payid 0.6.0 → 1.0.0

package/dist/{chunk-BLIRABV7.js → chunk-AUW7WDAB.js}

@@ -1,28 +1,13 @@
-import {
-  canonicalizeRuleSet
-} from "./chunk-6VPSJFO4.js";
 import {
   randomHex
 } from "./chunk-KDC67LIN.js";
 
 // src/sessionPolicy/create.ts
 import { ethers } from "ethers";
-async function createSessionPolicyPayload(params) {
-  const issuedAt = Math.floor(Date.now() / 1e3);
-  const nonce = randomHex(16);
-  const payload = {
-    version: "payid.session.policy.v1",
-    receiver: params.receiver,
-    rule: canonicalizeRuleSet(params.rule),
-    issuedAt,
-    expiresAt: params.expiresAt,
-    nonce
-  };
-  const message = ethers.keccak256(
-    ethers.toUtf8Bytes(JSON.stringify(payload))
+async function createSessionPolicyPayload(_params) {
+  throw new Error(
+    "SESSION_POLICY_V1_DISABLED: V1 policies have no chainId binding and are vulnerable to cross-chain replay. Use createSessionPolicyV2() instead."
   );
-  const signature = await params.signer.signMessage(message);
-  return { ...payload, signature };
 }
 var SESSION_POLICY_V2_DOMAIN_NAME = "PAY.ID SessionPolicy";
 var SESSION_POLICY_V2_DOMAIN_VERSION = "1";
@@ -59,14 +44,20 @@ async function createSessionPolicyV2(params) {
     verifyingContract,
     signer
   } = params;
+  const MIN_TTL_SECONDS = 60;
+  const MAX_TTL_SECONDS = 30 * 24 * 3600;
   if (!ethers.isAddress(receiver)) {
     throw new Error(`SESSION_POLICY_V2: receiver address tidak valid: ${receiver}`);
   }
   if (maxAmount <= 0n) {
     throw new Error("SESSION_POLICY_V2: maxAmount harus > 0");
   }
-  if (expiresAt <= Math.floor(Date.now() / 1e3)) {
-    throw new Error("SESSION_POLICY_V2: expiresAt sudah lewat");
+  const now = Math.floor(Date.now() / 1e3);
+  if (expiresAt <= now + MIN_TTL_SECONDS) {
+    throw new Error(`SESSION_POLICY_V2: expiresAt terlalu dekat \u2014 minimum ${MIN_TTL_SECONDS}s dari sekarang`);
+  }
+  if (expiresAt > now + MAX_TTL_SECONDS) {
+    throw new Error(`SESSION_POLICY_V2: expiresAt terlalu jauh \u2014 maksimum ${MAX_TTL_SECONDS / 86400} hari`);
   }
   const policyNonce = randomHex(32);
   const payIdBytes32 = ethers.keccak256(ethers.toUtf8Bytes(payId));

package/dist/{chunk-SSO66YQI.js → chunk-E6VQETBC.js}

@@ -16,9 +16,22 @@ __export(issuer_exports, {
   issueOracleContext: () => issueOracleContext,
   issueRiskContext: () => issueRiskContext,
   issueStateContext: () => issueStateContext,
+  issueTokenPriceContext: () => issueTokenPriceContext,
   signAttestation: () => signAttestation
 });
 
+// src/issuer/issueTokenPriceContext.ts
+async function issueTokenPriceContext(wallet, tokenPrice, tokenAmount, tokenDecimals) {
+  const amountUsd = tokenAmount * tokenPrice / 10n ** BigInt(tokenDecimals + 8);
+  const proof = await signAttestation(
+    wallet,
+    { amountUsd: amountUsd.toString() },
+    120
+  );
+  return { amountUsd: amountUsd.toString(), proof };
+}
+
 export {
+  issueTokenPriceContext,
   issuer_exports
 };

package/dist/{chunk-TQJUKEFO.js → chunk-ESTGPUEQ.js}

@@ -2,7 +2,7 @@ import {
   evaluate,
   generateDecisionProof,
   resolveRule
-} from "./chunk-DZ6GVRER.js";
+} from "./chunk-HKHRYRD6.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -10,20 +10,20 @@ import {
 // src/core/server/index.ts
 var server_exports = {};
 __export(server_exports, {
-  createPayID: () => createPayID
+  PayIDServer: () => PayIDServer,
+  createPayIDServer: () => createPayIDServer
 });
 
 // src/erc4337/build.ts
 import { ethers } from "ethers";
+var DECISION_TUPLE = "bytes32 version,bytes32 payId,address payer,address receiver,address asset,uint256 amount,bytes32 contextHash,bytes32 ruleSetHash,address ruleAuthority,uint64 issuedAt,uint64 expiresAt,bytes32 nonce,bool requiresAttestation,bytes32 attestationUIDsHash";
 var PAY_WITH_PAYID_ABI = [
-  // ETH payment — attestationUIDs adalah EAS UIDs, pass [] jika tidak perlu
-  "function payETH((bytes32 version, bytes32 payId, address payer, address receiver, address asset, uint256 amount, bytes32 contextHash, bytes32 ruleSetHash, address ruleAuthority, uint64 issuedAt, uint64 expiresAt, bytes32 nonce, bool requiresAttestation) d, bytes sig, bytes32[] attestationUIDs) payable",
-  // ERC20 payment
-  "function payERC20((bytes32 version, bytes32 payId, address payer, address receiver, address asset, uint256 amount, bytes32 contextHash, bytes32 ruleSetHash, address ruleAuthority, uint64 issuedAt, uint64 expiresAt, bytes32 nonce, bool requiresAttestation) d, bytes sig, bytes32[] attestationUIDs)"
+  `function payNative((${DECISION_TUPLE}) d, bytes sig, bytes32[] attestationUIDs) payable`,
+  `function payERC20((${DECISION_TUPLE}) d, bytes sig, bytes32[] attestationUIDs)`
 ];
-function buildPayETHCallData(contractAddress, proof, attestationUIDs = []) {
+function buildPayNativeCallData(contractAddress, proof, attestationUIDs = []) {
   const iface = new ethers.Interface(PAY_WITH_PAYID_ABI);
-  return iface.encodeFunctionData("payETH", [
+  return iface.encodeFunctionData("payNative", [
     proof.payload,
     proof.signature,
     attestationUIDs
@@ -61,14 +61,22 @@ function isRuleSource(rule) {
   return typeof rule === "object" && rule !== null && "uri" in rule;
 }
 var PayIDServer = class {
-  constructor(signer, trustedIssuers, debugTrace, wasm) {
+  constructor(signer, trustedIssuers, debugTrace, wasm, storage, resolverOptions) {
     this.signer = signer;
     this.trustedIssuers = trustedIssuers;
     this.debugTrace = debugTrace;
     this.wasm = wasm;
+    this.storage = storage;
+    this.resolverOptions = resolverOptions;
   }
+  signer;
+  trustedIssuers;
+  debugTrace;
+  wasm;
+  storage;
+  resolverOptions;
   async evaluateAndProve(params) {
-    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule)).config : params.authorityRule;
+    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule, this.resolverOptions)).config : params.authorityRule;
     const evalConfig = params.evaluationRule ?? authorityConfig;
     const result = await evaluate(
       params.context,
@@ -100,11 +108,8 @@ var PayIDServer = class {
     return { result, proof };
   }
   buildUserOperation(params) {
-    const callData = buildPayERC20CallData(
-      params.targetContract,
-      params.proof,
-      params.attestationUIDs ?? []
-    );
+    const isETH = params.paymentType === "eth";
+    const callData = isETH ? buildPayNativeCallData(params.targetContract, params.proof, params.attestationUIDs ?? []) : buildPayERC20CallData(params.targetContract, params.proof, params.attestationUIDs ?? []);
     return buildUserOperation({
       sender: params.smartAccount,
       nonce: params.nonce,
@@ -116,19 +121,17 @@ var PayIDServer = class {
 };
 
 // src/core/server/index.ts
-function createPayID(params) {
+function createPayIDServer(params) {
   return new PayIDServer(
     params.signer,
     params.trustedIssuers,
-    params.debugTrace ?? false,
+    params.debugTrace,
     params.wasm
   );
 }
 
 export {
-  buildPayETHCallData,
-  buildPayERC20CallData,
-  buildUserOperation,
-  createPayID,
+  PayIDServer,
+  createPayIDServer,
   server_exports
 };

package/dist/{chunk-2VO4XLTT.js → chunk-EZ3BGZ7G.js}

@@ -4,12 +4,13 @@ import {
 import {
   decodeSessionPolicy,
   decodeSessionPolicyV2
-} from "./chunk-BLIRABV7.js";
+} from "./chunk-AUW7WDAB.js";
 import {
   evaluate,
   generateDecisionProof,
+  loadWasm,
   resolveRule
-} from "./chunk-DZ6GVRER.js";
+} from "./chunk-HKHRYRD6.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -17,33 +18,38 @@ import {
 // src/core/client/index.ts
 var client_exports = {};
 __export(client_exports, {
-  createPayID: () => createPayID
+  PayIDClient: () => PayIDClient,
+  createPayID: () => createPayIDClient,
+  createPayIDClient: () => createPayIDClient
 });
 
 // src/core/client/client.ts
-import { loadWasm } from "payid-rule-engine";
 import "ethers";
 function isRuleSource(rule) {
   return typeof rule === "object" && rule !== null && "uri" in rule;
 }
 var PayIDClient = class {
-  constructor(debugTrace, wasm) {
+  constructor(debugTrace, wasm, resolverOptions) {
     this.debugTrace = debugTrace;
     this.wasm = wasm;
+    this.resolverOptions = resolverOptions;
     this._ready = loadWasm(this.wasm).then(() => {
     }).catch(() => {
     });
   }
+  debugTrace;
+  wasm;
+  resolverOptions;
   _ready;
   async ready() {
     return this._ready;
   }
   async evaluate(context, rule) {
-    const config = isRuleSource(rule) ? (await resolveRule(rule)).config : rule;
+    const config = isRuleSource(rule) ? (await resolveRule(rule, this.resolverOptions)).config : rule;
     return evaluate(context, config, { debug: this.debugTrace }, this.wasm);
   }
   async evaluateAndProve(params) {
-    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule)).config : params.authorityRule;
+    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule, this.resolverOptions)).config : params.authorityRule;
     const evalConfig = params.evaluationRule ?? (params.sessionPolicyV2 ? (() => {
       decodeSessionPolicyV2(params.sessionPolicyV2, params.blockTimestamp);
       return authorityConfig;
@@ -77,21 +83,20 @@ var PayIDClient = class {
       ruleAuthority: params.ruleAuthority,
       chainId: params.chainId ?? params.context?.tx?.chainId,
       ttlSeconds: params.ttlSeconds,
-      blockTimestamp: params.blockTimestamp
+      blockTimestamp: params.blockTimestamp,
+      attestationUIDs: params.attestationUIDs
     });
     return { result, proof };
   }
 };
 
 // src/core/client/index.ts
-function createPayID(params) {
-  return new PayIDClient(
-    params.debugTrace ?? false,
-    params.wasm
-  );
+function createPayIDClient(params) {
+  return new PayIDClient(params?.debugTrace, params?.wasm);
 }
 
 export {
-  createPayID,
+  PayIDClient,
+  createPayIDClient,
   client_exports
 };

package/dist/chunk-FZNMDGVK.js

@@ -0,0 +1,24 @@
+import {
+  combineRules
+} from "./chunk-GG34PNTF.js";
+import {
+  canonicalizeRuleSet
+} from "./chunk-6VPSJFO4.js";
+import {
+  hashRuleSet
+} from "./chunk-X7NYQ47Y.js";
+import {
+  __export
+} from "./chunk-MLKGABMK.js";
+
+// src/rule/index.ts
+var rule_exports = {};
+__export(rule_exports, {
+  canonicalizeRuleSet: () => canonicalizeRuleSet,
+  combineRules: () => combineRules,
+  hashRuleSet: () => hashRuleSet
+});
+
+export {
+  rule_exports
+};