Merge pull request #12 from commandlayer/codex/fix-syntax-error-in-server.mjs

simplify /verify handler to remove dangling IIFE closure risk

Author: GsCommand

server.mjs

@@ -1545,20 +1545,18 @@ for (const v of Object.keys(handlers)) {
 
 app.post("/verify", async (req, res) => {
   const timer = new Promise((_, rej) => setTimeout(() => rej(new Error("verify_timeout")), VERIFY_MAX_MS));
+  const runVerify = async () => {
+    const receipt = req.body;
 
-  try {
-    await Promise.race([
-      (async () => {
-        const receipt = req.body;
+    const wantEns = String(req.query.ens || "0") === "1";
+    const strictKid = String(req.query.strict_kid || "0") === "1";
+    const refresh = String(req.query.refresh || "0") === "1";
+    const wantSchema = String(req.query.schema || "0") === "1";
 
-        const wantEns = String(req.query.ens || "0") === "1";
-        const strictKid = String(req.query.strict_kid || "0") === "1";
-        const refresh = String(req.query.refresh || "0") === "1";
-        const wantSchema = String(req.query.schema || "0") === "1";
+    const proof = receipt?.metadata?.proof;
+    const proofCanonical = String(proof?.canonical_id || proof?.canonical || "");
+    const runtimeCoreReceipt = normalizeReceiptForRuntimeCoreVerify(receipt);
 
-        const proof = receipt?.metadata?.proof;
-        const proofCanonical = String(proof?.canonical_id || proof?.canonical || "");
-        const runtimeCoreReceipt = normalizeReceiptForRuntimeCoreVerify(receipt);
 
         if (!proof?.signature_b64 || !proof?.hash_sha256) {
           return res.status(400).json({
@@ -1736,33 +1734,34 @@ app.post("/verify", async (req, res) => {
 
         const okFinal = hashMatches === true && signatureValid === true && (wantSchema ? schemaOk === true : true);
 
-        return res.json({
-          ok: okFinal,
-          ...(okFinal ? {} : { reason: sigErr || (wantSchema && !schemaOk ? "schema_invalid" : "verify_failed") }),
-          signer_id: proof?.signer_id ?? null,
-          kid: proof?.kid ?? null,
-          hash_sha256: proof?.hash_sha256 ?? null,
-          verified_with: wantEns ? "ens" : "env",
-          checks: {
-            schema_valid: schemaOk,
-            hash_matches: hashMatches,
-            signature_valid: signatureValid,
-            ens_match: wantEns ? true : null,
-          },
-          values: {
-            verb: receipt?.x402?.verb ?? null,
-            signer_id: proof?.signer_id ?? null,
-            kid: proof?.kid ?? null,
-            canonical_id: proofCanonical || null,
-            pubkey_source: pubSrc,
-            ens: ensExpect,
-          },
-          errors: { schema_errors: schemaErrors, signature_error: sigErr },
-          ...instancePayload(),
-        });
-      })(),
-      timer,
-    ]);
+    return res.json({
+      ok: okFinal,
+      ...(okFinal ? {} : { reason: sigErr || (wantSchema && !schemaOk ? "schema_invalid" : "verify_failed") }),
+      signer_id: proof?.signer_id ?? null,
+      kid: proof?.kid ?? null,
+      hash_sha256: proof?.hash_sha256 ?? null,
+      verified_with: wantEns ? "ens" : "env",
+      checks: {
+        schema_valid: schemaOk,
+        hash_matches: hashMatches,
+        signature_valid: signatureValid,
+        ens_match: wantEns ? true : null,
+      },
+      values: {
+        verb: receipt?.x402?.verb ?? null,
+        signer_id: proof?.signer_id ?? null,
+        kid: proof?.kid ?? null,
+        canonical_id: proofCanonical || null,
+        pubkey_source: pubSrc,
+        ens: ensExpect,
+      },
+      errors: { schema_errors: schemaErrors, signature_error: sigErr },
+      ...instancePayload(),
+    });
+  };
+
+  try {
+    await Promise.race([runVerify(), timer]);
   } catch (e) {
     return res.status(500).json({
       ok: false,