsB,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,mBAAmB;QAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;QAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,aAAa,KAAK,GAAG,CAAC,iBAAiB;QAAE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC1F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,OAAuB,EACvB,OAA4B,EAC5B,MAAkC;IAElC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;IAChG,IAAI,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgB,EAChB,QAA0C;IAE1C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,CAAC;QACH,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@run402/sdk",
-  "version": "4.112.0",
+  "version": "4.114.0",
   "description": "Typed TypeScript client for the Run402 API. Kernel shared by the run402-mcp server, the run402 CLI, and user-deployed run402 functions.",
   "type": "module",
   "main": "dist/index.js",