@wopr-network/platform-core 1.58.0 → 1.58.1

package/dist/billing/crypto/key-server-entry.js

@@ -68,6 +68,7 @@ async function main() {
         oracle,
         bitcoindUser: BITCOIND_USER,
         bitcoindPassword: BITCOIND_PASSWORD,
+        serviceKey: SERVICE_KEY,
         log: (msg, meta) => console.log(`[watcher] ${msg}`, meta ?? ""),
     });
     const server = serve({ fetch: app.fetch, port: PORT });

package/dist/billing/crypto/watcher-service.d.ts

@@ -29,6 +29,8 @@ export interface WatcherServiceOpts {
     log?: (msg: string, meta?: Record<string, unknown>) => void;
     /** Allowed callback URL prefixes. Default: ["https://"] — enforces HTTPS. */
     allowedCallbackPrefixes?: string[];
+    /** Service key sent as Bearer token in webhook deliveries. */
+    serviceKey?: string;
 }
 export interface PaymentPayload {
     txHash: string;

package/dist/billing/crypto/watcher-service.js

@@ -43,7 +43,7 @@ async function enqueueWebhook(db, chargeId, callbackUrl, payload) {
         payload: JSON.stringify(payload),
     });
 }
-async function processDeliveries(db, allowedPrefixes, log) {
+async function processDeliveries(db, allowedPrefixes, log, serviceKey) {
     const now = new Date().toISOString();
     const pending = await db
         .select()
@@ -60,9 +60,12 @@ async function processDeliveries(db, allowedPrefixes, log) {
             continue;
         }
         try {
+            const headers = { "Content-Type": "application/json" };
+            if (serviceKey)
+                headers.Authorization = `Bearer ${serviceKey}`;
             const res = await fetch(row.callbackUrl, {
                 method: "POST",
-                headers: { "Content-Type": "application/json" },
+                headers,
                 body: row.payload,
             });
             if (!res.ok)
@@ -175,6 +178,7 @@ export async function startWatchers(opts) {
     const deliveryMs = opts.deliveryIntervalMs ?? 10_000;
     const log = opts.log ?? (() => { });
     const allowedPrefixes = opts.allowedCallbackPrefixes ?? ["https://"];
+    const serviceKey = opts.serviceKey;
     const timers = [];
     const methods = await methodStore.listEnabled();
     const utxoMethods = methods.filter((m) => m.type === "native" && (m.chain === "bitcoin" || m.chain === "litecoin" || m.chain === "dogecoin"));
@@ -388,7 +392,7 @@ export async function startWatchers(opts) {
     // --- Webhook delivery outbox processor ---
     timers.push(setInterval(async () => {
         try {
-            const count = await processDeliveries(db, allowedPrefixes, log);
+            const count = await processDeliveries(db, allowedPrefixes, log, serviceKey);
             if (count > 0)
                 log("Webhooks delivered", { count });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wopr-network/platform-core",
-  "version": "1.58.0",
+  "version": "1.58.1",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/billing/crypto/key-server-entry.ts

@@ -77,6 +77,7 @@ async function main(): Promise<void> {
     oracle,
     bitcoindUser: BITCOIND_USER,
     bitcoindPassword: BITCOIND_PASSWORD,
+    serviceKey: SERVICE_KEY,
     log: (msg, meta) => console.log(`[watcher] ${msg}`, meta ?? ""),
   });
 

package/src/billing/crypto/watcher-service.ts

@@ -43,6 +43,8 @@ export interface WatcherServiceOpts {
   log?: (msg: string, meta?: Record<string, unknown>) => void;
   /** Allowed callback URL prefixes. Default: ["https://"] — enforces HTTPS. */
   allowedCallbackPrefixes?: string[];
+  /** Service key sent as Bearer token in webhook deliveries. */
+  serviceKey?: string;
 }
 
 // --- SSRF validation ---
@@ -79,6 +81,7 @@ async function processDeliveries(
   db: DrizzleDb,
   allowedPrefixes: string[],
   log: (msg: string, meta?: Record<string, unknown>) => void,
+  serviceKey?: string,
 ): Promise<number> {
   const now = new Date().toISOString();
   const pending = await db
@@ -103,9 +106,11 @@ async function processDeliveries(
     }
 
     try {
+      const headers: Record<string, string> = { "Content-Type": "application/json" };
+      if (serviceKey) headers.Authorization = `Bearer ${serviceKey}`;
       const res = await fetch(row.callbackUrl, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers,
         body: row.payload,
       });
       if (!res.ok) throw new Error(`HTTP ${res.status}`);
@@ -242,6 +247,7 @@ export async function startWatchers(opts: WatcherServiceOpts): Promise<() => voi
   const deliveryMs = opts.deliveryIntervalMs ?? 10_000;
   const log = opts.log ?? (() => {});
   const allowedPrefixes = opts.allowedCallbackPrefixes ?? ["https://"];
+  const serviceKey = opts.serviceKey;
   const timers: ReturnType<typeof setInterval>[] = [];
 
   const methods = await methodStore.listEnabled();
@@ -500,7 +506,7 @@ export async function startWatchers(opts: WatcherServiceOpts): Promise<() => voi
   timers.push(
     setInterval(async () => {
       try {
-        const count = await processDeliveries(db, allowedPrefixes, log);
+        const count = await processDeliveries(db, allowedPrefixes, log, serviceKey);
         if (count > 0) log("Webhooks delivered", { count });
       } catch (err) {
         log("Delivery loop error", { error: String(err) });