payid 0.6.0 → 1.0.1

package/dist/{chunk-2VO4XLTT.js → chunk-7YVJJEON.js}

@@ -1,15 +1,16 @@
-import {
-  combineRules
-} from "./chunk-GG34PNTF.js";
 import {
   decodeSessionPolicy,
   decodeSessionPolicyV2
-} from "./chunk-BLIRABV7.js";
+} from "./chunk-AUW7WDAB.js";
+import {
+  combineRules
+} from "./chunk-GG34PNTF.js";
 import {
   evaluate,
   generateDecisionProof,
+  loadWasm,
   resolveRule
-} from "./chunk-DZ6GVRER.js";
+} from "./chunk-MSQM7KDN.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -17,33 +18,38 @@ import {
 // src/core/client/index.ts
 var client_exports = {};
 __export(client_exports, {
-  createPayID: () => createPayID
+  PayIDClient: () => PayIDClient,
+  createPayID: () => createPayIDClient,
+  createPayIDClient: () => createPayIDClient
 });
 
 // src/core/client/client.ts
-import { loadWasm } from "payid-rule-engine";
 import "ethers";
 function isRuleSource(rule) {
   return typeof rule === "object" && rule !== null && "uri" in rule;
 }
 var PayIDClient = class {
-  constructor(debugTrace, wasm) {
+  constructor(debugTrace, wasm, resolverOptions) {
     this.debugTrace = debugTrace;
     this.wasm = wasm;
+    this.resolverOptions = resolverOptions;
     this._ready = loadWasm(this.wasm).then(() => {
     }).catch(() => {
     });
   }
+  debugTrace;
+  wasm;
+  resolverOptions;
   _ready;
   async ready() {
     return this._ready;
   }
   async evaluate(context, rule) {
-    const config = isRuleSource(rule) ? (await resolveRule(rule)).config : rule;
+    const config = isRuleSource(rule) ? (await resolveRule(rule, this.resolverOptions)).config : rule;
     return evaluate(context, config, { debug: this.debugTrace }, this.wasm);
   }
   async evaluateAndProve(params) {
-    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule)).config : params.authorityRule;
+    const authorityConfig = isRuleSource(params.authorityRule) ? (await resolveRule(params.authorityRule, this.resolverOptions)).config : params.authorityRule;
     const evalConfig = params.evaluationRule ?? (params.sessionPolicyV2 ? (() => {
       decodeSessionPolicyV2(params.sessionPolicyV2, params.blockTimestamp);
       return authorityConfig;
@@ -77,21 +83,20 @@ var PayIDClient = class {
       ruleAuthority: params.ruleAuthority,
       chainId: params.chainId ?? params.context?.tx?.chainId,
       ttlSeconds: params.ttlSeconds,
-      blockTimestamp: params.blockTimestamp
+      blockTimestamp: params.blockTimestamp,
+      attestationUIDs: params.attestationUIDs
     });
     return { result, proof };
   }
 };
 
 // src/core/client/index.ts
-function createPayID(params) {
-  return new PayIDClient(
-    params.debugTrace ?? false,
-    params.wasm
-  );
+function createPayIDClient(params) {
+  return new PayIDClient(params?.debugTrace, params?.wasm);
 }
 
 export {
-  createPayID,
+  PayIDClient,
+  createPayIDClient,
   client_exports
 };

package/dist/{chunk-BLIRABV7.js → chunk-AUW7WDAB.js}

@@ -1,28 +1,13 @@
-import {
-  canonicalizeRuleSet
-} from "./chunk-6VPSJFO4.js";
 import {
   randomHex
 } from "./chunk-KDC67LIN.js";
 
 // src/sessionPolicy/create.ts
 import { ethers } from "ethers";
-async function createSessionPolicyPayload(params) {
-  const issuedAt = Math.floor(Date.now() / 1e3);
-  const nonce = randomHex(16);
-  const payload = {
-    version: "payid.session.policy.v1",
-    receiver: params.receiver,
-    rule: canonicalizeRuleSet(params.rule),
-    issuedAt,
-    expiresAt: params.expiresAt,
-    nonce
-  };
-  const message = ethers.keccak256(
-    ethers.toUtf8Bytes(JSON.stringify(payload))
+async function createSessionPolicyPayload(_params) {
+  throw new Error(
+    "SESSION_POLICY_V1_DISABLED: V1 policies have no chainId binding and are vulnerable to cross-chain replay. Use createSessionPolicyV2() instead."
   );
-  const signature = await params.signer.signMessage(message);
-  return { ...payload, signature };
 }
 var SESSION_POLICY_V2_DOMAIN_NAME = "PAY.ID SessionPolicy";
 var SESSION_POLICY_V2_DOMAIN_VERSION = "1";
@@ -59,14 +44,20 @@ async function createSessionPolicyV2(params) {
     verifyingContract,
     signer
   } = params;
+  const MIN_TTL_SECONDS = 60;
+  const MAX_TTL_SECONDS = 30 * 24 * 3600;
   if (!ethers.isAddress(receiver)) {
     throw new Error(`SESSION_POLICY_V2: receiver address tidak valid: ${receiver}`);
   }
   if (maxAmount <= 0n) {
     throw new Error("SESSION_POLICY_V2: maxAmount harus > 0");
   }
-  if (expiresAt <= Math.floor(Date.now() / 1e3)) {
-    throw new Error("SESSION_POLICY_V2: expiresAt sudah lewat");
+  const now = Math.floor(Date.now() / 1e3);
+  if (expiresAt <= now + MIN_TTL_SECONDS) {
+    throw new Error(`SESSION_POLICY_V2: expiresAt terlalu dekat \u2014 minimum ${MIN_TTL_SECONDS}s dari sekarang`);
+  }
+  if (expiresAt > now + MAX_TTL_SECONDS) {
+    throw new Error(`SESSION_POLICY_V2: expiresAt terlalu jauh \u2014 maksimum ${MAX_TTL_SECONDS / 86400} hari`);
   }
   const policyNonce = randomHex(32);
   const payIdBytes32 = ethers.keccak256(ethers.toUtf8Bytes(payId));

package/dist/{chunk-SSO66YQI.js → chunk-E6VQETBC.js}

@@ -16,9 +16,22 @@ __export(issuer_exports, {
   issueOracleContext: () => issueOracleContext,
   issueRiskContext: () => issueRiskContext,
   issueStateContext: () => issueStateContext,
+  issueTokenPriceContext: () => issueTokenPriceContext,
   signAttestation: () => signAttestation
 });
 
+// src/issuer/issueTokenPriceContext.ts
+async function issueTokenPriceContext(wallet, tokenPrice, tokenAmount, tokenDecimals) {
+  const amountUsd = tokenAmount * tokenPrice / 10n ** BigInt(tokenDecimals + 8);
+  const proof = await signAttestation(
+    wallet,
+    { amountUsd: amountUsd.toString() },
+    120
+  );
+  return { amountUsd: amountUsd.toString(), proof };
+}
+
 export {
+  issueTokenPriceContext,
   issuer_exports
 };

package/dist/chunk-FZNMDGVK.js

@@ -0,0 +1,24 @@
+import {
+  combineRules
+} from "./chunk-GG34PNTF.js";
+import {
+  canonicalizeRuleSet
+} from "./chunk-6VPSJFO4.js";
+import {
+  hashRuleSet
+} from "./chunk-X7NYQ47Y.js";
+import {
+  __export
+} from "./chunk-MLKGABMK.js";
+
+// src/rule/index.ts
+var rule_exports = {};
+__export(rule_exports, {
+  canonicalizeRuleSet: () => canonicalizeRuleSet,
+  combineRules: () => combineRules,
+  hashRuleSet: () => hashRuleSet
+});
+
+export {
+  rule_exports
+};