satgate 1.5.1

package/dist/src/server.js

@@ -0,0 +1,239 @@
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { Hono } from 'hono';
+import { createTollBooth, createX402Rail, memoryStorage, sqliteStorage, } from '@thecryptodonkey/toll-booth';
+import { createHonoTollBooth } from '@thecryptodonkey/toll-booth/hono';
+import { createNoopLogger } from './logger.js';
+import { createAuthMiddleware } from './auth/middleware.js';
+import { createProxyHandler } from './proxy/handler.js';
+import { CapacityTracker } from './proxy/capacity.js';
+import { generateWellKnown } from './discovery/well-known.js';
+import { generateLlmsTxt } from './discovery/llms-txt.js';
+import { generateOpenApiSpec } from './discovery/openapi.js';
+import { createHttpFacilitator } from './x402/facilitator.js';
+/**
+ * Sanitise upstream /v1/models response — only forward id + object fields.
+ * Prevents leaking internal upstream metadata (e.g. paths, owners, permissions).
+ */
+function sanitiseModelsResponse(body) {
+    if (!body || typeof body !== 'object')
+        return { data: [] };
+    const raw = body.data;
+    if (!Array.isArray(raw))
+        return { data: [] };
+    const data = raw
+        .filter((m) => typeof m === 'object' && m !== null && typeof m.id === 'string')
+        .map(m => ({ id: m.id, object: 'model' }));
+    return { object: 'list', data };
+}
+export function createTokenTollServer(config) {
+    const logger = config.logger ?? createNoopLogger();
+    const app = new Hono();
+    const capacity = new CapacityTracker(config.capacity.maxConcurrent);
+    // Security headers on every response
+    app.use('*', async (c, next) => {
+        await next();
+        c.header('X-Content-Type-Options', 'nosniff');
+        c.header('X-Frame-Options', 'DENY');
+        c.header('Referrer-Policy', 'no-referrer');
+        c.header('X-Download-Options', 'noopen');
+        c.header('Strict-Transport-Security', 'max-age=63072000; includeSubDomains');
+    });
+    // Create storage
+    const storage = config.storage === 'sqlite'
+        ? sqliteStorage({ path: config.dbPath })
+        : memoryStorage();
+    // Build payment rails
+    const rails = [];
+    if (config.x402) {
+        const facilitator = config.x402.facilitatorUrl
+            ? createHttpFacilitator({
+                facilitatorUrl: config.x402.facilitatorUrl,
+                facilitatorKey: config.x402.facilitatorKey,
+            })
+            : undefined;
+        if (facilitator) {
+            rails.push(createX402Rail({
+                receiverAddress: config.x402.receiverAddress,
+                network: config.x402.network,
+                asset: config.x402.asset,
+                facilitator,
+                creditMode: config.x402.creditMode ?? true,
+                facilitatorUrl: config.x402.facilitatorUrl,
+                storage,
+            }));
+        }
+    }
+    // Dual-currency pricing entry
+    const pricingEntry = config.defaultPriceUsd !== undefined
+        ? { sats: config.estimatedCostSats, usd: config.defaultPriceUsd }
+        : config.estimatedCostSats;
+    // Create toll-booth engine
+    const engine = createTollBooth({
+        rootKey: config.rootKey,
+        storage,
+        upstream: config.upstream,
+        backend: config.backend,
+        pricing: {
+            '/v1/chat/completions': pricingEntry,
+            '/v1/completions': pricingEntry,
+            '/v1/embeddings': pricingEntry,
+        },
+        defaultInvoiceAmount: config.tiers[0]?.amountSats ?? 1000,
+        freeTier: config.freeTier.creditsPerDay > 0 ? { creditsPerDay: config.freeTier.creditsPerDay } : undefined,
+        ...(rails.length > 0 && { rails }),
+        serviceName: config.serviceName,
+        onPayment: (e) => logger.payment(e),
+        onRequest: (e) => logger.request(e),
+        onChallenge: (e) => logger.challenge(e),
+    });
+    // Create Hono toll-booth adapter
+    const tollBooth = createHonoTollBooth({ engine });
+    // Mount payment routes
+    const paymentApp = tollBooth.createPaymentApp({
+        storage,
+        rootKey: config.rootKey,
+        tiers: config.tiers,
+        defaultAmount: config.tiers[0]?.amountSats ?? 1000,
+        backend: config.backend,
+        serviceName: config.serviceName,
+    });
+    app.route('/', paymentApp);
+    // Discoverability endpoints (no auth required)
+    const models = config.models ?? [];
+    const paymentMethods = ['lightning', 'cashu'];
+    if (config.x402)
+        paymentMethods.push('x402');
+    app.get('/.well-known/l402', (c) => {
+        return c.json(generateWellKnown({
+            pricing: config.pricing,
+            models,
+            tiers: config.tiers,
+            paymentMethods,
+            freeTier: config.freeTier,
+            x402: config.x402,
+        }));
+    });
+    app.get('/llms.txt', (c) => {
+        return c.text(generateLlmsTxt({
+            pricing: config.pricing,
+            models,
+            ...(config.x402 && { x402: { network: config.x402.network } }),
+        }));
+    });
+    app.get('/openapi.json', (c) => {
+        return c.json(generateOpenApiSpec({
+            models,
+            pricing: config.pricing,
+            x402: !!config.x402,
+        }));
+    });
+    // Health check
+    app.get('/health', (c) => {
+        return c.json({
+            status: 'ok',
+            models,
+            activeRequests: capacity.active,
+            maxConcurrent: capacity.maxConcurrent,
+        });
+    });
+    // Landing page — try two locations:
+    // 1. Dev (tsx): __dirname is src/, so ../src/page/index.html → src/page/index.html
+    // 2. Docker (compiled): __dirname is dist/src/, so ../page/index.html → dist/page/index.html
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    const landingPagePaths = [
+        join(__dirname, '..', 'src', 'page', 'index.html'),
+        join(__dirname, '..', 'page', 'index.html'),
+    ];
+    let landingPageHtml;
+    for (const p of landingPagePaths) {
+        try {
+            landingPageHtml = readFileSync(p, 'utf-8');
+            break;
+        }
+        catch {
+            // Try next path
+        }
+    }
+    if (landingPageHtml) {
+        const html = landingPageHtml;
+        app.get('/', (c) => c.html(html));
+    }
+    // /v1/models passes through without auth — cached for 60s to prevent upstream amplification
+    let modelsCache;
+    app.get('/v1/models', async (c) => {
+        if (modelsCache && Date.now() < modelsCache.expires) {
+            return c.json(modelsCache.data);
+        }
+        try {
+            const res = await fetch(`${config.upstream}/v1/models`, {
+                signal: AbortSignal.timeout(10_000),
+            });
+            const body = await res.json();
+            // Sanitise upstream response — only forward model IDs, not arbitrary fields
+            const sanitised = sanitiseModelsResponse(body);
+            modelsCache = { data: sanitised, expires: Date.now() + 60_000 };
+            return c.json(sanitised);
+        }
+        catch {
+            return c.json({ data: [] });
+        }
+    });
+    // AI proxy routes (behind auth middleware)
+    const proxyHandler = createProxyHandler({
+        upstream: config.upstream,
+        pricing: config.pricing,
+        capacity,
+        reconcile: (paymentHash, actualCost) => engine.reconcile(paymentHash, actualCost),
+        maxBodySize: config.maxBodySize,
+        flatPricing: config.flatPricing,
+        logger,
+    });
+    if (config.authMode === 'lightning') {
+        app.use('/v1/*', tollBooth.authMiddleware);
+    }
+    else {
+        const authMiddleware = createAuthMiddleware({
+            authMode: config.authMode,
+            allowlist: config.allowlist,
+        });
+        app.use('/v1/*', authMiddleware);
+    }
+    // Forward toll-booth credit/free-tier context as response headers.
+    // Must run AFTER next() so c.header() applies to the actual response.
+    app.use('/v1/*', async (c, next) => {
+        await next();
+        const creditBalance = c.get('tollBoothCreditBalance');
+        if (creditBalance !== undefined) {
+            c.header('X-Credit-Balance', String(creditBalance));
+        }
+        const estimatedCost = c.get('tollBoothEstimatedCost');
+        if (estimatedCost !== undefined) {
+            c.header('X-Estimated-Cost', String(estimatedCost));
+        }
+        const freeRemaining = c.get('tollBoothFreeRemaining');
+        if (freeRemaining !== undefined) {
+            c.header('X-Free-Remaining', String(freeRemaining));
+        }
+    });
+    app.post('/v1/chat/completions', async (c) => {
+        const paymentHash = config.authMode === 'lightning' ? c.get('tollBoothPaymentHash') : undefined;
+        return proxyHandler(c.req.raw, paymentHash);
+    });
+    app.post('/v1/completions', async (c) => {
+        const paymentHash = config.authMode === 'lightning' ? c.get('tollBoothPaymentHash') : undefined;
+        return proxyHandler(c.req.raw, paymentHash);
+    });
+    app.post('/v1/embeddings', async (c) => {
+        const paymentHash = config.authMode === 'lightning' ? c.get('tollBoothPaymentHash') : undefined;
+        return proxyHandler(c.req.raw, paymentHash);
+    });
+    return {
+        app,
+        close: () => {
+            // Cleanup if needed
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,GACd,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAGtE,OAAO,EAAE,gBAAgB,EAAe,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAO7D;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAA6B;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IAC5C,MAAM,IAAI,GAAG,GAAG;SACb,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;SAC5G,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAA;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAgB,CAAA;IACpC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAA;IAEnE,qCAAqC;IACrC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,IAAI,EAAE,CAAA;QACZ,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAC7C,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;QACnC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;QAC1C,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QACxC,CAAC,CAAC,MAAM,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,iBAAiB;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ;QACzC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACxC,CAAC,CAAC,aAAa,EAAE,CAAA;IAEnB,sBAAsB;IACtB,MAAM,KAAK,GAAkB,EAAE,CAAA;IAE/B,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc;YAC5C,CAAC,CAAC,qBAAqB,CAAC;gBACpB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;gBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;aAC3C,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;gBACxB,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;gBAC5C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,WAAW;gBACX,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI;gBAC1C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;gBAC1C,OAAO;aACR,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,KAAK,SAAS;QACvD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,eAAe,EAAE;QACjE,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAE5B,2BAA2B;IAC3B,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO;QACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE;YACP,sBAAsB,EAAE,YAAY;YACpC,iBAAiB,EAAE,YAAY;YAC/B,gBAAgB,EAAE,YAAY;SAC/B;QACD,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI;QACzD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS;QAC1G,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAClC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;KACxC,CAAC,CAAA;IAEF,iCAAiC;IACjC,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAEjD,uBAAuB;IACvB,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAAC;QAC5C,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI;QAClD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAA;IACF,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAE1B,+CAA+C;IAC/C,MAAM,MAAM,GAAa,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IAE5C,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM,CAAC,IAAI;QAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAE5C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;SAC/D,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAChC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;SACpB,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,oCAAoC;IACpC,mFAAmF;IACnF,6FAA6F;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACzD,MAAM,gBAAgB,GAAG;QACvB,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC;KAC5C,CAAA;IACD,IAAI,eAAmC,CAAA;IACvC,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,eAAe,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YAC1C,MAAK;QACP,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,eAAe,CAAA;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,4FAA4F;IAC5F,IAAI,WAA2E,CAAA;IAC/E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,YAAY,EAAE;gBACtD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;YACxD,4EAA4E;YAC5E,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;YAC9C,WAAW,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,2CAA2C;IAC3C,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ;QACR,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC;QACjF,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM;KACP,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,cAAc,CAAC,CAAA;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,GAAG,oBAAoB,CAAC;YAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAA;QACF,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAClC,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAwB,EAAE,IAAI,EAAE,EAAE;QACxD,MAAM,IAAI,EAAE,CAAA;QACZ,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QACrD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAwB,EAAE,EAAE;QAClE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAwB,EAAE,EAAE;QAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAwB,EAAE,EAAE;QAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/F,OAAO,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,GAAG;QACH,KAAK,EAAE,GAAG,EAAE;YACV,oBAAoB;QACtB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/tunnel.d.ts

@@ -0,0 +1,26 @@
+import { type ChildProcess } from 'node:child_process';
+/**
+ * Check if cloudflared is available on PATH.
+ * Returns the path to the binary, or null if not found.
+ * Note: uses `which` — works on macOS/Linux, not Windows.
+ */
+export declare function findCloudflared(): string | null;
+/**
+ * Parse the tunnel URL from cloudflared's stderr output.
+ */
+export declare function parseTunnelUrl(output: string): string | undefined;
+export interface TunnelResult {
+    url?: string;
+    process?: ChildProcess;
+    error?: string;
+}
+/**
+ * Start a Cloudflare Tunnel pointing at the given local port.
+ * Resolves when the tunnel URL is available or after a 10s timeout.
+ */
+export declare function startTunnel(port: number): Promise<TunnelResult>;
+/**
+ * Gracefully stop the tunnel process.
+ */
+export declare function stopTunnel(child: ChildProcess): void;
+//# sourceMappingURL=tunnel.d.ts.map

package/dist/src/tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAE3E;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAO/C;AAID;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA4C/D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAIpD"}

package/dist/src/tunnel.js

@@ -0,0 +1,78 @@
+import { spawn, execFileSync } from 'node:child_process';
+/**
+ * Check if cloudflared is available on PATH.
+ * Returns the path to the binary, or null if not found.
+ * Note: uses `which` — works on macOS/Linux, not Windows.
+ */
+export function findCloudflared() {
+    try {
+        const result = execFileSync('which', ['cloudflared'], { encoding: 'utf-8', timeout: 5000 });
+        return result.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+const TUNNEL_URL_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/;
+/**
+ * Parse the tunnel URL from cloudflared's stderr output.
+ */
+export function parseTunnelUrl(output) {
+    const match = output.match(TUNNEL_URL_RE);
+    return match?.[0];
+}
+/**
+ * Start a Cloudflare Tunnel pointing at the given local port.
+ * Resolves when the tunnel URL is available or after a 10s timeout.
+ */
+export function startTunnel(port) {
+    const cloudflaredPath = findCloudflared();
+    if (!cloudflaredPath) {
+        return Promise.resolve({
+            error: 'cloudflared not found. Install: brew install cloudflared',
+        });
+    }
+    return new Promise((resolve) => {
+        const child = spawn(cloudflaredPath, ['tunnel', '--url', `http://localhost:${port}`], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stderr = '';
+        const MAX_STDERR = 64 * 1024; // 64 KiB cap to prevent unbounded memory growth
+        const timeout = setTimeout(() => {
+            if (!child.killed)
+                child.kill('SIGTERM');
+            resolve({ error: 'Tunnel startup timed out (10s)' });
+        }, 10_000);
+        child.stderr?.on('data', (chunk) => {
+            if (stderr.length < MAX_STDERR) {
+                stderr += chunk.toString();
+                if (stderr.length > MAX_STDERR)
+                    stderr = stderr.slice(0, MAX_STDERR);
+            }
+            const url = parseTunnelUrl(stderr);
+            if (url) {
+                clearTimeout(timeout);
+                resolve({ url, process: child });
+            }
+        });
+        child.on('error', (err) => {
+            clearTimeout(timeout);
+            resolve({ error: `Failed to start cloudflared: ${err.message}` });
+        });
+        child.on('exit', (code) => {
+            clearTimeout(timeout);
+            if (code !== null && code !== 0) {
+                resolve({ error: `cloudflared exited with code ${code}` });
+            }
+        });
+    });
+}
+/**
+ * Gracefully stop the tunnel process.
+ */
+export function stopTunnel(child) {
+    if (!child.killed) {
+        child.kill('SIGTERM');
+    }
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/src/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAA;AAE3E;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3F,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,0CAA0C,CAAA;AAEhE;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACzC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,eAAe,GAAG,eAAe,EAAE,CAAA;IACzC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,KAAK,EAAE,0DAA0D;SAClE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC,EAAE;YACpF,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QAEF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,gDAAgD;QAC7E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACxC,OAAO,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAA;QACtD,CAAC,EAAE,MAAM,CAAC,CAAA;QAEV,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;gBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;oBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;YAClC,IAAI,GAAG,EAAE,CAAC;gBACR,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,OAAO,CAAC,EAAE,KAAK,EAAE,gCAAgC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,EAAE,KAAK,EAAE,gCAAgC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAmB;IAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;AACH,CAAC"}

package/dist/src/x402/facilitator.d.ts

@@ -0,0 +1,7 @@
+import type { X402Facilitator } from '@thecryptodonkey/toll-booth';
+export interface HttpFacilitatorConfig {
+    facilitatorUrl: string;
+    facilitatorKey?: string;
+}
+export declare function createHttpFacilitator(config: HttpFacilitatorConfig): X402Facilitator;
+//# sourceMappingURL=facilitator.d.ts.map

package/dist/src/x402/facilitator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facilitator.d.ts","sourceRoot":"","sources":["../../../src/x402/facilitator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAiC,MAAM,6BAA6B,CAAA;AAEjG,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAkCpF"}

package/dist/src/x402/facilitator.js

@@ -0,0 +1,33 @@
+export function createHttpFacilitator(config) {
+    return {
+        async verify(payload) {
+            const headers = {
+                'Content-Type': 'application/json',
+            };
+            if (config.facilitatorKey) {
+                headers['Authorization'] = `Bearer ${config.facilitatorKey}`;
+            }
+            const res = await fetch(config.facilitatorUrl, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (!res.ok) {
+                return { valid: false, txHash: '', amount: 0, sender: '' };
+            }
+            const result = await res.json();
+            // Validate response shape — don't trust arbitrary JSON from external facilitator
+            if (typeof result !== 'object' || result === null) {
+                return { valid: false, txHash: '', amount: 0, sender: '' };
+            }
+            return {
+                valid: result.valid === true,
+                txHash: typeof result.txHash === 'string' ? result.txHash : '',
+                amount: typeof result.amount === 'number' ? result.amount : 0,
+                sender: typeof result.sender === 'string' ? result.sender : '',
+            };
+        },
+    };
+}
+//# sourceMappingURL=facilitator.js.map

package/dist/src/x402/facilitator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facilitator.js","sourceRoot":"","sources":["../../../src/x402/facilitator.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAoB;YAC/B,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,kBAAkB;aACnC,CAAA;YACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,cAAc,EAAE,CAAA;YAC9D,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YAC5D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;YAC1D,iFAAiF;YACjF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YAC5D,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI;gBAC5B,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC9D,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC7D,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;aAC/D,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "satgate",
+  "version": "1.5.1",
+  "description": "Lightning-paid AI inference - monetise any OpenAI-compatible endpoint in 30 seconds",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "satgate": "./dist/bin/satgate.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "dev": "tsx src/cli.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.0.0",
+    "@noble/curves": "^2.0.1",
+    "@scure/base": "^2.0.0",
+    "@thecryptodonkey/toll-booth": "^2.0.0",
+    "hono": "^4.0.0",
+    "js-yaml": "^4.1.1"
+  },
+  "devDependencies": {
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^25.5.0",
+    "bolt11": "^1.4.1",
+    "l402-mcp": "file:../l402-mcp",
+    "semantic-release": "^25.0.3",
+    "tsx": "^4.0.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.1.0"
+  },
+  "keywords": [
+    "lightning",
+    "l402",
+    "ai",
+    "inference",
+    "llm",
+    "bitcoin",
+    "payments"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TheCryptoDonkey/satgate"
+  },
+  "homepage": "https://github.com/TheCryptoDonkey/satgate",
+  "author": "TheCryptoDonkey",
+  "bugs": {
+    "url": "https://github.com/TheCryptoDonkey/satgate/issues"
+  }
+}