@thecryptodonkey/toll-booth 1.0.0

package/dist/core/create-invoice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-invoice.d.ts","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAiE9B"}

package/dist/core/create-invoice.js

@@ -0,0 +1,66 @@
+// src/core/create-invoice.ts
+import { randomBytes } from 'node:crypto';
+import QRCode from 'qrcode';
+import { mintMacaroon } from '../macaroon.js';
+/**
+ * Framework-agnostic invoice creation handler.
+ *
+ * Validates the requested amount against configured tiers (if any),
+ * creates a new Lightning invoice, mints a macaroon, stores everything,
+ * and returns structured result data.
+ */
+export async function handleCreateInvoice(deps, request) {
+    try {
+        const requestedAmount = request.amountSats ?? deps.defaultAmount;
+        if (!Number.isInteger(requestedAmount) || requestedAmount < 1) {
+            return { success: false, error: 'amountSats must be a positive integer' };
+        }
+        // Find matching tier or validate amount
+        let creditSats = requestedAmount;
+        if (deps.tiers.length > 0) {
+            const tier = deps.tiers.find(t => t.amountSats === requestedAmount);
+            if (!tier) {
+                return {
+                    success: false,
+                    error: 'Invalid amount. Choose from available tiers.',
+                    tiers: deps.tiers,
+                };
+            }
+            creditSats = tier.creditSats;
+        }
+        let paymentHash;
+        let bolt11;
+        if (deps.backend) {
+            const invoice = await deps.backend.createInvoice(requestedAmount, `toll-booth: ${creditSats} sats credit`);
+            paymentHash = invoice.paymentHash;
+            bolt11 = invoice.bolt11;
+        }
+        else {
+            // Cashu-only mode: synthetic payment hash
+            paymentHash = randomBytes(32).toString('hex');
+        }
+        const macaroon = mintMacaroon(deps.rootKey, paymentHash, creditSats);
+        const statusToken = randomBytes(32).toString('hex');
+        deps.storage.storeInvoice(paymentHash, bolt11 ?? '', creditSats, macaroon, statusToken);
+        const qrSvg = bolt11
+            ? await QRCode.toString(`lightning:${bolt11}`.toUpperCase(), { type: 'svg', margin: 2 })
+            : undefined;
+        return {
+            success: true,
+            data: {
+                bolt11: bolt11 ?? '',
+                paymentHash,
+                paymentUrl: `/invoice-status/${paymentHash}?token=${statusToken}`,
+                amountSats: requestedAmount,
+                creditSats,
+                macaroon,
+                qrSvg: qrSvg ?? '',
+            },
+        };
+    }
+    catch (err) {
+        console.error('[toll-booth] create invoice error:', err instanceof Error ? err.message : err);
+        return { success: false, error: 'Failed to create invoice' };
+    }
+}
+//# sourceMappingURL=create-invoice.js.map

package/dist/core/create-invoice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-invoice.js","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,MAAM,MAAM,QAAQ,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAW7C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,OAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAA;QAEhE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAA;QAC3E,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,GAAG,eAAe,CAAA;QAChC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAA;YACnE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,8CAA8C;oBACrD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAA;YACH,CAAC;YACD,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,CAAC;QAED,IAAI,WAAmB,CAAA;QACvB,IAAI,MAA0B,CAAA;QAE9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC9C,eAAe,EACf,eAAe,UAAU,cAAc,CACxC,CAAA;YACD,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACjC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QACzB,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QACpE,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEnD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QAEvF,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CACnB,aAAa,MAAM,EAAE,CAAC,WAAW,EAAE,EACnC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAC3B;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,WAAW;gBACX,UAAU,EAAE,mBAAmB,WAAW,UAAU,WAAW,EAAE;gBACjE,UAAU,EAAE,eAAe;gBAC3B,UAAU;gBACV,QAAQ;gBACR,KAAK,EAAE,KAAK,IAAI,EAAE;aACnB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAA;IAC9D,CAAC;AACH,CAAC"}

package/dist/core/invoice-status.d.ts

@@ -0,0 +1,24 @@
+import type { LightningBackend, CreditTier } from '../types.js';
+import type { StorageBackend } from '../storage/interface.js';
+import type { InvoiceStatusResult } from './types.js';
+export interface InvoiceStatusDeps {
+    backend?: LightningBackend;
+    storage: StorageBackend;
+    tiers?: CreditTier[];
+    nwcEnabled?: boolean;
+    cashuEnabled?: boolean;
+}
+/**
+ * Framework-agnostic invoice status check.
+ * Returns structured data suitable for JSON responses.
+ */
+export declare function handleInvoiceStatus(deps: InvoiceStatusDeps, paymentHash: string, statusToken?: string): Promise<InvoiceStatusResult>;
+/**
+ * Framework-agnostic invoice status rendered as HTML.
+ * Returns the HTML string and appropriate HTTP status code.
+ */
+export declare function renderInvoiceStatusHtml(deps: InvoiceStatusDeps, paymentHash: string, statusToken?: string): Promise<{
+    html: string;
+    status: number;
+}>;
+//# sourceMappingURL=invoice-status.d.ts.map

package/dist/core/invoice-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoice-status.d.ts","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,CA2B9B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC3C"}

package/dist/core/invoice-status.js

@@ -0,0 +1,74 @@
+import { renderPaymentPage, renderErrorPage } from '../payment-page.js';
+/**
+ * Framework-agnostic invoice status check.
+ * Returns structured data suitable for JSON responses.
+ */
+export async function handleInvoiceStatus(deps, paymentHash, statusToken) {
+    const invoice = statusToken
+        ? deps.storage.getInvoiceForStatus(paymentHash, statusToken)
+        : undefined;
+    if (!invoice) {
+        return { found: false, paid: false };
+    }
+    // In Cashu-only mode (no backend), check settlement status from storage
+    if (!deps.backend) {
+        const settled = deps.storage.isSettled(paymentHash);
+        return {
+            found: true,
+            paid: settled,
+            tokenSuffix: settled ? deps.storage.getSettlementSecret(paymentHash) : undefined,
+            invoice,
+        };
+    }
+    const status = await deps.backend.checkInvoice(paymentHash);
+    return {
+        found: true,
+        paid: status.paid,
+        preimage: status.preimage,
+        tokenSuffix: status.preimage ?? (status.paid ? deps.storage.getSettlementSecret(paymentHash) : undefined),
+        invoice,
+    };
+}
+/**
+ * Framework-agnostic invoice status rendered as HTML.
+ * Returns the HTML string and appropriate HTTP status code.
+ */
+export async function renderInvoiceStatusHtml(deps, paymentHash, statusToken) {
+    try {
+        const invoice = statusToken
+            ? deps.storage.getInvoiceForStatus(paymentHash, statusToken)
+            : undefined;
+        if (!invoice) {
+            return {
+                html: renderErrorPage({
+                    paymentHash,
+                    message: 'This invoice was not found. It may have expired or the payment hash is incorrect.',
+                }),
+                status: 404,
+            };
+        }
+        const status = deps.backend
+            ? await deps.backend.checkInvoice(paymentHash)
+            : { paid: deps.storage.isSettled(paymentHash), preimage: undefined };
+        const html = await renderPaymentPage({
+            invoice,
+            paid: status.paid,
+            preimage: status.preimage,
+            tokenSuffix: status.preimage ?? (status.paid ? deps.storage.getSettlementSecret(paymentHash) : undefined),
+            tiers: deps.tiers ?? [],
+            nwcEnabled: deps.nwcEnabled ?? false,
+            cashuEnabled: deps.cashuEnabled ?? false,
+        });
+        return { html, status: 200 };
+    }
+    catch {
+        return {
+            html: renderErrorPage({
+                paymentHash,
+                message: 'Failed to check invoice status. Please try again.',
+            }),
+            status: 502,
+        };
+    }
+}
+//# sourceMappingURL=invoice-status.js.map

package/dist/core/invoice-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoice-status.js","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAWvE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACtC,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACnD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,OAAO;SACR,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;IAC3D,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,OAAO;KACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC;oBACpB,WAAW;oBACX,OAAO,EAAE,mFAAmF;iBAC7F,CAAC;gBACF,MAAM,EAAE,GAAG;aACZ,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QACtE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;YACnC,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;SACzC,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,eAAe,CAAC;gBACpB,WAAW;gBACX,OAAO,EAAE,mDAAmD;aAC7D,CAAC;YACF,MAAM,EAAE,GAAG;SACZ,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/core/nwc-pay.d.ts

@@ -0,0 +1,8 @@
+import type { StorageBackend } from '../storage/interface.js';
+import type { NwcPayRequest, NwcPayResult } from './types.js';
+export interface NwcPayDeps {
+    nwcPay: (nwcUri: string, bolt11: string) => Promise<string>;
+    storage: StorageBackend;
+}
+export declare function handleNwcPay(deps: NwcPayDeps, request: NwcPayRequest): Promise<NwcPayResult>;
+//# sourceMappingURL=nwc-pay.d.ts.map

package/dist/core/nwc-pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nwc-pay.d.ts","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAG7D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAuBvB"}

package/dist/core/nwc-pay.js

@@ -0,0 +1,23 @@
+import { PAYMENT_HASH_RE } from './types.js';
+export async function handleNwcPay(deps, request) {
+    try {
+        const { nwcUri, bolt11, paymentHash, statusToken } = request;
+        if (typeof nwcUri !== 'string' || !nwcUri ||
+            typeof bolt11 !== 'string' || !bolt11 ||
+            !PAYMENT_HASH_RE.test(paymentHash) ||
+            typeof statusToken !== 'string' || !statusToken) {
+            return { success: false, error: 'Invalid request: nwcUri, bolt11, paymentHash and statusToken required', status: 400 };
+        }
+        const invoice = deps.storage.getInvoiceForStatus(paymentHash, statusToken);
+        if (!invoice || invoice.bolt11 !== bolt11) {
+            return { success: false, error: 'Unknown invoice or invoice mismatch', status: 400 };
+        }
+        const preimage = await deps.nwcPay(nwcUri, invoice.bolt11);
+        return { success: true, preimage };
+    }
+    catch (err) {
+        console.error('[toll-booth] NWC payment error:', err instanceof Error ? err.message : err);
+        return { success: false, error: 'NWC payment failed', status: 500 };
+    }
+}
+//# sourceMappingURL=nwc-pay.js.map

package/dist/core/nwc-pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nwc-pay.js","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAO5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5D,IACE,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YACrC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YACrC,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAC/C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uEAAuE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACtF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC1F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC;AACH,CAAC"}

package/dist/core/toll-booth.d.ts

@@ -0,0 +1,9 @@
+import { FreeTier } from '../free-tier.js';
+import type { TollBoothRequest, TollBoothResult, TollBoothCoreConfig } from './types.js';
+export interface TollBoothEngine {
+    handle(req: TollBoothRequest): Promise<TollBoothResult>;
+    freeTier: FreeTier | null;
+    upstream: string;
+}
+export declare function createTollBooth(config: TollBoothCoreConfig): TollBoothEngine;
+//# sourceMappingURL=toll-booth.d.ts.map

package/dist/core/toll-booth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toll-booth.d.ts","sourceRoot":"","sources":["../../src/core/toll-booth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAExF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACvD,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,eAAe,CA6H5E"}

package/dist/core/toll-booth.js

@@ -0,0 +1,172 @@
+// src/core/toll-booth.ts
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { mintMacaroon, verifyMacaroon } from '../macaroon.js';
+import { FreeTier } from '../free-tier.js';
+export function createTollBooth(config) {
+    const defaultAmount = config.defaultInvoiceAmount ?? 1000;
+    const upstream = config.upstream.replace(/\/$/, '');
+    const freeTier = config.freeTier ? new FreeTier(config.freeTier.requestsPerDay) : null;
+    return {
+        freeTier,
+        upstream,
+        async handle(req) {
+            const start = Date.now();
+            const path = req.path;
+            const pricedCost = config.pricing[path];
+            // Unpriced routes: pass through unless strictPricing is enabled
+            if (pricedCost === undefined && !config.strictPricing) {
+                return { action: 'pass', upstream, headers: {} };
+            }
+            // Effective cost: explicit pricing, or defaultInvoiceAmount when strictPricing
+            const cost = pricedCost ?? defaultAmount;
+            // Check for L402 Authorisation header
+            const authHeader = req.headers['authorization'] ?? req.headers['Authorization'];
+            if (authHeader?.startsWith('L402 ')) {
+                const result = handleL402Auth(authHeader, config.rootKey, config.storage, cost, defaultAmount);
+                if (result.authorised) {
+                    if (result.creditedAmount) {
+                        config.onPayment?.({
+                            timestamp: new Date().toISOString(),
+                            paymentHash: result.paymentHash,
+                            amountSats: result.creditedAmount,
+                        });
+                    }
+                    config.onRequest?.({
+                        timestamp: new Date().toISOString(),
+                        endpoint: path,
+                        satsDeducted: cost,
+                        remainingBalance: result.remaining,
+                        latencyMs: Date.now() - start,
+                        authenticated: true,
+                        clientIp: req.ip,
+                    });
+                    return {
+                        action: 'proxy',
+                        upstream,
+                        headers: { 'X-Credit-Balance': String(result.remaining) },
+                        creditBalance: result.remaining,
+                    };
+                }
+                // Fall through to issue a new challenge if authorisation failed
+            }
+            // Check free tier
+            if (freeTier) {
+                const check = freeTier.check(req.ip);
+                if (check.allowed) {
+                    config.onRequest?.({
+                        timestamp: new Date().toISOString(),
+                        endpoint: path,
+                        satsDeducted: 0,
+                        remainingBalance: 0,
+                        latencyMs: Date.now() - start,
+                        authenticated: false,
+                        clientIp: req.ip,
+                    });
+                    return {
+                        action: 'proxy',
+                        upstream,
+                        headers: { 'X-Free-Remaining': String(check.remaining) },
+                        freeRemaining: check.remaining,
+                    };
+                }
+            }
+            // Issue L402 challenge
+            let paymentHash;
+            let bolt11;
+            if (config.backend) {
+                const invoice = await config.backend.createInvoice(defaultAmount, `toll-booth: ${defaultAmount} sats credit`);
+                paymentHash = invoice.paymentHash;
+                bolt11 = invoice.bolt11;
+            }
+            else {
+                // Cashu-only mode: synthetic payment hash (no Lightning invoice)
+                paymentHash = randomBytes(32).toString('hex');
+            }
+            const macaroon = mintMacaroon(config.rootKey, paymentHash, defaultAmount);
+            const statusToken = randomBytes(32).toString('hex');
+            // Store invoice for payment page (bolt11 is empty in Cashu-only mode)
+            config.storage.storeInvoice(paymentHash, bolt11 ?? '', defaultAmount, macaroon, statusToken);
+            config.onChallenge?.({
+                timestamp: new Date().toISOString(),
+                endpoint: path,
+                amountSats: defaultAmount,
+                clientIp: req.ip,
+            });
+            const headers = bolt11
+                ? { 'WWW-Authenticate': `L402 macaroon="${macaroon}", invoice="${bolt11}"` }
+                : { 'WWW-Authenticate': `L402 macaroon="${macaroon}"` };
+            const body = {
+                error: 'Payment required',
+                macaroon,
+                payment_hash: paymentHash,
+                payment_url: `/invoice-status/${paymentHash}?token=${statusToken}`,
+                amount_sats: defaultAmount,
+            };
+            if (bolt11)
+                body.invoice = bolt11;
+            return {
+                action: 'challenge',
+                status: 402,
+                headers,
+                body,
+            };
+        },
+    };
+}
+function handleL402Auth(authHeader, rootKey, storage, cost, defaultAmount) {
+    try {
+        const token = authHeader.slice(5); // Remove "L402 "
+        const colonIdx = token.lastIndexOf(':');
+        if (colonIdx === -1)
+            return { authorised: false, remaining: 0 };
+        const macaroonBase64 = token.slice(0, colonIdx);
+        const preimage = token.slice(colonIdx + 1);
+        const result = verifyMacaroon(rootKey, macaroonBase64);
+        if (!result.valid || !result.paymentHash)
+            return { authorised: false, remaining: 0 };
+        // Verify suffix proof:
+        // - Lightning path: suffix is the real preimage (sha256(preimage) == payment hash)
+        // - Cashu path: suffix matches the settlement secret stored at redemption time
+        const settlementSecret = storage.getSettlementSecret(result.paymentHash);
+        const hasValidLightningPreimage = isValidLightningPreimage(preimage, result.paymentHash);
+        const hasValidSettlementSecret = settlementSecret !== undefined
+            && preimage.length === settlementSecret.length
+            && timingSafeEqual(Buffer.from(preimage), Buffer.from(settlementSecret));
+        if (!hasValidLightningPreimage && !hasValidSettlementSecret) {
+            return { authorised: false, remaining: 0 };
+        }
+        // Check if this payment hash has already been settled (Lightning or Cashu)
+        const alreadySettled = storage.isSettled(result.paymentHash);
+        let creditedAmount;
+        if (!alreadySettled) {
+            // First-time settlement must be proven with a real preimage hash match.
+            if (!hasValidLightningPreimage)
+                return { authorised: false, remaining: 0 };
+            // Atomically settle and credit (handles concurrent requests, crash-safe).
+            // Store the preimage as settlement secret so subsequent requests can verify
+            // via either sha256(preimage)==hash or direct secret comparison.
+            const amount = result.creditBalance ?? defaultAmount;
+            if (storage.settleWithCredit(result.paymentHash, amount, preimage)) {
+                creditedAmount = amount;
+            }
+        }
+        // Debit credit for this request
+        const debit = storage.debit(result.paymentHash, cost);
+        if (!debit.success)
+            return { authorised: false, remaining: debit.remaining };
+        return { authorised: true, remaining: debit.remaining, paymentHash: result.paymentHash, creditedAmount };
+    }
+    catch (err) {
+        console.error('[toll-booth] L402 auth error:', err instanceof Error ? err.message : err);
+        return { authorised: false, remaining: 0 };
+    }
+}
+function isValidLightningPreimage(preimage, paymentHash) {
+    if (!/^[0-9a-f]{64}$/.test(preimage))
+        return false;
+    const computedHash = createHash('sha256')
+        .update(Buffer.from(preimage, 'hex'))
+        .digest();
+    return timingSafeEqual(computedHash, Buffer.from(paymentHash, 'hex'));
+}
+//# sourceMappingURL=toll-booth.js.map

package/dist/core/toll-booth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toll-booth.js","sourceRoot":"","sources":["../../src/core/toll-booth.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAU1C,MAAM,UAAU,eAAe,CAAC,MAA2B;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAEtF,OAAO;QACL,QAAQ;QACR,QAAQ;QAER,KAAK,CAAC,MAAM,CAAC,GAAqB;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;YACrB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAEvC,gEAAgE;YAChE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;YAClD,CAAC;YAED,+EAA+E;YAC/E,MAAM,IAAI,GAAG,UAAU,IAAI,aAAa,CAAA;YAExC,sCAAsC;YACtC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;YAC/E,IAAI,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;gBAC9F,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;wBAC1B,MAAM,CAAC,SAAS,EAAE,CAAC;4BACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACnC,WAAW,EAAE,MAAM,CAAC,WAAY;4BAChC,UAAU,EAAE,MAAM,CAAC,cAAc;yBAClC,CAAC,CAAA;oBACJ,CAAC;oBACD,MAAM,CAAC,SAAS,EAAE,CAAC;wBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,QAAQ,EAAE,IAAI;wBACd,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,MAAM,CAAC,SAAS;wBAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC7B,aAAa,EAAE,IAAI;wBACnB,QAAQ,EAAE,GAAG,CAAC,EAAE;qBACjB,CAAC,CAAA;oBACF,OAAO;wBACL,MAAM,EAAE,OAAO;wBACf,QAAQ;wBACR,OAAO,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;wBACzD,aAAa,EAAE,MAAM,CAAC,SAAS;qBAChC,CAAA;gBACH,CAAC;gBACD,gEAAgE;YAClE,CAAC;YAED,kBAAkB;YAClB,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACpC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,MAAM,CAAC,SAAS,EAAE,CAAC;wBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,QAAQ,EAAE,IAAI;wBACd,YAAY,EAAE,CAAC;wBACf,gBAAgB,EAAE,CAAC;wBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC7B,aAAa,EAAE,KAAK;wBACpB,QAAQ,EAAE,GAAG,CAAC,EAAE;qBACjB,CAAC,CAAA;oBACF,OAAO;wBACL,MAAM,EAAE,OAAO;wBACf,QAAQ;wBACR,OAAO,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;wBACxD,aAAa,EAAE,KAAK,CAAC,SAAS;qBAC/B,CAAA;gBACH,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,IAAI,WAAmB,CAAA;YACvB,IAAI,MAA0B,CAAA;YAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAChD,aAAa,EACb,eAAe,aAAa,cAAc,CAC3C,CAAA;gBACD,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;gBACjC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,iEAAiE;gBACjE,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;YACzE,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAEnD,sEAAsE;YACtE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;YAE5F,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,aAAa;gBACzB,QAAQ,EAAE,GAAG,CAAC,EAAE;aACjB,CAAC,CAAA;YAEF,MAAM,OAAO,GAA2B,MAAM;gBAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,QAAQ,eAAe,MAAM,GAAG,EAAE;gBAC5E,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,QAAQ,GAAG,EAAE,CAAA;YAEzD,MAAM,IAAI,GAA4B;gBACpC,KAAK,EAAE,kBAAkB;gBACzB,QAAQ;gBACR,YAAY,EAAE,WAAW;gBACzB,WAAW,EAAE,mBAAmB,WAAW,UAAU,WAAW,EAAE;gBAClE,WAAW,EAAE,aAAa;aAC3B,CAAA;YACD,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;YAEjC,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO;gBACP,IAAI;aACL,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,UAAkB,EAClB,OAAe,EACf,OAAuB,EACvB,IAAY,EACZ,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,iBAAiB;QACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QAE/D,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;QAE1C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QAEpF,uBAAuB;QACvB,mFAAmF;QACnF,+EAA+E;QAC/E,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACxE,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;QACxF,MAAM,wBAAwB,GAAG,gBAAgB,KAAK,SAAS;eAC1D,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM;eAC3C,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAE1E,IAAI,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;QAED,2EAA2E;QAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAE5D,IAAI,cAAkC,CAAA;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,wEAAwE;YACxE,IAAI,CAAC,yBAAyB;gBAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;YAE1E,0EAA0E;YAC1E,4EAA4E;YAC5E,iEAAiE;YACjE,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,aAAa,CAAA;YACpD,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnE,cAAc,GAAG,MAAM,CAAA;YACzB,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;QAE5E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,CAAA;IAC1G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACxF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;IACrE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IAClD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;SACpC,MAAM,EAAE,CAAA;IACX,OAAO,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAA;AACvE,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,101 @@
+import type { LightningBackend, CreditTier, PaymentEvent, RequestEvent, ChallengeEvent } from '../types.js';
+import type { StorageBackend, StoredInvoice } from '../storage/interface.js';
+/** Matches a valid 64-char lowercase hex payment hash. */
+export declare const PAYMENT_HASH_RE: RegExp;
+export interface TollBoothRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string | undefined>;
+    ip: string;
+    body?: ReadableStream | null;
+}
+export type TollBoothResult = {
+    action: 'proxy';
+    upstream: string;
+    headers: Record<string, string>;
+    creditBalance?: number;
+    freeRemaining?: number;
+} | {
+    action: 'challenge';
+    status: 402;
+    headers: Record<string, string>;
+    body: Record<string, unknown>;
+} | {
+    action: 'pass';
+    upstream: string;
+    headers: Record<string, string>;
+};
+export interface TollBoothCoreConfig {
+    /** Lightning backend. Optional when Cashu-only mode is used. */
+    backend?: LightningBackend;
+    storage: StorageBackend;
+    pricing: Record<string, number>;
+    upstream: string;
+    defaultInvoiceAmount?: number;
+    strictPricing?: boolean;
+    rootKey: string;
+    freeTier?: {
+        requestsPerDay: number;
+    };
+    creditTiers?: CreditTier[];
+    onPayment?: (event: PaymentEvent) => void;
+    onRequest?: (event: RequestEvent) => void;
+    onChallenge?: (event: ChallengeEvent) => void;
+}
+export interface CreateInvoiceRequest {
+    amountSats?: number;
+}
+export interface CreateInvoiceResult {
+    success: boolean;
+    error?: string;
+    tiers?: CreditTier[];
+    data?: {
+        bolt11: string;
+        paymentHash: string;
+        paymentUrl: string;
+        amountSats: number;
+        creditSats: number;
+        macaroon: string;
+        qrSvg: string;
+    };
+}
+export interface InvoiceStatusResult {
+    found: boolean;
+    paid: boolean;
+    preimage?: string;
+    tokenSuffix?: string;
+    invoice?: StoredInvoice;
+}
+export interface NwcPayRequest {
+    nwcUri: string;
+    bolt11: string;
+    paymentHash: string;
+    statusToken: string;
+}
+export type NwcPayResult = {
+    success: true;
+    preimage: string;
+} | {
+    success: false;
+    error: string;
+    status: 400 | 500;
+};
+export interface CashuRedeemRequest {
+    token: string;
+    paymentHash: string;
+    statusToken: string;
+}
+export type CashuRedeemResult = {
+    success: true;
+    credited: number;
+    tokenSuffix: string;
+} | {
+    success: false;
+    state: 'pending';
+    retryAfterMs: number;
+} | {
+    success: false;
+    error: string;
+    status: 400 | 500;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC3G,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAE5E,0DAA0D;AAC1D,eAAO,MAAM,eAAe,QAAmB,CAAA;AAE/C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACtH;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAA;AAEzE,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAA;IACrC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;IACzC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAA;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,MAAM,CAAA;QACd,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,MAAM,CAAA;QAClB,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;CAAE,CAAA;AAExD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;CAAE,CAAA"}

package/dist/core/types.js

@@ -0,0 +1,3 @@
+/** Matches a valid 64-char lowercase hex payment hash. */
+export const PAYMENT_HASH_RE = /^[0-9a-f]{64}$/;
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAIA,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAA"}

package/dist/free-tier.d.ts

@@ -0,0 +1,14 @@
+export interface FreeTierResult {
+    allowed: boolean;
+    remaining: number;
+}
+export declare class FreeTier {
+    private readonly requestsPerDay;
+    private counters;
+    private currentDate;
+    constructor(requestsPerDay: number);
+    /** Reset all counters (e.g. via admin endpoint). */
+    reset(): void;
+    check(ip: string): FreeTierResult;
+}
+//# sourceMappingURL=free-tier.d.ts.map

package/dist/free-tier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-tier.d.ts","sourceRoot":"","sources":["../src/free-tier.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB;AAKD,qBAAa,QAAQ;IAIP,OAAO,CAAC,QAAQ,CAAC,cAAc;IAH3C,OAAO,CAAC,QAAQ,CAAqD;IACrE,OAAO,CAAC,WAAW,CAAwC;gBAE9B,cAAc,EAAE,MAAM;IAMnD,oDAAoD;IACpD,KAAK,IAAI,IAAI;IAIb,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc;CA2BlC"}

package/dist/free-tier.js

@@ -0,0 +1,41 @@
+// src/free-tier.ts
+/** Maximum number of distinct IPs tracked before new IPs are denied. */
+const MAX_TRACKED_IPS = 100_000;
+export class FreeTier {
+    requestsPerDay;
+    counters = new Map();
+    currentDate = new Date().toISOString().slice(0, 10);
+    constructor(requestsPerDay) {
+        this.requestsPerDay = requestsPerDay;
+        if (!Number.isInteger(requestsPerDay) || requestsPerDay < 1) {
+            throw new RangeError(`requestsPerDay must be a positive integer, got ${requestsPerDay}`);
+        }
+    }
+    /** Reset all counters (e.g. via admin endpoint). */
+    reset() {
+        this.counters.clear();
+    }
+    check(ip) {
+        const today = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
+        // Evict all stale entries when the date rolls over
+        if (this.currentDate !== today) {
+            this.counters.clear();
+            this.currentDate = today;
+        }
+        const entry = this.counters.get(ip);
+        if (!entry || entry.date !== today) {
+            // Prevent unbounded memory growth from IP-spoofed requests
+            if (!entry && this.counters.size >= MAX_TRACKED_IPS) {
+                return { allowed: false, remaining: 0 };
+            }
+            this.counters.set(ip, { count: 1, date: today });
+            return { allowed: true, remaining: this.requestsPerDay - 1 };
+        }
+        if (entry.count >= this.requestsPerDay) {
+            return { allowed: false, remaining: 0 };
+        }
+        entry.count++;
+        return { allowed: true, remaining: this.requestsPerDay - entry.count };
+    }
+}
+//# sourceMappingURL=free-tier.js.map

package/dist/free-tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-tier.js","sourceRoot":"","sources":["../src/free-tier.ts"],"names":[],"mappings":"AAAA,mBAAmB;AAOnB,wEAAwE;AACxE,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B,MAAM,OAAO,QAAQ;IAIU;IAHrB,QAAQ,GAAG,IAAI,GAAG,EAA2C,CAAA;IAC7D,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAE3D,YAA6B,cAAsB;QAAtB,mBAAc,GAAd,cAAc,CAAQ;QACjD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,UAAU,CAAC,kDAAkD,cAAc,EAAE,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,EAAU;QACd,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,aAAa;QAEjE,mDAAmD;QACnD,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QAC1B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAEnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACnC,2DAA2D;YAC3D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;YACzC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAA;QAC9D,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QACzC,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;IACxE,CAAC;CACF"}