@xapps-platform/backend-kit 0.1.5 → 0.1.6

package/README.md

@@ -33,6 +33,21 @@ override seams, while keeping the later shared tenant/publisher direction
 open. The current shipped reference consumers are still tenant backends, but
 the package direction is actor-agnostic where possible.
 
+For request-capable publisher-rendered widgets, use the package layer to
+verify browser widget context server-side before exposing private runtime
+behavior:
+
+```ts
+import { verifyBrowserWidgetContext } from "@xapps-platform/backend-kit";
+
+const verified = await verifyBrowserWidgetContext(gatewayClient, {
+  hostOrigin: "https://tenant.example.test",
+  installationId: "inst_123",
+  bindToolName: "submit_form",
+  subjectId: "sub_123",
+});
+```
+
 This is now a real package, not a placeholder or extraction stub. Keep the
 public entry surface stable and split internal package code behind it.
 
@@ -76,6 +91,7 @@ The current package surface provides:
 - default mode tree
 - payment runtime assembly
 - host-proxy service assembly
+- request-widget bootstrap verification passthrough
 - subject-profile sourcing hooks
 
 Internal package structure is intentionally modular:

package/dist/index.d.ts

@@ -44,6 +44,16 @@ export type BackendKit = {
     registerRoutes: (app: RegisterableApp) => Promise<void>;
     applyNotFoundHandler: (app: RegisterableApp) => void;
 };
+export type VerifyBrowserWidgetContextInput = {
+    hostOrigin: string;
+    installationId?: string | null;
+    bindToolName?: string | null;
+    toolName?: string | null;
+    subjectId?: string | null;
+};
+export declare function verifyBrowserWidgetContext(gatewayClient: {
+    verifyBrowserWidgetContext: (input: VerifyBrowserWidgetContextInput) => Promise<Record<string, unknown>>;
+}, input: VerifyBrowserWidgetContextInput): Promise<Record<string, unknown>>;
 export declare function createBackendKit(input?: StringRecord, deps?: BackendKitDeps): Promise<BackendKit>;
 export { buildHostedGatewayPaymentUrl as buildHostedGatewayPaymentUrl, buildModeHostedGatewayPaymentUrl as buildModeHostedGatewayPaymentUrl, createGatewayExecutionModule, createHostReferenceModule, createReferenceSurfaceModule, createHostProxyService, createPaymentEvidenceHandler, createPaymentRuntime, extractHostedPaymentSessionId, normalizeBackendKitOptions, registerPaymentPageApiRoutes, registerPaymentPageAssetRoute, resolvePlatformSecretRefFromEnv, };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,EAChC,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,SAAS,GAAG;IACf,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK;QAC5B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;KACrC,CAAC;CACH,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,kBAAkB,EAAE,CAClB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,KACxE,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,cAAc,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChE,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,2BAA2B,CAAC;IACxE,4BAA4B,CAAC,EAAE,CAAC,KAAK,EAAE;QACrC,OAAO,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAChD,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAClD,eAAe,EAAE,OAAO,CAAC;QACzB,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC;KACrD,KAAK,WAAW,CAAC;IAClB,yBAAyB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,OAAO,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAChD,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAClD,SAAS,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACpD,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;QAC5D,gBAAgB,EAAE,OAAO,CAAC;KAC3B,KAAK,WAAW,CAAC;IAClB,4BAA4B,CAAC,EAAE,CAAC,KAAK,EAAE;QACrC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;QAChE,cAAc,EAAE,OAAO,CAAC;KACzB,KAAK,WAAW,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,2BAA2B,CAAC;IACrC,cAAc,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,oBAAoB,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;CACtD,CAAC;AAEF,wBAAsB,gBAAgB,CACpC,KAAK,GAAE,YAAiB,EACxB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CA+DrB;AAED,OAAO,EACL,4BAA4B,IAAI,4BAA4B,EAC5D,gCAAgC,IAAI,gCAAgC,EACpE,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,GAChC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,EAChC,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,SAAS,GAAG;IACf,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK;QAC5B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;KACrC,CAAC;CACH,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,kBAAkB,EAAE,CAClB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,KACxE,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,cAAc,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChE,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,2BAA2B,CAAC;IACxE,4BAA4B,CAAC,EAAE,CAAC,KAAK,EAAE;QACrC,OAAO,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAChD,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAClD,eAAe,EAAE,OAAO,CAAC;QACzB,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC;KACrD,KAAK,WAAW,CAAC;IAClB,yBAAyB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,OAAO,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAChD,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAClD,SAAS,EAAE,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACpD,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;QAC5D,gBAAgB,EAAE,OAAO,CAAC;KAC3B,KAAK,WAAW,CAAC;IAClB,4BAA4B,CAAC,EAAE,CAAC,KAAK,EAAE;QACrC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;QAChE,cAAc,EAAE,OAAO,CAAC;KACzB,KAAK,WAAW,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,2BAA2B,CAAC;IACrC,cAAc,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,oBAAoB,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE;IACb,0BAA0B,EAAE,CAC1B,KAAK,EAAE,+BAA+B,KACnC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvC,EACD,KAAK,EAAE,+BAA+B,oCAGvC;AAED,wBAAsB,gBAAgB,CACpC,KAAK,GAAE,YAAiB,EACxB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CA+DrB;AAED,OAAO,EACL,4BAA4B,IAAI,4BAA4B,EAC5D,gCAAgC,IAAI,gCAAgC,EACpE,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,GAChC,CAAC"}

package/dist/index.js

@@ -17,6 +17,9 @@ import {
   normalizeBackendKitOptions,
   resolvePlatformSecretRefFromEnv
 } from "./backend/options.js";
+async function verifyBrowserWidgetContext(gatewayClient, input) {
+  return gatewayClient.verifyBrowserWidgetContext(input);
+}
 async function createBackendKit(input = {}, deps = {}) {
   const normalizeOptions = typeof deps.normalizeOptions === "function" ? deps.normalizeOptions : null;
   const createReferenceSurfaceModuleDep = typeof deps.createReferenceSurfaceModule === "function" ? deps.createReferenceSurfaceModule : null;
@@ -79,6 +82,7 @@ export {
   normalizeBackendKitOptions,
   registerPaymentPageApiRoutes,
   registerPaymentPageAssetRoute,
-  resolvePlatformSecretRefFromEnv
+  resolvePlatformSecretRefFromEnv,
+  verifyBrowserWidgetContext
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["import {\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n} from \"./backend/modules.js\";\nimport {\n  buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n} from \"./backend/paymentRuntime.js\";\nimport {\n  normalizeBackendKitOptions,\n  resolvePlatformSecretRefFromEnv,\n  type BackendKitNormalizedOptions,\n  type StringRecord,\n} from \"./backend/options.js\";\n\ntype ReplyLike = {\n  code: (statusCode: number) => {\n    send: (payload: unknown) => unknown;\n  };\n};\n\ntype RegisterableApp = {\n  setNotFoundHandler: (\n    handler: (request: unknown, reply: ReplyLike) => Promise<unknown> | unknown,\n  ) => void;\n};\n\ntype RouteModule = {\n  registerRoutes: (app: RegisterableApp) => Promise<void> | void;\n};\n\ntype BackendKitDeps = {\n  normalizeOptions?: (input: StringRecord) => BackendKitNormalizedOptions;\n  createReferenceSurfaceModule?: (input: {\n    gateway: BackendKitNormalizedOptions[\"gateway\"];\n    branding: BackendKitNormalizedOptions[\"branding\"];\n    enableReference: boolean;\n    enableLifecycle: boolean;\n    enableBridge: boolean;\n    enabledModes: string[];\n    reference: BackendKitNormalizedOptions[\"reference\"];\n  }) => RouteModule;\n  createHostReferenceModule?: (input: {\n    gateway: BackendKitNormalizedOptions[\"gateway\"];\n    branding: BackendKitNormalizedOptions[\"branding\"];\n    reference: BackendKitNormalizedOptions[\"reference\"];\n    enableLifecycle: boolean;\n    enableBridge: boolean;\n    allowedOrigins: string[];\n    bootstrap: BackendKitNormalizedOptions[\"host\"][\"bootstrap\"];\n    hostProxyService: unknown;\n  }) => RouteModule;\n  createGatewayExecutionModule?: (input: {\n    enabledModes: string[];\n    subjectProfiles: BackendKitNormalizedOptions[\"subjectProfiles\"];\n    paymentRuntime: unknown;\n  }) => RouteModule;\n};\n\nexport type BackendKit = {\n  options: BackendKitNormalizedOptions;\n  registerRoutes: (app: RegisterableApp) => Promise<void>;\n  applyNotFoundHandler: (app: RegisterableApp) => void;\n};\n\nexport async function createBackendKit(\n  input: StringRecord = {},\n  deps: BackendKitDeps = {},\n): Promise<BackendKit> {\n  const normalizeOptions =\n    typeof deps.normalizeOptions === \"function\" ? deps.normalizeOptions : null;\n  const createReferenceSurfaceModuleDep =\n    typeof deps.createReferenceSurfaceModule === \"function\"\n      ? deps.createReferenceSurfaceModule\n      : null;\n  const createHostReferenceModuleDep =\n    typeof deps.createHostReferenceModule === \"function\" ? deps.createHostReferenceModule : null;\n  const createGatewayExecutionModuleDep =\n    typeof deps.createGatewayExecutionModule === \"function\"\n      ? deps.createGatewayExecutionModule\n      : null;\n  if (\n    !normalizeOptions ||\n    !createReferenceSurfaceModuleDep ||\n    !createHostReferenceModuleDep ||\n    !createGatewayExecutionModuleDep\n  ) {\n    throw new TypeError(\"backend kit dependencies are incomplete\");\n  }\n\n  const options = normalizeOptions(input);\n  const paymentRuntime = await createPaymentRuntime(options, deps);\n\n  const referenceSurfaceModule = createReferenceSurfaceModuleDep({\n    gateway: options.gateway,\n    branding: options.branding,\n    enableReference: options.host.enableReference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    enabledModes: options.payments.enabledModes,\n    reference: options.reference,\n  });\n  const hostReferenceModule = createHostReferenceModuleDep({\n    gateway: options.gateway,\n    branding: options.branding,\n    reference: options.reference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    allowedOrigins: options.host.allowedOrigins,\n    bootstrap: options.host.bootstrap,\n    hostProxyService: options.overrides.hostProxyService,\n  });\n  const gatewayExecutionModule = createGatewayExecutionModuleDep({\n    enabledModes: options.payments.enabledModes,\n    subjectProfiles: options.subjectProfiles,\n    paymentRuntime,\n  });\n\n  return {\n    options,\n    async registerRoutes(app) {\n      await referenceSurfaceModule.registerRoutes(app);\n      await hostReferenceModule.registerRoutes(app);\n      await gatewayExecutionModule.registerRoutes(app);\n    },\n    applyNotFoundHandler(app) {\n      app.setNotFoundHandler(async (_request, reply) =>\n        reply.code(404).send({ message: \"Not found\" }),\n      );\n    },\n  };\n}\n\nexport {\n  buildHostedGatewayPaymentUrl as buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl as buildModeHostedGatewayPaymentUrl,\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  normalizeBackendKitOptions,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n  resolvePlatformSecretRefFromEnv,\n};\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAoDP,eAAsB,iBACpB,QAAsB,CAAC,GACvB,OAAuB,CAAC,GACH;AACrB,QAAM,mBACJ,OAAO,KAAK,qBAAqB,aAAa,KAAK,mBAAmB;AACxE,QAAM,kCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,QAAM,+BACJ,OAAO,KAAK,8BAA8B,aAAa,KAAK,4BAA4B;AAC1F,QAAM,kCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,MACE,CAAC,oBACD,CAAC,mCACD,CAAC,gCACD,CAAC,iCACD;AACA,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AAEA,QAAM,UAAU,iBAAiB,KAAK;AACtC,QAAM,iBAAiB,MAAM,qBAAqB,SAAS,IAAI;AAE/D,QAAM,yBAAyB,gCAAgC;AAAA,IAC7D,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,cAAc,QAAQ,SAAS;AAAA,IAC/B,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,sBAAsB,6BAA6B;AAAA,IACvD,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,gBAAgB,QAAQ,KAAK;AAAA,IAC7B,WAAW,QAAQ,KAAK;AAAA,IACxB,kBAAkB,QAAQ,UAAU;AAAA,EACtC,CAAC;AACD,QAAM,yBAAyB,gCAAgC;AAAA,IAC7D,cAAc,QAAQ,SAAS;AAAA,IAC/B,iBAAiB,QAAQ;AAAA,IACzB;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA,MAAM,eAAe,KAAK;AACxB,YAAM,uBAAuB,eAAe,GAAG;AAC/C,YAAM,oBAAoB,eAAe,GAAG;AAC5C,YAAM,uBAAuB,eAAe,GAAG;AAAA,IACjD;AAAA,IACA,qBAAqB,KAAK;AACxB,UAAI;AAAA,QAAmB,OAAO,UAAU,UACtC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import {\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n} from \"./backend/modules.js\";\nimport {\n  buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n} from \"./backend/paymentRuntime.js\";\nimport {\n  normalizeBackendKitOptions,\n  resolvePlatformSecretRefFromEnv,\n  type BackendKitNormalizedOptions,\n  type StringRecord,\n} from \"./backend/options.js\";\n\ntype ReplyLike = {\n  code: (statusCode: number) => {\n    send: (payload: unknown) => unknown;\n  };\n};\n\ntype RegisterableApp = {\n  setNotFoundHandler: (\n    handler: (request: unknown, reply: ReplyLike) => Promise<unknown> | unknown,\n  ) => void;\n};\n\ntype RouteModule = {\n  registerRoutes: (app: RegisterableApp) => Promise<void> | void;\n};\n\ntype BackendKitDeps = {\n  normalizeOptions?: (input: StringRecord) => BackendKitNormalizedOptions;\n  createReferenceSurfaceModule?: (input: {\n    gateway: BackendKitNormalizedOptions[\"gateway\"];\n    branding: BackendKitNormalizedOptions[\"branding\"];\n    enableReference: boolean;\n    enableLifecycle: boolean;\n    enableBridge: boolean;\n    enabledModes: string[];\n    reference: BackendKitNormalizedOptions[\"reference\"];\n  }) => RouteModule;\n  createHostReferenceModule?: (input: {\n    gateway: BackendKitNormalizedOptions[\"gateway\"];\n    branding: BackendKitNormalizedOptions[\"branding\"];\n    reference: BackendKitNormalizedOptions[\"reference\"];\n    enableLifecycle: boolean;\n    enableBridge: boolean;\n    allowedOrigins: string[];\n    bootstrap: BackendKitNormalizedOptions[\"host\"][\"bootstrap\"];\n    hostProxyService: unknown;\n  }) => RouteModule;\n  createGatewayExecutionModule?: (input: {\n    enabledModes: string[];\n    subjectProfiles: BackendKitNormalizedOptions[\"subjectProfiles\"];\n    paymentRuntime: unknown;\n  }) => RouteModule;\n};\n\nexport type BackendKit = {\n  options: BackendKitNormalizedOptions;\n  registerRoutes: (app: RegisterableApp) => Promise<void>;\n  applyNotFoundHandler: (app: RegisterableApp) => void;\n};\n\nexport type VerifyBrowserWidgetContextInput = {\n  hostOrigin: string;\n  installationId?: string | null;\n  bindToolName?: string | null;\n  toolName?: string | null;\n  subjectId?: string | null;\n};\n\nexport async function verifyBrowserWidgetContext(\n  gatewayClient: {\n    verifyBrowserWidgetContext: (\n      input: VerifyBrowserWidgetContextInput,\n    ) => Promise<Record<string, unknown>>;\n  },\n  input: VerifyBrowserWidgetContextInput,\n) {\n  return gatewayClient.verifyBrowserWidgetContext(input);\n}\n\nexport async function createBackendKit(\n  input: StringRecord = {},\n  deps: BackendKitDeps = {},\n): Promise<BackendKit> {\n  const normalizeOptions =\n    typeof deps.normalizeOptions === \"function\" ? deps.normalizeOptions : null;\n  const createReferenceSurfaceModuleDep =\n    typeof deps.createReferenceSurfaceModule === \"function\"\n      ? deps.createReferenceSurfaceModule\n      : null;\n  const createHostReferenceModuleDep =\n    typeof deps.createHostReferenceModule === \"function\" ? deps.createHostReferenceModule : null;\n  const createGatewayExecutionModuleDep =\n    typeof deps.createGatewayExecutionModule === \"function\"\n      ? deps.createGatewayExecutionModule\n      : null;\n  if (\n    !normalizeOptions ||\n    !createReferenceSurfaceModuleDep ||\n    !createHostReferenceModuleDep ||\n    !createGatewayExecutionModuleDep\n  ) {\n    throw new TypeError(\"backend kit dependencies are incomplete\");\n  }\n\n  const options = normalizeOptions(input);\n  const paymentRuntime = await createPaymentRuntime(options, deps);\n\n  const referenceSurfaceModule = createReferenceSurfaceModuleDep({\n    gateway: options.gateway,\n    branding: options.branding,\n    enableReference: options.host.enableReference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    enabledModes: options.payments.enabledModes,\n    reference: options.reference,\n  });\n  const hostReferenceModule = createHostReferenceModuleDep({\n    gateway: options.gateway,\n    branding: options.branding,\n    reference: options.reference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    allowedOrigins: options.host.allowedOrigins,\n    bootstrap: options.host.bootstrap,\n    hostProxyService: options.overrides.hostProxyService,\n  });\n  const gatewayExecutionModule = createGatewayExecutionModuleDep({\n    enabledModes: options.payments.enabledModes,\n    subjectProfiles: options.subjectProfiles,\n    paymentRuntime,\n  });\n\n  return {\n    options,\n    async registerRoutes(app) {\n      await referenceSurfaceModule.registerRoutes(app);\n      await hostReferenceModule.registerRoutes(app);\n      await gatewayExecutionModule.registerRoutes(app);\n    },\n    applyNotFoundHandler(app) {\n      app.setNotFoundHandler(async (_request, reply) =>\n        reply.code(404).send({ message: \"Not found\" }),\n      );\n    },\n  };\n}\n\nexport {\n  buildHostedGatewayPaymentUrl as buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl as buildModeHostedGatewayPaymentUrl,\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  normalizeBackendKitOptions,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n  resolvePlatformSecretRefFromEnv,\n};\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AA4DP,eAAsB,2BACpB,eAKA,OACA;AACA,SAAO,cAAc,2BAA2B,KAAK;AACvD;AAEA,eAAsB,iBACpB,QAAsB,CAAC,GACvB,OAAuB,CAAC,GACH;AACrB,QAAM,mBACJ,OAAO,KAAK,qBAAqB,aAAa,KAAK,mBAAmB;AACxE,QAAM,kCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,QAAM,+BACJ,OAAO,KAAK,8BAA8B,aAAa,KAAK,4BAA4B;AAC1F,QAAM,kCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,MACE,CAAC,oBACD,CAAC,mCACD,CAAC,gCACD,CAAC,iCACD;AACA,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AAEA,QAAM,UAAU,iBAAiB,KAAK;AACtC,QAAM,iBAAiB,MAAM,qBAAqB,SAAS,IAAI;AAE/D,QAAM,yBAAyB,gCAAgC;AAAA,IAC7D,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,cAAc,QAAQ,SAAS;AAAA,IAC/B,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,sBAAsB,6BAA6B;AAAA,IACvD,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,gBAAgB,QAAQ,KAAK;AAAA,IAC7B,WAAW,QAAQ,KAAK;AAAA,IACxB,kBAAkB,QAAQ,UAAU;AAAA,EACtC,CAAC;AACD,QAAM,yBAAyB,gCAAgC;AAAA,IAC7D,cAAc,QAAQ,SAAS;AAAA,IAC/B,iBAAiB,QAAQ;AAAA,IACzB;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA,MAAM,eAAe,KAAK;AACxB,YAAM,uBAAuB,eAAe,GAAG;AAC/C,YAAM,oBAAoB,eAAe,GAAG;AAC5C,YAAM,uBAAuB,eAAe,GAAG;AAAA,IACjD;AAAA,IACA,qBAAqB,KAAK;AACxB,UAAI;AAAA,QAAmB,OAAO,UAAU,UACtC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xapps-platform/backend-kit",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "license": "MIT",
   "author": "Daniel Vladescu <daniel.vladescu@gmail.com>",
   "description": "Modular Node backend kit for the current Xapps backend contract (tenant surface today, shared actor-adapter direction later)",