@t-0/provider-sdk 1.1.28 → 1.1.30

package/lib/esm/service/health_pb.js

@@ -1,84 +1 @@
-// Vendored generated stubs for grpc.health.v1 -- do not edit by hand.
-//
-// Source:   buf.build/grpc/grpc, grpc/health/v1/health.proto
-// Plugin:   buf.build/bufbuild/es:v2.12.0 (kept in step with the root
-//           buf.gen.yaml pin -- plugin and @bufbuild/protobuf runtime must
-//           agree on major).
-//
-// Regenerate by overwriting this file:
-//
-//   cd node/sdk
-//   buf generate buf.build/grpc/grpc --path grpc/health/v1/health.proto \
-//     --template '{"version":"v2","plugins":[{"remote":"buf.build/bufbuild/es:v2.12.0","out":"gen-health","opt":["target=ts","import_extension=js"]}]}'
-//   mv gen-health/grpc/health/v1/health_pb.ts src/service/health_pb.ts
-//   rm -rf gen-health
-//
-// Vendored rather than depended on: the equivalent package
-// `@buf/grpc_grpc.bufbuild_es` is published only on the Buf Schema Registry, and
-// reaching it needs registry config that a published npm package cannot hand its
-// consumers -- so depending on it 404'd every downstream install. Rationale in
-// docs/HEALTH_SERVICE.md.
-//
-// Lives under src/service/ rather than src/common/gen/ so the transport keeps
-// importing nothing from common/gen.
-import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
-/**
- * Describes the file grpc/health/v1/health.proto.
- */
-export const file_grpc_health_v1_health = /*@__PURE__*/ fileDesc("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");
-/**
- * Describes the message grpc.health.v1.HealthCheckRequest.
- * Use `create(HealthCheckRequestSchema)` to create a new message.
- */
-export const HealthCheckRequestSchema = /*@__PURE__*/ messageDesc(file_grpc_health_v1_health, 0);
-/**
- * Describes the message grpc.health.v1.HealthCheckResponse.
- * Use `create(HealthCheckResponseSchema)` to create a new message.
- */
-export const HealthCheckResponseSchema = /*@__PURE__*/ messageDesc(file_grpc_health_v1_health, 1);
-/**
- * @generated from enum grpc.health.v1.HealthCheckResponse.ServingStatus
- */
-export var HealthCheckResponse_ServingStatus;
-(function (HealthCheckResponse_ServingStatus) {
-    /**
-     * @generated from enum value: UNKNOWN = 0;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["UNKNOWN"] = 0] = "UNKNOWN";
-    /**
-     * @generated from enum value: SERVING = 1;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["SERVING"] = 1] = "SERVING";
-    /**
-     * @generated from enum value: NOT_SERVING = 2;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["NOT_SERVING"] = 2] = "NOT_SERVING";
-    /**
-     * Used only by the Watch method.
-     *
-     * @generated from enum value: SERVICE_UNKNOWN = 3;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["SERVICE_UNKNOWN"] = 3] = "SERVICE_UNKNOWN";
-})(HealthCheckResponse_ServingStatus || (HealthCheckResponse_ServingStatus = {}));
-/**
- * Describes the enum grpc.health.v1.HealthCheckResponse.ServingStatus.
- */
-export const HealthCheckResponse_ServingStatusSchema = /*@__PURE__*/ enumDesc(file_grpc_health_v1_health, 1, 0);
-/**
- * Describes the message grpc.health.v1.HealthListRequest.
- * Use `create(HealthListRequestSchema)` to create a new message.
- */
-export const HealthListRequestSchema = /*@__PURE__*/ messageDesc(file_grpc_health_v1_health, 2);
-/**
- * Describes the message grpc.health.v1.HealthListResponse.
- * Use `create(HealthListResponseSchema)` to create a new message.
- */
-export const HealthListResponseSchema = /*@__PURE__*/ messageDesc(file_grpc_health_v1_health, 3);
-/**
- * Health is gRPC's mechanism for checking whether a server is able to handle
- * RPCs. Its semantics are documented in
- * https://github.com/grpc/grpc/blob/master/doc/health-checking.md.
- *
- * @generated from service grpc.health.v1.Health
- */
-export const Health = /*@__PURE__*/ serviceDesc(file_grpc_health_v1_health, 0);
+export * from "../common/health_pb.js";

package/lib/esm/service/node.d.ts

@@ -1,3 +1 @@
-import type * as http from "node:http";
-export type NodeHandlerFn = (request: http.IncomingMessage, response: http.ServerResponse) => void;
-export declare const signatureValidation: (next: NodeHandlerFn) => NodeHandlerFn;
+export * from "../common/node.js";

package/lib/esm/service/node.js

@@ -1,11 +1 @@
-import { keccak_256 } from "@noble/hashes/sha3.js";
-export const signatureValidation = (next) => (req, resp) => {
-    const hasher = keccak_256.create();
-    req.hasher = hasher;
-    req.on("data", (chunk) => {
-        if (chunk instanceof Buffer) {
-            hasher.update(chunk);
-        }
-    });
-    next(req, resp);
-};
+export * from "../common/node.js";

package/lib/esm/service/service.d.ts

@@ -1,15 +1,12 @@
-import { ConnectRouter } from "@connectrpc/connect";
-import type { Interceptor } from "@connectrpc/connect";
-import type { DescService } from "@bufbuild/protobuf";
-import type { ServiceImpl } from "@connectrpc/connect";
-export declare const REQUEST_VALIDITY_MILLIS = 60000;
+import { type CreateServiceOptions } from "../common/service.js";
+export type { CreateServiceOptions } from "../common/service.js";
+export { REQUEST_VALIDITY_MILLIS } from "../common/service.js";
 interface Router {
-    service: <T extends DescService, I extends ServiceImpl<T>>(service: T, implementation: I) => void;
+    service: <T extends import("@bufbuild/protobuf").DescService, I extends import("@connectrpc/connect").ServiceImpl<T>>(service: T, implementation: I) => void;
 }
-export declare const createService: (networkPublicKey: string | Buffer, registerRoutes: (router: Router) => void) => {
-    routes: (router: ConnectRouter) => void;
-    interceptors: Interceptor[];
+export declare const createService: (networkPublicKey: string | Buffer, registerRoutes: (router: Router) => void, options?: CreateServiceOptions) => {
+    routes: (router: import("@connectrpc/connect").ConnectRouter) => void;
+    interceptors: import("@connectrpc/connect").Interceptor[];
     grpcWeb: boolean;
     contextValues: (req: any) => import("@connectrpc/connect").ContextValues;
 };
-export {};

package/lib/esm/service/service.js

@@ -1,91 +1,4 @@
-import { Code, ConnectError, createContextKey, createContextValues } from "@connectrpc/connect";
-import NetworkHeaders from "../common/headers.js";
-import { secp256k1 } from '@noble/curves/secp256k1.js';
-import { createValidationInterceptor } from "./validate_response.js";
-import { Health } from "./health_pb.js";
-import { createHealthServiceImpl } from "./health.js";
-export const REQUEST_VALIDITY_MILLIS = 60000;
-const createSignatureVerification = (networkPublicKey) => (next) => async (req) => {
-    const ts = decodeNum(getHeader(req, NetworkHeaders.SignatureTimestamp));
-    if (Date.now() - ts > 60000) {
-        throw new ConnectError(`${NetworkHeaders.SignatureTimestamp} must be within ${REQUEST_VALIDITY_MILLIS} milliseconds from now`, Code.InvalidArgument);
-    }
-    const publicKey = decodeHex(getHeader(req, NetworkHeaders.PublicKey));
-    if (networkPublicKey.compare(publicKey) !== 0) {
-        throw new ConnectError(`${NetworkHeaders.PublicKey} value is not network public key`, Code.Unauthenticated);
-    }
-    let signature = decodeHex(getHeader(req, NetworkHeaders.Signature));
-    if (signature.length === 65) {
-        signature = signature.subarray(0, 64);
-    }
-    const hasher = req.contextValues.get(kHash);
-    const tsBuf = Buffer.alloc(8);
-    tsBuf.writeBigUInt64LE(BigInt(ts)); // 64‑bit little‑endian timestamp
-    const hash = hasher
-        .update(tsBuf)
-        .digest();
-    let signatureValid = false;
-    try {
-        signatureValid = secp256k1.verify(signature, hash, publicKey, { prehash: false });
-    }
-    catch (e) {
-        throw new ConnectError(`${NetworkHeaders.Signature} has invalid signature or public key format: ${e}`, Code.Unauthenticated);
-    }
-    if (!signatureValid) {
-        throw new ConnectError(`${NetworkHeaders.Signature} has invalid signature`, Code.Unauthenticated);
-    }
-    return await next(req);
-};
-export const createService = (networkPublicKey, registerRoutes) => {
-    if (typeof networkPublicKey == "string") {
-        networkPublicKey = decodeHex(networkPublicKey);
-    }
-    return {
-        routes: (router) => {
-            const collected = [];
-            const origService = router.service.bind(router);
-            const wrappedRouter = {
-                service: (desc, impl) => {
-                    collected.push(desc.typeName);
-                    origService(desc, impl);
-                },
-            };
-            registerRoutes(wrappedRouter);
-            // Health is the only service this transport mounts on its own — see
-            // docs/HEALTH_SERVICE.md. Same interceptors as everything else, so the
-            // probe is signed like any other call.
-            collected.push(Health.typeName);
-            origService(Health, createHealthServiceImpl(collected));
-        },
-        interceptors: [createSignatureVerification(networkPublicKey), createValidationInterceptor()],
-        grpcWeb: false,
-        contextValues: (req) => {
-            return createContextValues().set(kHash, req.hasher);
-        }
-    };
-};
-const kHash = createContextKey(undefined);
-function getHeader(req, header) {
-    const raw = req.header.get(header);
-    if (!raw) {
-        throw new ConnectError(`missing required header '${header}'`, Code.InvalidArgument);
-    }
-    return raw;
-}
-function decodeHex(value) {
-    value = value.startsWith('0x') ? value.slice(2) : value;
-    try {
-        return Buffer.from(value, "hex");
-    }
-    catch (e) {
-        throw new ConnectError(`invalid header format. '${value}' must be hex encoded`, Code.InvalidArgument);
-    }
-}
-function decodeNum(value) {
-    try {
-        return parseInt(value);
-    }
-    catch (e) {
-        throw new ConnectError(`invalid header format. '${value}' must be a number`, Code.InvalidArgument);
-    }
-}
+import { createService as createServiceCommon } from "../common/service.js";
+import { SDK_VERSION } from "../version.js";
+export { REQUEST_VALIDITY_MILLIS } from "../common/service.js";
+export const createService = (networkPublicKey, registerRoutes, options) => createServiceCommon(networkPublicKey, registerRoutes, { ...options, version: options?.version ?? SDK_VERSION });

package/lib/esm/service/validate.d.ts

@@ -0,0 +1 @@
+export * from "../common/validate.js";

package/lib/esm/service/validate.js

@@ -0,0 +1 @@
+export * from "../common/validate.js";

package/lib/esm/service/validate_response.d.ts

@@ -1,12 +1,17 @@
 import type { Interceptor } from "@connectrpc/connect";
+import type { Logger } from "../common/validation.js";
+import { createValidationInterceptor } from "../common/validation.js";
+export { createValidationInterceptor, type Logger, type ValidationInterceptorOptions } from "../common/validation.js";
 /**
- * Creates a ConnectRPC interceptor that validates provider responses against
- * buf.validate proto annotations before they are serialized and sent.
- * Also validates incoming requests using the official @connectrpc/validate interceptor.
- *
- * Invalid requests return Code.InvalidArgument; invalid responses return Code.Internal.
+ * Registry covering the t-0 network provider contract protos. Leaf file
+ * descriptors pull in their full dependency graph, so adding new messages
+ * or fields to existing protos requires only `buf:generate`.
  */
-export declare function createValidationInterceptor(): Interceptor;
+export declare const networkRegistry: import("@bufbuild/protobuf").Registry;
+/**
+ * Validation interceptor pre-configured for the t-0 network provider contract.
+ */
+export declare function createNetworkValidationInterceptor(logger?: Logger): Interceptor;
 /**
  * @deprecated Use createValidationInterceptor instead.
  */

package/lib/esm/service/validate_response.js

@@ -1,32 +1,20 @@
-import { Code, ConnectError } from "@connectrpc/connect";
-import { createValidator } from "@bufbuild/protovalidate";
-import { createValidateInterceptor } from "@connectrpc/validate";
-const validator = createValidator();
+import { createRegistry } from "@bufbuild/protobuf";
+import { file_tzero_v1_payment_provider } from "../common/gen/tzero/v1/payment/provider_pb.js";
+import { file_tzero_v1_payment_network } from "../common/gen/tzero/v1/payment/network_pb.js";
+import { createValidationInterceptor } from "../common/validation.js";
+// Re-export everything from the common layer for backward compatibility.
+export { createValidationInterceptor } from "../common/validation.js";
 /**
- * Creates a ConnectRPC interceptor that validates provider responses against
- * buf.validate proto annotations before they are serialized and sent.
- * Also validates incoming requests using the official @connectrpc/validate interceptor.
- *
- * Invalid requests return Code.InvalidArgument; invalid responses return Code.Internal.
+ * Registry covering the t-0 network provider contract protos. Leaf file
+ * descriptors pull in their full dependency graph, so adding new messages
+ * or fields to existing protos requires only `buf:generate`.
  */
-export function createValidationInterceptor() {
-    const requestInterceptor = createValidateInterceptor();
-    return (next) => async (req) => {
-        // Validate request (delegates to official interceptor which throws on invalid)
-        const resp = await requestInterceptor(next)(req);
-        // Validate response
-        const schema = req.method.output;
-        const msg = resp.message;
-        const result = validator.validate(schema, msg);
-        if (result.kind === "invalid") {
-            const details = result.violations.map(v => `${v.field?.toString() ?? ""}: ${v.message}`).join("; ");
-            throw new ConnectError(`response validation failed: ${details}`, Code.Internal);
-        }
-        if (result.kind === "error") {
-            throw new ConnectError(`response validation error: ${result.error.message}`, Code.Internal);
-        }
-        return resp;
-    };
+export const networkRegistry = createRegistry(file_tzero_v1_payment_provider, file_tzero_v1_payment_network);
+/**
+ * Validation interceptor pre-configured for the t-0 network provider contract.
+ */
+export function createNetworkValidationInterceptor(logger) {
+    return createValidationInterceptor({ logger, registry: networkRegistry });
 }
 /**
  * @deprecated Use createValidationInterceptor instead.

package/lib/esm/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "1.1.28";
+export declare const SDK_VERSION = "1.1.30";

package/lib/esm/version.js

@@ -1,3 +1,3 @@
 // SDK semantic version. Bumped in lockstep with all other SDKs by the
 // release.yaml workflow.
-export const SDK_VERSION = "1.1.28";
+export const SDK_VERSION = "1.1.30";