@tanakayuto/intmax402-express 0.3.1 → 0.3.3

package/dist/middleware.js

@@ -18,9 +18,19 @@ function intmax402(config) {
     return async (req, res, next) => {
         try {
             // Wait for payment verifier initialization if in progress
-            if (initPromise) {
-                await initPromise;
-                initPromise = null;
+            try {
+                if (initPromise) {
+                    await initPromise;
+                    initPromise = null;
+                }
+            }
+            catch (e) {
+                res.status(503).json({
+                    error: 'Payment verifier temporarily unavailable',
+                    error_code: intmax402_core_1.INTMAX402_ERROR_CODES.INTMAX_NETWORK_UNAVAILABLE,
+                    protocol: 'INTMAX402',
+                });
+                return;
             }
             const authHeader = req.headers.authorization;
             if (!authHeader) {
@@ -30,6 +40,7 @@ function intmax402(config) {
                 res.setHeader("WWW-Authenticate", (0, intmax402_core_1.buildWWWAuthenticate)(nonce, config));
                 res.status(statusCode).json({
                     error: config.mode === "payment" ? "Payment Required" : "Unauthorized",
+                    error_code: intmax402_core_1.INTMAX402_ERROR_CODES.MISSING_AUTH_HEADER,
                     protocol: "INTMAX402",
                     mode: config.mode,
                 });
@@ -66,9 +77,29 @@ function intmax402(config) {
                     res.status(500).json({ error: "Server misconfigured: serverAddress and amount required for payment mode" });
                     return;
                 }
-                const paymentResult = await (0, verify_payment_1.verifyPayment)(credential.txHash, config.amount, config.serverAddress);
+                let paymentResult;
+                try {
+                    paymentResult = await (0, verify_payment_1.verifyPayment)(credential.txHash, config.amount, config.serverAddress);
+                }
+                catch (err) {
+                    if (err instanceof intmax402_core_1.INTMAX402Error) {
+                        const status = err.code === intmax402_core_1.INTMAX402_ERROR_CODES.INTMAX_NETWORK_UNAVAILABLE ? 503 : 402;
+                        res.status(status).json({
+                            error: err.message,
+                            error_code: err.code,
+                            protocol: 'INTMAX402',
+                        });
+                    }
+                    else {
+                        res.status(402).json({
+                            error: 'Payment verification failed',
+                            protocol: 'INTMAX402',
+                        });
+                    }
+                    return;
+                }
                 if (!paymentResult.valid) {
-                    res.status(402).json({ error: paymentResult.error || "Payment verification failed" });
+                    res.status(402).json({ error: paymentResult.error || "Payment verification failed", protocol: "INTMAX402" });
                     return;
                 }
             }

package/dist/verify-payment.js

@@ -5,6 +5,7 @@ exports.getPaymentVerifierAddress = getPaymentVerifierAddress;
 exports.verifyPayment = verifyPayment;
 exports._resetPaymentVerifier = _resetPaymentVerifier;
 const intmax2_server_sdk_1 = require("intmax2-server-sdk");
+const intmax402_core_1 = require("@tanakayuto/intmax402-core");
 // Singleton IntMaxNodeClient
 let client = null;
 let loginPromise = null;
@@ -40,8 +41,16 @@ async function initPaymentVerifier(config) {
         l1_rpc_url: config.l1_rpc_url,
         loggerLevel: "warn",
     });
-    loginPromise = client.login().then(() => {
+    loginPromise = client
+        .login()
+        .then(() => {
         loginPromise = null;
+    })
+        .catch((err) => {
+        console.warn("[intmax402] INTMAX network login failed — payment verifier unavailable:", err instanceof Error ? err.message : String(err));
+        client = null;
+        loginPromise = null;
+        throw err;
     });
     await loginPromise;
 }
@@ -52,7 +61,7 @@ function getPaymentVerifierAddress() {
 }
 async function verifyPayment(txHash, expectedAmount, serverAddress, tokenIndex) {
     if (!client || !client.isLoggedIn) {
-        return { valid: false, error: "Payment verifier not initialized" };
+        throw new intmax402_core_1.INTMAX402Error(intmax402_core_1.INTMAX402_ERROR_CODES.INTMAX_NETWORK_UNAVAILABLE, "Payment verifier temporarily unavailable. INTMAX network may be down.");
     }
     // Replay prevention: check if txHash was already used (or pending)
     cleanupExpiredHashes();
@@ -71,23 +80,41 @@ async function verifyPayment(txHash, expectedAmount, serverAddress, tokenIndex)
             transfers = transfers.concat(response2.items);
         }
         // Find matching transaction by digest
-        const match = transfers.find((tx) => tx.digest === txHash);
+        let match = transfers.find((tx) => tx.digest === txHash);
+        // Polling retry: if not found, retry up to 3 times with 5s delay
+        // (transfer may not be reflected immediately after submission)
+        if (!match) {
+            for (let retry = 0; retry < 3; retry++) {
+                await new Promise((r) => setTimeout(r, 5000));
+                const retryResponse = await client.fetchTransfers({ cursor: null, limit: 100 });
+                match = retryResponse.items.find((tx) => tx.digest === txHash);
+                if (match)
+                    break;
+                // Also check next page on retry if needed
+                if (!match && retryResponse.pagination?.has_more && retryResponse.pagination?.next_cursor != null) {
+                    const retryResponse2 = await client.fetchTransfers({ cursor: retryResponse.pagination.next_cursor, limit: 100 });
+                    match = retryResponse2.items.find((tx) => tx.digest === txHash);
+                    if (match)
+                        break;
+                }
+            }
+        }
         if (!match) {
             // Fix 1: Rollback on validation failure
             usedTxHashes.delete(txHash);
-            return { valid: false, error: "Transaction not found in recent transfers" };
+            throw new intmax402_core_1.INTMAX402Error(intmax402_core_1.INTMAX402_ERROR_CODES.PAYMENT_NOT_FOUND, "Transaction not found in recent transfers", { txHash });
         }
         // Verify recipient matches server address
         if (match.to?.toLowerCase() !== serverAddress.toLowerCase()) {
             // Fix 1: Rollback on validation failure
             usedTxHashes.delete(txHash);
-            return { valid: false, error: "Recipient does not match server address" };
+            throw new intmax402_core_1.INTMAX402Error(intmax402_core_1.INTMAX402_ERROR_CODES.PAYMENT_RECIPIENT_MISMATCH, "Recipient does not match server address", { expected: serverAddress, got: match.to });
         }
         // Fix 2: Verify amount using BigInt comparison (allows >= expectedAmount)
         if (BigInt(match.amount) < BigInt(expectedAmount)) {
             // Fix 1: Rollback on validation failure
             usedTxHashes.delete(txHash);
-            return { valid: false, error: `Amount mismatch: expected ${expectedAmount}, got ${match.amount}` };
+            throw new intmax402_core_1.INTMAX402Error(intmax402_core_1.INTMAX402_ERROR_CODES.PAYMENT_AMOUNT_MISMATCH, `Amount mismatch: expected ${expectedAmount}, got ${match.amount}`, { expected: expectedAmount, got: match.amount });
         }
         // Verify token if specified
         if (tokenIndex !== undefined && match.tokenIndex !== tokenIndex) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanakayuto/intmax402-express",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -26,7 +26,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@tanakayuto/intmax402-core": "0.3.1",
+    "@tanakayuto/intmax402-core": "0.3.2",
     "ethers": "^6.16.0",
     "intmax2-server-sdk": "^1.5.2"
   },