mtok-verify 0.1.3 → 0.1.5

package/README.md

@@ -25,6 +25,17 @@ const paid = await verifier.verifyDrawPaid(drawPaidTxHash, {
 if (!paid.ok) refuse(paid.reason); // else serve, bounded by paid.event
 ```
 
+Seller hosts can use the same historical fee policy as the market and reference relay:
+
+```js
+import { normalizeFeeSchedule, paymentFeeBpsAt } from 'mtok-verify/fee-policy';
+
+const feeBps = paymentFeeBpsAt(normalizeFeeSchedule(config.feeSchedule), paid.paidAtMs);
+```
+
+Refresh the public config before new claims. Keep completed and pending claims replayable
+without applying a new fee policy. `paidAtMs` must come from the verifier, never the request.
+
 
 ---
 

package/fee-policy.js

@@ -0,0 +1,30 @@
+export function normalizeFeeSchedule(schedule) {
+  if (!Array.isArray(schedule) || !schedule.length || schedule.length > 64) throw new TypeError('fee schedule must contain 1..64 activation records');
+  let previous = -1;
+  return schedule.map(({ effectiveAtMs, feeBps }, index) => {
+    if (!Number.isSafeInteger(effectiveAtMs) || effectiveAtMs <= previous || (index === 0 && effectiveAtMs !== 0)) {
+      throw new TypeError('fee activations must start at 0 and increase in integer milliseconds');
+    }
+    if (!Number.isSafeInteger(feeBps) || feeBps < 0 || feeBps > 10_000) throw new TypeError('feeBps must be an integer from 0 to 10000');
+    previous = effectiveAtMs;
+    return { effectiveAtMs, feeBps };
+  });
+}
+
+// Schedules are normalized when configuration is loaded. Historical payments
+// use their verified block time, never the relay's boot or first-observation time.
+export function feeBpsAt(schedule, timeMs) {
+  if (!Number.isSafeInteger(timeMs) || timeMs < 0) throw new TypeError('verified payment time is required for fee policy');
+  return schedule.findLast(entry => entry.effectiveAtMs <= timeMs).feeBps;
+}
+
+// A buyer can read config immediately before an activation, then mine just
+// after it. The previous rate is valid for one minute, never for a relay's lifetime.
+export function paymentFeeBpsAt(schedule, paidAtMs) {
+  const start = Math.max(0, paidAtMs - 60_000);
+  let minimum = Math.min(feeBpsAt(schedule, paidAtMs), feeBpsAt(schedule, start));
+  for (const entry of schedule) {
+    if (entry.effectiveAtMs > start && entry.effectiveAtMs <= paidAtMs) minimum = Math.min(minimum, entry.feeBps);
+  }
+  return minimum;
+}

package/onchain.js

@@ -277,9 +277,9 @@ export function createOnchainVerifier({ rpcUrl, rpcUrls, usdcAddress, expectedCh
       // Once redemption records expire, verified payment age is the replay boundary.
       // An unreadable timestamp is retryable uncertainty, never permission to spend.
       const maxAge = Number(maxPaidAgeMs);
+      let paidAtMs = null;
       if (Number.isFinite(maxAge) && maxAge > 0) {
         const bn = matchedLog?.blockNumber ?? got.receipt.blockNumber;
-        let paidAtMs = null;
         if (bn != null) {
           for (let i = 0; i <= receiptRetries; i++) {
             try {
@@ -317,7 +317,7 @@ export function createOnchainVerifier({ rpcUrl, rpcUrls, usdcAddress, expectedCh
         if (!feeTransfer.ok) return { ok: false, reason: 'fee_transfer_' + feeTransfer.reason };
       }
 
-      return { ok: true, event, from: sellerTransfer?.from ?? feeTransfer?.from ?? null };
+      return { ok: true, event, paidAtMs, from: sellerTransfer?.from ?? feeTransfer?.from ?? null };
     },
   };
 }

package/package.json

@@ -1,14 +1,16 @@
 {
   "name": "mtok-verify",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "The on-chain verify core for mtok.market sellers: decode + verify a MtokDripLedger DrawPaid receipt (and its USDC transfer legs) against a paid draw, with the canonical DrawPaid topic set. Dependency-free, runs anywhere fetch runs (node, a CF Worker). The SSOT the platform + reference relay + house seller all share.",
   "type": "module",
   "exports": {
-    ".": "./onchain.js"
+    ".": "./onchain.js",
+    "./fee-policy": "./fee-policy.js"
   },
   "files": [
     "onchain.js",
     "errors.js",
+    "fee-policy.js",
     "README.md"
   ],
   "engines": {