@thecryptodonkey/toll-booth 1.1.2 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (96) hide show
  1. package/README.md +71 -23
  2. package/dist/adapters/express.d.ts +15 -2
  3. package/dist/adapters/express.d.ts.map +1 -1
  4. package/dist/adapters/express.js +62 -16
  5. package/dist/adapters/express.js.map +1 -1
  6. package/dist/adapters/hono.d.ts +62 -0
  7. package/dist/adapters/hono.d.ts.map +1 -0
  8. package/dist/adapters/hono.js +202 -0
  9. package/dist/adapters/hono.js.map +1 -0
  10. package/dist/adapters/proxy-headers.d.ts.map +1 -1
  11. package/dist/adapters/proxy-headers.js +1 -0
  12. package/dist/adapters/proxy-headers.js.map +1 -1
  13. package/dist/adapters/web-standard.d.ts +9 -1
  14. package/dist/adapters/web-standard.d.ts.map +1 -1
  15. package/dist/adapters/web-standard.js +44 -9
  16. package/dist/adapters/web-standard.js.map +1 -1
  17. package/dist/backends/cln.d.ts.map +1 -1
  18. package/dist/backends/cln.js +5 -2
  19. package/dist/backends/cln.js.map +1 -1
  20. package/dist/backends/lnbits.d.ts.map +1 -1
  21. package/dist/backends/lnbits.js +5 -2
  22. package/dist/backends/lnbits.js.map +1 -1
  23. package/dist/backends/lnd.d.ts.map +1 -1
  24. package/dist/backends/lnd.js +4 -1
  25. package/dist/backends/lnd.js.map +1 -1
  26. package/dist/backends/phoenixd.d.ts.map +1 -1
  27. package/dist/backends/phoenixd.js +5 -2
  28. package/dist/backends/phoenixd.js.map +1 -1
  29. package/dist/booth.d.ts.map +1 -1
  30. package/dist/booth.js +36 -6
  31. package/dist/booth.js.map +1 -1
  32. package/dist/core/cashu-redeem.d.ts.map +1 -1
  33. package/dist/core/cashu-redeem.js +15 -5
  34. package/dist/core/cashu-redeem.js.map +1 -1
  35. package/dist/core/create-invoice.d.ts +1 -0
  36. package/dist/core/create-invoice.d.ts.map +1 -1
  37. package/dist/core/create-invoice.js +29 -3
  38. package/dist/core/create-invoice.js.map +1 -1
  39. package/dist/core/invoice-status.d.ts.map +1 -1
  40. package/dist/core/invoice-status.js +24 -11
  41. package/dist/core/invoice-status.js.map +1 -1
  42. package/dist/core/l402-rail.d.ts +11 -0
  43. package/dist/core/l402-rail.d.ts.map +1 -0
  44. package/dist/core/l402-rail.js +94 -0
  45. package/dist/core/l402-rail.js.map +1 -0
  46. package/dist/core/nwc-pay.d.ts.map +1 -1
  47. package/dist/core/nwc-pay.js +8 -4
  48. package/dist/core/nwc-pay.js.map +1 -1
  49. package/dist/core/payment-rail.d.ts +40 -0
  50. package/dist/core/payment-rail.d.ts.map +1 -0
  51. package/dist/core/payment-rail.js +13 -0
  52. package/dist/core/payment-rail.js.map +1 -0
  53. package/dist/core/toll-booth.d.ts +2 -1
  54. package/dist/core/toll-booth.d.ts.map +1 -1
  55. package/dist/core/toll-booth.js +143 -120
  56. package/dist/core/toll-booth.js.map +1 -1
  57. package/dist/core/types.d.ts +17 -2
  58. package/dist/core/types.d.ts.map +1 -1
  59. package/dist/core/types.js.map +1 -1
  60. package/dist/core/x402-rail.d.ts +4 -0
  61. package/dist/core/x402-rail.d.ts.map +1 -0
  62. package/dist/core/x402-rail.js +65 -0
  63. package/dist/core/x402-rail.js.map +1 -0
  64. package/dist/core/x402-types.d.ts +29 -0
  65. package/dist/core/x402-types.d.ts.map +1 -0
  66. package/dist/core/x402-types.js +7 -0
  67. package/dist/core/x402-types.js.map +1 -0
  68. package/dist/demo.js +6 -6
  69. package/dist/demo.js.map +1 -1
  70. package/dist/index.d.ts +10 -1
  71. package/dist/index.d.ts.map +1 -1
  72. package/dist/index.js +4 -0
  73. package/dist/index.js.map +1 -1
  74. package/dist/macaroon.d.ts +18 -2
  75. package/dist/macaroon.d.ts.map +1 -1
  76. package/dist/macaroon.js +61 -8
  77. package/dist/macaroon.js.map +1 -1
  78. package/dist/payment-page.d.ts.map +1 -1
  79. package/dist/payment-page.js +8 -1
  80. package/dist/payment-page.js.map +1 -1
  81. package/dist/stats.d.ts.map +1 -1
  82. package/dist/stats.js +4 -2
  83. package/dist/stats.js.map +1 -1
  84. package/dist/storage/interface.d.ts +10 -5
  85. package/dist/storage/interface.d.ts.map +1 -1
  86. package/dist/storage/interface.js +0 -1
  87. package/dist/storage/interface.js.map +1 -1
  88. package/dist/storage/memory.d.ts.map +1 -1
  89. package/dist/storage/memory.js +52 -15
  90. package/dist/storage/memory.js.map +1 -1
  91. package/dist/storage/sqlite.d.ts.map +1 -1
  92. package/dist/storage/sqlite.js +138 -28
  93. package/dist/storage/sqlite.js.map +1 -1
  94. package/dist/types.d.ts +23 -4
  95. package/dist/types.d.ts.map +1 -1
  96. package/package.json +22 -5
package/dist/booth.js CHANGED
@@ -1,4 +1,7 @@
1
+ import { normalisePricingTable } from './core/payment-rail.js';
1
2
  import { createTollBooth } from './core/toll-booth.js';
3
+ import { createL402Rail } from './core/l402-rail.js';
4
+ import { createX402Rail } from './core/x402-rail.js';
2
5
  import { sqliteStorage } from './storage/sqlite.js';
3
6
  import { StatsCollector } from './stats.js';
4
7
  import { randomBytes } from 'node:crypto';
@@ -34,14 +37,22 @@ export class Booth {
34
37
  redeemCashu;
35
38
  pruneTimer;
36
39
  constructor(config) {
37
- if (!config.backend && !config.redeemCashu) {
38
- throw new Error('At least one payment method required: provide a Lightning backend, redeemCashu callback, or both');
40
+ if (!config.backend && !config.redeemCashu && !config.x402) {
41
+ throw new Error('At least one payment method required: provide a Lightning backend, redeemCashu callback, or x402 config');
42
+ }
43
+ let rootKeyInput;
44
+ if (config.rootKey) {
45
+ rootKeyInput = config.rootKey;
46
+ }
47
+ else {
48
+ rootKeyInput = randomBytes(32).toString('hex');
49
+ console.warn('[toll-booth] WARNING: rootKey not provided; auto-generated a random key. ' +
50
+ 'All macaroons will be invalidated on restart. Set ROOT_KEY for production use.');
39
51
  }
40
- const rootKeyInput = config.rootKey ?? randomBytes(32).toString('hex');
41
52
  if (!/^[0-9a-fA-F]{64}$/.test(rootKeyInput)) {
42
53
  throw new Error('rootKey must be exactly 64 hex characters (32 bytes)');
43
54
  }
44
- this.rootKey = rootKeyInput;
55
+ this.rootKey = rootKeyInput.toLowerCase();
45
56
  if (config.storage && config.dbPath) {
46
57
  throw new Error('Provide either storage or dbPath, not both');
47
58
  }
@@ -53,16 +64,27 @@ export class Booth {
53
64
  const userOnRequest = config.onRequest;
54
65
  const userOnChallenge = config.onChallenge;
55
66
  const stats = this.stats;
67
+ const normalisedPricing = normalisePricingTable(config.pricing);
68
+ // Build payment rails array
69
+ const rails = [];
70
+ if (config.backend || config.redeemCashu) {
71
+ rails.push(createL402Rail({ rootKey: this.rootKey, storage: this.storage, defaultAmount, backend: config.backend }));
72
+ }
73
+ if (config.x402) {
74
+ rails.push(createX402Rail({ ...config.x402, storage: this.storage }));
75
+ }
56
76
  this.engine = createTollBooth({
57
77
  backend: config.backend,
58
78
  storage: this.storage,
59
79
  pricing: config.pricing,
80
+ normalisedPricing,
60
81
  upstream: config.upstream,
61
82
  defaultInvoiceAmount: defaultAmount,
62
83
  rootKey: this.rootKey,
63
84
  freeTier: config.freeTier,
64
85
  strictPricing: config.strictPricing,
65
86
  creditTiers: config.creditTiers,
87
+ rails,
66
88
  onPayment: (event) => {
67
89
  stats.recordPayment(event);
68
90
  userOnPayment?.(event);
@@ -82,6 +104,7 @@ export class Booth {
82
104
  rootKey: this.rootKey,
83
105
  tiers: config.creditTiers ?? [],
84
106
  defaultAmount,
107
+ maxPendingPerIp: config.invoiceRateLimit?.maxPendingPerIp,
85
108
  };
86
109
  const invoiceStatusDeps = {
87
110
  backend: config.backend,
@@ -109,7 +132,10 @@ export class Booth {
109
132
  case 'express':
110
133
  this.middleware = createExpressMiddleware(adapterConfig);
111
134
  this.invoiceStatusHandler = createExpressInvoiceStatusHandler(invoiceStatusDeps);
112
- this.createInvoiceHandler = createExpressCreateInvoiceHandler(createInvoiceDeps);
135
+ this.createInvoiceHandler = createExpressCreateInvoiceHandler({
136
+ deps: createInvoiceDeps,
137
+ trustProxy: config.trustProxy,
138
+ });
113
139
  if (nwcPayDeps)
114
140
  this.nwcPayHandler = createExpressNwcHandler(nwcPayDeps);
115
141
  if (cashuRedeemDeps) {
@@ -120,7 +146,11 @@ export class Booth {
120
146
  case 'web-standard':
121
147
  this.middleware = createWebStandardMiddleware(adapterConfig);
122
148
  this.invoiceStatusHandler = createWebStandardInvoiceStatusHandler(invoiceStatusDeps);
123
- this.createInvoiceHandler = createWebStandardCreateInvoiceHandler(createInvoiceDeps);
149
+ this.createInvoiceHandler = createWebStandardCreateInvoiceHandler({
150
+ deps: createInvoiceDeps,
151
+ trustProxy: config.trustProxy,
152
+ getClientIp: config.getClientIp,
153
+ });
124
154
  if (nwcPayDeps)
125
155
  this.nwcPayHandler = createWebStandardNwcHandler(nwcPayDeps);
126
156
  if (cashuRedeemDeps) {
package/dist/booth.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"booth.js","sourceRoot":"","sources":["../src/booth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,iCAAiC,EACjC,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,2BAA2B,EAC3B,qCAAqC,EACrC,qCAAqC,EACrC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,4BAA4B,CAAA;AASnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,KAAK;IACP,UAAU,CAAS;IACnB,oBAAoB,CAAS;IAC7B,oBAAoB,CAAS;IAC7B,aAAa,CAAU;IACvB,kBAAkB,CAAU;IAErC,qDAAqD;IAC5C,KAAK,CAAgB;IAEb,OAAO,CAAgB;IACvB,MAAM,CAAiB;IACvB,OAAO,CAAQ;IACf,WAAW,CAA0D;IACrE,UAAU,CAAiC;IAE5D,YAAY,MAAmC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAA;QACrH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACtE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,YAAY,CAAA;QAE3B,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAA;QAC5F,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,EAAE,CAAA;QAEjC,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAA;QAEzD,iEAAiE;QACjE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAA;QACtC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAA;QACtC,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAA;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QAExB,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,oBAAoB,EAAE,aAAa;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;gBAC1B,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;gBAC1B,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,eAAe,EAAE,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YAC/B,aAAa;SACd,CAAA;QAED,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;YAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;SACnC,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAEnD,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAA;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa;YACrC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW;YACxC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvD,CAAC,CAAC,SAAS,CAAA;QAEb,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,oBAAoB,GAAG,iCAAiC,CAAC,iBAAiB,CAAC,CAAA;gBAChF,IAAI,CAAC,oBAAoB,GAAG,iCAAiC,CAAC,iBAAiB,CAAC,CAAA;gBAChF,IAAI,UAAU;oBAAE,IAAI,CAAC,aAAa,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAA;gBACxE,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;oBACrC,IAAI,CAAC,kBAAkB,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAA;gBACtE,CAAC;gBACD,MAAK;YAEP,KAAK,cAAc;gBACjB,IAAI,CAAC,UAAU,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAA;gBAC5D,IAAI,CAAC,oBAAoB,GAAG,qCAAqC,CAAC,iBAAiB,CAAC,CAAA;gBACpF,IAAI,CAAC,oBAAoB,GAAG,qCAAqC,CAAC,iBAAiB,CAAC,CAAA;gBACpF,IAAI,UAAU;oBAAE,IAAI,CAAC,aAAa,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAA;gBAC5E,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;oBACrC,IAAI,CAAC,kBAAkB,GAAG,6BAA6B,CAAC,eAAe,CAAC,CAAA;gBAC1E,CAAC;gBACD,MAAK;QACT,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,IAAI,UAAU,CAAA,CAAC,WAAW;QAC/D,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;gBACzC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACxC,CAAC,EAAE,SAAS,CAAC,CAAA,CAAC,aAAa;YAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QACzB,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAA;YAC3B,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvC,wEAAwE;YAC1E,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,aAAa;QACX,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAA;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,oBAAoB,CACxB,QAAiE;QAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAA;QAC3C,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAA;QACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,6EAA6E;YAC7E,oDAAoD;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAE1B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAC5E,CAAC,EAAE,eAAe,CAAC,CAAA;YAEnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAAA;gBAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACrE,SAAS,EAAE,CAAA;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,uDAAuD;YACzD,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF"}
1
+ {"version":3,"file":"booth.js","sourceRoot":"","sources":["../src/booth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAM9D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,iCAAiC,EACjC,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,2BAA2B,EAC3B,qCAAqC,EACrC,qCAAqC,EACrC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,4BAA4B,CAAA;AASnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,KAAK;IACP,UAAU,CAAS;IACnB,oBAAoB,CAAS;IAC7B,oBAAoB,CAAS;IAC7B,aAAa,CAAU;IACvB,kBAAkB,CAAU;IAErC,qDAAqD;IAC5C,KAAK,CAAgB;IAEb,OAAO,CAAgB;IACvB,MAAM,CAAiB;IACvB,OAAO,CAAQ;IACf,WAAW,CAA0D;IACrE,UAAU,CAAiC;IAE5D,YAAY,MAAmC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAA;QAC5H,CAAC;QAED,IAAI,YAAoB,CAAA;QACxB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,YAAY,GAAG,MAAM,CAAC,OAAO,CAAA;QAC/B,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC9C,OAAO,CAAC,IAAI,CACV,2EAA2E;gBAC3E,gFAAgF,CACjF,CAAA;QACH,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,CAAA;QAEzC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAA;QAC5F,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,EAAE,CAAA;QAEjC,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAA;QAEzD,iEAAiE;QACjE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAA;QACtC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAA;QACtC,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAA;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QAExB,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAE/D,4BAA4B;QAC5B,MAAM,KAAK,GAAkB,EAAE,CAAA;QAE/B,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACtH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACvE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,iBAAiB;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,oBAAoB,EAAE,aAAa;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK;YACL,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;gBAC1B,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;gBAC1B,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;YACxB,CAAC;YACD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;gBAC5B,eAAe,EAAE,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YAC/B,aAAa;YACb,eAAe,EAAE,MAAM,CAAC,gBAAgB,EAAE,eAAe;SAC1D,CAAA;QAED,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;YAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;SACnC,CAAA;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAEnD,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAA;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa;YACrC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzD,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW;YACxC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvD,CAAC,CAAC,SAAS,CAAA;QAEb,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAA;gBACxD,IAAI,CAAC,oBAAoB,GAAG,iCAAiC,CAAC,iBAAiB,CAAC,CAAA;gBAChF,IAAI,CAAC,oBAAoB,GAAG,iCAAiC,CAAC;oBAC5D,IAAI,EAAE,iBAAiB;oBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAA;gBACF,IAAI,UAAU;oBAAE,IAAI,CAAC,aAAa,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAA;gBACxE,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;oBACrC,IAAI,CAAC,kBAAkB,GAAG,yBAAyB,CAAC,eAAe,CAAC,CAAA;gBACtE,CAAC;gBACD,MAAK;YAEP,KAAK,cAAc;gBACjB,IAAI,CAAC,UAAU,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAA;gBAC5D,IAAI,CAAC,oBAAoB,GAAG,qCAAqC,CAAC,iBAAiB,CAAC,CAAA;gBACpF,IAAI,CAAC,oBAAoB,GAAG,qCAAqC,CAAC;oBAChE,IAAI,EAAE,iBAAiB;oBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAA;gBACF,IAAI,UAAU;oBAAE,IAAI,CAAC,aAAa,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAA;gBAC5E,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;oBACrC,IAAI,CAAC,kBAAkB,GAAG,6BAA6B,CAAC,eAAe,CAAC,CAAA;gBAC1E,CAAC;gBACD,MAAK;QACT,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,IAAI,UAAU,CAAA,CAAC,WAAW;QAC/D,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;gBACzC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACxC,CAAC,EAAE,SAAS,CAAC,CAAA,CAAC,aAAa;YAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QACzB,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAA;YAC3B,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvC,wEAAwE;YAC1E,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,aAAa;QACX,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAA;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,oBAAoB,CACxB,QAAiE;QAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAA;QAC3C,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAA;QACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,6EAA6E;YAC7E,oDAAoD;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAC5F,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAE1B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YAC5E,CAAC,EAAE,eAAe,CAAC,CAAA;YAEnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAAA;gBAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACrE,SAAS,EAAE,CAAA;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,uDAAuD;YACzD,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;CACF"}
@@ -1 +1 @@
1
- {"version":3,"file":"cashu-redeem.d.ts","sourceRoot":"","sources":["../../src/core/cashu-redeem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAGvE,eAAO,MAAM,eAAe,QAAS,CAAA;AAGrC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/D,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA8E5B"}
1
+ {"version":3,"file":"cashu-redeem.d.ts","sourceRoot":"","sources":["../../src/core/cashu-redeem.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAGvE,eAAO,MAAM,eAAe,QAAS,CAAA;AAGrC,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/D,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAuF5B"}
@@ -1,12 +1,13 @@
1
+ import { randomBytes } from 'node:crypto';
1
2
  import { PAYMENT_HASH_RE } from './types.js';
2
3
  export const REDEEM_LEASE_MS = 30_000;
3
4
  const REDEEM_LEASE_RENEW_MS = Math.max(1_000, Math.floor(REDEEM_LEASE_MS / 2));
4
5
  export async function handleCashuRedeem(deps, request) {
5
6
  try {
6
7
  const { token, paymentHash, statusToken } = request;
7
- if (typeof token !== 'string' || !token ||
8
+ if (typeof token !== 'string' || !token || token.length > 16_384 ||
8
9
  !PAYMENT_HASH_RE.test(paymentHash) ||
9
- typeof statusToken !== 'string' || !statusToken) {
10
+ typeof statusToken !== 'string' || !statusToken || statusToken.length > 128) {
10
11
  return { success: false, error: 'Invalid request: token, paymentHash, and statusToken required', status: 400 };
11
12
  }
12
13
  const invoice = deps.storage.getInvoiceForStatus(paymentHash, statusToken);
@@ -37,7 +38,10 @@ export async function handleCashuRedeem(deps, request) {
37
38
  if (pendingClaim) {
38
39
  try {
39
40
  const credited = await withLeaseKeepAlive(deps.storage, paymentHash, () => deps.redeem(pendingClaim.token, paymentHash));
40
- const settlementSecret = globalThis.crypto.randomUUID();
41
+ if (credited < 0) {
42
+ return { success: false, error: 'Redeem callback returned negative amount', status: 500 };
43
+ }
44
+ const settlementSecret = randomBytes(32).toString('hex');
41
45
  const newlySettled = deps.storage.settleWithCredit(paymentHash, credited, settlementSecret);
42
46
  return {
43
47
  success: true,
@@ -54,7 +58,10 @@ export async function handleCashuRedeem(deps, request) {
54
58
  // We hold the exclusive claim — call the external mint
55
59
  try {
56
60
  const credited = await withLeaseKeepAlive(deps.storage, paymentHash, () => deps.redeem(token, paymentHash));
57
- const settlementSecret = globalThis.crypto.randomUUID();
61
+ if (credited < 0) {
62
+ return { success: false, error: 'Redeem callback returned negative amount', status: 500 };
63
+ }
64
+ const settlementSecret = randomBytes(32).toString('hex');
58
65
  const newlySettled = deps.storage.settleWithCredit(paymentHash, credited, settlementSecret);
59
66
  return {
60
67
  success: true,
@@ -67,7 +74,10 @@ export async function handleCashuRedeem(deps, request) {
67
74
  }
68
75
  }
69
76
  catch (err) {
70
- console.error('[toll-booth] Cashu redeem error:', err instanceof Error ? err.message : err);
77
+ const errTag = err instanceof Error
78
+ ? `${err.constructor.name}${err.code ? ` [${err.code}]` : ''}`
79
+ : 'unknown';
80
+ console.error('[toll-booth] Cashu redeem error:', errTag);
71
81
  return { success: false, error: 'Cashu redemption failed', status: 500 };
72
82
  }
73
83
  }
@@ -1 +1 @@
1
- {"version":3,"file":"cashu-redeem.js","sourceRoot":"","sources":["../../src/core/cashu-redeem.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AACrC,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAA;AAO9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAqB,EACrB,OAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QACnD,IACE,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;YACnC,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAC/C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+DAA+D,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAChH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC/F,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;aACjE,CAAA;QACH,CAAC;QAED,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;YACtE,uCAAuC;YACvC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;iBACjE,CAAA;YACH,CAAC;YAED,+DAA+D;YAC/D,yDAAyD;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YACvF,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAC7C,CAAA;oBACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;oBACvD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;oBAC3F,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBACrC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;qBACnG,CAAA;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;gBACjE,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QACjE,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAChC,CAAA;YACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;YAC3F,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACrC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;aACnG,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAuB,EACvB,WAAmB,EACnB,EAAoB;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;IAC3D,CAAC,EAAE,qBAAqB,CAAC,CAAA;IAEzB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"cashu-redeem.js","sourceRoot":"","sources":["../../src/core/cashu-redeem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAA;AACrC,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAA;AAO9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAqB,EACrB,OAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QACnD,IACE,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;YAC5D,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+DAA+D,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAChH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QAC/F,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;aACjE,CAAA;QACH,CAAC;QAED,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;YACtE,uCAAuC;YACvC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;iBACjE,CAAA;YACH,CAAC;YAED,+DAA+D;YAC/D,yDAAyD;YACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YACvF,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAC7C,CAAA;oBACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;wBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;oBAC3F,CAAC;oBACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;oBAC3F,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBACrC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;qBACnG,CAAA;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;gBACjE,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QACjE,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAChC,CAAA;YACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;YAC3F,CAAC;YACD,MAAM,gBAAgB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;YAC3F,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACrC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE;aACnG,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK;YACjC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,KAAM,GAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpH,CAAC,CAAC,SAAS,CAAA;QACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAuB,EACvB,WAAmB,EACnB,EAAoB;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;IAC3D,CAAC,EAAE,qBAAqB,CAAC,CAAA;IAEzB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;AACH,CAAC"}
@@ -7,6 +7,7 @@ export interface CreateInvoiceDeps {
7
7
  rootKey: string;
8
8
  tiers: CreditTier[];
9
9
  defaultAmount: number;
10
+ maxPendingPerIp?: number;
10
11
  }
11
12
  /**
12
13
  * Framework-agnostic invoice creation handler.
@@ -1 +1 @@
1
- {"version":3,"file":"create-invoice.d.ts","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAiE9B"}
1
+ {"version":3,"file":"create-invoice.d.ts","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAK3E,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CA2F9B"}
@@ -2,6 +2,8 @@
2
2
  import { randomBytes } from 'node:crypto';
3
3
  import QRCode from 'qrcode';
4
4
  import { mintMacaroon } from '../macaroon.js';
5
+ /** Caveat keys that control monetary value and must not be set by clients. */
6
+ const RESERVED_CAVEAT_KEYS = new Set(['payment_hash', 'credit_balance']);
5
7
  /**
6
8
  * Framework-agnostic invoice creation handler.
7
9
  *
@@ -11,8 +13,32 @@ import { mintMacaroon } from '../macaroon.js';
11
13
  */
12
14
  export async function handleCreateInvoice(deps, request) {
13
15
  try {
16
+ if (deps.maxPendingPerIp && request.clientIp) {
17
+ const pending = deps.storage.pendingInvoiceCount(request.clientIp);
18
+ if (pending >= deps.maxPendingPerIp) {
19
+ return { success: false, error: 'Invoice creation rate limit exceeded', status: 429 };
20
+ }
21
+ }
22
+ // Validate caveats input type and reject built-in caveat keys
23
+ if (request.caveats !== undefined) {
24
+ if (!Array.isArray(request.caveats)) {
25
+ return { success: false, error: 'caveats must be an array of strings' };
26
+ }
27
+ for (const c of request.caveats) {
28
+ if (typeof c !== 'string') {
29
+ return { success: false, error: 'caveats must be an array of strings' };
30
+ }
31
+ const eqIdx = c.indexOf(' = ');
32
+ if (eqIdx !== -1) {
33
+ const key = c.slice(0, eqIdx).trim();
34
+ if (RESERVED_CAVEAT_KEYS.has(key)) {
35
+ return { success: false, error: `caveat key "${key}" is reserved and cannot be set by clients` };
36
+ }
37
+ }
38
+ }
39
+ }
14
40
  const requestedAmount = request.amountSats ?? deps.defaultAmount;
15
- if (!Number.isInteger(requestedAmount) || requestedAmount < 1) {
41
+ if (!Number.isSafeInteger(requestedAmount) || requestedAmount < 1 || requestedAmount > 2_100_000_000_000_000) {
16
42
  return { success: false, error: 'amountSats must be a positive integer' };
17
43
  }
18
44
  // Find matching tier or validate amount
@@ -39,9 +65,9 @@ export async function handleCreateInvoice(deps, request) {
39
65
  // Cashu-only mode: synthetic payment hash
40
66
  paymentHash = randomBytes(32).toString('hex');
41
67
  }
42
- const macaroon = mintMacaroon(deps.rootKey, paymentHash, creditSats);
68
+ const macaroon = mintMacaroon(deps.rootKey, paymentHash, creditSats, request.caveats);
43
69
  const statusToken = randomBytes(32).toString('hex');
44
- deps.storage.storeInvoice(paymentHash, bolt11 ?? '', creditSats, macaroon, statusToken);
70
+ deps.storage.storeInvoice(paymentHash, bolt11 ?? '', creditSats, macaroon, statusToken, request.clientIp);
45
71
  const qrSvg = bolt11
46
72
  ? await QRCode.toString(`lightning:${bolt11}`.toUpperCase(), { type: 'svg', margin: 2 })
47
73
  : undefined;
@@ -1 +1 @@
1
- {"version":3,"file":"create-invoice.js","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,MAAM,MAAM,QAAQ,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAW7C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,OAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAA;QAEhE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAA;QAC3E,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,GAAG,eAAe,CAAA;QAChC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAA;YACnE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,8CAA8C;oBACrD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAA;YACH,CAAC;YACD,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,CAAC;QAED,IAAI,WAAmB,CAAA;QACvB,IAAI,MAA0B,CAAA;QAE9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC9C,eAAe,EACf,eAAe,UAAU,cAAc,CACxC,CAAA;YACD,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACjC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QACzB,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QACpE,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEnD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QAEvF,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CACnB,aAAa,MAAM,EAAE,CAAC,WAAW,EAAE,EACnC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAC3B;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,WAAW;gBACX,UAAU,EAAE,mBAAmB,WAAW,UAAU,WAAW,EAAE;gBACjE,UAAU,EAAE,eAAe;gBAC3B,UAAU;gBACV,QAAQ;gBACR,KAAK,EAAE,KAAK,IAAI,EAAE;aACnB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAA;IAC9D,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"create-invoice.js","sourceRoot":"","sources":["../../src/core/create-invoice.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,MAAM,MAAM,QAAQ,CAAA;AAG3B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAG7C,8EAA8E;AAC9E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAWxE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,OAA6B;IAE7B,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAClE,IAAI,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;YACvF,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;YACzE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;gBACzE,CAAC;gBACD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC9B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;oBACpC,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,GAAG,4CAA4C,EAAE,CAAA;oBAClG,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAA;QAEhE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,qBAAqB,EAAE,CAAC;YAC7G,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAA;QAC3E,CAAC;QAED,wCAAwC;QACxC,IAAI,UAAU,GAAG,eAAe,CAAA;QAChC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAA;YACnE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,8CAA8C;oBACrD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAA;YACH,CAAC;YACD,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,CAAC;QAED,IAAI,WAAmB,CAAA;QACvB,IAAI,MAA0B,CAAA;QAE9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC9C,eAAe,EACf,eAAe,UAAU,cAAc,CACxC,CAAA;YACD,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACjC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QACzB,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QACrF,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEnD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAEzG,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CACnB,aAAa,MAAM,EAAE,CAAC,WAAW,EAAE,EACnC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAC3B;YACH,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,WAAW;gBACX,UAAU,EAAE,mBAAmB,WAAW,UAAU,WAAW,EAAE;gBACjE,UAAU,EAAE,eAAe;gBAC3B,UAAU;gBACV,QAAQ;gBACR,KAAK,EAAE,KAAK,IAAI,EAAE;aACnB;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAA;IAC9D,CAAC;AACH,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"invoice-status.d.ts","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,CA2B9B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC3C"}
1
+ {"version":3,"file":"invoice-status.d.ts","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAgC9B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,iBAAiB,EACvB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2C3C"}
@@ -20,14 +20,20 @@ export async function handleInvoiceStatus(deps, paymentHash, statusToken) {
20
20
  invoice,
21
21
  };
22
22
  }
23
- const status = await deps.backend.checkInvoice(paymentHash);
24
- return {
25
- found: true,
26
- paid: status.paid,
27
- preimage: status.preimage,
28
- tokenSuffix: status.preimage ?? (status.paid ? deps.storage.getSettlementSecret(paymentHash) : undefined),
29
- invoice,
30
- };
23
+ try {
24
+ const status = await deps.backend.checkInvoice(paymentHash);
25
+ return {
26
+ found: true,
27
+ paid: status.paid,
28
+ preimage: status.preimage,
29
+ tokenSuffix: status.preimage ?? (status.paid ? deps.storage.getSettlementSecret(paymentHash) : undefined),
30
+ invoice,
31
+ };
32
+ }
33
+ catch {
34
+ // Backend temporarily unreachable; report as unpaid so the client keeps polling
35
+ return { found: true, paid: false, invoice };
36
+ }
31
37
  }
32
38
  /**
33
39
  * Framework-agnostic invoice status rendered as HTML.
@@ -47,9 +53,16 @@ export async function renderInvoiceStatusHtml(deps, paymentHash, statusToken) {
47
53
  status: 404,
48
54
  };
49
55
  }
50
- const status = deps.backend
51
- ? await deps.backend.checkInvoice(paymentHash)
52
- : { paid: deps.storage.isSettled(paymentHash), preimage: undefined };
56
+ let status;
57
+ try {
58
+ status = deps.backend
59
+ ? await deps.backend.checkInvoice(paymentHash)
60
+ : { paid: deps.storage.isSettled(paymentHash), preimage: undefined };
61
+ }
62
+ catch {
63
+ // Backend temporarily unreachable; render as unpaid so the client keeps polling
64
+ status = { paid: false, preimage: undefined };
65
+ }
53
66
  const html = await renderPaymentPage({
54
67
  invoice,
55
68
  paid: status.paid,
@@ -1 +1 @@
1
- {"version":3,"file":"invoice-status.js","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAWvE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACtC,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACnD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,OAAO;SACR,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;IAC3D,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,OAAO;KACR,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC;oBACpB,WAAW;oBACX,OAAO,EAAE,mFAAmF;iBAC7F,CAAC;gBACF,MAAM,EAAE,GAAG;aACZ,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO;YACzB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QACtE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;YACnC,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;SACzC,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,eAAe,CAAC;gBACpB,WAAW;gBACX,OAAO,EAAE,mDAAmD;aAC7D,CAAC;YACF,MAAM,EAAE,GAAG;SACZ,CAAA;IACH,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"invoice-status.js","sourceRoot":"","sources":["../../src/core/invoice-status.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAWvE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACtC,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACnD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAChF,OAAO;SACR,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC3D,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,OAAO;SACR,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC9C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAuB,EACvB,WAAmB,EACnB,WAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,eAAe,CAAC;oBACpB,WAAW;oBACX,OAAO,EAAE,mFAAmF;iBAC7F,CAAC;gBACF,MAAM,EAAE,GAAG;aACZ,CAAA;QACH,CAAC;QAED,IAAI,MAA4C,CAAA;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,OAAO;gBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;gBAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;YAChF,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QAC/C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;YACnC,OAAO;YACP,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YACpC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,KAAK;SACzC,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,eAAe,CAAC;gBACpB,WAAW;gBACX,OAAO,EAAE,mDAAmD;aAC7D,CAAC;YACF,MAAM,EAAE,GAAG;SACZ,CAAA;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1,11 @@
1
+ import type { StorageBackend } from '../storage/interface.js';
2
+ import type { LightningBackend } from '../types.js';
3
+ import type { PaymentRail } from './payment-rail.js';
4
+ export interface L402RailConfig {
5
+ rootKey: string;
6
+ storage: StorageBackend;
7
+ defaultAmount: number;
8
+ backend?: LightningBackend;
9
+ }
10
+ export declare function createL402Rail(config: L402RailConfig): PaymentRail;
11
+ //# sourceMappingURL=l402-rail.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"l402-rail.d.ts","sourceRoot":"","sources":["../../src/core/l402-rail.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAkD,MAAM,mBAAmB,CAAA;AAEpG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,cAAc,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW,CAqGlE"}
@@ -0,0 +1,94 @@
1
+ import { createHash, timingSafeEqual, randomBytes } from 'node:crypto';
2
+ import { mintMacaroon, verifyMacaroon } from '../macaroon.js';
3
+ export function createL402Rail(config) {
4
+ const { rootKey, storage, defaultAmount, backend } = config;
5
+ return {
6
+ type: 'l402',
7
+ creditSupported: true,
8
+ canChallenge(price) {
9
+ return price.sats !== undefined;
10
+ },
11
+ detect(req) {
12
+ const auth = req.headers.authorization ?? req.headers.Authorization ?? '';
13
+ return /^L402\s/i.test(auth);
14
+ },
15
+ async challenge(route, _price) {
16
+ const amount = defaultAmount;
17
+ let bolt11 = '';
18
+ let paymentHash;
19
+ if (backend) {
20
+ const invoice = await backend.createInvoice(amount, `toll-booth: ${route}`);
21
+ bolt11 = invoice.bolt11;
22
+ paymentHash = invoice.paymentHash;
23
+ }
24
+ else {
25
+ paymentHash = randomBytes(32).toString('hex');
26
+ }
27
+ const macaroon = mintMacaroon(rootKey, paymentHash, amount);
28
+ return {
29
+ headers: {
30
+ 'WWW-Authenticate': `L402 macaroon="${macaroon}", invoice="${bolt11}"`,
31
+ },
32
+ body: {
33
+ l402: {
34
+ invoice: bolt11,
35
+ macaroon,
36
+ payment_hash: paymentHash,
37
+ amount_sats: amount,
38
+ },
39
+ },
40
+ };
41
+ },
42
+ // NOTE: verify() only authenticates — it does NOT debit.
43
+ // Balance tracking and debit stay in the engine (per spec).
44
+ verify(req) {
45
+ const auth = req.headers.authorization ?? req.headers.Authorization ?? '';
46
+ const token = auth.replace(/^L402\s+/i, '');
47
+ const lastColon = token.lastIndexOf(':');
48
+ if (lastColon === -1) {
49
+ return { authenticated: false, paymentId: '', mode: 'credit', currency: 'sat' };
50
+ }
51
+ const macaroonBase64 = token.slice(0, lastColon);
52
+ const preimage = token.slice(lastColon + 1);
53
+ const context = req.path ? { path: req.path, ip: req.ip } : undefined;
54
+ const verification = verifyMacaroon(rootKey, macaroonBase64, context);
55
+ if (!verification.valid) {
56
+ return { authenticated: false, paymentId: '', mode: 'credit', currency: 'sat' };
57
+ }
58
+ const paymentHash = verification.paymentHash;
59
+ const creditBalance = verification.creditBalance ?? defaultAmount;
60
+ // Verify preimage: Lightning (sha256) or Cashu (settlement secret)
61
+ const isLightning = isValidLightningPreimage(preimage, paymentHash);
62
+ const settlementSecret = storage.getSettlementSecret(paymentHash);
63
+ const isCashu = settlementSecret !== undefined &&
64
+ preimage.length === settlementSecret.length &&
65
+ timingSafeEqual(Buffer.from(preimage), Buffer.from(settlementSecret));
66
+ if (!isLightning && !isCashu) {
67
+ return { authenticated: false, paymentId: paymentHash, mode: 'credit', currency: 'sat' };
68
+ }
69
+ // First-time settlement — credits the balance.
70
+ // Only reachable with a valid proof (Lightning preimage or Cashu secret).
71
+ // If settleWithCredit loses a race, another request already settled — continue.
72
+ if (!storage.isSettled(paymentHash)) {
73
+ storage.settleWithCredit(paymentHash, creditBalance, preimage);
74
+ }
75
+ // Return current balance — engine will debit and check sufficiency
76
+ const remaining = storage.balance(paymentHash);
77
+ return {
78
+ authenticated: true,
79
+ paymentId: paymentHash,
80
+ mode: 'credit',
81
+ creditBalance: remaining,
82
+ currency: 'sat',
83
+ customCaveats: verification.customCaveats,
84
+ };
85
+ },
86
+ };
87
+ }
88
+ function isValidLightningPreimage(preimage, paymentHash) {
89
+ if (!/^[0-9a-f]{64}$/i.test(preimage))
90
+ return false;
91
+ const computed = createHash('sha256').update(Buffer.from(preimage, 'hex')).digest();
92
+ return timingSafeEqual(computed, Buffer.from(paymentHash, 'hex'));
93
+ }
94
+ //# sourceMappingURL=l402-rail.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"l402-rail.js","sourceRoot":"","sources":["../../src/core/l402-rail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAa7D,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAE3D,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,IAAI;QAErB,YAAY,CAAC,KAAgB;YAC3B,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAA;QACjC,CAAC;QAED,MAAM,CAAC,GAAqB;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;YACzE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAiB;YAC9C,MAAM,MAAM,GAAG,aAAa,CAAA;YAC5B,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,IAAI,WAAmB,CAAA;YAEvB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,KAAK,EAAE,CAAC,CAAA;gBAC3E,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;gBACvB,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACnC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;YAE3D,OAAO;gBACL,OAAO,EAAE;oBACP,kBAAkB,EAAE,kBAAkB,QAAQ,eAAe,MAAM,GAAG;iBACvE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE;wBACJ,OAAO,EAAE,MAAM;wBACf,QAAQ;wBACR,YAAY,EAAE,WAAW;wBACzB,WAAW,EAAE,MAAM;qBACpB;iBACF;aACF,CAAA;QACH,CAAC;QAED,yDAAyD;QACzD,4DAA4D;QAC5D,MAAM,CAAC,GAAqB;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YAExC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;YACjF,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;YAE3C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACrE,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;YAErE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACxB,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;YACjF,CAAC;YAED,MAAM,WAAW,GAAG,YAAY,CAAC,WAAY,CAAA;YAC7C,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,IAAI,aAAa,CAAA;YAEjE,mEAAmE;YACnE,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;YACjE,MAAM,OAAO,GAAG,gBAAgB,KAAK,SAAS;gBAC5C,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM;gBAC3C,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;YAEvE,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;YAC1F,CAAC;YAED,+CAA+C;YAC/C,0EAA0E;YAC1E,gFAAgF;YAChF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;YAChE,CAAC;YAED,mEAAmE;YACnE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAE9C,OAAO;gBACL,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,QAAQ;gBACd,aAAa,EAAE,SAAS;gBACxB,QAAQ,EAAE,KAAK;gBACf,aAAa,EAAE,YAAY,CAAC,aAAa;aAC1C,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;IACrE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACnF,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAA;AACnE,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"nwc-pay.d.ts","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAG7D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAuBvB"}
1
+ {"version":3,"file":"nwc-pay.d.ts","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAG7D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CA4BvB"}
@@ -2,12 +2,16 @@ import { PAYMENT_HASH_RE } from './types.js';
2
2
  export async function handleNwcPay(deps, request) {
3
3
  try {
4
4
  const { nwcUri, bolt11, paymentHash, statusToken } = request;
5
- if (typeof nwcUri !== 'string' || !nwcUri ||
6
- typeof bolt11 !== 'string' || !bolt11 ||
5
+ if (typeof nwcUri !== 'string' || !nwcUri || nwcUri.length > 2048 ||
6
+ typeof bolt11 !== 'string' || !bolt11 || bolt11.length > 2048 ||
7
7
  !PAYMENT_HASH_RE.test(paymentHash) ||
8
- typeof statusToken !== 'string' || !statusToken) {
8
+ typeof statusToken !== 'string' || !statusToken || statusToken.length > 128) {
9
9
  return { success: false, error: 'Invalid request: nwcUri, bolt11, paymentHash and statusToken required', status: 400 };
10
10
  }
11
+ // Validate NWC URI scheme to prevent SSRF via arbitrary WebSocket connections
12
+ if (!nwcUri.startsWith('nostr+walletconnect://')) {
13
+ return { success: false, error: 'nwcUri must use the nostr+walletconnect:// scheme', status: 400 };
14
+ }
11
15
  const invoice = deps.storage.getInvoiceForStatus(paymentHash, statusToken);
12
16
  if (!invoice || invoice.bolt11 !== bolt11) {
13
17
  return { success: false, error: 'Unknown invoice or invoice mismatch', status: 400 };
@@ -16,7 +20,7 @@ export async function handleNwcPay(deps, request) {
16
20
  return { success: true, preimage };
17
21
  }
18
22
  catch (err) {
19
- console.error('[toll-booth] NWC payment error:', err instanceof Error ? err.message : err);
23
+ console.error('[toll-booth] NWC payment error:', err instanceof Error ? err.message.replace(/nostr\+walletconnect:\/\/\S+/g, '[redacted]') : 'unknown');
20
24
  return { success: false, error: 'NWC payment failed', status: 500 };
21
25
  }
22
26
  }
@@ -1 +1 @@
1
- {"version":3,"file":"nwc-pay.js","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAO5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5D,IACE,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YACrC,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM;YACrC,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAC/C,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uEAAuE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACtF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC1F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"nwc-pay.js","sourceRoot":"","sources":["../../src/core/nwc-pay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAO5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAgB,EAChB,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;QAC5D,IACE,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAC7D,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;YAC7D,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAClC,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uEAAuE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACxH,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACpG,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;QACtF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACvJ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACrE,CAAC;AACH,CAAC"}
@@ -0,0 +1,40 @@
1
+ import type { TollBoothRequest } from './types.js';
2
+ export type Currency = 'sat' | 'usd';
3
+ export interface PriceInfo {
4
+ sats?: number;
5
+ usd?: number;
6
+ }
7
+ /** Accepts both number (backward-compat sats) and PriceInfo */
8
+ export type PricingEntry = number | PriceInfo;
9
+ export type PricingTable = Record<string, PricingEntry>;
10
+ /** Normalise a PricingEntry to PriceInfo. Numbers become { sats: n }. */
11
+ export declare function normalisePricing(entry: PricingEntry): PriceInfo;
12
+ /** Normalise an entire PricingTable. */
13
+ export declare function normalisePricingTable(table: PricingTable): Record<string, PriceInfo>;
14
+ export interface ChallengeFragment {
15
+ headers: Record<string, string>;
16
+ body: Record<string, unknown>;
17
+ }
18
+ export interface RailVerifyResult {
19
+ authenticated: boolean;
20
+ paymentId: string;
21
+ mode: 'per-request' | 'credit';
22
+ creditBalance?: number;
23
+ currency: Currency;
24
+ customCaveats?: Record<string, string>;
25
+ }
26
+ export interface SettleResult {
27
+ settled: boolean;
28
+ txHash?: string;
29
+ }
30
+ export interface PaymentRail {
31
+ type: string;
32
+ creditSupported: boolean;
33
+ /** Returns true if this rail can generate a challenge for the given price. */
34
+ canChallenge?(price: PriceInfo): boolean;
35
+ challenge(route: string, price: PriceInfo): Promise<ChallengeFragment>;
36
+ detect(req: TollBoothRequest): boolean;
37
+ verify(req: TollBoothRequest): Promise<RailVerifyResult> | RailVerifyResult;
38
+ settle?(paymentId: string, amount: number): Promise<SettleResult>;
39
+ }
40
+ //# sourceMappingURL=payment-rail.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"payment-rail.d.ts","sourceRoot":"","sources":["../../src/core/payment-rail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAA;AAEpC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,CAAA;AAE7C,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AAEvD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,CAE/D;AAED,wCAAwC;AACxC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAMpF;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,QAAQ,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,OAAO,CAAA;IACxB,8EAA8E;IAC9E,YAAY,CAAC,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAA;IACxC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACtE,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAA;IACtC,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAC3E,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClE"}
@@ -0,0 +1,13 @@
1
+ /** Normalise a PricingEntry to PriceInfo. Numbers become { sats: n }. */
2
+ export function normalisePricing(entry) {
3
+ return typeof entry === 'number' ? { sats: entry } : entry;
4
+ }
5
+ /** Normalise an entire PricingTable. */
6
+ export function normalisePricingTable(table) {
7
+ const result = {};
8
+ for (const [route, entry] of Object.entries(table)) {
9
+ result[route] = normalisePricing(entry);
10
+ }
11
+ return result;
12
+ }
13
+ //# sourceMappingURL=payment-rail.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"payment-rail.js","sourceRoot":"","sources":["../../src/core/payment-rail.ts"],"names":[],"mappings":"AAcA,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,MAAM,MAAM,GAA8B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
@@ -1,7 +1,8 @@
1
1
  import { FreeTier } from '../free-tier.js';
2
- import type { TollBoothRequest, TollBoothResult, TollBoothCoreConfig } from './types.js';
2
+ import type { TollBoothRequest, TollBoothResult, TollBoothCoreConfig, ReconcileResult } from './types.js';
3
3
  export interface TollBoothEngine {
4
4
  handle(req: TollBoothRequest): Promise<TollBoothResult>;
5
+ reconcile(paymentHash: string, actualCost: number): ReconcileResult;
5
6
  freeTier: FreeTier | null;
6
7
  upstream: string;
7
8
  }
@@ -1 +1 @@
1
- {"version":3,"file":"toll-booth.d.ts","sourceRoot":"","sources":["../../src/core/toll-booth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAExF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACvD,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,eAAe,CA6H5E"}
1
+ {"version":3,"file":"toll-booth.d.ts","sourceRoot":"","sources":["../../src/core/toll-booth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAI1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEzG,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACvD,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe,CAAA;IACnE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,eAAe,CA2N5E"}