phygital-payment-sdk 0.1.0

package/dist/server/enabler-service.js

@@ -0,0 +1,191 @@
+import { verifyAuthenticationResponse } from "@simplewebauthn/server";
+import { fetchAssetFromCredentialId } from "phygital-token-sdk";
+import { base58ToBytes, base64UrlToBytes, bytesToBase64Url, toUint8Array, } from "../core/bytes.js";
+import { assertValidReference, buildTapChallenge } from "../core/challenge.js";
+import { PolicyViolationError } from "../core/errors.js";
+import { fetchEscrowBalance, fetchPaymentAccountSummary, effectiveMaxTapAmount } from "../core/payment.js";
+import { nowSeconds, PROTOCOL_CONSTANTS } from "../core/time.js";
+import { verifyP256Signature } from "./enabler-signer.js";
+import { compressedP256ToCoseKey } from "./webauthn.js";
+export async function tapFingerprint(request) {
+    const payload = [
+        request.response.id,
+        request.mint,
+        request.amount,
+        request.destination,
+        String(request.issuedAt),
+    ].join("|");
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(payload));
+    return bytesToBase64Url(new Uint8Array(digest));
+}
+export function createEnablerService(config) {
+    const policy = config.policy ?? {};
+    const expectedOrigins = [...([config.expectedOrigins].flat())];
+    const expectedRPID = [...([config.expectedRPID].flat())];
+    async function validateAndSign(request) {
+        let amount;
+        try {
+            amount = BigInt(request.amount);
+        }
+        catch {
+            throw new PolicyViolationError("invalid_amount", "amount is not a u64 string");
+        }
+        if (amount <= 0n) {
+            throw new PolicyViolationError("invalid_amount", "amount must be positive");
+        }
+        let reference;
+        try {
+            reference = base58ToBytes(request.reference);
+            assertValidReference(reference);
+        }
+        catch {
+            throw new PolicyViolationError("invalid_reference", "reference must be a base58 non-zero 32-byte value");
+        }
+        const fingerprint = await tapFingerprint(request);
+        const cached = await config.replayStore.getCosignReplay(request.reference);
+        if (cached) {
+            if (cached.fingerprint === fingerprint) {
+                return cached.response;
+            }
+            throw new PolicyViolationError("replayed_reference", "this payment reference was already co-signed for a different tap");
+        }
+        const challenge = buildTapChallenge({
+            mint: request.mint,
+            amount,
+            merchant: request.destination,
+            reference,
+            issuedAt: request.issuedAt,
+        });
+        const expectedChallenge = bytesToBase64Url(challenge);
+        const { publicKey, asset } = await fetchAssetFromCredentialId(request.response.id, config.rpc);
+        if (!asset.isLocked) {
+            throw new PolicyViolationError("asset_not_locked", "accessory asset must be locked to authorize payments");
+        }
+        const credentialPublicKey = base64UrlToBytes(publicKey);
+        let verification;
+        try {
+            verification = await verifyAuthenticationResponse({
+                response: request.response,
+                expectedChallenge,
+                expectedOrigin: expectedOrigins,
+                expectedRPID,
+                requireUserVerification: false,
+                credential: {
+                    id: request.response.id,
+                    publicKey: new Uint8Array(compressedP256ToCoseKey(credentialPublicKey)),
+                    counter: 0,
+                },
+            });
+        }
+        catch (error) {
+            throw mapWebAuthnError(error);
+        }
+        if (!verification.verified) {
+            throw new PolicyViolationError("invalid_signature", "assertion signature does not verify against the registered credential");
+        }
+        const now = nowSeconds();
+        const maxAge = policy.maxTapAgeSecs ?? PROTOCOL_CONSTANTS.clockSkewSecs;
+        const maxFuture = policy.allowFutureIssuedAtSecs ?? PROTOCOL_CONSTANTS.clockSkewSecs;
+        if (request.issuedAt < now - maxAge) {
+            throw new PolicyViolationError("stale_tap", `issuedAt is older than ${maxAge}s`);
+        }
+        if (request.issuedAt > now + maxFuture) {
+            throw new PolicyViolationError("future_tap", `issuedAt is more than ${maxFuture}s in the future`);
+        }
+        if (policy.maxAmountPerTap !== undefined && amount > policy.maxAmountPerTap) {
+            throw new PolicyViolationError("max_amount", `amount ${amount} exceeds the per-tap ceiling ${policy.maxAmountPerTap}`);
+        }
+        if (policy.allowedMints && !policy.allowedMints.includes(request.mint)) {
+            throw new PolicyViolationError("mint_not_allowed", String(request.mint));
+        }
+        if (policy.custom) {
+            const context = {
+                request,
+                challenge,
+                credentialPublicKey,
+                asset,
+                amount,
+                reference,
+            };
+            await policy.custom(context);
+        }
+        const paymentAccount = await fetchPaymentAccountSummary(config.rpc, {
+            owner: asset.owner,
+            mint: request.mint,
+            tokenProgram: request.tokenProgram,
+        });
+        if (paymentAccount === null) {
+            throw new PolicyViolationError("tap_limit_not_set", "payer has no payment account for this mint");
+        }
+        const maxTap = effectiveMaxTapAmount(paymentAccount, now);
+        if (maxTap === 0n) {
+            throw new PolicyViolationError("tap_limit_not_set", "payer has not set a per-tap ceiling");
+        }
+        if (amount > maxTap) {
+            throw new PolicyViolationError("tap_limit_exceeded", `amount ${amount} exceeds the payer's effective per-tap ceiling ${maxTap}`);
+        }
+        const escrow = await fetchEscrowBalance(config.rpc, {
+            owner: asset.owner,
+            mint: request.mint,
+            tokenProgram: request.tokenProgram,
+        });
+        const freeEscrow = escrow?.free ?? 0n;
+        const reservation = await config.exposureStore.tryReserve({
+            payer: asset.owner,
+            mint: request.mint,
+            reference: request.reference,
+            amount,
+            freeEscrow,
+            expiresAt: request.issuedAt + PROTOCOL_CONSTANTS.authorizationTtlSecs,
+        });
+        if (!reservation.reserved) {
+            throw new PolicyViolationError("exposure_exceeded", `outstanding ${reservation.outstandingBefore} + amount ${amount} exceeds free escrow ${freeEscrow}`);
+        }
+        let signature;
+        try {
+            signature = await config.signer.sign(challenge);
+            if (!verifyP256Signature(signature, challenge, toUint8Array(config.signer.publicKey))) {
+                throw new PolicyViolationError("signer_malfunction", "enabler signature failed self-verification");
+            }
+        }
+        catch (error) {
+            await config.exposureStore.release(request.reference);
+            throw error;
+        }
+        const response = {
+            publicKey: bytesToBase64Url(toUint8Array(config.signer.publicKey)),
+            signature: bytesToBase64Url(signature),
+            paymentAccessory: publicKey,
+            payer: asset.owner,
+            outstandingExposure: reservation.outstandingBefore.toString(),
+            freeEscrow: freeEscrow.toString(),
+        };
+        await config.replayStore.putCosignReplay(request.reference, {
+            fingerprint,
+            response,
+        });
+        return response;
+    }
+    return { validateAndSign, publicKey: config.signer.publicKey };
+}
+function mapWebAuthnError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const lower = message.toLowerCase();
+    if (lower.includes("challenge")) {
+        return new PolicyViolationError("challenge_mismatch", message);
+    }
+    if (lower.includes("user not present")) {
+        return new PolicyViolationError("user_not_present", message);
+    }
+    if (lower.includes("origin")) {
+        return new PolicyViolationError("origin_not_allowed", message);
+    }
+    if (lower.includes("rp id") || lower.includes("rpid")) {
+        return new PolicyViolationError("rpid_not_allowed", message);
+    }
+    if (lower.includes("signature") || lower.includes("public key")) {
+        return new PolicyViolationError("invalid_signature", message);
+    }
+    return new PolicyViolationError("invalid_assertion", message);
+}
+//# sourceMappingURL=enabler-service.js.map

package/dist/server/enabler-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enabler-service.js","sourceRoot":"","sources":["../../src/server/enabler-service.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,qBAAqB,EAAe,MAAM,oBAAoB,CAAC;AAKxH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAO9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAuCxD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgC;IAEhC,MAAM,OAAO,GAAG;QACd,OAAO,CAAC,QAAQ,CAAC,EAAE;QACnB,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,WAAW;QACnB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAClC,CAAC;IACF,OAAO,gBAAgB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEzD,KAAK,UAAU,eAAe,CAC5B,OAAgC;QAGhC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7C,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAGlD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YACD,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,CAAC;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,WAAW;YAC7B,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAGtD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,0BAA0B,CAC3D,OAAO,CAAC,QAAQ,CAAC,EAAE,EACnB,MAAM,CAAC,GAAG,CACX,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAC5B,kBAAkB,EAClB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAGxD,IAAI,YAAsE,CAAC;QAC3E,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,4BAA4B,CAAC;gBAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,iBAAiB;gBACjB,cAAc,EAAE,eAAe;gBAC/B,YAAY;gBACZ,uBAAuB,EAAE,KAAK;gBAC9B,UAAU,EAAE;oBACV,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;oBACvB,SAAS,EAAE,IAAI,UAAU,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;oBACvE,OAAO,EAAE,CAAC;iBACX;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAGD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,kBAAkB,CAAC,aAAa,CAAC;QACxE,MAAM,SAAS,GACb,MAAM,CAAC,uBAAuB,IAAI,kBAAkB,CAAC,aAAa,CAAC;QACrE,IAAI,OAAO,CAAC,QAAQ,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,oBAAoB,CAAC,WAAW,EAAE,0BAA0B,MAAM,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,yBAAyB,SAAS,iBAAiB,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5E,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,UAAU,MAAM,gCAAgC,MAAM,CAAC,eAAe,EAAE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,CAAC;QAID,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,OAAO,GAA0B;gBACrC,OAAO;gBACP,SAAS;gBACT,mBAAmB;gBACnB,KAAK;gBACL,MAAM;gBACN,SAAS;aACV,CAAC;YACF,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAMD,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE;YAClE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,UAAU,MAAM,kDAAkD,MAAM,EAAE,CAC3E,CAAC;QACJ,CAAC;QAUD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE;YAClD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACxD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,QAAQ,GAAG,kBAAkB,CAAC,oBAAoB;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,EACnB,eAAe,WAAW,CAAC,iBAAiB,aAAa,MAAM,wBAAwB,UAAU,EAAE,CACpG,CAAC;QACJ,CAAC;QAGD,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAGhD,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAA6B;YACzC,SAAS,EAAE,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClE,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC;YACtC,gBAAgB,EAAE,SAAS;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAGlB,mBAAmB,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC7D,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;SAClC,CAAC;QAEF,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE;YAC1D,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;AACjE,CAAC;AAGD,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC"}

package/dist/server/enabler-signer.d.ts

@@ -0,0 +1,11 @@
+export interface EnablerSigner {
+    publicKey: Uint8Array;
+    sign(message: Uint8Array): Promise<Uint8Array>;
+}
+export declare function createEnablerSigner(privateKey: Uint8Array): EnablerSigner;
+export declare function generateEnablerKeypair(): {
+    privateKey: Uint8Array;
+    signer: EnablerSigner;
+};
+export declare function verifyP256Signature(signature: Uint8Array, message: Uint8Array, publicKey: Uint8Array): boolean;
+//# sourceMappingURL=enabler-signer.d.ts.map

package/dist/server/enabler-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enabler-signer.d.ts","sourceRoot":"","sources":["../../src/server/enabler-signer.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,aAAa;IAE5B,SAAS,EAAE,UAAU,CAAC;IAKtB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAChD;AAGD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,aAAa,CAezE;AAOD,wBAAgB,sBAAsB,IAAI;IACxC,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB,CAGA;AAGD,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,OAAO,CAeT"}

package/dist/server/enabler-signer.js

@@ -0,0 +1,37 @@
+import { p256 } from "@noble/curves/nist.js";
+import { ConfigurationError } from "../core/errors.js";
+export function createEnablerSigner(privateKey) {
+    if (privateKey.length !== 32) {
+        throw new ConfigurationError(`Enabler private key must be 32 bytes, got ${privateKey.length}.`);
+    }
+    const publicKey = p256.getPublicKey(privateKey, true);
+    return {
+        publicKey,
+        sign(message) {
+            return Promise.resolve(p256.sign(message, privateKey, { prehash: true }));
+        },
+    };
+}
+export function generateEnablerKeypair() {
+    const privateKey = p256.utils.randomSecretKey();
+    return { privateKey, signer: createEnablerSigner(privateKey) };
+}
+export function verifyP256Signature(signature, message, publicKey) {
+    let compact;
+    try {
+        compact =
+            signature.length === 64
+                ? signature
+                : p256.Signature.fromBytes(signature, "der").toBytes("compact");
+    }
+    catch {
+        return false;
+    }
+    try {
+        return p256.verify(compact, message, publicKey, { prehash: true });
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=enabler-signer.js.map

package/dist/server/enabler-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enabler-signer.js","sourceRoot":"","sources":["../../src/server/enabler-signer.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAavD,MAAM,UAAU,mBAAmB,CAAC,UAAsB;IACxD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,kBAAkB,CAC1B,6CAA6C,UAAU,CAAC,MAAM,GAAG,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO;QACL,SAAS;QACT,IAAI,CAAC,OAAO;YAGV,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,sBAAsB;IAIpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;AACjE,CAAC;AAGD,MAAM,UAAU,mBAAmB,CACjC,SAAqB,EACrB,OAAmB,EACnB,SAAqB;IAErB,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO;YACL,SAAS,CAAC,MAAM,KAAK,EAAE;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/server/fee-budget.d.ts

@@ -0,0 +1,22 @@
+import type { Address } from "@solana/kit";
+import { type SponsoredChargeSummary, type SponsorshipAuthorizer } from "./fee-payer.js";
+export declare const BASE_FEE_LAMPORTS_PER_SIGNATURE = 5000n;
+export interface SponsorshipCostOptions {
+    baseFeeLamportsPerSignature?: bigint;
+    rentPerPaymentLamports: bigint;
+}
+export interface SponsoredCost {
+    total: bigint;
+    byMerchant: Map<Address, bigint>;
+    rentByMerchant: Map<Address, bigint>;
+}
+export declare function sponsoredCostByMerchant(summary: SponsoredChargeSummary, options: SponsorshipCostOptions): SponsoredCost;
+export interface FeeBudgetStore {
+    getRemaining(merchant: Address): Promise<bigint> | bigint;
+    tryDeduct(merchant: Address, lamports: bigint): Promise<boolean> | boolean;
+    credit(merchant: Address, lamports: bigint): Promise<void> | void;
+}
+export declare function createInMemoryFeeBudgetStore(initial?: Iterable<readonly [Address, bigint]>): FeeBudgetStore;
+export declare function createSponsorshipBudgetAuthorizer(store: FeeBudgetStore, options: SponsorshipCostOptions): SponsorshipAuthorizer;
+export declare function creditReclaimedRent(store: FeeBudgetStore, merchant: Address, rentPerPaymentLamports: bigint): Promise<void>;
+//# sourceMappingURL=fee-budget.d.ts.map

package/dist/server/fee-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-budget.d.ts","sourceRoot":"","sources":["../../src/server/fee-budget.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAA2B,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGlH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IAErC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAMrC,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAGD,MAAM,WAAW,aAAa;IAE5B,KAAK,EAAE,MAAM,CAAC;IAEd,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEjC,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CACtC;AAOD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,sBAAsB,GAC9B,aAAa,CA2Bf;AAOD,MAAM,WAAW,cAAc;IAE7B,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAE1D,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAE3E,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACnE;AAGD,wBAAgB,4BAA4B,CAC1C,OAAO,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAC7C,cAAc,CAchB;AAqBD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,sBAAsB,GAC9B,qBAAqB,CAevB;AAOD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,OAAO,EACjB,sBAAsB,EAAE,MAAM,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/server/fee-budget.js

@@ -0,0 +1,58 @@
+import { FeePayerValidationError } from "./fee-payer.js";
+export const BASE_FEE_LAMPORTS_PER_SIGNATURE = 5000n;
+export function sponsoredCostByMerchant(summary, options) {
+    const baseFeePerSig = options.baseFeeLamportsPerSignature ?? BASE_FEE_LAMPORTS_PER_SIGNATURE;
+    const rentPerPayment = options.rentPerPaymentLamports;
+    const transfers = summary.merchants.length;
+    const baseFee = baseFeePerSig * BigInt(summary.signatureCount);
+    const sharedFee = baseFee + summary.priorityFeeLamports;
+    const total = sharedFee + rentPerPayment * BigInt(transfers);
+    const byMerchant = new Map();
+    const rentByMerchant = new Map();
+    if (transfers === 0)
+        return { total, byMerchant, rentByMerchant };
+    const sharePerTransfer = sharedFee / BigInt(transfers);
+    const remainder = sharedFee - sharePerTransfer * BigInt(transfers);
+    summary.merchants.forEach((merchant, i) => {
+        const feeShare = sharePerTransfer + (i === 0 ? remainder : 0n);
+        const cost = feeShare + rentPerPayment;
+        byMerchant.set(merchant, (byMerchant.get(merchant) ?? 0n) + cost);
+        rentByMerchant.set(merchant, (rentByMerchant.get(merchant) ?? 0n) + rentPerPayment);
+    });
+    return { total, byMerchant, rentByMerchant };
+}
+export function createInMemoryFeeBudgetStore(initial) {
+    const balances = new Map(initial);
+    return {
+        getRemaining: (merchant) => balances.get(merchant) ?? 0n,
+        tryDeduct(merchant, lamports) {
+            const remaining = balances.get(merchant) ?? 0n;
+            if (remaining < lamports)
+                return false;
+            balances.set(merchant, remaining - lamports);
+            return true;
+        },
+        credit(merchant, lamports) {
+            balances.set(merchant, (balances.get(merchant) ?? 0n) + lamports);
+        },
+    };
+}
+export function createSponsorshipBudgetAuthorizer(store, options) {
+    return async (summary) => {
+        const { byMerchant } = sponsoredCostByMerchant(summary, options);
+        const deducted = [];
+        for (const [merchant, cost] of byMerchant) {
+            const ok = await store.tryDeduct(merchant, cost);
+            if (!ok) {
+                for (const [m, c] of deducted)
+                    await store.credit(m, c);
+                throw new FeePayerValidationError(`merchant ${merchant} has insufficient fee budget for ${cost} lamports`);
+            }
+            deducted.push([merchant, cost]);
+        }
+    };
+}
+export async function creditReclaimedRent(store, merchant, rentPerPaymentLamports) {
+    await store.credit(merchant, rentPerPaymentLamports);
+}
+//# sourceMappingURL=fee-budget.js.map

package/dist/server/fee-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-budget.js","sourceRoot":"","sources":["../../src/server/fee-budget.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,uBAAuB,EAA2D,MAAM,gBAAgB,CAAC;AAGlH,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAM,CAAC;AA4BtD,MAAM,UAAU,uBAAuB,CACrC,OAA+B,EAC/B,OAA+B;IAE/B,MAAM,aAAa,GACjB,OAAO,CAAC,2BAA2B,IAAI,+BAA+B,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;IAE3C,MAAM,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,GAAG,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmB,CAAC;IAClD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAElE,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAEnE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,QAAQ,GAAG,cAAc,CAAC;QACvC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAClE,cAAc,CAAC,GAAG,CAChB,QAAQ,EACR,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,cAAc,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAC/C,CAAC;AAiBD,MAAM,UAAU,4BAA4B,CAC1C,OAA8C;IAE9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAkB,OAAO,CAAC,CAAC;IACnD,OAAO;QACL,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACxD,SAAS,CAAC,QAAQ,EAAE,QAAQ;YAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,SAAS,GAAG,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,QAAQ;YACvB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC;AAqBD,MAAM,UAAU,iCAAiC,CAC/C,KAAqB,EACrB,OAA+B;IAE/B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,EAAE,UAAU,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM,IAAI,uBAAuB,CAC/B,YAAY,QAAQ,oCAAoC,IAAI,WAAW,CACxE,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB,EACrB,QAAiB,EACjB,sBAA8B;IAE9B,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;AACvD,CAAC"}

package/dist/server/fee-payer.d.ts

@@ -0,0 +1,27 @@
+import { type Address, type Transaction, type TransactionSigner } from "@solana/kit";
+export declare const SECP256R1_PROGRAM_ADDRESS: Address<"Secp256r1SigVerify1111111111111111111111111">;
+export declare const COMPUTE_BUDGET_PROGRAM_ADDRESS: Address<"ComputeBudget111111111111111111111111111111">;
+export declare const DEFAULT_MAX_PRIORITY_FEE_LAMPORTS = 100000n;
+export declare class FeePayerValidationError extends Error {
+    readonly code = "fee_payer_validation";
+    constructor(message: string);
+}
+export interface SponsoredChargeSummary {
+    transferCount: number;
+    merchants: Address[];
+    signatureCount: number;
+    priorityFeeLamports: bigint;
+}
+export type SponsorshipAuthorizer = (summary: SponsoredChargeSummary) => void | Promise<void>;
+export interface FeePayerServiceConfig {
+    maxPriorityFeeLamports?: bigint;
+}
+export interface FeePayerService {
+    address: Address;
+    signChargeTransaction(transactionBase64: string, authorize?: SponsorshipAuthorizer): Promise<string>;
+}
+export declare function createFeePayerService(feePayer: TransactionSigner, config?: FeePayerServiceConfig): FeePayerService;
+export declare function validateChargeTransaction(transaction: Transaction, expectedFeePayer: Address, options?: {
+    maxPriorityFeeLamports?: bigint;
+}): SponsoredChargeSummary;
+//# sourceMappingURL=fee-payer.d.ts.map

package/dist/server/fee-payer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-payer.d.ts","sourceRoot":"","sources":["../../src/server/fee-payer.ts"],"names":[],"mappings":"AAQA,OAAO,EAML,KAAK,OAAO,EAEZ,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAMrB,eAAO,MAAM,yBAAyB,wDAErC,CAAC;AAGF,eAAO,MAAM,8BAA8B,wDAE1C,CAAC;AAqBF,eAAO,MAAM,iCAAiC,UAAW,CAAC;AAE1D,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAGD,MAAM,WAAW,sBAAsB;IAErC,aAAa,EAAE,MAAM,CAAC;IAMtB,SAAS,EAAE,OAAO,EAAE,CAAC;IAMrB,cAAc,EAAE,MAAM,CAAC;IAKvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAQD,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,sBAAsB,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,WAAW,qBAAqB;IAKpC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAE9B,OAAO,EAAE,OAAO,CAAC;IAKjB,qBAAqB,CACnB,iBAAiB,EAAE,MAAM,EACzB,SAAS,CAAC,EAAE,qBAAqB,GAChC,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAMD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,GAAE,qBAA0B,GACjC,eAAe,CAwCjB;AA0ED,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,WAAW,EACxB,gBAAgB,EAAE,OAAO,EACzB,OAAO,GAAE;IAAE,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,sBAAsB,CAoGxB"}

package/dist/server/fee-payer.js

@@ -0,0 +1,167 @@
+import { address, assertIsTransactionPartialSigner, decompileTransactionMessage, getCompiledTransactionMessageDecoder, getTransactionDecoder, } from "@solana/kit";
+import { parseTransferInstruction } from "../generated/instructions/transfer.js";
+import { PHYGITAL_PAYMENT_PROGRAM_ADDRESS } from "../generated/programs/phygitalPayment.js";
+import { base64ToBytes, bytesToBase64 } from "../core/bytes.js";
+export const SECP256R1_PROGRAM_ADDRESS = address("Secp256r1SigVerify1111111111111111111111111");
+export const COMPUTE_BUDGET_PROGRAM_ADDRESS = address("ComputeBudget111111111111111111111111111111");
+const CB_REQUEST_UNITS_DEPRECATED = 0x00;
+const CB_REQUEST_HEAP_FRAME = 0x01;
+const CB_SET_COMPUTE_UNIT_LIMIT = 0x02;
+const CB_SET_COMPUTE_UNIT_PRICE = 0x03;
+const CB_SET_LOADED_ACCOUNTS_DATA_SIZE_LIMIT = 0x04;
+const MAX_COMPUTE_UNIT_LIMIT = 1400000n;
+const MICRO_LAMPORTS_PER_LAMPORT = 1000000n;
+export const DEFAULT_MAX_PRIORITY_FEE_LAMPORTS = 100000n;
+export class FeePayerValidationError extends Error {
+    code = "fee_payer_validation";
+    constructor(message) {
+        super(message);
+        this.name = "FeePayerValidationError";
+    }
+}
+export function createFeePayerService(feePayer, config = {}) {
+    assertIsTransactionPartialSigner(feePayer);
+    const maxPriorityFeeLamports = config.maxPriorityFeeLamports ?? DEFAULT_MAX_PRIORITY_FEE_LAMPORTS;
+    return {
+        address: feePayer.address,
+        async signChargeTransaction(transactionBase64, authorize) {
+            let transaction;
+            try {
+                transaction = getTransactionDecoder().decode(base64ToBytes(transactionBase64));
+            }
+            catch (cause) {
+                throw new FeePayerValidationError(`transaction is not a valid Solana wire encoding: ${cause.message}`);
+            }
+            const summary = validateChargeTransaction(transaction, feePayer.address, {
+                maxPriorityFeeLamports,
+            });
+            if (authorize) {
+                await authorize(summary);
+            }
+            const [dictionary] = await feePayer.signTransactions([
+                transaction,
+            ]);
+            const signature = dictionary?.[feePayer.address];
+            if (!signature || signature.length !== 64) {
+                throw new FeePayerValidationError("fee payer signer did not return a 64-byte ed25519 signature");
+            }
+            return bytesToBase64(new Uint8Array(signature));
+        },
+    };
+}
+function computePriorityFeeLamports(computeBudgetData) {
+    let unitPrice = null;
+    let unitLimit = null;
+    for (const data of computeBudgetData) {
+        const discriminator = data[0];
+        const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+        switch (discriminator) {
+            case CB_SET_COMPUTE_UNIT_PRICE: {
+                if (unitPrice !== null) {
+                    throw new FeePayerValidationError("duplicate SetComputeUnitPrice instruction");
+                }
+                if (data.length < 9) {
+                    throw new FeePayerValidationError("malformed SetComputeUnitPrice instruction");
+                }
+                unitPrice = view.getBigUint64(1, true);
+                break;
+            }
+            case CB_SET_COMPUTE_UNIT_LIMIT: {
+                if (unitLimit !== null) {
+                    throw new FeePayerValidationError("duplicate SetComputeUnitLimit instruction");
+                }
+                if (data.length < 5) {
+                    throw new FeePayerValidationError("malformed SetComputeUnitLimit instruction");
+                }
+                unitLimit = BigInt(view.getUint32(1, true));
+                break;
+            }
+            case CB_REQUEST_HEAP_FRAME:
+            case CB_SET_LOADED_ACCOUNTS_DATA_SIZE_LIMIT:
+            case CB_REQUEST_UNITS_DEPRECATED:
+                break;
+            default:
+                throw new FeePayerValidationError(`unrecognized ComputeBudget instruction (discriminator ${discriminator})`);
+        }
+    }
+    if (unitPrice === null || unitPrice === 0n)
+        return 0n;
+    const limit = unitLimit ?? MAX_COMPUTE_UNIT_LIMIT;
+    return ((limit * unitPrice + MICRO_LAMPORTS_PER_LAMPORT - 1n) /
+        MICRO_LAMPORTS_PER_LAMPORT);
+}
+export function validateChargeTransaction(transaction, expectedFeePayer, options = {}) {
+    const maxPriorityFeeLamports = options.maxPriorityFeeLamports ?? DEFAULT_MAX_PRIORITY_FEE_LAMPORTS;
+    let compiled;
+    try {
+        compiled = getCompiledTransactionMessageDecoder().decode(transaction.messageBytes);
+    }
+    catch (cause) {
+        throw new FeePayerValidationError(`cannot decode transaction message: ${cause.message}`);
+    }
+    let message;
+    try {
+        message = decompileTransactionMessage(compiled);
+    }
+    catch (cause) {
+        throw new FeePayerValidationError(`cannot decompile transaction message: ${cause.message}`);
+    }
+    if (message.feePayer.address !== expectedFeePayer) {
+        throw new FeePayerValidationError(`fee payer is ${message.feePayer.address}, expected ${expectedFeePayer}`);
+    }
+    const instructions = message.instructions ?? [];
+    let transferCount = 0;
+    let secpCount = 0;
+    const merchants = [];
+    const computeBudgetData = [];
+    for (const instruction of instructions) {
+        const program = instruction.programAddress;
+        if (program === COMPUTE_BUDGET_PROGRAM_ADDRESS) {
+            const data = instruction.data;
+            if (!data || data.length === 0) {
+                throw new FeePayerValidationError("ComputeBudget instruction has no data");
+            }
+            computeBudgetData.push(new Uint8Array(data));
+            continue;
+        }
+        if (program === SECP256R1_PROGRAM_ADDRESS) {
+            secpCount += 1;
+            continue;
+        }
+        if (program === PHYGITAL_PAYMENT_PROGRAM_ADDRESS) {
+            let parsed;
+            try {
+                parsed = parseTransferInstruction(instruction);
+            }
+            catch (cause) {
+                throw new FeePayerValidationError(`payment-program instruction is not a transfer: ${cause.message}`);
+            }
+            if (parsed.accounts.rentPayer.address !== expectedFeePayer) {
+                throw new FeePayerValidationError(`transfer rentPayer is ${parsed.accounts.rentPayer.address}, expected ${expectedFeePayer}`);
+            }
+            merchants.push(parsed.accounts.merchant.address);
+            transferCount += 1;
+            continue;
+        }
+        throw new FeePayerValidationError(`disallowed program in charge transaction: ${program}`);
+    }
+    if (secpCount !== 1) {
+        throw new FeePayerValidationError(`expected exactly one secp256r1 verify instruction, found ${secpCount}`);
+    }
+    if (transferCount < 1 || transferCount > 4) {
+        throw new FeePayerValidationError(`expected between 1 and 4 transfer instructions, found ${transferCount}`);
+    }
+    const priorityFeeLamports = computePriorityFeeLamports(computeBudgetData);
+    if (priorityFeeLamports > maxPriorityFeeLamports) {
+        throw new FeePayerValidationError(`priority fee ${priorityFeeLamports} lamports exceeds the sponsor cap ${maxPriorityFeeLamports}`);
+    }
+    const signatureCount = numRequiredSignatures(compiled);
+    return { transferCount, merchants, signatureCount, priorityFeeLamports };
+}
+function numRequiredSignatures(compiled) {
+    const header = compiled
+        .header;
+    const n = header?.numSignerAccounts;
+    return typeof n === "number" && n > 0 ? n : 1;
+}
+//# sourceMappingURL=fee-payer.js.map

package/dist/server/fee-payer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-payer.js","sourceRoot":"","sources":["../../src/server/fee-payer.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,OAAO,EACP,gCAAgC,EAChC,2BAA2B,EAC3B,oCAAoC,EACpC,qBAAqB,GAKtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGhE,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAC9C,6CAA6C,CAC9C,CAAC;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAG,OAAO,CACnD,6CAA6C,CAC9C,CAAC;AAGF,MAAM,2BAA2B,GAAG,IAAI,CAAC;AACzC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAGpD,MAAM,sBAAsB,GAAG,QAAU,CAAC;AAE1C,MAAM,0BAA0B,GAAG,QAAU,CAAC;AAS9C,MAAM,CAAC,MAAM,iCAAiC,GAAG,OAAQ,CAAC;AAE1D,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AA4DD,MAAM,UAAU,qBAAqB,CACnC,QAA2B,EAC3B,SAAgC,EAAE;IAElC,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,sBAAsB,GAC1B,MAAM,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;IAErE,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QAEzB,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,SAAS;YACtD,IAAI,WAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,WAAW,GAAG,qBAAqB,EAAE,CAAC,MAAM,CAC1C,aAAa,CAAC,iBAAiB,CAAC,CAClB,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAuB,CAC/B,oDAAqD,KAAe,CAAC,OAAO,EAAE,CAC/E,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE;gBACvE,sBAAsB;aACvB,CAAC,CAAC;YAEH,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YAED,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC;gBACnD,WAAsE;aACvE,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC1C,MAAM,IAAI,uBAAuB,CAC/B,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,UAAU,CAAC,SAA2B,CAAC,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC;AASD,SAAS,0BAA0B,CACjC,iBAAwC;IAExC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC/B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,uBAAuB,CAC/B,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,uBAAuB,CAC/B,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACvC,MAAM;YACR,CAAC;YACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;gBAC/B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,uBAAuB,CAC/B,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,uBAAuB,CAC/B,2CAA2C,CAC5C,CAAC;gBACJ,CAAC;gBACD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5C,MAAM;YACR,CAAC;YACD,KAAK,qBAAqB,CAAC;YAC3B,KAAK,sCAAsC,CAAC;YAC5C,KAAK,2BAA2B;gBAC9B,MAAM;YACR;gBACE,MAAM,IAAI,uBAAuB,CAC/B,yDAAyD,aAAa,GAAG,CAC1E,CAAC;QACN,CAAC;IACH,CAAC;IAED,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,IAAI,sBAAsB,CAAC;IAElD,OAAO,CACL,CAAC,KAAK,GAAG,SAAS,GAAG,0BAA0B,GAAG,EAAE,CAAC;QACrD,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,yBAAyB,CACvC,WAAwB,EACxB,gBAAyB,EACzB,UAA+C,EAAE;IAEjD,MAAM,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;IAEtE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,oCAAoC,EAAE,CAAC,MAAM,CACtD,WAAW,CAAC,YAAY,CACzB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uBAAuB,CAC/B,sCAAuC,KAAe,CAAC,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,2BAA2B,CACnC,QAA6D,CAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,uBAAuB,CAC/B,yCAA0C,KAAe,CAAC,OAAO,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QAClD,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,OAAO,CAAC,QAAQ,CAAC,OAAO,cAAc,gBAAgB,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAChD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,SAAS,GAAc,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAiB,EAAE,CAAC;IAE3C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC;QAC3C,IAAI,OAAO,KAAK,8BAA8B,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,uBAAuB,CAC/B,uCAAuC,CACxC,CAAC;YACJ,CAAC;YAED,iBAAiB,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,yBAAyB,EAAE,CAAC;YAC1C,SAAS,IAAI,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,gCAAgC,EAAE,CAAC;YACjD,IAAI,MAAmD,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,GAAG,wBAAwB,CAC/B,WAA6D,CAC9D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAuB,CAC/B,kDAAmD,KAAe,CAAC,OAAO,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBAC3D,MAAM,IAAI,uBAAuB,CAC/B,yBAAyB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,cAAc,gBAAgB,EAAE,CAC3F,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjD,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,6CAA6C,OAAO,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAC/B,4DAA4D,SAAS,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,uBAAuB,CAC/B,yDAAyD,aAAa,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IAC1E,IAAI,mBAAmB,GAAG,sBAAsB,EAAE,CAAC;QACjD,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,mBAAmB,qCAAqC,sBAAsB,EAAE,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACvD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC;AAC3E,CAAC;AAGD,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,MAAM,MAAM,GAAI,QAAwD;SACrE,MAAM,CAAC;IACV,MAAM,CAAC,GAAG,MAAM,EAAE,iBAAiB,CAAC;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,14 @@
+export { createEnablerSigner, generateEnablerKeypair, verifyP256Signature, type EnablerSigner, } from "./enabler-signer.js";
+export { createEnablerService, tapFingerprint, type EnablerService, type EnablerServiceConfig, } from "./enabler-service.js";
+export { compressedP256ToCoseKey } from "./webauthn.js";
+export { createInMemoryReferenceStore, createInMemoryExposureStore, type CosignReplayEntry, type EnablerPolicy, type EnablerRequestContext, type ExposureStore, type ReplayStore, } from "./policy.js";
+export { createInMemoryPendingTapStore, type PendingTapStore, } from "./pending-taps.js";
+export { createProviderDeferredQueue, DEFAULT_PROVIDER_LEAD_TIME_SECS, type ProviderDeferredQueue, type ProviderDeferredQueueConfig, } from "./provider-deferred-queue.js";
+export { createInMemoryQueueStore, createQueueRunner, type QueuedItem, type QueueRunner, type QueueRunnerConfig, type QueueStore, } from "./queue.js";
+export { createFeePayerService, validateChargeTransaction, COMPUTE_BUDGET_PROGRAM_ADDRESS, SECP256R1_PROGRAM_ADDRESS, DEFAULT_MAX_PRIORITY_FEE_LAMPORTS, FeePayerValidationError, type FeePayerService, type FeePayerServiceConfig, type SponsoredChargeSummary, type SponsorshipAuthorizer, } from "./fee-payer.js";
+export { createInMemoryClosableStore, type ClosablePayment, type ClosablePaymentStore, } from "./closable-store.js";
+export { createInMemoryFeeBudgetStore, createSponsorshipBudgetAuthorizer, sponsoredCostByMerchant, creditReclaimedRent, BASE_FEE_LAMPORTS_PER_SIGNATURE, type FeeBudgetStore, type SponsoredCost, type SponsorshipCostOptions, } from "./fee-budget.js";
+export { createProviderRouter, type ProviderEndpoint, type ProviderRouterConfig, } from "./router.js";
+export { createKeeper, type Keeper, type KeeperConfig, } from "./keeper.js";
+export { applyEventToStore, createEventIndexer, createInMemoryIndexerStore, refreshIndexedPayment, type EventIndexer, type EventIndexerConfig, type IndexedPayment, type IndexerStore, type ReconcileInput, } from "./indexer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,6BAA6B,EAC7B,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,iCAAiC,EACjC,uBAAuB,EACvB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,KAAK,eAAe,EACpB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,EAC/B,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,sBAAsB,GAC5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,KAAK,MAAM,EACX,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,14 @@
+export { createEnablerSigner, generateEnablerKeypair, verifyP256Signature, } from "./enabler-signer.js";
+export { createEnablerService, tapFingerprint, } from "./enabler-service.js";
+export { compressedP256ToCoseKey } from "./webauthn.js";
+export { createInMemoryReferenceStore, createInMemoryExposureStore, } from "./policy.js";
+export { createInMemoryPendingTapStore, } from "./pending-taps.js";
+export { createProviderDeferredQueue, DEFAULT_PROVIDER_LEAD_TIME_SECS, } from "./provider-deferred-queue.js";
+export { createInMemoryQueueStore, createQueueRunner, } from "./queue.js";
+export { createFeePayerService, validateChargeTransaction, COMPUTE_BUDGET_PROGRAM_ADDRESS, SECP256R1_PROGRAM_ADDRESS, DEFAULT_MAX_PRIORITY_FEE_LAMPORTS, FeePayerValidationError, } from "./fee-payer.js";
+export { createInMemoryClosableStore, } from "./closable-store.js";
+export { createInMemoryFeeBudgetStore, createSponsorshipBudgetAuthorizer, sponsoredCostByMerchant, creditReclaimedRent, BASE_FEE_LAMPORTS_PER_SIGNATURE, } from "./fee-budget.js";
+export { createProviderRouter, } from "./router.js";
+export { createKeeper, } from "./keeper.js";
+export { applyEventToStore, createEventIndexer, createInMemoryIndexerStore, refreshIndexedPayment, } from "./indexer.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAM5B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,6BAA6B,GAE9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,2BAA2B,EAC3B,+BAA+B,GAGhC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,wBAAwB,EACxB,iBAAiB,GAKlB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,iCAAiC,EACjC,uBAAuB,GAKxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,GAG5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,GAIhC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,oBAAoB,GAGrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,GAGb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,GAMtB,MAAM,cAAc,CAAC"}