@supercuts-walrus/backend 0.0.0-stage → 0.1.0

package/dist/x402.js

@@ -0,0 +1,136 @@
+import { createHash } from "node:crypto";
+import { fail } from "./errors.js";
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    if (value && typeof value === "object")
+        return `{${Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`).join(",")}}`;
+    const result = JSON.stringify(value);
+    if (result === undefined)
+        fail("X402_REQUIREMENTS_INVALID", "x402 values must be JSON-compatible");
+    return result;
+}
+export function requirementsHash(requirements) { return createHash("sha256").update(canonical(requirements)).digest("hex"); }
+export function paymentBindingBytes(binding) {
+    return Buffer.from(canonical({ domain: "supercuts-x402-binding-v1", ...binding }));
+}
+export class PaymentConsumptionLedger {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    claim(payment, requestId) {
+        if (!payment.finalized)
+            fail("PAYMENT_PENDING", "payment is not finalized");
+        if (!payment.network || !payment.digest || payment.network.length > 256 || payment.digest.length > 256 || !requestId || requestId.length > 256)
+            fail("PAYMENT_ID_INVALID", "payment or request identity is invalid");
+        const key = createHash("sha256").update(canonical([payment.network, payment.digest])).digest("hex");
+        this.store.db.exec("BEGIN IMMEDIATE");
+        try {
+            const request = this.store.db.prepare("SELECT payment_key FROM deliveries WHERE request_id = ?").get(requestId);
+            if (request && request.payment_key !== key)
+                fail("REQUEST_PAYMENT_CONFLICT", "request is already bound to another payment");
+            const existing = this.store.db.prepare("SELECT request_id FROM deliveries WHERE payment_key = ?").get(key);
+            if (existing && existing.request_id !== requestId)
+                fail("PAYMENT_CONSUMED", "payment was already used for another request");
+            if (!existing)
+                this.store.db.prepare("INSERT INTO deliveries(request_id, payment_key, response, finalized) VALUES (?, ?, ?, 1)").run(requestId, key, Buffer.alloc(0));
+            this.store.db.exec("COMMIT");
+        }
+        catch (error) {
+            this.store.db.exec("ROLLBACK");
+            throw error;
+        }
+    }
+    recordDelivery(requestId, response) {
+        const result = this.store.db.prepare("UPDATE deliveries SET response = ?, finalized = 1 WHERE request_id = ?").run(Buffer.from(response), requestId);
+        if (result.changes !== 1)
+            fail("PAYMENT_NOT_CLAIMED", "resource cannot be delivered before payment consumption");
+    }
+    getDelivery(requestId) {
+        const row = this.store.db.prepare("SELECT response FROM deliveries WHERE request_id = ?").get(requestId);
+        return row ? Buffer.from(row.response) : undefined;
+    }
+    isDeliveryComplete(requestId) {
+        const row = this.store.db.prepare("SELECT status FROM delivery_jobs WHERE request_id = ?").get(requestId);
+        return row?.status === "delivered";
+    }
+    acquireDelivery(requestId, now = Date.now(), leaseMs = 30_000) {
+        this.store.db.exec("BEGIN IMMEDIATE");
+        try {
+            const row = this.store.db.prepare("SELECT status, lease_until FROM delivery_jobs WHERE request_id = ?").get(requestId);
+            if (row?.status === "delivered" || (row?.status === "producing" && row.lease_until > now)) {
+                this.store.db.exec("COMMIT");
+                return false;
+            }
+            this.store.db.prepare("INSERT INTO delivery_jobs(request_id, status, lease_until) VALUES (?, 'producing', ?) ON CONFLICT(request_id) DO UPDATE SET status='producing', lease_until=excluded.lease_until").run(requestId, now + leaseMs);
+            this.store.db.exec("COMMIT");
+            return true;
+        }
+        catch (error) {
+            this.store.db.exec("ROLLBACK");
+            throw error;
+        }
+    }
+    releaseDelivery(requestId) { this.store.db.prepare("UPDATE delivery_jobs SET status = 'pending', lease_until = 0 WHERE request_id = ? AND status = 'producing'").run(requestId); }
+    completeDelivery(requestId, response) {
+        this.store.db.exec("BEGIN IMMEDIATE");
+        try {
+            this.recordDelivery(requestId, response);
+            this.store.db.prepare("INSERT INTO delivery_jobs(request_id, status, lease_until) VALUES (?, 'delivered', 0) ON CONFLICT(request_id) DO UPDATE SET status='delivered', lease_until=0").run(requestId);
+            this.store.db.exec("COMMIT");
+        }
+        catch (error) {
+            this.store.db.exec("ROLLBACK");
+            throw error;
+        }
+    }
+    challenge(requestId, requirementsHashValue, createNonce) {
+        const existing = this.store.db.prepare("SELECT nonce, requirements_hash FROM x402_challenges WHERE request_id = ?").get(requestId);
+        if (existing) {
+            if (existing.requirements_hash !== requirementsHashValue)
+                fail("X402_REQUEST_CONFLICT", "request identity was reused with different requirements");
+            return existing.nonce;
+        }
+        const nonce = createNonce();
+        this.store.db.prepare("INSERT INTO x402_challenges(request_id, nonce, requirements_hash, created_at) VALUES (?, ?, ?, ?)").run(requestId, nonce, requirementsHashValue, Date.now());
+        return nonce;
+    }
+    getChallenge(requestId, requirementsHashValue) {
+        const row = this.store.db.prepare("SELECT nonce, requirements_hash, created_at FROM x402_challenges WHERE request_id = ?").get(requestId);
+        if (row && row.requirements_hash !== requirementsHashValue)
+            fail("X402_REQUEST_CONFLICT", "request identity was reused with different requirements");
+        return row ? { nonce: row.nonce, createdAt: row.created_at } : undefined;
+    }
+}
+export function verifyBinding(binding, requestId, nonce, requirements, transactionDigest) {
+    if (!binding.payer || !binding.payerSignature || binding.payer.length > 256 || binding.payerSignature.length > 2048)
+        fail("X402_REQUEST_BINDING_INVALID", "payer binding identity or signature is invalid");
+    if (binding.requestId !== requestId || binding.nonce !== nonce || binding.transactionDigest !== transactionDigest || binding.requirementsHash !== requirementsHash(requirements))
+        fail("X402_REQUEST_BINDING_INVALID", "payment does not bind to this request");
+}
+export function verifyExactPayment(payment, requirements) {
+    if (requirements.scheme !== "exact" || !Number.isSafeInteger(requirements.maxTimeoutSeconds) || requirements.maxTimeoutSeconds <= 0)
+        fail("X402_REQUIREMENTS_INVALID", "exact requirements need a positive integer timeout");
+    if (!requirements.network || !requirements.asset || !requirements.payTo || requirements.network.length > 256 || requirements.asset.length > 512 || requirements.payTo.length > 256)
+        fail("X402_REQUIREMENTS_INVALID", "payment network, asset, or recipient is invalid");
+    if (!payment.finalized)
+        fail("PAYMENT_PENDING", "payment is not finalized");
+    let required;
+    try {
+        required = BigInt(requirements.amount);
+    }
+    catch (error) {
+        return fail("X402_REQUIREMENTS_INVALID", "payment amount is not an integer", error);
+    }
+    if (payment.network !== requirements.network)
+        fail("X402_NETWORK_MISMATCH", "payment used the wrong network");
+    if (payment.asset !== requirements.asset)
+        fail("X402_ASSET_MISMATCH", "payment used the wrong asset");
+    if (required <= 0n)
+        fail("X402_REQUIREMENTS_INVALID", "payment amount must be positive");
+    if (payment.amount !== required)
+        fail("X402_AMOUNT_MISMATCH", "payment used the wrong exact amount");
+    if (payment.payTo !== requirements.payTo)
+        fail("X402_PAYEE_MISMATCH", "payment used the wrong recipient");
+}

package/package.json

@@ -1,6 +1,63 @@
 {
   "name": "@supercuts-walrus/backend",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "exports": {
+    "./seam": "./dist/seam.js",
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "supercuts": "dist/cli.js",
+    "supercuts-demo": "dist/demo.js",
+    "supercuts-mcp": "dist/mcp-bootstrap.js",
+    "supercuts-resource": "dist/resource-server.js",
+    "supercuts-seller-service": "dist/seller-service.js",
+    "supercuts-seller-provision": "dist/seller-provision.js",
+    "supercuts-seller-watch": "dist/seller-watch.js",
+    "supercuts-seller-catalog": "dist/seller-catalog-generate.js",
+    "supercuts-facilitator": "dist/facilitator.js",
+    "supercuts-seam": "dist/seam.js",
+    "supercuts-v2-relayer": "dist/v2-relayer-cli.js",
+    "supercuts-memory-worker": "dist/memory-worker.js",
+    "supercuts-seller-live": "dist/seller-live-cli.js",
+    "supercuts-seller-register": "dist/seller-register-cli.js",
+    "supercuts-seller-v2-provision": "dist/seller-v2-provision.js",
+    "supercuts-hosted-exit": "dist/hosted-exit-cli.js",
+    "supercuts-hosted-seller-import": "dist/hosted-seller-import.js",
+    "supercuts-seller-directory": "dist/seller-directory-cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=22.13"
+  },
+  "dependencies": {
+    "@mysten-incubation/memwal": "0.1.11",
+    "@mysten/seal": "1.5.2",
+    "@mysten/sui": "2.38.0",
+    "@mysten/walrus": "1.2.37",
+    "ajv": "8.17.1",
+    "circomlibjs": "0.1.7",
+    "pg": "^8.23.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@types/pg": "^8.23.1",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "tsc --noEmit",
+    "test": "tsx --test test/**/*.test.ts",
+    "test:e2e": "tsx --test test/phase2.e2e.test.ts",
+    "test:phase3": "tsx --test test/phase3.e2e.test.ts",
+    "test:sdk": "pnpm --dir packages/sdk test",
+    "release:gate": "node scripts/release-gate.mjs",
+    "test:seal-live": "tsx scripts/seal-live-e2e.ts"
+  }
 }