chargeserver

type Config struct {
	// Intent verifies Tempo charge credentials for this method. When nil, New
	// builds one from the verification fields below. It cannot be combined
	// with Relay.
	Intent *Intent
	// Currencies lists the accepted token contract addresses in presentation
	// order. The server issues one charge Challenge per currency, and a
	// Credential for any of them verifies. An explicit list replaces the chain
	// defaults from tempo.DefaultCurrenciesForChain; it must contain at least
	// one valid 0x-prefixed address, and case-insensitive duplicates are
	// dropped.
	Currencies []string
	// Recipient is the default payee address for issued challenges.
	Recipient string
	// Decimals controls how human-readable amounts are normalized.
	Decimals int
	// ChainID binds issued challenges to a specific Tempo chain when set, such
	// as tempo.ChainIDMainnet or tempo.ChainIDModerato.
	ChainID int64
	// FeePayer enables sponsored transaction flows by default.
	FeePayer bool
	// FeePayerURL points at a remote co-signer when the server does not sign locally.
	FeePayerURL string
	// SupportedModes limits the credential submission modes advertised to clients.
	SupportedModes []tempo.ChargeMode
	// RPC overrides the Tempo JSON-RPC client used for verification.
	RPC tempo.RPCClient
	// RPCURL is used to build an RPC client when RPC is nil.
	RPCURL string
	// FeePayerSigner co-signs sponsored transactions locally when provided.
	FeePayerSigner *temposigner.Signer
	// FeePayerPrivateKey constructs FeePayerSigner when FeePayerSigner is nil.
	FeePayerPrivateKey string
	// AllowedFeeTokens lists the fee tokens this verifier will sponsor; see
	// IntentConfig.AllowedFeeTokens.
	AllowedFeeTokens []string
	// FeePayerPolicy sets the sponsorship limits for every allowed fee token;
	// see IntentConfig.FeePayerPolicy.
	FeePayerPolicy *FeePayerPolicy
	// FeeToken fixes the fee token a local fee payer pays gas in; see IntentConfig.FeeToken.
	FeeToken string
	// Store is required to verify payments. Use a persistent store shared by all
	// replicas, with atomic PutIfAbsent and no eviction of replay keys.
	// An explicit tempo.NewMemoryStore() is only suitable for single-process development.
	Store tempo.Store
	// ExpireReplayKeys lets replay keys expire after their challenge; see
	// IntentConfig.ExpireReplayKeys for when that is safe.
	ExpireReplayKeys bool
	// Relay delegates credential validation and finalization to Tempo API or
	// a compatible MPP relay. It cannot be combined with Intent.
	Relay *RelayConfig
}

type FeePayerPolicy struct {
	MaxFeePerGas         *big.Int
	MaxPriorityFeePerGas *big.Int
	MaxTotalFee          *big.Int
	// RejectKeyAuthorization rejects sponsored transactions that install a new
	// access key (carry a keyAuthorization). The default allows them.
	RejectKeyAuthorization bool
}

type Intent struct {
	// contains filtered or unexported fields
}

type IntentConfig struct {
	// RPC overrides the Tempo JSON-RPC client used for verification.
	RPC tempo.RPCClient
	// RPCURL is used to build an RPC client when RPC is nil.
	RPCURL string
	// FeePayerSigner co-signs sponsored transactions locally when provided.
	FeePayerSigner *temposigner.Signer
	// FeePayerPrivateKey constructs FeePayerSigner when FeePayerSigner is nil.
	FeePayerPrivateKey string
	// AllowedFeeTokens lists the fee tokens this verifier will sponsor, as in
	// mppx. With a local fee payer, they are the fee tokens it may pay gas in,
	// tried in this order and independent of the charge currency. Remote fee
	// payers (FeePayerURL) pay in the charge currency, which must be listed.
	// When nil, the verifier sponsors pathUSD, AlphaUSD and USDC.e, and a
	// local fee payer pays in pathUSD or, on mainnet, USDC.e. A non-nil list
	// must name at least one valid address.
	AllowedFeeTokens []string
	// FeePayerPolicy sets the sponsorship limits applied to every allowed fee
	// token, as mppx's feePayerPolicy does. Nil fields keep the defaults
	// (100 gwei max fee and priority fee per gas, 0.05 total fee); a nil
	// MaxPriorityFeePerGas is lowered to a MaxFeePerGas set below its default.
	FeePayerPolicy *FeePayerPolicy
	// FeeToken fixes the fee token a local fee payer pays gas in. When empty,
	// the local fee payer uses the first allowed fee token it holds a balance
	// of, or the first allowed fee token. It must be an allowed fee token (New
	// and NewIntent reject one missing from AllowedFeeTokens) and is ignored
	// for remote fee payers (FeePayerURL).
	FeeToken string
	// Store is required to verify payments. Use a persistent store shared by all
	// replicas, with atomic PutIfAbsent and no eviction of replay keys.
	// An explicit tempo.NewMemoryStore() is only suitable for single-process development.
	Store tempo.Store
	// ExpireReplayKeys lets replay keys expire ten minutes after their
	// challenge's expiry instead of keeping them forever. Store must implement
	// tempo.ExpiringStore, whose PutIfAbsentUntil then replaces PutIfAbsent
	// for replay claims. It is only safe when every credential reaches this
	// Intent through server.Mpp, which verifies the challenge ID's HMAC,
	// including its expiry, before settlement: Verify and Broadcast called
	// directly trust the credential's echoed expiry, so an expired key would
	// let the same hash, proof or transaction settle again.
	ExpireReplayKeys bool
}

type Method struct {
	// contains filtered or unexported fields
}

type RelayConfig struct {
	// APIKey is a Tempo API key with the mpp:write scope.
	APIKey string
	// APIBaseURL is the relay base URL, including an optional path prefix.
	// It defaults to https://api.tempo.xyz.
	APIBaseURL string
	// HTTPClient overrides the client used for relay calls. When nil, relay
	// calls use a client with a 30 second timeout.
	HTTPClient *http.Client
}

type RelayErrorCode string