phygital-payment-sdk 0.1.0

package/dist/server/policy.d.ts

@@ -0,0 +1,46 @@
+import type { Address } from "@solana/kit";
+import type { Asset } from "phygital-token-sdk";
+import type { EnablerSignatureRequest, EnablerSignatureResponse } from "../core/provider-transport.js";
+export interface EnablerRequestContext {
+    request: EnablerSignatureRequest;
+    challenge: Uint8Array;
+    credentialPublicKey: Uint8Array;
+    asset: Asset;
+    amount: bigint;
+    reference: Uint8Array;
+}
+export interface CosignReplayEntry {
+    fingerprint: string;
+    response: EnablerSignatureResponse;
+}
+export interface EnablerPolicy {
+    maxAmountPerTap?: bigint;
+    allowedMints?: readonly Address[];
+    maxTapAgeSecs?: number;
+    allowFutureIssuedAtSecs?: number;
+    custom?(context: EnablerRequestContext): Promise<void> | void;
+}
+export interface ReplayStore {
+    getCosignReplay(referenceBase58: string): Promise<CosignReplayEntry | null | undefined> | CosignReplayEntry | null | undefined;
+    putCosignReplay(referenceBase58: string, entry: CosignReplayEntry): Promise<void> | void;
+}
+export interface ExposureReservation {
+    payer: Address;
+    mint: Address;
+    reference: string;
+    amount: bigint;
+    freeEscrow: bigint;
+    expiresAt: number;
+}
+export interface TryReserveResult {
+    reserved: boolean;
+    outstandingBefore: bigint;
+}
+export interface ExposureStore {
+    getOutstanding(payer: Address, mint: Address): Promise<bigint> | bigint;
+    tryReserve(entry: ExposureReservation): Promise<TryReserveResult> | TryReserveResult;
+    release(reference: string): Promise<void> | void;
+}
+export declare function createInMemoryReferenceStore(): ReplayStore;
+export declare function createInMemoryExposureStore(): ExposureStore;
+//# sourceMappingURL=policy.d.ts.map

package/dist/server/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/server/policy.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,uBAAuB,CAAC;IAEjC,SAAS,EAAE,UAAU,CAAC;IAEtB,mBAAmB,EAAE,UAAU,CAAC;IAEhC,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,UAAU,CAAC;CACvB;AAOD,MAAM,WAAW,iBAAiB;IAEhC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,wBAAwB,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAE5B,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,YAAY,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAElC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,MAAM,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D;AAQD,MAAM,WAAW,WAAW;IAE1B,eAAe,CACb,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,iBAAiB,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,CAAC;IAExF,eAAe,CACb,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACzB;AAGD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IAKf,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,EAAE,OAAO,CAAC;IAMlB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AASD,MAAM,WAAW,aAAa;IAE5B,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAWxE,UAAU,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAErF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClD;AAGD,wBAAgB,4BAA4B,IAAI,WAAW,CAQ1D;AASD,wBAAgB,2BAA2B,IAAI,aAAa,CAwC3D"}

package/dist/server/policy.js

@@ -0,0 +1,47 @@
+export function createInMemoryReferenceStore() {
+    const seen = new Map();
+    return {
+        getCosignReplay: (reference) => seen.get(reference) ?? null,
+        putCosignReplay: (reference, entry) => {
+            seen.set(reference, entry);
+        },
+    };
+}
+export function createInMemoryExposureStore() {
+    const byReference = new Map();
+    const prune = (now) => {
+        for (const [ref, e] of byReference) {
+            if (e.expiresAt <= now)
+                byReference.delete(ref);
+        }
+    };
+    const outstandingExcluding = (payer, mint, excludeReference) => {
+        let total = 0n;
+        for (const [ref, e] of byReference) {
+            if (ref === excludeReference)
+                continue;
+            if (e.payer === payer && e.mint === mint)
+                total += e.amount;
+        }
+        return total;
+    };
+    return {
+        getOutstanding(payer, mint) {
+            prune(Math.floor(Date.now() / 1000));
+            return outstandingExcluding(payer, mint);
+        },
+        tryReserve({ payer, mint, reference, amount, freeEscrow, expiresAt }) {
+            prune(Math.floor(Date.now() / 1000));
+            const outstandingBefore = outstandingExcluding(payer, mint, reference);
+            if (outstandingBefore + amount > freeEscrow) {
+                return { reserved: false, outstandingBefore };
+            }
+            byReference.set(reference, { payer, mint, amount, expiresAt });
+            return { reserved: true, outstandingBefore };
+        },
+        release(reference) {
+            byReference.delete(reference);
+        },
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/server/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/server/policy.ts"],"names":[],"mappings":"AAwHA,MAAM,UAAU,4BAA4B;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,OAAO;QACL,eAAe,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;QAC3D,eAAe,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,2BAA2B;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;gBAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,CAC3B,KAAc,EACd,IAAa,EACb,gBAAyB,EACjB,EAAE;QACV,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,GAAG,KAAK,gBAAgB;gBAAE,SAAS;YACvC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO;QACL,cAAc,CAAC,KAAK,EAAE,IAAI;YACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACrC,OAAO,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACrC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,iBAAiB,GAAG,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YAChD,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,SAAS;YACf,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/provider-deferred-queue.d.ts

@@ -0,0 +1,21 @@
+import type { Address, RpcSubscriptions, Signature, SolanaRpcSubscriptionsApi, TransactionSigner } from "@solana/kit";
+import type { SdkRpc } from "../core/payment.js";
+import type { PendingTapStore } from "./pending-taps.js";
+export declare const DEFAULT_PROVIDER_LEAD_TIME_SECS: number;
+export interface ProviderDeferredQueueConfig {
+    rpc: SdkRpc;
+    rpcSubscriptions: RpcSubscriptions<SolanaRpcSubscriptionsApi>;
+    store: PendingTapStore;
+    feePayer: TransactionSigner;
+    merchant?: Address;
+    maxTapsPerTx?: number;
+    leadTimeSecs?: number;
+    pollIntervalMs?: number;
+}
+export interface ProviderDeferredQueue {
+    tick(): Promise<Signature[]>;
+    start(): void;
+    stop(): void;
+}
+export declare function createProviderDeferredQueue(config: ProviderDeferredQueueConfig): ProviderDeferredQueue;
+//# sourceMappingURL=provider-deferred-queue.d.ts.map

package/dist/server/provider-deferred-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-deferred-queue.d.ts","sourceRoot":"","sources":["../../src/server/provider-deferred-queue.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,OAAO,EACP,gBAAgB,EAChB,SAAS,EACT,yBAAyB,EACzB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAYjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,eAAO,MAAM,+BAA+B,QAAU,CAAC;AAEvD,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;IAC9D,KAAK,EAAE,eAAe,CAAC;IAEvB,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IAKtB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IAEpC,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7B,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,2BAA2B,GAClC,qBAAqB,CAoEvB"}

package/dist/server/provider-deferred-queue.js

@@ -0,0 +1,69 @@
+import { fetchMaybePayment } from "../generated/accounts/payment.js";
+import { nowSeconds } from "../core/time.js";
+import { createTransactionRuntime } from "../core/transactions.js";
+import { packTapsForBatch, rebuildBatchInstructions, } from "../merchant/deferred-queue.js";
+import { deserializePendingTap, MAX_TAPS_PER_TX, } from "../merchant/deferred-store.js";
+export const DEFAULT_PROVIDER_LEAD_TIME_SECS = 15 * 60;
+export function createProviderDeferredQueue(config) {
+    const runtime = createTransactionRuntime(config);
+    const maxTaps = Math.min(config.maxTapsPerTx ?? MAX_TAPS_PER_TX, MAX_TAPS_PER_TX);
+    const leadTimeSecs = config.leadTimeSecs ?? DEFAULT_PROVIDER_LEAD_TIME_SECS;
+    let timer = null;
+    async function loadDue() {
+        const now = nowSeconds();
+        const wires = config.merchant
+            ? await config.store.listByMerchant(config.merchant)
+            : await config.store.listAll();
+        const due = [];
+        for (const wire of wires) {
+            if (wire.executeBy <= now) {
+                await config.store.acknowledge(wire.reference);
+                continue;
+            }
+            if (wire.executeBy > now + leadTimeSecs) {
+                continue;
+            }
+            const tap = deserializePendingTap(wire);
+            const onChain = await fetchMaybePayment(config.rpc, tap.payment);
+            if (onChain.exists) {
+                await config.store.acknowledge(tap.reference);
+                continue;
+            }
+            due.push(tap);
+        }
+        return due.sort((a, b) => a.executeBy - b.executeBy);
+    }
+    async function tick() {
+        const signatures = [];
+        for (;;) {
+            const due = await loadDue();
+            if (due.length === 0)
+                break;
+            const batch = await packTapsForBatch(due, config.feePayer, maxTaps);
+            if (batch.length === 0)
+                break;
+            const instructions = await rebuildBatchInstructions(batch, config.feePayer);
+            const signature = await runtime.sendAndConfirm(config.feePayer, instructions);
+            signatures.push(signature);
+            for (const tap of batch) {
+                await config.store.acknowledge(tap.reference);
+            }
+        }
+        return signatures;
+    }
+    return {
+        tick,
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => void tick().catch(() => { }), config.pollIntervalMs ?? 60_000);
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=provider-deferred-queue.js.map

package/dist/server/provider-deferred-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-deferred-queue.js","sourceRoot":"","sources":["../../src/server/provider-deferred-queue.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,qBAAqB,EACrB,eAAe,GAEhB,MAAM,+BAA+B,CAAC;AAIvC,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,CAAC;AA2BvD,MAAM,UAAU,2BAA2B,CACzC,MAAmC;IAEnC,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,eAAe,EAAE,eAAe,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,+BAA+B,CAAC;IAC5E,IAAI,KAAK,GAA0C,IAAI,CAAC;IAExD,KAAK,UAAU,OAAO;QACpB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ;YAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAEjC,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAE1B,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,YAAY,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAExC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAC5B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAC9B,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC9E,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,IAAI;QACJ,KAAK;YACH,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,WAAW,CACjB,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EACjC,MAAM,CAAC,cAAc,IAAI,MAAM,CAChC,CAAC;QACJ,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/queue.d.ts

@@ -0,0 +1,43 @@
+import type { RpcSubscriptions, Signature, SolanaRpcSubscriptionsApi, TransactionSigner } from "@solana/kit";
+import { type PhygitalPaymentSdkError } from "../core/errors.js";
+import { type WireInstruction } from "../core/instruction-codec.js";
+import type { SdkRpc } from "../core/payment.js";
+export interface QueuedItem {
+    id: string;
+    instructions: WireInstruction[];
+    executeBy: number;
+    enqueuedAt: number;
+    attempts: number;
+    reference?: string;
+}
+export interface QueueStore {
+    enqueue(item: Omit<QueuedItem, "id" | "attempts">): Promise<string>;
+    due(nowSecs: number, leadTimeSecs: number, limit: number): Promise<QueuedItem[]>;
+    markDone(id: string, signature: string): Promise<void>;
+    markFailed(id: string, error: string, retryable: boolean): Promise<void>;
+}
+export declare function createInMemoryQueueStore(): QueueStore & {
+    items(): QueuedItem[];
+};
+export interface QueueRunnerConfig {
+    rpc: SdkRpc;
+    rpcSubscriptions: RpcSubscriptions<SolanaRpcSubscriptionsApi>;
+    store: QueueStore;
+    feePayer: TransactionSigner;
+    leadTimeSecs?: number;
+    batchSize?: number;
+    maxAttempts?: number;
+    pollIntervalMs?: number;
+    onResult?: (result: {
+        item: QueuedItem;
+        signature?: Signature;
+        error?: PhygitalPaymentSdkError;
+    }) => void;
+}
+export interface QueueRunner {
+    tick(): Promise<number>;
+    start(): void;
+    stop(): void;
+}
+export declare function createQueueRunner(config: QueueRunnerConfig): QueueRunner;
+//# sourceMappingURL=queue.d.ts.map

package/dist/server/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../src/server/queue.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EACT,yBAAyB,EACzB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAqC,KAAK,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAIjD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,eAAe,EAAE,CAAC;IAEhC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IAKjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEpE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAGD,wBAAgB,wBAAwB,IAAI,UAAU,GAAG;IACvD,KAAK,IAAI,UAAU,EAAE,CAAC;CACvB,CA2CA;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;IAC9D,KAAK,EAAE,UAAU,CAAC;IAElB,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,UAAU,CAAC;QACjB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,KAAK,CAAC,EAAE,uBAAuB,CAAC;KACjC,KAAK,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAE1B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAgExE"}

package/dist/server/queue.js

@@ -0,0 +1,105 @@
+import { ProgramExecutionError, toSdkError } from "../core/errors.js";
+import { deserializeInstructions, } from "../core/instruction-codec.js";
+import { nowSeconds } from "../core/time.js";
+import { createTransactionRuntime } from "../core/transactions.js";
+export function createInMemoryQueueStore() {
+    const rows = new Map();
+    const byReference = new Map();
+    let nextId = 1;
+    return {
+        enqueue(item) {
+            if (item.reference) {
+                const existing = byReference.get(item.reference);
+                if (existing)
+                    return Promise.resolve(existing);
+            }
+            const id = `q_${nextId++}`;
+            rows.set(id, { ...item, id, attempts: 0, status: "pending" });
+            if (item.reference)
+                byReference.set(item.reference, id);
+            return Promise.resolve(id);
+        },
+        due(nowSecs, leadTimeSecs, limit) {
+            const ready = [...rows.values()]
+                .filter((row) => row.status === "pending" && row.executeBy <= nowSecs + leadTimeSecs)
+                .sort((a, b) => a.executeBy - b.executeBy)
+                .slice(0, limit);
+            return Promise.resolve(ready.map((row) => ({ ...row })));
+        },
+        markDone(id, signature) {
+            const row = rows.get(id);
+            if (row)
+                Object.assign(row, { status: "done", signature });
+            return Promise.resolve();
+        },
+        markFailed(id, error, retryable) {
+            const row = rows.get(id);
+            if (row) {
+                row.attempts += 1;
+                row.error = error;
+                if (!retryable)
+                    row.status = "failed";
+            }
+            return Promise.resolve();
+        },
+        items: () => [...rows.values()].map((row) => ({ ...row })),
+    };
+}
+export function createQueueRunner(config) {
+    const runtime = createTransactionRuntime(config);
+    const leadTime = config.leadTimeSecs ?? 300;
+    const batchSize = config.batchSize ?? 25;
+    const maxAttempts = config.maxAttempts ?? 5;
+    let timer = null;
+    let ticking = false;
+    async function executeItem(item) {
+        const now = nowSeconds();
+        if (now > item.executeBy) {
+            await config.store.markFailed(item.id, `deadline ${item.executeBy} passed at ${now}`, false);
+            return;
+        }
+        try {
+            const instructions = deserializeInstructions(item.instructions);
+            const signature = await runtime.sendAndConfirm(config.feePayer, instructions);
+            await config.store.markDone(item.id, signature);
+            config.onResult?.({ item, signature });
+        }
+        catch (error) {
+            const sdkError = toSdkError(error);
+            const retryable = !(sdkError instanceof ProgramExecutionError) &&
+                item.attempts + 1 < maxAttempts;
+            await config.store.markFailed(item.id, sdkError.message, retryable);
+            config.onResult?.({ item, error: sdkError });
+        }
+    }
+    async function tick() {
+        if (ticking)
+            return 0;
+        ticking = true;
+        try {
+            const due = await config.store.due(nowSeconds(), leadTime, batchSize);
+            for (const item of due) {
+                await executeItem(item);
+            }
+            return due.length;
+        }
+        finally {
+            ticking = false;
+        }
+    }
+    return {
+        tick,
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => void tick(), config.pollIntervalMs ?? 15_000);
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=queue.js.map

package/dist/server/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../src/server/queue.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAgC,MAAM,mBAAmB,CAAC;AACpG,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAyBnE,MAAM,UAAU,wBAAwB;IAQtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACL,OAAO,CAAC,IAAI;YACV,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,EAAE,GAAG,KAAK,MAAM,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI,CAAC,SAAS;gBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YAC9B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;iBAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,YAAY,CAAC;iBACpF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;iBACzC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,CAAC,EAAE,EAAE,SAAS;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,GAAG;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAClB,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;gBAClB,IAAI,CAAC,SAAS;oBAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;YACxC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AA6BD,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,GAA0C,IAAI,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,UAAU,WAAW,CAAC,IAAgB;QACzC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAC3B,IAAI,CAAC,EAAE,EACP,YAAY,IAAI,CAAC,SAAS,cAAc,GAAG,EAAE,EAC7C,KAAK,CACN,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAGhE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC9E,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAmB,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAGnC,MAAM,SAAS,GACb,CAAC,CAAC,QAAQ,YAAY,qBAAqB,CAAC;gBAC5C,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC;YAClC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,IAAI,OAAO;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YACtE,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,KAAK;YACH,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/router.d.ts

@@ -0,0 +1,21 @@
+import { base64UrlToBytes } from "../core/bytes.js";
+import type { TransferReceipt } from "../core/provider-transport.js";
+import type { EnablerService } from "./enabler-service.js";
+import { type FeePayerService, type SponsoredChargeSummary } from "./fee-payer.js";
+import type { PendingTapStore } from "./pending-taps.js";
+export type ProviderEndpoint = "getEnablerSignature" | "getFeePayer" | "signAsFeePayer" | "listPendingTaps" | "acknowledgePendingTap" | "persistTransferResult";
+export interface ProviderRouterConfig {
+    enabler: EnablerService;
+    feePayer?: FeePayerService;
+    pendingTaps?: PendingTapStore;
+    verifyApiKey: (apiKey: string | null, endpoint: ProviderEndpoint) => boolean | Promise<boolean>;
+    authorizeSponsorship?: (input: {
+        apiKey: string | null;
+        summary: SponsoredChargeSummary;
+    }) => boolean | Promise<boolean>;
+    onTransferResult?: (receipt: TransferReceipt) => void | Promise<void>;
+    basePath?: string;
+}
+export declare function createProviderRouter(config: ProviderRouterConfig): (request: Request) => Promise<Response>;
+export { base64UrlToBytes as decodeBase64Url };
+//# sourceMappingURL=router.d.ts.map

package/dist/server/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/server/router.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,uBAAuB,GACvB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IAKxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,WAAW,CAAC,EAAE,eAAe,CAAC;IAK9B,YAAY,EAAE,CACZ,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,QAAQ,EAAE,gBAAgB,KACvB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAQhC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,sBAAsB,CAAC;KACjC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAsBD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,oBAAoB,GAC3B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAwIzC;AAID,OAAO,EAAE,gBAAgB,IAAI,eAAe,EAAE,CAAC"}

package/dist/server/router.js

@@ -0,0 +1,137 @@
+import { base64UrlToBytes } from "../core/bytes.js";
+import { PolicyViolationError } from "../core/errors.js";
+import { FeePayerValidationError, } from "./fee-payer.js";
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "content-type": "application/json" },
+    });
+}
+function text(status, body) {
+    return new Response(body, { status });
+}
+const ENDPOINTS = new Set([
+    "getEnablerSignature",
+    "getFeePayer",
+    "signAsFeePayer",
+    "listPendingTaps",
+    "acknowledgePendingTap",
+    "persistTransferResult",
+]);
+export function createProviderRouter(config) {
+    const basePath = (config.basePath ?? "").replace(/\/$/, "");
+    return async function handle(request) {
+        const url = new URL(request.url);
+        if (!url.pathname.startsWith(`${basePath}/`)) {
+            return text(404, "not found");
+        }
+        const endpoint = url.pathname.slice(basePath.length + 1);
+        if (!ENDPOINTS.has(endpoint)) {
+            return text(404, "not found");
+        }
+        const knownEndpoint = endpoint;
+        if (request.method !== "POST") {
+            return text(405, "method not allowed");
+        }
+        const apiKey = request.headers.get("x-api-key");
+        const authorized = await config.verifyApiKey(apiKey, knownEndpoint);
+        if (!authorized) {
+            return text(401, "invalid api key");
+        }
+        let body;
+        try {
+            body = await request.json();
+        }
+        catch {
+            return text(400, "request body must be JSON");
+        }
+        try {
+            switch (knownEndpoint) {
+                case "getEnablerSignature": {
+                    const result = await config.enabler.validateAndSign(body);
+                    return json(200, result);
+                }
+                case "getFeePayer": {
+                    if (!config.feePayer) {
+                        return text(501, "fee-payer sponsorship is not enabled on this provider");
+                    }
+                    return json(200, { address: config.feePayer.address });
+                }
+                case "signAsFeePayer": {
+                    if (!config.feePayer) {
+                        return text(501, "fee-payer sponsorship is not enabled on this provider");
+                    }
+                    const submission = body;
+                    if (typeof submission.transaction !== "string") {
+                        return text(400, "expected { transaction: base64 wire transaction }");
+                    }
+                    const authorizeSponsorship = config.authorizeSponsorship;
+                    const signature = await config.feePayer.signChargeTransaction(submission.transaction, authorizeSponsorship
+                        ? async (summary) => {
+                            const ok = await authorizeSponsorship({ apiKey, summary });
+                            if (!ok) {
+                                throw new PolicyViolationError("sponsorship_refused", "fee-payer sponsorship refused for this caller");
+                            }
+                        }
+                        : undefined);
+                    return json(200, { signature });
+                }
+                case "listPendingTaps": {
+                    if (!config.pendingTaps) {
+                        return text(501, "pending-tap backup is not enabled on this provider");
+                    }
+                    const requestBody = body;
+                    if (typeof requestBody.merchant !== "string") {
+                        return text(400, "expected { merchant }");
+                    }
+                    const taps = await config.pendingTaps.listByMerchant(requestBody.merchant);
+                    return json(200, taps);
+                }
+                case "acknowledgePendingTap": {
+                    if (!config.pendingTaps) {
+                        return text(501, "pending-tap backup is not enabled on this provider");
+                    }
+                    const requestBody = body;
+                    if (typeof requestBody.reference !== "string" ||
+                        requestBody.reference.length === 0) {
+                        return text(400, "expected { reference }");
+                    }
+                    await config.pendingTaps.acknowledge(requestBody.reference);
+                    return text(200, "ok");
+                }
+                case "persistTransferResult": {
+                    const receipt = body;
+                    if (receipt.pendingTap && config.pendingTaps) {
+                        const tap = receipt.pendingTap;
+                        if (typeof tap.reference !== "string" ||
+                            tap.reference.length === 0 ||
+                            typeof tap.merchant !== "string") {
+                            return text(400, "pendingTap must include reference and merchant");
+                        }
+                        await config.pendingTaps.put(tap);
+                    }
+                    await config.onTransferResult?.(receipt);
+                    return text(200, "ok");
+                }
+            }
+        }
+        catch (error) {
+            if (error instanceof PolicyViolationError) {
+                return json(403, {
+                    error: error.code,
+                    rule: error.rule,
+                    detail: error.detail,
+                });
+            }
+            if (error instanceof FeePayerValidationError) {
+                return json(400, { error: error.code, detail: error.message });
+            }
+            return json(500, {
+                error: "internal_error",
+                detail: error.message,
+            });
+        }
+    };
+}
+export { base64UrlToBytes as decodeBase64Url };
+//# sourceMappingURL=router.js.map

package/dist/server/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/server/router.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,EACL,uBAAuB,GAGxB,MAAM,gBAAgB,CAAC;AA6CxB,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAY;IACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC;IAC7C,qBAAqB;IACrB,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAClC,MAA4B;IAE5B,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE5D,OAAO,KAAK,UAAU,MAAM,CAAC,OAAgB;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,aAAa,GAAG,QAA4B,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,aAAa,EAAE,CAAC;gBACtB,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CACjD,IAAwD,CACzD,CAAC;oBACF,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3B,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACrB,OAAO,IAAI,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;oBAC5E,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzD,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACrB,OAAO,IAAI,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;oBAC5E,CAAC;oBACD,MAAM,UAAU,GAAG,IAAgC,CAAC;oBACpD,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;wBAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;oBACxE,CAAC;oBACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAC;oBACzD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAC3D,UAAU,CAAC,WAAW,EACtB,oBAAoB;wBAClB,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;4BAChB,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;gCACR,MAAM,IAAI,oBAAoB,CAC5B,qBAAqB,EACrB,+CAA+C,CAChD,CAAC;4BACJ,CAAC;wBACH,CAAC;wBACH,CAAC,CAAC,SAAS,CACd,CAAC;oBACF,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClC,CAAC;gBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;wBACxB,OAAO,IAAI,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;oBACzE,CAAC;oBACD,MAAM,WAAW,GAAG,IAA8B,CAAC;oBACnD,IAAI,OAAO,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;oBAC5C,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAED,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;wBACxB,OAAO,IAAI,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;oBACzE,CAAC;oBACD,MAAM,WAAW,GAAG,IAA8B,CAAC;oBACnD,IACE,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ;wBACzC,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;wBACD,OAAO,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;oBAC7C,CAAC;oBACD,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAED,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAC7B,MAAM,OAAO,GAAG,IAAuB,CAAC;oBACxC,IAAI,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;wBAC/B,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;4BACjC,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;4BAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAChC,CAAC;4BACD,OAAO,IAAI,CACT,GAAG,EACH,gDAAgD,CACjD,CAAC;wBACJ,CAAC;wBACD,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACpC,CAAC;oBACD,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC;oBACzC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE;oBACf,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE;gBACf,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAG,KAAe,CAAC,OAAO;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAID,OAAO,EAAE,gBAAgB,IAAI,eAAe,EAAE,CAAC"}

package/dist/server/webauthn.d.ts

@@ -0,0 +1,2 @@
+export declare function compressedP256ToCoseKey(compressed: Uint8Array): Uint8Array;
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/server/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../src/server/webauthn.ts"],"names":[],"mappings":"AAWA,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAkB1E"}

package/dist/server/webauthn.js

@@ -0,0 +1,19 @@
+import { p256 } from "@noble/curves/nist.js";
+import { cose, isoCBOR } from "@simplewebauthn/server/helpers";
+import { ConfigurationError } from "../core/errors.js";
+export function compressedP256ToCoseKey(compressed) {
+    if (compressed.length !== 33 || (compressed[0] !== 0x02 && compressed[0] !== 0x03)) {
+        throw new ConfigurationError(`Expected a 33-byte compressed P-256 public key, got ${compressed.length} bytes (prefix=${compressed[0]})`);
+    }
+    const uncompressed = p256.Point.fromBytes(compressed).toBytes(false);
+    const x = uncompressed.subarray(1, 33);
+    const y = uncompressed.subarray(33, 65);
+    const coseKey = new Map();
+    coseKey.set(cose.COSEKEYS.kty, cose.COSEKTY.EC2);
+    coseKey.set(cose.COSEKEYS.alg, cose.COSEALG.ES256);
+    coseKey.set(cose.COSEKEYS.crv, cose.COSECRV.P256);
+    coseKey.set(cose.COSEKEYS.x, x);
+    coseKey.set(cose.COSEKEYS.y, y);
+    return isoCBOR.encode(coseKey);
+}
+//# sourceMappingURL=webauthn.js.map

package/dist/server/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../src/server/webauthn.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAKvD,MAAM,UAAU,uBAAuB,CAAC,UAAsB;IAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,kBAAkB,CAC1B,uDAAuD,UAAU,CAAC,MAAM,kBAAkB,UAAU,CAAC,CAAC,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}