envoy-pay 0.1.0

package/dist/cjs/server/mpp-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp-gate.js","sourceRoot":"","sources":["../../../src/server/mpp-gate.ts"],"names":[],"mappings":";;AA6EA,sCAuGC;AAnLD,sCAA+C;AAiD/C,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB;;GAEG;AACH,SAAS,mBAAmB;IAC1B,gBAAgB,EAAE,CAAC;IACnB,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,gBAAgB,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,aAAa,CAAC,MAAqB;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAU,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC;IAErC,OAAO,KAAK,EACV,GAAoB,EACpB,GAAmB,EACnB,IAAyB,EACzB,EAAE;QACF,0CAA0C;QAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAuB,CAAC;QAEtE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,6DAA6D;YAC7D,GAAG,CAAC,mEAAmE,CAAC,CAAC;YAEzE,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAE3D,MAAM,UAAU,GAAG;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ;gBACR,QAAQ;gBACR,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;YAEF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;iBAC3D,QAAQ,CAAC,QAAQ,CAAC;iBAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;iBACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;iBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEtB,MAAM,YAAY,GAAG,eAAe,WAAW,YAAY,MAAM,CAAC,KAAK,aAAa,MAAM,CAAC,MAAM,aAAa,MAAM,cAAc,cAAc,cAAc,OAAO,GAAG,CAAC;YAEzK,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,kBAAkB,EAAE,YAAY;gBAChC,cAAc,EAAE,YAAY;aAC7B,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7D,wBAAwB;YACxB,MAAM,MAAM,GAAG,gBAAgB;iBAC5B,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;iBAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,UAAU,GAAkB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtD,gCAAgC;YAChC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;gBAClE,GAAG,CAAC,mCAAmC,CAAC,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChD,GAAG,CAAC,6BAA6B,CAAC,CAAC;gBACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;oBAC3B,GAAG,CAAC,gCAAgC,CAAC,CAAC;oBACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,6CAA6C,CAAC,CAAC;oBACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;YAC5B,GAAG,CAAC,qCAAqC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,6CAA6C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/server/payment-gate.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPaymentGate = createPaymentGate;
+const x402_gate_1 = require("./x402-gate");
+const mpp_gate_1 = require("./mpp-gate");
+const logger_1 = require("../logger");
+/**
+ * Creates a dual-protocol payment gate that accepts both x402 and MPP.
+ *
+ * Detection logic:
+ * - `X-PAYMENT` header → x402 flow
+ * - `Authorization: Payment` header → MPP flow
+ * - Neither present → returns both challenge types simultaneously
+ *
+ * @example
+ * ```ts
+ * app.post('/api/premium', createPaymentGate({
+ *   x402: { payTo: '0x...', amount: '500000', asset: 'USDC', network: 'eip155:8453' },
+ *   mpp: { realm: 'api.example.com', method: 'stripe', amount: '50', recipient: 'acct_xxx' },
+ * }), handler);
+ * ```
+ */
+function createPaymentGate(config) {
+    const log = config.logger ?? logger_1.noopLogger;
+    const x402Middleware = (0, x402_gate_1.createX402Gate)({
+        ...config.x402,
+        logger: log,
+    });
+    const mppMiddleware = (0, mpp_gate_1.createMppGate)({
+        ...config.mpp,
+        logger: log,
+    });
+    return async (req, res, next) => {
+        // Detect which protocol the client is using
+        const hasX402 = !!(req.headers['x-payment'] || req.headers['X-PAYMENT']);
+        const hasAuth = !!(req.headers['authorization'] &&
+            req.headers['authorization'].startsWith('Payment '));
+        if (hasX402) {
+            log('[payment-gate] 🔍 Detected x402 protocol (X-PAYMENT header)');
+            return x402Middleware(req, res, next);
+        }
+        if (hasAuth) {
+            log('[payment-gate] 🔍 Detected MPP protocol (Authorization: Payment header)');
+            return mppMiddleware(req, res, next);
+        }
+        // No payment header — return dual-protocol 402 challenge
+        log('[payment-gate] 💰 No payment header — returning dual-protocol 402');
+        // Build MPP challenge header
+        const mppIntent = config.mpp.intent ?? 'payment';
+        const mppCurrency = config.mpp.currency ?? 'usd';
+        const mppDecimals = config.mpp.decimals ?? 2;
+        const ttlMs = config.mpp.ttlMs ?? 300000;
+        const challengeId = `ch_${Date.now()}_dual`;
+        const expires = new Date(Date.now() + ttlMs).toISOString();
+        const requestObj = {
+            amount: config.mpp.amount,
+            currency: mppCurrency,
+            decimals: mppDecimals,
+            recipient: config.mpp.recipient,
+        };
+        const requestEncoded = Buffer.from(JSON.stringify(requestObj))
+            .toString('base64')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_')
+            .replace(/=+$/, '');
+        const wwwAuth = `Payment id="${challengeId}",realm="${config.mpp.realm}",method="${config.mpp.method}",intent="${mppIntent}",request="${requestEncoded}",expires="${expires}"`;
+        // Build x402 challenge body
+        const x402Body = {
+            x402Version: config.x402.x402Version ?? 2,
+            resource: {
+                url: req.url || '/',
+                description: config.x402.description || 'Payment required',
+                ...(config.x402.usdAmount ? { usdAmount: config.x402.usdAmount } : {}),
+            },
+            accepts: [
+                {
+                    scheme: config.x402.scheme ?? 'exact',
+                    network: config.x402.network,
+                    amount: config.x402.amount,
+                    payTo: config.x402.payTo,
+                    asset: config.x402.asset,
+                },
+            ],
+        };
+        res.writeHead(402, {
+            'WWW-Authenticate': wwwAuth,
+            'Content-Type': 'application/json',
+        });
+        res.end(JSON.stringify(x402Body));
+    };
+}
+//# sourceMappingURL=payment-gate.js.map

package/dist/cjs/server/payment-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-gate.js","sourceRoot":"","sources":["../../../src/server/payment-gate.ts"],"names":[],"mappings":";;AAiCA,8CAuFC;AAvHD,2CAAkE;AAClE,yCAA+D;AAC/D,sCAA+C;AAc/C;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAU,CAAC;IAExC,MAAM,cAAc,GAAG,IAAA,0BAAc,EAAC;QACpC,GAAG,MAAM,CAAC,IAAI;QACd,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,IAAA,wBAAa,EAAC;QAClC,GAAG,MAAM,CAAC,GAAG;QACb,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,OAAO,KAAK,EACV,GAAoB,EACpB,GAAmB,EACnB,IAAyB,EACzB,EAAE;QACF,4CAA4C;QAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,CAAC,CAAC,CAChB,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,eAAe,CAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAChE,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,6DAA6D,CAAC,CAAC;YACnE,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,yEAAyE,CAAC,CAAC;YAC/E,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,yDAAyD;QACzD,GAAG,CAAC,mEAAmE,CAAC,CAAC;QAEzE,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC;QACjD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC;QAEzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;YACzB,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;SAChC,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;aAC3D,QAAQ,CAAC,QAAQ,CAAC;aAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEtB,MAAM,OAAO,GAAG,eAAe,WAAW,YAAY,MAAM,CAAC,GAAG,CAAC,KAAK,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,aAAa,SAAS,cAAc,cAAc,cAAc,OAAO,GAAG,CAAC;QAE/K,4BAA4B;QAC5B,MAAM,QAAQ,GAAG;YACf,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC;YACzC,QAAQ,EAAE;gBACR,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG;gBACnB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB;gBAC1D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE;YACD,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO;oBACrC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;oBAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;oBAC1B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;oBACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;iBACzB;aACF;SACF,CAAC;QAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,kBAAkB,EAAE,OAAO;YAC3B,cAAc,EAAE,kBAAkB;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/server/receipt.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * MPP Payment-Receipt builder.
+ *
+ * Generates base64url-encoded receipt JSON that can be attached
+ * as a `Payment-Receipt` response header after successful payment verification.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildReceipt = buildReceipt;
+exports.parseReceipt = parseReceipt;
+/**
+ * Build a Payment-Receipt header value.
+ *
+ * @returns base64url-encoded JSON receipt.
+ *
+ * @example
+ * ```ts
+ * const receipt = buildReceipt({
+ *   challengeId: 'ch_123',
+ *   status: 'settled',
+ *   amount: '500000',
+ *   asset: 'USDC',
+ *   transactionHash: '0xabc...',
+ * });
+ *
+ * res.setHeader('Payment-Receipt', receipt);
+ * ```
+ */
+function buildReceipt(options) {
+    const receipt = {
+        challengeId: options.challengeId,
+        status: options.status,
+        amount: options.amount,
+        asset: options.asset,
+        ...(options.transactionHash ? { transactionHash: options.transactionHash } : {}),
+        issuedAt: (options.timestamp ?? new Date()).toISOString(),
+    };
+    return Buffer.from(JSON.stringify(receipt))
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
+/**
+ * Parse a Payment-Receipt header value back into a receipt object.
+ */
+function parseReceipt(encoded) {
+    const padded = encoded.replace(/-/g, '+').replace(/_/g, '/');
+    const decoded = Buffer.from(padded, 'base64').toString('utf-8');
+    return JSON.parse(decoded);
+}
+//# sourceMappingURL=receipt.js.map

package/dist/cjs/server/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../../src/server/receipt.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA4CH,oCAeC;AAKD,oCAIC;AA1CD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,YAAY,CAAC,OAAuB;IAClD,MAAM,OAAO,GAAmB;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KAC1D,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SACxC,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC"}

package/dist/cjs/server/webhook.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookHandler = createWebhookHandler;
+const logger_1 = require("../logger");
+/**
+ * Creates a Connect/Express-compatible webhook handler for Stripe events.
+ *
+ * Uses HMAC signature verification via the raw request body.
+ * Supports idempotency guard to prevent duplicate processing.
+ *
+ * @example
+ * ```ts
+ * const handler = createWebhookHandler({
+ *   signingSecret: process.env.STRIPE_WEBHOOK_SECRET!,
+ *   onPaymentSuccess: (event) => {
+ *     console.log(`Payment received: ${event.amount} ${event.currency}`);
+ *   },
+ * });
+ *
+ * app.post('/webhook', express.raw({ type: 'application/json' }), handler);
+ * ```
+ */
+function createWebhookHandler(config) {
+    const log = config.logger ?? logger_1.noopLogger;
+    const processedIds = config.processedEventIds ?? new Set();
+    return async (req, res, _next) => {
+        const sig = req.headers['stripe-signature'];
+        if (!sig) {
+            log('[webhook] ❌ Missing stripe-signature header');
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Missing stripe-signature header' }));
+            return;
+        }
+        // Get raw body
+        const rawBody = typeof req.body === 'string'
+            ? req.body
+            : req.body instanceof Buffer
+                ? req.body.toString('utf-8')
+                : JSON.stringify(req.body);
+        // Verify HMAC signature (simplified — in production use stripe.webhooks.constructEvent)
+        if (!verifySignature(rawBody, sig, config.signingSecret)) {
+            log('[webhook] ❌ Invalid signature');
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Invalid webhook signature' }));
+            return;
+        }
+        let event;
+        try {
+            event = typeof req.body === 'string' ? JSON.parse(req.body) : req.body;
+        }
+        catch {
+            log('[webhook] ❌ Failed to parse event body');
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Invalid JSON body' }));
+            return;
+        }
+        // Idempotency guard
+        if (processedIds.has(event.id)) {
+            log(`[webhook] ⏭️ Duplicate event: ${event.id}`);
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ received: true, duplicate: true }));
+            return;
+        }
+        processedIds.add(event.id);
+        // Route based on event type
+        const webhookEvent = {
+            id: event.id,
+            type: event.type,
+            amount: event.data?.object?.amount,
+            currency: event.data?.object?.currency,
+            paymentIntentId: event.data?.object?.id,
+            metadata: event.data?.object?.metadata,
+            timestamp: new Date(),
+        };
+        try {
+            if (event.type === 'payment_intent.succeeded' && config.onPaymentSuccess) {
+                log(`[webhook] ✅ Payment succeeded: ${webhookEvent.paymentIntentId}`);
+                await config.onPaymentSuccess(webhookEvent);
+            }
+            else if (event.type === 'payment_intent.payment_failed' && config.onPaymentFailure) {
+                log(`[webhook] ❌ Payment failed: ${webhookEvent.paymentIntentId}`);
+                await config.onPaymentFailure(webhookEvent);
+            }
+            else {
+                log(`[webhook] 📋 Unhandled event type: ${event.type}`);
+            }
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ received: true }));
+        }
+        catch (err) {
+            log(`[webhook] ❌ Handler error: ${err.message}`);
+            res.writeHead(500, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Webhook handler error' }));
+        }
+    };
+}
+/**
+ * Simplified HMAC verification for webhook signatures.
+ * In production, use Stripe's official `stripe.webhooks.constructEvent()`.
+ */
+function verifySignature(payload, sig, secret) {
+    try {
+        // Parse Stripe signature header format: t=timestamp,v1=hash
+        const parts = sig.split(',');
+        const timestamp = parts.find((p) => p.startsWith('t='))?.slice(2);
+        const hash = parts.find((p) => p.startsWith('v1='))?.slice(3);
+        if (!timestamp || !hash)
+            return false;
+        // In production: compute HMAC-SHA256 of `${timestamp}.${payload}` with secret
+        // For SDK purposes, we trust the Stripe library to do this
+        const crypto = require('crypto');
+        const expected = crypto
+            .createHmac('sha256', secret)
+            .update(`${timestamp}.${payload}`)
+            .digest('hex');
+        return crypto.timingSafeEqual(Buffer.from(hash, 'hex'), Buffer.from(expected, 'hex'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=webhook.js.map

package/dist/cjs/server/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/server/webhook.ts"],"names":[],"mappings":";;AA+CA,oDAkFC;AAjID,sCAA+C;AA6B/C;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,oBAAoB,CAAC,MAAqB;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAU,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,GAAG,EAAU,CAAC;IAEnE,OAAO,KAAK,EACV,GAAQ,EACR,GAAQ,EACR,KAA2B,EAC3B,EAAE;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,6CAA6C,CAAC,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,eAAe;QACf,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,IAAI;YACV,CAAC,CAAC,GAAG,CAAC,IAAI,YAAY,MAAM;gBAC1B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/B,wFAAwF;QACxF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,KAAU,CAAC;QACf,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,wCAAwC,CAAC,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,iCAAiC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3B,4BAA4B;QAC5B,MAAM,YAAY,GAAiB;YACjC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM;YAClC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ;YACtC,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ;YACtC,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACzE,GAAG,CAAC,kCAAkC,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC;gBACtE,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACrF,GAAG,CAAC,+BAA+B,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC;gBACnE,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,sCAAsC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,GAAW,EAAE,MAAc;IACnE,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAEtC,8EAA8E;QAC9E,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM;aACpB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC5B,MAAM,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EACxB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAC7B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cjs/server/x402-gate.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createX402Gate = createX402Gate;
+const logger_1 = require("../logger");
+/**
+ * Creates an Express/Connect middleware that gates access behind x402 payments.
+ *
+ * When a request lacks a valid `X-PAYMENT` header, the middleware responds with
+ * 402 Payment Required and an x402-compliant JSON challenge body.
+ *
+ * When a valid `X-PAYMENT` header is present, it's decoded and optionally
+ * verified before calling `next()`.
+ *
+ * @example
+ * ```ts
+ * app.post('/api/premium', createX402Gate({
+ *   payTo: '0xABC...',
+ *   amount: '500000',
+ *   asset: 'USDC',
+ *   network: 'eip155:8453',
+ * }), handler);
+ * ```
+ */
+function createX402Gate(config) {
+    const log = config.logger ?? logger_1.noopLogger;
+    const version = config.x402Version ?? 2;
+    const scheme = config.scheme ?? 'exact';
+    return async (req, res, next) => {
+        // Check for existing X-PAYMENT header
+        const paymentHeader = req.headers['x-payment'] ||
+            req.headers['X-PAYMENT'];
+        if (!paymentHeader) {
+            // No payment proof — return 402 challenge
+            log('[x402-gate] 💰 No X-PAYMENT header — returning 402 challenge');
+            const challenge = {
+                x402Version: version,
+                resource: {
+                    url: req.url || '/',
+                    description: config.description || 'Payment required',
+                    ...(config.usdAmount ? { usdAmount: config.usdAmount } : {}),
+                },
+                accepts: [
+                    {
+                        scheme,
+                        network: config.network,
+                        amount: config.amount,
+                        payTo: config.payTo,
+                        asset: config.asset,
+                    },
+                ],
+            };
+            res.writeHead(402, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify(challenge));
+            return;
+        }
+        // Decode X-PAYMENT proof
+        try {
+            const decoded = Buffer.from(paymentHeader, 'base64').toString('utf-8');
+            const proof = JSON.parse(decoded);
+            // Basic validation
+            if (!proof.payload?.transaction) {
+                log('[x402-gate] ❌ Missing transaction in payment proof');
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Invalid payment proof: missing transaction' }));
+                return;
+            }
+            // Verify payment destination matches
+            if (proof.accepted?.payTo && proof.accepted.payTo !== config.payTo) {
+                log('[x402-gate] ❌ Payment destination mismatch');
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Payment destination mismatch' }));
+                return;
+            }
+            // Verify amount matches
+            if (proof.accepted?.amount && proof.accepted.amount !== config.amount) {
+                log('[x402-gate] ❌ Payment amount mismatch');
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Payment amount mismatch' }));
+                return;
+            }
+            // Custom verification (if provided)
+            if (config.verifyPayment) {
+                const isValid = await config.verifyPayment(proof);
+                if (!isValid) {
+                    log('[x402-gate] ❌ Custom verification failed');
+                    res.writeHead(402, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Payment verification failed' }));
+                    return;
+                }
+            }
+            // Attach proof to request for downstream handlers
+            req.payment = proof;
+            log(`[x402-gate] ✅ Payment verified: tx=${proof.payload.transaction.slice(0, 16)}…`);
+            next();
+        }
+        catch (err) {
+            log(`[x402-gate] ❌ Failed to decode payment proof: ${err.message}`);
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Invalid X-PAYMENT header' }));
+        }
+    };
+}
+//# sourceMappingURL=x402-gate.js.map

package/dist/cjs/server/x402-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-gate.js","sourceRoot":"","sources":["../../../src/server/x402-gate.ts"],"names":[],"mappings":";;AAuEA,wCA4FC;AAlKD,sCAA+C;AAmD/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,cAAc,CAAC,MAAsB;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAU,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IAExC,OAAO,KAAK,EACV,GAAiB,EACjB,GAAmB,EACnB,IAAyB,EACzB,EAAE;QACF,sCAAsC;QACtC,MAAM,aAAa,GAChB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAY;YACnC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAY,CAAC;QAEvC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,0CAA0C;YAC1C,GAAG,CAAC,8DAA8D,CAAC,CAAC;YAEpE,MAAM,SAAS,GAAG;gBAChB,WAAW,EAAE,OAAO;gBACpB,QAAQ,EAAE;oBACR,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,kBAAkB;oBACrD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D;gBACD,OAAO,EAAE;oBACP;wBACE,MAAM;wBACN,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB;iBACF;aACF,CAAC;YAEF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,KAAK,GAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE7C,mBAAmB;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;gBAChC,GAAG,CAAC,oDAAoD,CAAC,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YAED,qCAAqC;YACrC,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBACnE,GAAG,CAAC,4CAA4C,CAAC,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtE,GAAG,CAAC,uCAAuC,CAAC,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAClD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,0CAA0C,CAAC,CAAC;oBAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;YACH,CAAC;YAED,kDAAkD;YAClD,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;YACpB,GAAG,CAAC,sCAAsC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,iDAAiD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/solana.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildSolanaPayUri = exports.createSolanaWatcher = exports.SolanaPaymentAdapter = void 0;
+// envoy-pay/solana — opt-in Solana rail.
+//
+// Pulls in @solana/web3.js + @solana/spl-token (declared as optional peer deps),
+// so it only loads when you import this subpath — the Celo core stays light.
+var solana_1 = require("./adapters/solana");
+Object.defineProperty(exports, "SolanaPaymentAdapter", { enumerable: true, get: function () { return solana_1.SolanaPaymentAdapter; } });
+var solana_watcher_1 = require("./monitor/solana-watcher");
+Object.defineProperty(exports, "createSolanaWatcher", { enumerable: true, get: function () { return solana_watcher_1.createSolanaWatcher; } });
+var solana_pay_1 = require("./requests/solana-pay");
+Object.defineProperty(exports, "buildSolanaPayUri", { enumerable: true, get: function () { return solana_pay_1.buildSolanaPayUri; } });
+//# sourceMappingURL=solana.js.map

package/dist/cjs/solana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana.js","sourceRoot":"","sources":["../../src/solana.ts"],"names":[],"mappings":";;;AAAA,yCAAyC;AACzC,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,4CAAyD;AAAhD,8GAAA,oBAAoB,OAAA;AAE7B,2DAA+D;AAAtD,qHAAA,mBAAmB,OAAA;AAE5B,oDAA0D;AAAjD,+GAAA,iBAAiB,OAAA"}

package/dist/cjs/stellar.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildSep7Uri = exports.createStellarWatcher = exports.StellarPaymentAdapter = void 0;
+// envoy-pay/stellar — opt-in Stellar rail.
+//
+// Pulls in @stellar/stellar-sdk (declared as an optional peer dep), so it only
+// loads when you import this subpath — the Celo core stays light.
+var stellar_1 = require("./adapters/stellar");
+Object.defineProperty(exports, "StellarPaymentAdapter", { enumerable: true, get: function () { return stellar_1.StellarPaymentAdapter; } });
+var stellar_watcher_1 = require("./monitor/stellar-watcher");
+Object.defineProperty(exports, "createStellarWatcher", { enumerable: true, get: function () { return stellar_watcher_1.createStellarWatcher; } });
+var sep7_1 = require("./requests/sep7");
+Object.defineProperty(exports, "buildSep7Uri", { enumerable: true, get: function () { return sep7_1.buildSep7Uri; } });
+//# sourceMappingURL=stellar.js.map

package/dist/cjs/stellar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar.js","sourceRoot":"","sources":["../../src/stellar.ts"],"names":[],"mappings":";;;AAAA,2CAA2C;AAC3C,EAAE;AACF,+EAA+E;AAC/E,kEAAkE;AAClE,8CAA2D;AAAlD,gHAAA,qBAAqB,OAAA;AAE9B,6DAAiE;AAAxD,uHAAA,oBAAoB,OAAA;AAE7B,wCAA+C;AAAtC,oGAAA,YAAY,OAAA"}

package/dist/cjs/wallet/balance-aggregator.js

@@ -0,0 +1,149 @@
+"use strict";
+/**
+ * BalanceAggregator — Multi-chain balance aggregation.
+ *
+ * Queries all registered adapters in parallel to produce a unified
+ * balance snapshot. Handles adapters that don't implement `getBalance()`
+ * gracefully (returns 0).
+ *
+ * @example
+ * ```ts
+ * const aggregator = new BalanceAggregator(adapters);
+ * const balance = await aggregator.getUnifiedBalance();
+ * console.log(balance.totalFormatted); // "$400.00"
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BalanceAggregator = void 0;
+/**
+ * Known stablecoin tickers treated as 1:1 USD.
+ * All others use best-effort conversion.
+ */
+const STABLECOIN_TICKERS = new Set([
+    'USDC', 'USDT', 'DAI', 'BUSD', 'TUSD', 'FRAX', 'PYUSD', 'USD',
+]);
+/**
+ * Rough USD conversion rates for non-stablecoin assets.
+ * Used only when precise oracle data is unavailable.
+ */
+const FALLBACK_RATES = {
+    ETH: 3200,
+    XLM: 0.12,
+    SOL: 170,
+    BTC: 95000,
+    MATIC: 0.55,
+    AVAX: 35,
+    ARB: 1.1,
+    OP: 2.5,
+};
+class BalanceAggregator {
+    adapters;
+    constructor(adapters) {
+        this.adapters = adapters;
+    }
+    /**
+     * Query all adapters and return a unified balance snapshot.
+     * Adapters without `getBalance()` report $0.
+     */
+    async getUnifiedBalance() {
+        const results = await Promise.allSettled(this.adapters.map((adapter, index) => this.queryAdapter(adapter, index)));
+        const breakdown = [];
+        for (const result of results) {
+            if (result.status === 'fulfilled') {
+                breakdown.push(result.value);
+            }
+            // Silently skip failed adapters — fail-open for balance reads
+        }
+        const totalUsd = breakdown.reduce((sum, b) => sum + b.balanceUsd, 0);
+        return {
+            totalUsd,
+            totalFormatted: `$${totalUsd.toFixed(2)}`,
+            breakdown,
+            timestamp: new Date(),
+        };
+    }
+    /**
+     * Get the balance for a specific chain by CAIP-2 ID.
+     */
+    async getChainBalance(caip2Id) {
+        const index = this.adapters.findIndex((a) => a.caip2Id === caip2Id);
+        if (index === -1)
+            return null;
+        return this.queryAdapter(this.adapters[index], index);
+    }
+    /**
+     * Find the adapter with the highest USD balance.
+     */
+    async getRichestChain() {
+        const unified = await this.getUnifiedBalance();
+        if (unified.breakdown.length === 0)
+            return null;
+        return unified.breakdown.reduce((richest, current) => current.balanceUsd > richest.balanceUsd ? current : richest);
+    }
+    /**
+     * Check if sufficient funds exist across all chains.
+     */
+    async hasSufficientFunds(amountUsd) {
+        const unified = await this.getUnifiedBalance();
+        return unified.totalUsd >= amountUsd;
+    }
+    /**
+     * Find all chains that can cover a given USD amount.
+     */
+    async getChainsWithSufficientFunds(amountUsd) {
+        const unified = await this.getUnifiedBalance();
+        return unified.breakdown.filter((b) => b.balanceUsd >= amountUsd);
+    }
+    // ─── Internal ──────────────────────────────────────────────────────
+    async queryAdapter(adapter, index) {
+        let balance = '0';
+        let asset = 'USDC'; // default assumption
+        if (adapter.getBalance) {
+            try {
+                balance = await adapter.getBalance();
+            }
+            catch {
+                balance = '0';
+            }
+        }
+        // Detect asset from chain name heuristics
+        asset = this.detectPrimaryAsset(adapter.chainName);
+        const balanceNum = parseFloat(balance) || 0;
+        const balanceUsd = this.toUsd(balanceNum, asset);
+        return {
+            chain: adapter.chainName,
+            caip2Id: adapter.caip2Id,
+            balance: balanceNum.toFixed(2),
+            balanceUsd,
+            asset,
+            adapterIndex: index,
+        };
+    }
+    /**
+     * Convert an asset amount to USD using stablecoin 1:1 or fallback rates.
+     */
+    toUsd(amount, asset) {
+        if (STABLECOIN_TICKERS.has(asset.toUpperCase())) {
+            return amount;
+        }
+        const rate = FALLBACK_RATES[asset.toUpperCase()] ?? 1;
+        return amount * rate;
+    }
+    /**
+     * Best-effort detection of the primary asset for a chain.
+     */
+    detectPrimaryAsset(chainName) {
+        const lower = chainName.toLowerCase();
+        if (lower.includes('stripe') || lower.includes('fiat'))
+            return 'USD';
+        if (lower.includes('stellar'))
+            return 'USDC'; // Stellar USDC
+        if (lower.includes('solana'))
+            return 'USDC'; // SPL USDC
+        if (lower.includes('bitcoin'))
+            return 'BTC';
+        return 'USDC'; // Default for EVM chains (Base, Arb, etc.)
+    }
+}
+exports.BalanceAggregator = BalanceAggregator;
+//# sourceMappingURL=balance-aggregator.js.map

package/dist/cjs/wallet/balance-aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-aggregator.js","sourceRoot":"","sources":["../../../src/wallet/balance-aggregator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAKH;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;CAC9D,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,cAAc,GAA2B;IAC7C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,EAAE;IACR,GAAG,EAAE,GAAG;IACR,EAAE,EAAE,GAAG;CACR,CAAC;AAEF,MAAa,iBAAiB;IACR;IAApB,YAAoB,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;IAAG,CAAC;IAElD;;;OAGG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACzE,CAAC;QAEF,MAAM,SAAS,GAAmB,EAAE,CAAC;QAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,8DAA8D;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAErE,OAAO;YACL,QAAQ;YACR,cAAc,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACzC,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACnD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAC5D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,4BAA4B,CAAC,SAAiB;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,sEAAsE;IAE9D,KAAK,CAAC,YAAY,CAAC,OAAuB,EAAE,KAAa;QAC/D,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,qBAAqB;QAEzC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,GAAG,CAAC;YAChB,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEjD,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,SAAS;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9B,UAAU;YACV,KAAK;YACL,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,MAAc,EAAE,KAAa;QACzC,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,SAAiB;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,eAAe;QAC7D,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,WAAW;QACxD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,MAAM,CAAC,CAAC,2CAA2C;IAC5D,CAAC;CACF;AAvHD,8CAuHC"}