thunder-bridge 0.8.1 → 0.8.2

package/dist/index.d.cts

@@ -118,9 +118,12 @@ interface CreateOptions {
     idempotencyKey?: string;
     /**
      * Groups this payment with every other one carrying the same secret, so
-     * `followTrigger` can watch the place rather than the payment. Only its
-     * sha256 reaches the gateway, and the secret itself is what authorises the
-     * stream, so keep it apart from any URL a payer sees
+     * `followTrigger` can watch the place rather than the payment. Registering
+     * sends only its sha256, which is also all the gateway stores, so a stolen
+     * ledger cannot subscribe. Following sends the secret itself, because the
+     * gateway hashes what it is given to find the stream, so the operator of a
+     * gateway you do not own learns it the first time you connect. Keep it apart
+     * from any URL a payer sees
      */
     trigger?: string;
 }
@@ -151,6 +154,7 @@ declare class ThunderBridge {
     private readonly baseUrl;
     private readonly verify;
     private readonly token;
+    private strangers;
     constructor(baseUrl: string, options?: ThunderBridgeOptions);
     /**
      * Whether a token was given, which is what makes an instance yours: a gateway
@@ -158,6 +162,16 @@ declare class ThunderBridge {
      * stays between you and it
      */
     get isPrivate(): boolean;
+    /**
+     * Whether the gateway turns away a caller carrying no token, asked by making
+     * one unauthenticated read it would have to refuse. `isPrivate` answers only
+     * whether you configured a token, which is your side of the arrangement and
+     * says nothing about the gateway's, so a made-up token against a public
+     * instance reads as private and is not. Asked once and remembered, because an
+     * instance does not change its mind. Anything other than a refusal counts as
+     * open, so an unreachable gateway fails closed
+     */
+    refusesStrangers(): Promise<boolean>;
     /**
      * Ask the gateway for an invoice payable to the first address on your list
      * that can issue a provable one, throws `NoWalletAvailableError` when none can
@@ -330,6 +344,11 @@ interface Credit {
     currency: string;
     /** Whatever the payer wrote, wherever this bank puts it. Matching is a substring, so noise around it is fine */
     reference: string;
+    /**
+     * Unix seconds. A bank that books a day rather than an instant, as Fio does,
+     * gives the day's midnight in its own zone, so rendering this in UTC can show
+     * the day before. Nothing here matches on it, it is yours to read
+     */
     bookedAt: number;
 }
 /**
@@ -464,11 +483,119 @@ interface FioConfig {
  *
  * Every field on a Fio transaction is optional and arrives as `null` when it is
  * absent, the amount carries its direction in its sign rather than in a flag,
- * and the date is unix milliseconds. This reads all three the way the bank
- * documents them and treats a missing field as absent rather than guessing.
+ * and the date is a day and a UTC offset, `2026-07-15+0200`. This reads all
+ * three the way the bank answers them and treats a missing field as absent
+ * rather than guessing.
  */
 declare function fioStatement(config: FioConfig): Statement;
 
+/** What a shop knows about a sale before any rail exists */
+interface Order {
+    /** The bank matches it on the statement, and Lightning keys idempotency on it */
+    reference: string;
+    /** The price in the smallest unit of `currency`, so 48055 is 480.55 CZK */
+    amountMinor: number;
+    /** ISO 4217. The bank rail moves this, Lightning reads it only through your own `amountMsat` */
+    currency: string;
+}
+/** One way to pay one order, already registered with the gateway */
+interface Leg {
+    /** The watched payment's id, which is what `firstToSettle`, `getWatched` and `waitForWatched` take */
+    id: string;
+    /** Which rail made it, so a shop can label a leg without knowing how it was built */
+    rail: string;
+    /** What the payer reads, a BOLT11 invoice or a Short Payment Descriptor */
+    scan: string;
+    /** The same thing as a QR has to encode it, which is not always `scan` itself */
+    qr: string;
+    expiresAt: number;
+}
+/**
+ * A payment method. Everything that differs between rails is bound once when the
+ * rail is built, so the only thing passed per sale is which sale it is
+ */
+type Rail = (order: Order) => Promise<Leg>;
+interface BankRailConfig {
+    /** The gateway that will watch these transfers. It has to be one of your own */
+    gateway: ThunderBridge;
+    /** Long lived and server side. Every preimage is derived from it, so losing it loses every proof */
+    secret: string;
+    /** The account the money goes to, as an IBAN */
+    iban: string;
+    /** Where `bankVerifyEndpoint` is mounted, a public https URL with no query of its own */
+    verifyUrl: string;
+    /**
+     * When this order stops being payable, in unix seconds. Re-offering one order
+     * has to return the same second every time, because the gateway compares the
+     * expiry to decide whether a repeated watch is the same watch
+     */
+    expiresAt: (order: Order) => number;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /** Handed back untouched on that stream. Stable across re-offers, for the reason `expiresAt` is */
+    sealed?: (order: Order) => string | Promise<string>;
+    /** Up to ten digits, for accounting systems that still want one */
+    variableSymbol?: (order: Order) => string | undefined;
+    /** Register on a gateway you do not own anyway, on the terms `bankTransfer` sets out */
+    allowPublicGateway?: boolean;
+    /** What `Leg.rail` reads, for a shop running more than one account */
+    name?: string;
+}
+interface LightningRailConfig {
+    /** The gateway that mints the invoice */
+    gateway: ThunderBridge;
+    /** Priority list, the gateway takes the first that can issue a provable invoice */
+    lnAddresses: string[];
+    /** What this order costs in millisatoshi. A shop pricing in fiat writes `msatFor` and its own ticker */
+    amountMsat: (order: Order) => number | Promise<number>;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /**
+     * Makes the mint safe to retry. Unset nothing is sent, because a key stable
+     * across re-offers is one the gateway can join against the bank leg's reference
+     */
+    idempotencyKey?: (order: Order) => string | undefined;
+    webhookUrl?: string;
+    webhookSecret?: string;
+    /** What `Leg.rail` reads, for a shop running more than one wallet */
+    name?: string;
+}
+interface BlindLightningRailConfig {
+    /** The gateway that watches an invoice it was never allowed to mint */
+    gateway: ThunderBridge;
+    /** Priority list, resolved here rather than by the gateway */
+    lnAddresses: string[];
+    /** What this order costs in millisatoshi */
+    amountMsat: (order: Order) => number | Promise<number>;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /** Only a watched leg has anywhere to carry this */
+    sealed?: (order: Order) => string | Promise<string>;
+    /** What `Leg.rail` reads, for a shop running more than one wallet */
+    name?: string;
+}
+/**
+ * Sell for a bank transfer. The money moves straight to your account and the
+ * gateway is told a hash, a URL and an expiry, never the amount or the reference.
+ *
+ * Which bank is read back is `bankVerifyEndpoint`'s business, not this one's, so
+ * a rail built here serves Fio and anything else behind a `Statement`.
+ */
+declare function bankRail(config: BankRailConfig): Rail;
+/**
+ * Sell for Lightning, with the gateway minting the invoice. It is told the
+ * address list and the amount, which is the round trip `blindLightningRail`
+ * spends to avoid.
+ */
+declare function lightningRail(config: LightningRailConfig): Rail;
+/**
+ * Sell for Lightning, resolving the address here and handing the gateway only a
+ * hash and a URL to poll. It costs one more round trip and the gateway learns
+ * neither who is being paid nor how much, so the only refusal left to it is
+ * refusing everyone.
+ */
+declare function blindLightningRail(config: BlindLightningRailConfig): Rail;
+
 /**
  * How many minor units of `currency` one bitcoin costs at one venue, so 134883815
  * is 1,348,838.15 CZK. Throws when that venue does not quote that currency, which
@@ -615,6 +742,14 @@ declare function lnurlToDataUrl(endpoint: string, options?: QrOptions): string;
 declare function spdToSvg(spd: string, options?: QrOptions): string;
 /** SVG data URL of the bank transfer's QR, for an `<img>` `src` */
 declare function spdToDataUrl(spd: string, options?: QrOptions): string;
+/**
+ * Render any rail's `Leg.qr` as an SVG QR code. Each rail states its own payload,
+ * a BOLT11 invoice under the `LIGHTNING` scheme or a Short Payment Descriptor as
+ * it stands, so this draws a leg without being told which rail made it
+ */
+declare function qrToSvg(payload: string, options?: QrOptions): string;
+/** SVG data URL of a leg's QR, for an `<img>` `src` */
+declare function qrToDataUrl(payload: string, options?: QrOptions): string;
 
 /**
  * Bech32-encode a pay endpoint as the `LNURL1` string LUD-01 defines, uppercase
@@ -675,14 +810,7 @@ declare class ProblemError extends Error {
         detail?: string;
     });
 }
-/**
- * Whether a problem document carries this type, accepting the namespace this
- * project used before `direct` left its name.
- *
- * A problem type is an identifier clients branch on, so renaming one is a breaking
- * change. The gateway emits only the new spelling, and this reads both, so a client
- * that has been updated still types the errors of an instance that has not
- */
+/** Whether a problem document carries this type */
 declare function isProblemType(problem: {
     type?: string;
 }, type: string): boolean;
@@ -720,4 +848,4 @@ declare class NoWalletAvailableError extends ProblemError {
     }, wallets: WalletFailure[]);
 }
 
-export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, type CreateOptions, type CreatePaymentParams, type CreateQuoteParams, type Credit, type FioConfig, type FollowOptions, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, type Minted, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, type Payment, type PaymentStatus, ProblemError, type QrOptions, type Quote, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type ThunderBridgeOptions, type Ticker, type TriggerConfig, type TriggerEvent, UnverifiedRecipientError, type WaitOptions, type WalletFailure, type WalletReason, type WatchPaymentParams, type WebhookOptions, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlPayEndpoint, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };
+export { type BankRailConfig, type BankTransfer, type BankTransferParams, type BankVerifyConfig, type BlindLightningRailConfig, type CreateOptions, type CreatePaymentParams, type CreateQuoteParams, type Credit, type FioConfig, type FollowOptions, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type Leg, type LightningRailConfig, type MedianOptions, type Minted, NO_WALLET_AVAILABLE, NoWalletAvailableError, type Order, PAYMENT_ALREADY_WATCHED, type Payment, type PaymentStatus, ProblemError, type QrOptions, type Quote, REQUEST_IN_FLIGHT, type Rail, type Statement, ThunderBridge, type ThunderBridgeOptions, type Ticker, type TriggerConfig, type TriggerEvent, UnverifiedRecipientError, type WaitOptions, type WalletFailure, type WalletReason, type WatchPaymentParams, type WebhookOptions, bankRail, bankTransfer, bankVerifyEndpoint, bitstamp, blindLightningRail, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lightningRail, lnurlPayEndpoint, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };

package/dist/index.d.ts

@@ -118,9 +118,12 @@ interface CreateOptions {
     idempotencyKey?: string;
     /**
      * Groups this payment with every other one carrying the same secret, so
-     * `followTrigger` can watch the place rather than the payment. Only its
-     * sha256 reaches the gateway, and the secret itself is what authorises the
-     * stream, so keep it apart from any URL a payer sees
+     * `followTrigger` can watch the place rather than the payment. Registering
+     * sends only its sha256, which is also all the gateway stores, so a stolen
+     * ledger cannot subscribe. Following sends the secret itself, because the
+     * gateway hashes what it is given to find the stream, so the operator of a
+     * gateway you do not own learns it the first time you connect. Keep it apart
+     * from any URL a payer sees
      */
     trigger?: string;
 }
@@ -151,6 +154,7 @@ declare class ThunderBridge {
     private readonly baseUrl;
     private readonly verify;
     private readonly token;
+    private strangers;
     constructor(baseUrl: string, options?: ThunderBridgeOptions);
     /**
      * Whether a token was given, which is what makes an instance yours: a gateway
@@ -158,6 +162,16 @@ declare class ThunderBridge {
      * stays between you and it
      */
     get isPrivate(): boolean;
+    /**
+     * Whether the gateway turns away a caller carrying no token, asked by making
+     * one unauthenticated read it would have to refuse. `isPrivate` answers only
+     * whether you configured a token, which is your side of the arrangement and
+     * says nothing about the gateway's, so a made-up token against a public
+     * instance reads as private and is not. Asked once and remembered, because an
+     * instance does not change its mind. Anything other than a refusal counts as
+     * open, so an unreachable gateway fails closed
+     */
+    refusesStrangers(): Promise<boolean>;
     /**
      * Ask the gateway for an invoice payable to the first address on your list
      * that can issue a provable one, throws `NoWalletAvailableError` when none can
@@ -330,6 +344,11 @@ interface Credit {
     currency: string;
     /** Whatever the payer wrote, wherever this bank puts it. Matching is a substring, so noise around it is fine */
     reference: string;
+    /**
+     * Unix seconds. A bank that books a day rather than an instant, as Fio does,
+     * gives the day's midnight in its own zone, so rendering this in UTC can show
+     * the day before. Nothing here matches on it, it is yours to read
+     */
     bookedAt: number;
 }
 /**
@@ -464,11 +483,119 @@ interface FioConfig {
  *
  * Every field on a Fio transaction is optional and arrives as `null` when it is
  * absent, the amount carries its direction in its sign rather than in a flag,
- * and the date is unix milliseconds. This reads all three the way the bank
- * documents them and treats a missing field as absent rather than guessing.
+ * and the date is a day and a UTC offset, `2026-07-15+0200`. This reads all
+ * three the way the bank answers them and treats a missing field as absent
+ * rather than guessing.
  */
 declare function fioStatement(config: FioConfig): Statement;
 
+/** What a shop knows about a sale before any rail exists */
+interface Order {
+    /** The bank matches it on the statement, and Lightning keys idempotency on it */
+    reference: string;
+    /** The price in the smallest unit of `currency`, so 48055 is 480.55 CZK */
+    amountMinor: number;
+    /** ISO 4217. The bank rail moves this, Lightning reads it only through your own `amountMsat` */
+    currency: string;
+}
+/** One way to pay one order, already registered with the gateway */
+interface Leg {
+    /** The watched payment's id, which is what `firstToSettle`, `getWatched` and `waitForWatched` take */
+    id: string;
+    /** Which rail made it, so a shop can label a leg without knowing how it was built */
+    rail: string;
+    /** What the payer reads, a BOLT11 invoice or a Short Payment Descriptor */
+    scan: string;
+    /** The same thing as a QR has to encode it, which is not always `scan` itself */
+    qr: string;
+    expiresAt: number;
+}
+/**
+ * A payment method. Everything that differs between rails is bound once when the
+ * rail is built, so the only thing passed per sale is which sale it is
+ */
+type Rail = (order: Order) => Promise<Leg>;
+interface BankRailConfig {
+    /** The gateway that will watch these transfers. It has to be one of your own */
+    gateway: ThunderBridge;
+    /** Long lived and server side. Every preimage is derived from it, so losing it loses every proof */
+    secret: string;
+    /** The account the money goes to, as an IBAN */
+    iban: string;
+    /** Where `bankVerifyEndpoint` is mounted, a public https URL with no query of its own */
+    verifyUrl: string;
+    /**
+     * When this order stops being payable, in unix seconds. Re-offering one order
+     * has to return the same second every time, because the gateway compares the
+     * expiry to decide whether a repeated watch is the same watch
+     */
+    expiresAt: (order: Order) => number;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /** Handed back untouched on that stream. Stable across re-offers, for the reason `expiresAt` is */
+    sealed?: (order: Order) => string | Promise<string>;
+    /** Up to ten digits, for accounting systems that still want one */
+    variableSymbol?: (order: Order) => string | undefined;
+    /** Register on a gateway you do not own anyway, on the terms `bankTransfer` sets out */
+    allowPublicGateway?: boolean;
+    /** What `Leg.rail` reads, for a shop running more than one account */
+    name?: string;
+}
+interface LightningRailConfig {
+    /** The gateway that mints the invoice */
+    gateway: ThunderBridge;
+    /** Priority list, the gateway takes the first that can issue a provable invoice */
+    lnAddresses: string[];
+    /** What this order costs in millisatoshi. A shop pricing in fiat writes `msatFor` and its own ticker */
+    amountMsat: (order: Order) => number | Promise<number>;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /**
+     * Makes the mint safe to retry. Unset nothing is sent, because a key stable
+     * across re-offers is one the gateway can join against the bank leg's reference
+     */
+    idempotencyKey?: (order: Order) => string | undefined;
+    webhookUrl?: string;
+    webhookSecret?: string;
+    /** What `Leg.rail` reads, for a shop running more than one wallet */
+    name?: string;
+}
+interface BlindLightningRailConfig {
+    /** The gateway that watches an invoice it was never allowed to mint */
+    gateway: ThunderBridge;
+    /** Priority list, resolved here rather than by the gateway */
+    lnAddresses: string[];
+    /** What this order costs in millisatoshi */
+    amountMsat: (order: Order) => number | Promise<number>;
+    /** Groups every leg on the same secret, so one `followTrigger` socket hears them all */
+    trigger?: string;
+    /** Only a watched leg has anywhere to carry this */
+    sealed?: (order: Order) => string | Promise<string>;
+    /** What `Leg.rail` reads, for a shop running more than one wallet */
+    name?: string;
+}
+/**
+ * Sell for a bank transfer. The money moves straight to your account and the
+ * gateway is told a hash, a URL and an expiry, never the amount or the reference.
+ *
+ * Which bank is read back is `bankVerifyEndpoint`'s business, not this one's, so
+ * a rail built here serves Fio and anything else behind a `Statement`.
+ */
+declare function bankRail(config: BankRailConfig): Rail;
+/**
+ * Sell for Lightning, with the gateway minting the invoice. It is told the
+ * address list and the amount, which is the round trip `blindLightningRail`
+ * spends to avoid.
+ */
+declare function lightningRail(config: LightningRailConfig): Rail;
+/**
+ * Sell for Lightning, resolving the address here and handing the gateway only a
+ * hash and a URL to poll. It costs one more round trip and the gateway learns
+ * neither who is being paid nor how much, so the only refusal left to it is
+ * refusing everyone.
+ */
+declare function blindLightningRail(config: BlindLightningRailConfig): Rail;
+
 /**
  * How many minor units of `currency` one bitcoin costs at one venue, so 134883815
  * is 1,348,838.15 CZK. Throws when that venue does not quote that currency, which
@@ -615,6 +742,14 @@ declare function lnurlToDataUrl(endpoint: string, options?: QrOptions): string;
 declare function spdToSvg(spd: string, options?: QrOptions): string;
 /** SVG data URL of the bank transfer's QR, for an `<img>` `src` */
 declare function spdToDataUrl(spd: string, options?: QrOptions): string;
+/**
+ * Render any rail's `Leg.qr` as an SVG QR code. Each rail states its own payload,
+ * a BOLT11 invoice under the `LIGHTNING` scheme or a Short Payment Descriptor as
+ * it stands, so this draws a leg without being told which rail made it
+ */
+declare function qrToSvg(payload: string, options?: QrOptions): string;
+/** SVG data URL of a leg's QR, for an `<img>` `src` */
+declare function qrToDataUrl(payload: string, options?: QrOptions): string;
 
 /**
  * Bech32-encode a pay endpoint as the `LNURL1` string LUD-01 defines, uppercase
@@ -675,14 +810,7 @@ declare class ProblemError extends Error {
         detail?: string;
     });
 }
-/**
- * Whether a problem document carries this type, accepting the namespace this
- * project used before `direct` left its name.
- *
- * A problem type is an identifier clients branch on, so renaming one is a breaking
- * change. The gateway emits only the new spelling, and this reads both, so a client
- * that has been updated still types the errors of an instance that has not
- */
+/** Whether a problem document carries this type */
 declare function isProblemType(problem: {
     type?: string;
 }, type: string): boolean;
@@ -720,4 +848,4 @@ declare class NoWalletAvailableError extends ProblemError {
     }, wallets: WalletFailure[]);
 }
 
-export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, type CreateOptions, type CreatePaymentParams, type CreateQuoteParams, type Credit, type FioConfig, type FollowOptions, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, type Minted, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, type Payment, type PaymentStatus, ProblemError, type QrOptions, type Quote, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type ThunderBridgeOptions, type Ticker, type TriggerConfig, type TriggerEvent, UnverifiedRecipientError, type WaitOptions, type WalletFailure, type WalletReason, type WatchPaymentParams, type WebhookOptions, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlPayEndpoint, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };
+export { type BankRailConfig, type BankTransfer, type BankTransferParams, type BankVerifyConfig, type BlindLightningRailConfig, type CreateOptions, type CreatePaymentParams, type CreateQuoteParams, type Credit, type FioConfig, type FollowOptions, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type Leg, type LightningRailConfig, type MedianOptions, type Minted, NO_WALLET_AVAILABLE, NoWalletAvailableError, type Order, PAYMENT_ALREADY_WATCHED, type Payment, type PaymentStatus, ProblemError, type QrOptions, type Quote, REQUEST_IN_FLIGHT, type Rail, type Statement, ThunderBridge, type ThunderBridgeOptions, type Ticker, type TriggerConfig, type TriggerEvent, UnverifiedRecipientError, type WaitOptions, type WalletFailure, type WalletReason, type WatchPaymentParams, type WebhookOptions, bankRail, bankTransfer, bankVerifyEndpoint, bitstamp, blindLightningRail, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lightningRail, lnurlPayEndpoint, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };