@agentokratia/x402-escrow 2.0.0

package/dist/client/index.js

@@ -0,0 +1,492 @@
+// src/client/session-wrapper.ts
+import { isAddress, getAddress as getAddress2 } from "viem";
+import { x402Client } from "@x402/core/client";
+import { wrapFetchWithPayment } from "@x402/fetch";
+
+// src/client/escrow.ts
+import { toHex as toHex2, getAddress } from "viem";
+
+// src/types.ts
+var X402_VERSION = 2;
+function fromBase64(str) {
+  try {
+    if (typeof atob !== "undefined") {
+      return decodeURIComponent(escape(atob(str)));
+    }
+    return Buffer.from(str, "base64").toString("utf-8");
+  } catch {
+    return Buffer.from(str, "base64").toString("utf-8");
+  }
+}
+function generateRequestId() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}`;
+}
+function generateRandomBytes(length) {
+  const bytes = new Uint8Array(length);
+  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    crypto.getRandomValues(bytes);
+  } else {
+    for (let i = 0; i < length; i++) {
+      bytes[i] = Math.floor(Math.random() * 256);
+    }
+  }
+  return bytes;
+}
+
+// src/constants.ts
+var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
+var DEFAULT_SESSION_DURATION = 3600;
+var DEFAULT_REFUND_WINDOW = 86400;
+
+// src/client/storage.ts
+var BaseStorage = class {
+  constructor() {
+    this.sessions = /* @__PURE__ */ new Map();
+  }
+  get(network, receiver) {
+    const now = Date.now() / 1e3;
+    for (const session of this.sessions.values()) {
+      if (session.network === network && session.receiver.toLowerCase() === receiver.toLowerCase() && session.authorizationExpiry > now) {
+        return session;
+      }
+    }
+    return null;
+  }
+  findBest(network, receiver, minAmount) {
+    const now = Date.now() / 1e3;
+    let best = null;
+    let bestBalance = 0n;
+    for (const session of this.sessions.values()) {
+      if (session.network === network && session.receiver.toLowerCase() === receiver.toLowerCase() && session.authorizationExpiry > now) {
+        const balance = BigInt(session.balance);
+        if (balance >= minAmount && balance > bestBalance) {
+          best = session;
+          bestBalance = balance;
+        }
+      }
+    }
+    return best;
+  }
+  set(session) {
+    this.sessions.set(session.sessionId, session);
+    this.onUpdate();
+  }
+  update(sessionId, balance) {
+    const session = this.sessions.get(sessionId);
+    if (session) {
+      this.sessions.set(sessionId, { ...session, balance });
+      this.onUpdate();
+    }
+  }
+  list() {
+    return Array.from(this.sessions.values());
+  }
+  remove(sessionId) {
+    this.sessions.delete(sessionId);
+    this.onUpdate();
+  }
+  /** Override in subclasses for persistence */
+  onUpdate() {
+  }
+};
+var InMemoryStorage = class extends BaseStorage {
+  // No persistence needed
+};
+var BrowserLocalStorage = class extends BaseStorage {
+  constructor(key = "x402-sessions") {
+    super();
+    this.key = key;
+    this.load();
+  }
+  onUpdate() {
+    this.save();
+  }
+  load() {
+    if (typeof localStorage === "undefined") return;
+    try {
+      const data = localStorage.getItem(this.key);
+      if (data) {
+        const sessions = JSON.parse(data);
+        for (const s of sessions) this.sessions.set(s.sessionId, s);
+      }
+    } catch {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("[x402] Failed to load sessions from localStorage");
+      }
+    }
+  }
+  save() {
+    if (typeof localStorage === "undefined") return;
+    try {
+      localStorage.setItem(this.key, JSON.stringify(Array.from(this.sessions.values())));
+    } catch {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("[x402] Failed to save sessions to localStorage");
+      }
+    }
+  }
+};
+function createStorage(type, storageKey) {
+  return type === "localStorage" ? new BrowserLocalStorage(storageKey) : new InMemoryStorage();
+}
+
+// src/client/session-manager.ts
+var SessionManager = class {
+  constructor(network, options = {}) {
+    this.network = network;
+    this.storage = createStorage(options.storage ?? "memory", options.storageKey);
+  }
+  /**
+   * Store a session from escrow settlement response.
+   */
+  store(session) {
+    this.storage.set({ ...session, createdAt: Date.now() });
+  }
+  /**
+   * Get session for a specific receiver.
+   */
+  getForReceiver(receiver) {
+    return this.storage.get(this.network, receiver);
+  }
+  /**
+   * Find best session for receiver with minimum balance.
+   */
+  findBest(receiver, minAmount) {
+    return this.storage.findBest(this.network, receiver, minAmount);
+  }
+  /**
+   * Check if valid session exists for receiver.
+   */
+  hasValid(receiver, minAmount) {
+    const session = minAmount ? this.storage.findBest(this.network, receiver, BigInt(minAmount)) : this.storage.get(this.network, receiver);
+    return session !== null;
+  }
+  /**
+   * Update session balance after debit.
+   */
+  updateBalance(sessionId, newBalance) {
+    this.storage.update(sessionId, newBalance);
+  }
+  /**
+   * Get all stored sessions.
+   */
+  getAll() {
+    return this.storage.list();
+  }
+  /**
+   * Remove a specific session.
+   */
+  remove(sessionId) {
+    this.storage.remove(sessionId);
+  }
+  /**
+   * Clear all sessions.
+   */
+  clear() {
+    for (const session of this.storage.list()) {
+      this.storage.remove(session.sessionId);
+    }
+  }
+};
+
+// src/client/eip712.ts
+import {
+  keccak256,
+  encodeAbiParameters,
+  parseAbiParameters,
+  toHex
+} from "viem";
+var PAYMENT_INFO_TYPE = "PaymentInfo(address operator,address payer,address receiver,address token,uint120 maxAmount,uint48 preApprovalExpiry,uint48 authorizationExpiry,uint48 refundExpiry,uint16 minFeeBps,uint16 maxFeeBps,address feeReceiver,uint256 salt)";
+var PAYMENT_INFO_TYPEHASH = keccak256(toHex(new TextEncoder().encode(PAYMENT_INFO_TYPE)));
+var PAYMENT_INFO_ABI_PARAMS = "bytes32, address, address, address, address, uint120, uint48, uint48, uint48, uint16, uint16, address, uint256";
+var NONCE_ABI_PARAMS = "uint256, address, bytes32";
+var ERC3009_TYPES = {
+  ReceiveWithAuthorization: [
+    { name: "from", type: "address" },
+    { name: "to", type: "address" },
+    { name: "value", type: "uint256" },
+    { name: "validAfter", type: "uint256" },
+    { name: "validBefore", type: "uint256" },
+    { name: "nonce", type: "bytes32" }
+  ]
+};
+function computeEscrowNonce(chainId, escrowContract, paymentInfo) {
+  const paymentInfoHash = keccak256(
+    encodeAbiParameters(parseAbiParameters(PAYMENT_INFO_ABI_PARAMS), [
+      PAYMENT_INFO_TYPEHASH,
+      paymentInfo.operator,
+      ZERO_ADDRESS,
+      // payer = 0 for payer-agnostic
+      paymentInfo.receiver,
+      paymentInfo.token,
+      paymentInfo.maxAmount,
+      paymentInfo.preApprovalExpiry,
+      paymentInfo.authorizationExpiry,
+      paymentInfo.refundExpiry,
+      paymentInfo.minFeeBps,
+      paymentInfo.maxFeeBps,
+      paymentInfo.feeReceiver,
+      paymentInfo.salt
+    ])
+  );
+  return keccak256(
+    encodeAbiParameters(parseAbiParameters(NONCE_ABI_PARAMS), [
+      BigInt(chainId),
+      escrowContract,
+      paymentInfoHash
+    ])
+  );
+}
+async function signERC3009(wallet, authorization, domain) {
+  if (!wallet.account) {
+    throw new Error("WalletClient must have an account");
+  }
+  return wallet.signTypedData({
+    account: wallet.account,
+    domain,
+    types: ERC3009_TYPES,
+    primaryType: "ReceiveWithAuthorization",
+    message: {
+      from: authorization.from,
+      to: authorization.to,
+      value: authorization.value,
+      validAfter: authorization.validAfter,
+      validBefore: authorization.validBefore,
+      nonce: authorization.nonce
+    }
+  });
+}
+
+// src/client/escrow.ts
+var EscrowScheme = class {
+  constructor(walletClient, options = {}) {
+    this.scheme = "escrow";
+    if (!walletClient.account) {
+      throw new Error("WalletClient must have an account");
+    }
+    if (!walletClient.chain) {
+      throw new Error("WalletClient must have a chain");
+    }
+    this.wallet = walletClient;
+    this.chainId = walletClient.chain.id;
+    this.network = `eip155:${walletClient.chain.id}`;
+    this.sessionDuration = options.sessionDuration ?? DEFAULT_SESSION_DURATION;
+    this.refundWindow = options.refundWindow ?? DEFAULT_REFUND_WINDOW;
+    this.customDepositAmount = options.depositAmount ? BigInt(options.depositAmount) : void 0;
+    this.sessions = new SessionManager(this.network, {
+      storage: options.storage,
+      storageKey: options.storageKey
+    });
+  }
+  get address() {
+    return this.wallet.account.address;
+  }
+  // ========== Payment Payload Creation ==========
+  /**
+   * Creates payment payload for escrow scheme.
+   * Auto-detects whether to create new session or use existing one.
+   */
+  async createPaymentPayload(x402Version, paymentRequirements) {
+    const receiver = getAddress(paymentRequirements.payTo);
+    const amount = BigInt(paymentRequirements.amount);
+    const existingSession = this.sessions.findBest(receiver, amount);
+    if (existingSession) {
+      return this.createUsagePayload(x402Version, existingSession, paymentRequirements.amount);
+    }
+    return this.createCreationPayload(x402Version, paymentRequirements);
+  }
+  // ========== Private: Payload Builders ==========
+  /**
+   * Session USAGE payload - uses existing session (no signature).
+   */
+  createUsagePayload(x402Version, session, amount) {
+    return {
+      x402Version,
+      payload: {
+        session: {
+          id: session.sessionId,
+          token: session.sessionToken
+        },
+        amount,
+        requestId: generateRequestId()
+      }
+    };
+  }
+  /**
+   * Session CREATION payload - requires wallet signature.
+   */
+  async createCreationPayload(x402Version, paymentRequirements) {
+    const extra = paymentRequirements.extra;
+    if (!extra.escrowContract || !extra.facilitator || !extra.tokenCollector) {
+      throw new Error("Missing required escrow configuration in payment requirements");
+    }
+    const escrowContract = getAddress(extra.escrowContract);
+    const facilitator = getAddress(extra.facilitator);
+    const tokenCollector = getAddress(extra.tokenCollector);
+    const receiver = getAddress(paymentRequirements.payTo);
+    const token = getAddress(paymentRequirements.asset);
+    const now = Math.floor(Date.now() / 1e3);
+    const salt = this.generateSalt();
+    const authorizationExpiry = now + this.sessionDuration;
+    const refundExpiry = authorizationExpiry + this.refundWindow;
+    const minDeposit = extra.minDeposit ? BigInt(extra.minDeposit) : BigInt(paymentRequirements.amount);
+    const maxDeposit = extra.maxDeposit ? BigInt(extra.maxDeposit) : minDeposit;
+    let amount;
+    if (this.customDepositAmount !== void 0) {
+      if (this.customDepositAmount < minDeposit) {
+        throw new Error(
+          `Deposit amount ${this.customDepositAmount} is below minimum ${minDeposit}`
+        );
+      }
+      if (this.customDepositAmount > maxDeposit) {
+        throw new Error(`Deposit amount ${this.customDepositAmount} exceeds maximum ${maxDeposit}`);
+      }
+      amount = this.customDepositAmount;
+    } else {
+      amount = maxDeposit;
+    }
+    const validAfter = 0n;
+    const validBefore = BigInt(authorizationExpiry);
+    const nonce = computeEscrowNonce(this.chainId, escrowContract, {
+      operator: facilitator,
+      payer: this.address,
+      receiver,
+      token,
+      maxAmount: amount,
+      preApprovalExpiry: authorizationExpiry,
+      authorizationExpiry,
+      refundExpiry,
+      minFeeBps: 0,
+      maxFeeBps: 0,
+      feeReceiver: ZERO_ADDRESS,
+      salt: BigInt(salt)
+    });
+    const domain = {
+      name: extra.name,
+      version: extra.version,
+      chainId: this.chainId,
+      verifyingContract: token
+    };
+    const signature = await signERC3009(
+      this.wallet,
+      { from: this.address, to: tokenCollector, value: amount, validAfter, validBefore, nonce },
+      domain
+    );
+    const payload = {
+      signature,
+      authorization: {
+        from: this.address,
+        to: tokenCollector,
+        value: amount.toString(),
+        validAfter: validAfter.toString(),
+        validBefore: validBefore.toString(),
+        nonce
+      },
+      sessionParams: {
+        salt,
+        authorizationExpiry,
+        refundExpiry
+      }
+    };
+    if (paymentRequirements.scheme === "escrow") {
+      payload.requestId = generateRequestId();
+    }
+    const accepted = {
+      scheme: paymentRequirements.scheme,
+      network: paymentRequirements.network,
+      asset: paymentRequirements.asset,
+      amount: paymentRequirements.amount,
+      payTo: paymentRequirements.payTo,
+      maxTimeoutSeconds: paymentRequirements.maxTimeoutSeconds,
+      extra: { ...paymentRequirements.extra, facilitator, escrowContract, tokenCollector }
+    };
+    return { x402Version, accepted, payload };
+  }
+  generateSalt() {
+    return toHex2(generateRandomBytes(32));
+  }
+};
+
+// src/client/session-wrapper.ts
+function createEscrowFetch(walletClient, options) {
+  const scheme = new EscrowScheme(walletClient, options);
+  const x402 = new x402Client().register(scheme.network, scheme);
+  const baseFetch = options?.fetch ?? globalThis.fetch;
+  const paidFetch = wrapFetchWithPayment(baseFetch, x402);
+  return {
+    fetch: withSessionExtraction(paidFetch, scheme),
+    scheme,
+    x402
+    // Expose for adding hooks
+  };
+}
+function extractSession(getHeader, escrowScheme) {
+  const paymentResponseHeader = getHeader("PAYMENT-RESPONSE") || getHeader("payment-response");
+  if (!paymentResponseHeader) return;
+  try {
+    const data = JSON.parse(fromBase64(paymentResponseHeader));
+    if (!data.session?.id) return;
+    if (!data.session.token) {
+      if (data.session.balance !== void 0) {
+        escrowScheme.sessions.updateBalance(data.session.id, data.session.balance);
+      }
+      return;
+    }
+    const receiver = data.requirements?.payTo || data.receiver;
+    if (!receiver) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("[x402] Session missing receiver - cannot store");
+      }
+      return;
+    }
+    if (!isAddress(receiver)) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("[x402] Invalid receiver address in session:", receiver);
+      }
+      return;
+    }
+    escrowScheme.sessions.store({
+      sessionId: data.session.id,
+      sessionToken: data.session.token,
+      network: escrowScheme.network,
+      payer: escrowScheme.address,
+      receiver: getAddress2(receiver),
+      balance: data.session.balance || "0",
+      authorizationExpiry: data.session.expiresAt || 0
+    });
+  } catch (error) {
+    if (process.env.NODE_ENV !== "production") {
+      console.warn("[x402] Failed to parse PAYMENT-RESPONSE:", error);
+    }
+  }
+}
+function withSessionExtraction(paidFetch, escrowScheme) {
+  return async (input, init) => {
+    const response = await paidFetch(input, init);
+    extractSession((name) => response.headers.get(name), escrowScheme);
+    return response;
+  };
+}
+function withAxiosSessionExtraction(escrowScheme) {
+  return (response) => {
+    extractSession((name) => response.headers[name.toLowerCase()], escrowScheme);
+    return response;
+  };
+}
+export {
+  BrowserLocalStorage,
+  EscrowScheme,
+  InMemoryStorage,
+  SessionManager,
+  X402_VERSION,
+  computeEscrowNonce,
+  createEscrowFetch,
+  createStorage,
+  signERC3009,
+  withAxiosSessionExtraction,
+  withSessionExtraction
+};
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/session-wrapper.ts","../../src/client/escrow.ts","../../src/types.ts","../../src/constants.ts","../../src/client/storage.ts","../../src/client/session-manager.ts","../../src/client/eip712.ts"],"sourcesContent":["/**\n * Session Extraction Wrappers\n *\n * Thin wrappers that extract sessions from x402 responses and store them.\n *\n * @example Simple (recommended)\n * ```typescript\n * const { fetch: escrowFetch, scheme, x402 } = createEscrowFetch(walletClient);\n * const response = await escrowFetch('https://api.example.com/premium');\n *\n * // Add hooks (user has control)\n * x402.onAfterPaymentCreation(async (ctx) => {\n *   console.log('Payment created:', ctx.paymentPayload);\n * });\n * ```\n *\n * @example With custom fetch\n * ```typescript\n * const { fetch: escrowFetch } = createEscrowFetch(walletClient, {\n *   fetch: ky,  // Use ky, undici, node-fetch, etc.\n * });\n * ```\n *\n * @example Fully composable (manual setup)\n * ```typescript\n * const escrowScheme = new EscrowScheme(walletClient);\n * const x402 = new x402Client().register('eip155:84532', escrowScheme);\n * const paidFetch = wrapFetchWithPayment(fetch, x402);\n * const escrowFetch = withSessionExtraction(paidFetch, escrowScheme);\n * ```\n */\n\nimport { isAddress, getAddress, type WalletClient } from 'viem';\nimport { x402Client } from '@x402/core/client';\nimport { wrapFetchWithPayment } from '@x402/fetch';\nimport { EscrowScheme, type EscrowSchemeOptions } from './escrow';\nimport { fromBase64 } from '../types';\n\n// =============================================================================\n// Types\n// =============================================================================\n\ntype FetchLike = typeof globalThis.fetch;\n\n/** Options for createEscrowFetch */\nexport interface CreateEscrowFetchOptions extends EscrowSchemeOptions {\n  /** Custom fetch implementation (default: globalThis.fetch) */\n  fetch?: FetchLike;\n}\n\n/** Result from createEscrowFetch */\nexport interface EscrowFetchResult {\n  /** Fetch function with automatic payment + session handling */\n  fetch: FetchLike;\n  /** Access to underlying scheme for session management */\n  scheme: EscrowScheme;\n  /** Access to x402Client for adding hooks (onBeforePaymentCreation, etc.) */\n  x402: x402Client;\n}\n\n// =============================================================================\n// Convenience wrapper (Simple API)\n// =============================================================================\n\n/**\n * Creates a fetch function with automatic escrow payment and session handling.\n * This is the simplest way to integrate x402 escrow payments.\n *\n * @example Simple usage\n * ```typescript\n * const { fetch: escrowFetch, scheme, x402 } = createEscrowFetch(walletClient);\n * const response = await escrowFetch('https://api.example.com/premium');\n *\n * // Access sessions\n * scheme.sessions.getAll();\n * scheme.sessions.hasValid(receiverAddress, '10000');\n * ```\n *\n * @example With custom fetch and hooks\n * ```typescript\n * const { fetch: escrowFetch, x402 } = createEscrowFetch(walletClient, {\n *   fetch: customFetch, // Use ky, undici, node-fetch, etc.\n * });\n *\n * // Add hooks for user control\n * x402.onBeforePaymentCreation(async (ctx) => {\n *   console.log('About to pay:', ctx.paymentRequirements);\n * });\n * ```\n */\nexport function createEscrowFetch(\n  walletClient: WalletClient,\n  options?: CreateEscrowFetchOptions\n): EscrowFetchResult {\n  const scheme = new EscrowScheme(walletClient, options);\n  const x402 = new x402Client().register(scheme.network, scheme);\n\n  // Use custom fetch or default to globalThis.fetch\n  const baseFetch = options?.fetch ?? globalThis.fetch;\n  const paidFetch = wrapFetchWithPayment(baseFetch, x402) as FetchLike;\n\n  return {\n    fetch: withSessionExtraction(paidFetch, scheme),\n    scheme,\n    x402, // Expose for adding hooks\n  };\n}\n\n// =============================================================================\n// Core extraction logic (header-agnostic)\n// =============================================================================\n\ntype HeaderGetter = (name: string) => string | null | undefined;\n\n/**\n * Core session extraction - works with any header accessor.\n * Extracts session from PAYMENT-RESPONSE header (x402 standard).\n *\n * The facilitator returns session data in SettleResponse, which x402 encodes\n * into the PAYMENT-RESPONSE header as: { ...settleResponse, requirements }\n */\nfunction extractSession(getHeader: HeaderGetter, escrowScheme: EscrowScheme): void {\n  const paymentResponseHeader = getHeader('PAYMENT-RESPONSE') || getHeader('payment-response');\n  if (!paymentResponseHeader) return;\n\n  try {\n    const data = JSON.parse(fromBase64(paymentResponseHeader));\n\n    // Must have session id at minimum\n    if (!data.session?.id) return;\n\n    // Check for SESSION USAGE first (no token, just balance update)\n    if (!data.session.token) {\n      // SESSION USAGE: Update balance only (token already stored from creation)\n      if (data.session.balance !== undefined) {\n        escrowScheme.sessions.updateBalance(data.session.id, data.session.balance);\n      }\n      return;\n    }\n\n    // SESSION CREATION: Has token → Store new session\n    // Receiver is in data.requirements.payTo or data.receiver\n    const receiver = data.requirements?.payTo || data.receiver;\n    if (!receiver) {\n      if (process.env.NODE_ENV !== 'production') {\n        console.warn('[x402] Session missing receiver - cannot store');\n      }\n      return;\n    }\n\n    // Validate receiver address\n    if (!isAddress(receiver)) {\n      if (process.env.NODE_ENV !== 'production') {\n        console.warn('[x402] Invalid receiver address in session:', receiver);\n      }\n      return;\n    }\n\n    escrowScheme.sessions.store({\n      sessionId: data.session.id,\n      sessionToken: data.session.token,\n      network: escrowScheme.network,\n      payer: escrowScheme.address,\n      receiver: getAddress(receiver),\n      balance: data.session.balance || '0',\n      authorizationExpiry: data.session.expiresAt || 0,\n    });\n  } catch (error) {\n    if (process.env.NODE_ENV !== 'production') {\n      console.warn('[x402] Failed to parse PAYMENT-RESPONSE:', error);\n    }\n  }\n}\n\n// =============================================================================\n// Fetch wrapper (Advanced API)\n// =============================================================================\n\n/**\n * Wraps a paid fetch to automatically extract and store sessions.\n * Use with wrapFetchWithPayment from @x402/fetch.\n *\n * @example\n * ```typescript\n * const escrowScheme = new EscrowScheme(walletClient);\n * const x402 = new x402Client().register('eip155:84532', escrowScheme);\n * const paidFetch = wrapFetchWithPayment(fetch, x402);\n * const escrowFetch = withSessionExtraction(paidFetch, escrowScheme);\n *\n * const response = await escrowFetch('https://api.example.com/premium');\n * // Session automatically stored if present in response\n * ```\n */\nexport function withSessionExtraction(paidFetch: FetchLike, escrowScheme: EscrowScheme): FetchLike {\n  return async (input, init) => {\n    const response = await paidFetch(input, init);\n    extractSession((name) => response.headers.get(name), escrowScheme);\n    return response;\n  };\n}\n\n// =============================================================================\n// Axios wrapper\n// =============================================================================\n\ninterface AxiosResponseLike {\n  headers: Record<string, string | undefined>;\n  [key: string]: unknown;\n}\n\n/**\n * Returns an Axios response interceptor that extracts and stores sessions.\n * Use with wrapAxiosWithPayment from @x402/axios.\n *\n * @example\n * ```typescript\n * const escrowScheme = new EscrowScheme(walletClient);\n * const x402 = new x402Client().register('eip155:84532', escrowScheme);\n * const paidAxios = wrapAxiosWithPayment(axios.create(), x402);\n * paidAxios.interceptors.response.use(withAxiosSessionExtraction(escrowScheme));\n *\n * const response = await paidAxios.get('https://api.example.com/premium');\n * // Session automatically stored if present in response\n * ```\n */\nexport function withAxiosSessionExtraction(escrowScheme: EscrowScheme) {\n  return <T extends AxiosResponseLike>(response: T): T => {\n    extractSession((name) => response.headers[name.toLowerCase()], escrowScheme);\n    return response;\n  };\n}\n","/**\n * Escrow Client Scheme (Unified)\n *\n * Thin orchestrator that delegates to:\n * - SessionManager: Session lifecycle management\n * - Signer (eip712.ts): EIP-712 signing for session creation\n *\n * Handles both session CREATION and session USAGE in a single scheme.\n * - First call: Creates session with wallet signature (EIP-712)\n * - Subsequent calls: Uses stored session token (no signature needed)\n */\n\nimport { toHex, getAddress, type WalletClient, type Address, type Hex } from 'viem';\nimport {\n  generateRequestId,\n  generateRandomBytes,\n  type PaymentRequirements,\n  type Network,\n} from '../types';\nimport { ZERO_ADDRESS, DEFAULT_SESSION_DURATION, DEFAULT_REFUND_WINDOW } from '../constants';\nimport { SessionManager } from './session-manager';\nimport { signERC3009, computeEscrowNonce, type EIP712Domain } from './eip712';\n\n// ============================================================================\n// Types\n// ============================================================================\n\ninterface PaymentPayload {\n  x402Version: number;\n  resource?: { url: string; description?: string; mimeType?: string };\n  accepted?: PaymentRequirements;\n  payload: Record<string, unknown>;\n  extensions?: Record<string, unknown>;\n}\n\ninterface SchemeNetworkClient {\n  readonly scheme: string;\n  createPaymentPayload(\n    x402Version: number,\n    paymentRequirements: PaymentRequirements\n  ): Promise<Pick<PaymentPayload, 'x402Version' | 'payload'>>;\n}\n\ninterface EscrowExtra {\n  escrowContract: Address;\n  facilitator: Address;\n  tokenCollector: Address;\n  name: string;\n  version: string;\n  minDeposit?: string;\n  maxDeposit?: string;\n}\n\n// ============================================================================\n// Options\n// ============================================================================\n\nexport interface EscrowSchemeOptions {\n  /** Session duration in seconds (default: 1 hour) */\n  sessionDuration?: number;\n  /** Refund window after session expires (default: 24 hours) */\n  refundWindow?: number;\n  /** Storage type: 'memory' (default) or 'localStorage' */\n  storage?: 'memory' | 'localStorage';\n  /** localStorage key (default: 'x402-sessions') */\n  storageKey?: string;\n  /**\n   * Custom deposit amount in atomic units (e.g., \"10000000\" for $10 USDC).\n   * Must be between minDeposit and maxDeposit from the 402 response.\n   * If not specified, defaults to maxDeposit for maximum flexibility.\n   */\n  depositAmount?: string;\n}\n\n// ============================================================================\n// Escrow Scheme\n// ============================================================================\n\n/**\n * Escrow payment scheme for x402 (Unified).\n *\n * Orchestrates:\n * - SessionManager for session lookup and storage\n * - EIP-712 signer for session creation signatures\n *\n * Auto-preference: If a valid session exists for the receiver,\n * it will be used automatically (no wallet interaction required).\n */\nexport class EscrowScheme implements SchemeNetworkClient {\n  readonly scheme = 'escrow';\n\n  /** Session manager - use directly for session operations */\n  readonly sessions: SessionManager;\n\n  private readonly wallet: WalletClient;\n  private readonly chainId: number;\n  readonly network: Network;\n  private readonly sessionDuration: number;\n  private readonly refundWindow: number;\n  private readonly customDepositAmount?: bigint;\n\n  constructor(walletClient: WalletClient, options: EscrowSchemeOptions = {}) {\n    if (!walletClient.account) {\n      throw new Error('WalletClient must have an account');\n    }\n    if (!walletClient.chain) {\n      throw new Error('WalletClient must have a chain');\n    }\n\n    this.wallet = walletClient;\n    this.chainId = walletClient.chain.id;\n    this.network = `eip155:${walletClient.chain.id}`;\n    this.sessionDuration = options.sessionDuration ?? DEFAULT_SESSION_DURATION;\n    this.refundWindow = options.refundWindow ?? DEFAULT_REFUND_WINDOW;\n    this.customDepositAmount = options.depositAmount ? BigInt(options.depositAmount) : undefined;\n    this.sessions = new SessionManager(this.network, {\n      storage: options.storage,\n      storageKey: options.storageKey,\n    });\n  }\n\n  get address(): Address {\n    return this.wallet.account!.address;\n  }\n\n  // ========== Payment Payload Creation ==========\n\n  /**\n   * Creates payment payload for escrow scheme.\n   * Auto-detects whether to create new session or use existing one.\n   */\n  async createPaymentPayload(\n    x402Version: number,\n    paymentRequirements: PaymentRequirements\n  ): Promise<Pick<PaymentPayload, 'x402Version' | 'payload'>> {\n    const receiver = getAddress(paymentRequirements.payTo);\n    const amount = BigInt(paymentRequirements.amount);\n\n    // Check for existing session (auto-preference)\n    const existingSession = this.sessions.findBest(receiver, amount);\n\n    if (existingSession) {\n      return this.createUsagePayload(x402Version, existingSession, paymentRequirements.amount);\n    }\n\n    return this.createCreationPayload(x402Version, paymentRequirements);\n  }\n\n  // ========== Private: Payload Builders ==========\n\n  /**\n   * Session USAGE payload - uses existing session (no signature).\n   */\n  private createUsagePayload(\n    x402Version: number,\n    session: { sessionId: string; sessionToken: string },\n    amount: string\n  ): Pick<PaymentPayload, 'x402Version' | 'payload'> {\n    return {\n      x402Version,\n      payload: {\n        session: {\n          id: session.sessionId,\n          token: session.sessionToken,\n        },\n        amount,\n        requestId: generateRequestId(),\n      },\n    };\n  }\n\n  /**\n   * Session CREATION payload - requires wallet signature.\n   */\n  private async createCreationPayload(\n    x402Version: number,\n    paymentRequirements: PaymentRequirements\n  ): Promise<Pick<PaymentPayload, 'x402Version' | 'payload'>> {\n    const extra = paymentRequirements.extra as unknown as EscrowExtra;\n\n    if (!extra.escrowContract || !extra.facilitator || !extra.tokenCollector) {\n      throw new Error('Missing required escrow configuration in payment requirements');\n    }\n\n    // Normalize addresses\n    const escrowContract = getAddress(extra.escrowContract);\n    const facilitator = getAddress(extra.facilitator);\n    const tokenCollector = getAddress(extra.tokenCollector);\n    const receiver = getAddress(paymentRequirements.payTo);\n    const token = getAddress(paymentRequirements.asset);\n\n    // Compute session parameters\n    const now = Math.floor(Date.now() / 1000);\n    const salt = this.generateSalt();\n    const authorizationExpiry = now + this.sessionDuration;\n    const refundExpiry = authorizationExpiry + this.refundWindow;\n\n    // Determine deposit amount with validation\n    const minDeposit = extra.minDeposit\n      ? BigInt(extra.minDeposit)\n      : BigInt(paymentRequirements.amount);\n    const maxDeposit = extra.maxDeposit ? BigInt(extra.maxDeposit) : minDeposit;\n\n    let amount: bigint;\n    if (this.customDepositAmount !== undefined) {\n      // User specified custom deposit - validate against bounds\n      if (this.customDepositAmount < minDeposit) {\n        throw new Error(\n          `Deposit amount ${this.customDepositAmount} is below minimum ${minDeposit}`\n        );\n      }\n      if (this.customDepositAmount > maxDeposit) {\n        throw new Error(`Deposit amount ${this.customDepositAmount} exceeds maximum ${maxDeposit}`);\n      }\n      amount = this.customDepositAmount;\n    } else {\n      // Default to maxDeposit for maximum flexibility\n      amount = maxDeposit;\n    }\n\n    const validAfter = 0n;\n    const validBefore = BigInt(authorizationExpiry);\n\n    // Compute nonce (payer-agnostic)\n    const nonce = computeEscrowNonce(this.chainId, escrowContract, {\n      operator: facilitator,\n      payer: this.address,\n      receiver,\n      token,\n      maxAmount: amount,\n      preApprovalExpiry: authorizationExpiry,\n      authorizationExpiry,\n      refundExpiry,\n      minFeeBps: 0,\n      maxFeeBps: 0,\n      feeReceiver: ZERO_ADDRESS,\n      salt: BigInt(salt),\n    });\n\n    // Sign ERC-3009 authorization\n    const domain: EIP712Domain = {\n      name: extra.name,\n      version: extra.version,\n      chainId: this.chainId,\n      verifyingContract: token,\n    };\n\n    const signature = await signERC3009(\n      this.wallet,\n      { from: this.address, to: tokenCollector, value: amount, validAfter, validBefore, nonce },\n      domain\n    );\n\n    // Build payload\n    const payload: Record<string, unknown> = {\n      signature,\n      authorization: {\n        from: this.address,\n        to: tokenCollector,\n        value: amount.toString(),\n        validAfter: validAfter.toString(),\n        validBefore: validBefore.toString(),\n        nonce,\n      },\n      sessionParams: {\n        salt,\n        authorizationExpiry,\n        refundExpiry,\n      },\n    };\n\n    // Only add requestId for escrow scheme (not exact-escrow)\n    if (paymentRequirements.scheme === 'escrow') {\n      payload.requestId = generateRequestId();\n    }\n\n    // Build accepted block for server routing\n    const accepted = {\n      scheme: paymentRequirements.scheme,\n      network: paymentRequirements.network,\n      asset: paymentRequirements.asset,\n      amount: paymentRequirements.amount,\n      payTo: paymentRequirements.payTo,\n      maxTimeoutSeconds: paymentRequirements.maxTimeoutSeconds,\n      extra: { ...paymentRequirements.extra, facilitator, escrowContract, tokenCollector },\n    };\n\n    return { x402Version, accepted, payload } as Pick<PaymentPayload, 'x402Version' | 'payload'>;\n  }\n\n  private generateSalt(): Hex {\n    return toHex(generateRandomBytes(32));\n  }\n}\n","/**\n * x402 Protocol Types for @agentokratia/x402-escrow\n *\n * Subset of types needed for the escrow scheme.\n */\n\n/** Current x402 protocol version */\nexport const X402_VERSION = 2;\n\n/** Network identifier in CAIP-2 format (e.g., \"eip155:8453\" for Base) */\nexport type Network = `${string}:${string}`;\n\n/**\n * PaymentRequirements - defines a single payment option\n * Base interface that each scheme extends\n */\nexport interface PaymentRequirements {\n  scheme: string;\n  network: Network;\n  amount: string;\n  asset: string;\n  payTo: string;\n  maxTimeoutSeconds: number;\n  extra: Record<string, unknown>;\n}\n\n/**\n * x402 Facilitator settle response (JSON body)\n */\nexport interface SettleResponse {\n  success: boolean;\n  errorReason?: string;\n  payer?: string;\n  transaction: string;\n  network: string;\n  session?: {\n    id: string;\n    balance: string;\n    token?: string;\n    expiresAt?: number;\n  };\n}\n\n/** Header name constants (x402 v2) */\nexport const X402_HEADERS = {\n  /** Server → Client: Payment options (402 response) - base64 JSON */\n  PAYMENT_REQUIRED: 'PAYMENT-REQUIRED',\n  /** Client → Server: Payment payload - base64 JSON */\n  PAYMENT_SIGNATURE: 'PAYMENT-SIGNATURE',\n  /** Server → Client: Settlement result - base64 JSON (includes session data) */\n  PAYMENT_RESPONSE: 'PAYMENT-RESPONSE',\n} as const;\n\n/** PAYMENT-RESPONSE header data (all schemes) */\nexport interface PaymentResponseData {\n  success: boolean;\n  transaction: string;\n  network: string;\n  payer?: string;\n  receiver?: string;\n  errorReason?: string;\n  session?: {\n    id: string;\n    balance: string;\n    token?: string;\n    expiresAt?: number;\n  };\n  requirements?: PaymentRequirements;\n}\n\n/**\n * Base64 encode (works in both browser and Node.js)\n */\nexport function toBase64(str: string): string {\n  try {\n    if (typeof btoa !== 'undefined') {\n      return btoa(unescape(encodeURIComponent(str)));\n    }\n    return Buffer.from(str, 'utf-8').toString('base64');\n  } catch {\n    return Buffer.from(str, 'utf-8').toString('base64');\n  }\n}\n\n/**\n * Base64 decode (works in both browser and Node.js)\n */\nexport function fromBase64(str: string): string {\n  try {\n    if (typeof atob !== 'undefined') {\n      return decodeURIComponent(escape(atob(str)));\n    }\n    return Buffer.from(str, 'base64').toString('utf-8');\n  } catch {\n    return Buffer.from(str, 'base64').toString('utf-8');\n  }\n}\n\n/**\n * Generate a unique request ID\n */\nexport function generateRequestId(): string {\n  if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n    return crypto.randomUUID();\n  }\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}`;\n}\n\n/**\n * Generate random bytes\n */\nexport function generateRandomBytes(length: number): Uint8Array {\n  const bytes = new Uint8Array(length);\n  if (typeof crypto !== 'undefined' && crypto.getRandomValues) {\n    crypto.getRandomValues(bytes);\n  } else {\n    for (let i = 0; i < length; i++) {\n      bytes[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  return bytes;\n}\n\n/**\n * Parse PAYMENT-RESPONSE header.\n */\nexport function parsePaymentResponseHeader(header: string): PaymentResponseData | null {\n  try {\n    return JSON.parse(fromBase64(header));\n  } catch {\n    return null;\n  }\n}\n","/**\n * Shared Constants for @agentokratia/x402-escrow\n */\n\n// Zero address constant\nexport const ZERO_ADDRESS = '0x0000000000000000000000000000000000000000' as const;\n\n// Session defaults (in seconds)\nexport const DEFAULT_SESSION_DURATION = 3600; // 1 hour\nexport const DEFAULT_REFUND_WINDOW = 86400; // 24 hours\n","/**\n * Session Storage for x402 Escrow Scheme\n *\n * Provides session persistence with two implementations:\n * - InMemoryStorage: For server-side or ephemeral usage\n * - LocalStorage: For browser persistence across page loads\n */\n\nimport type { Address } from 'viem';\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface StoredSession {\n  sessionId: string;\n  sessionToken: string;\n  network: string;\n  payer: Address;\n  receiver: Address;\n  balance: string;\n  authorizationExpiry: number;\n  createdAt: number;\n}\n\nexport interface SessionStorage {\n  get(network: string, receiver: Address): StoredSession | null;\n  findBest(network: string, receiver: Address, minAmount: bigint): StoredSession | null;\n  set(session: StoredSession): void;\n  update(sessionId: string, balance: string): void;\n  list(): StoredSession[];\n  remove(sessionId: string): void;\n}\n\n// ============================================================================\n// Base Storage (shared logic)\n// ============================================================================\n\nabstract class BaseStorage implements SessionStorage {\n  protected sessions = new Map<string, StoredSession>();\n\n  get(network: string, receiver: Address): StoredSession | null {\n    const now = Date.now() / 1000;\n    for (const session of this.sessions.values()) {\n      if (\n        session.network === network &&\n        session.receiver.toLowerCase() === receiver.toLowerCase() &&\n        session.authorizationExpiry > now\n      ) {\n        return session;\n      }\n    }\n    return null;\n  }\n\n  findBest(network: string, receiver: Address, minAmount: bigint): StoredSession | null {\n    const now = Date.now() / 1000;\n    let best: StoredSession | null = null;\n    let bestBalance = 0n;\n\n    for (const session of this.sessions.values()) {\n      if (\n        session.network === network &&\n        session.receiver.toLowerCase() === receiver.toLowerCase() &&\n        session.authorizationExpiry > now\n      ) {\n        const balance = BigInt(session.balance);\n        if (balance >= minAmount && balance > bestBalance) {\n          best = session;\n          bestBalance = balance;\n        }\n      }\n    }\n    return best;\n  }\n\n  set(session: StoredSession): void {\n    this.sessions.set(session.sessionId, session);\n    this.onUpdate();\n  }\n\n  update(sessionId: string, balance: string): void {\n    const session = this.sessions.get(sessionId);\n    if (session) {\n      this.sessions.set(sessionId, { ...session, balance });\n      this.onUpdate();\n    }\n  }\n\n  list(): StoredSession[] {\n    return Array.from(this.sessions.values());\n  }\n\n  remove(sessionId: string): void {\n    this.sessions.delete(sessionId);\n    this.onUpdate();\n  }\n\n  /** Override in subclasses for persistence */\n  protected onUpdate(): void {}\n}\n\n// ============================================================================\n// In-Memory Storage\n// ============================================================================\n\nexport class InMemoryStorage extends BaseStorage {\n  // No persistence needed\n}\n\n// ============================================================================\n// LocalStorage (Browser)\n// ============================================================================\n\nexport class BrowserLocalStorage extends BaseStorage {\n  private key: string;\n\n  constructor(key = 'x402-sessions') {\n    super();\n    this.key = key;\n    this.load();\n  }\n\n  protected override onUpdate(): void {\n    this.save();\n  }\n\n  private load(): void {\n    if (typeof localStorage === 'undefined') return;\n    try {\n      const data = localStorage.getItem(this.key);\n      if (data) {\n        const sessions: StoredSession[] = JSON.parse(data);\n        for (const s of sessions) this.sessions.set(s.sessionId, s);\n      }\n    } catch {\n      if (process.env.NODE_ENV !== 'production') {\n        console.warn('[x402] Failed to load sessions from localStorage');\n      }\n    }\n  }\n\n  private save(): void {\n    if (typeof localStorage === 'undefined') return;\n    try {\n      localStorage.setItem(this.key, JSON.stringify(Array.from(this.sessions.values())));\n    } catch {\n      if (process.env.NODE_ENV !== 'production') {\n        console.warn('[x402] Failed to save sessions to localStorage');\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\nexport function createStorage(\n  type: 'memory' | 'localStorage',\n  storageKey?: string\n): SessionStorage {\n  return type === 'localStorage' ? new BrowserLocalStorage(storageKey) : new InMemoryStorage();\n}\n","/**\n * Session Manager for x402 Escrow Scheme\n *\n * Handles session lifecycle: lookup, storage, and validation.\n * Uses the SessionStorage interface for persistence.\n */\n\nimport type { Address } from 'viem';\nimport type { Network } from '../types';\nimport { createStorage, type SessionStorage, type StoredSession } from './storage';\n\n// Re-export for convenience\nexport type { StoredSession } from './storage';\n\nexport interface SessionManagerOptions {\n  /** Storage type: 'memory' (default) or 'localStorage' */\n  storage?: 'memory' | 'localStorage';\n  /** localStorage key (default: 'x402-sessions') */\n  storageKey?: string;\n}\n\n/**\n * Manages session lifecycle for the escrow scheme.\n *\n * Responsibilities:\n * - Store sessions from escrow settlement responses\n * - Find best session for a receiver/amount\n * - Update session balances after debits\n * - Validate session expiry\n */\nexport class SessionManager {\n  private readonly storage: SessionStorage;\n  private readonly network: Network;\n\n  constructor(network: Network, options: SessionManagerOptions = {}) {\n    this.network = network;\n    this.storage = createStorage(options.storage ?? 'memory', options.storageKey);\n  }\n\n  /**\n   * Store a session from escrow settlement response.\n   */\n  store(session: Omit<StoredSession, 'createdAt'>): void {\n    this.storage.set({ ...session, createdAt: Date.now() });\n  }\n\n  /**\n   * Get session for a specific receiver.\n   */\n  getForReceiver(receiver: Address): StoredSession | null {\n    return this.storage.get(this.network, receiver);\n  }\n\n  /**\n   * Find best session for receiver with minimum balance.\n   */\n  findBest(receiver: Address, minAmount: bigint): StoredSession | null {\n    return this.storage.findBest(this.network, receiver, minAmount);\n  }\n\n  /**\n   * Check if valid session exists for receiver.\n   */\n  hasValid(receiver: Address, minAmount?: string): boolean {\n    const session = minAmount\n      ? this.storage.findBest(this.network, receiver, BigInt(minAmount))\n      : this.storage.get(this.network, receiver);\n    return session !== null;\n  }\n\n  /**\n   * Update session balance after debit.\n   */\n  updateBalance(sessionId: string, newBalance: string): void {\n    this.storage.update(sessionId, newBalance);\n  }\n\n  /**\n   * Get all stored sessions.\n   */\n  getAll(): StoredSession[] {\n    return this.storage.list();\n  }\n\n  /**\n   * Remove a specific session.\n   */\n  remove(sessionId: string): void {\n    this.storage.remove(sessionId);\n  }\n\n  /**\n   * Clear all sessions.\n   */\n  clear(): void {\n    for (const session of this.storage.list()) {\n      this.storage.remove(session.sessionId);\n    }\n  }\n}\n","/**\n * EIP-712 Signing Utilities for x402 Escrow\n *\n * Handles ERC-3009 ReceiveWithAuthorization signing and nonce computation\n * for the escrow contract.\n */\n\nimport {\n  keccak256,\n  encodeAbiParameters,\n  parseAbiParameters,\n  toHex,\n  type WalletClient,\n  type Address,\n  type Hex,\n} from 'viem';\nimport { ZERO_ADDRESS } from '../constants';\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EIP712Domain {\n  name: string;\n  version: string;\n  chainId: number;\n  verifyingContract: Address;\n}\n\nexport interface ERC3009Authorization {\n  from: Address;\n  to: Address;\n  value: bigint;\n  validAfter: bigint;\n  validBefore: bigint;\n  nonce: Hex;\n}\n\nexport interface PaymentInfoParams {\n  operator: Address;\n  payer: Address;\n  receiver: Address;\n  token: Address;\n  maxAmount: bigint;\n  preApprovalExpiry: number;\n  authorizationExpiry: number;\n  refundExpiry: number;\n  minFeeBps: number;\n  maxFeeBps: number;\n  feeReceiver: Address;\n  salt: bigint;\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** EIP-712 type string for PaymentInfo struct */\nconst PAYMENT_INFO_TYPE =\n  'PaymentInfo(address operator,address payer,address receiver,address token,uint120 maxAmount,uint48 preApprovalExpiry,uint48 authorizationExpiry,uint48 refundExpiry,uint16 minFeeBps,uint16 maxFeeBps,address feeReceiver,uint256 salt)';\n\n/** Pre-computed typehash for PaymentInfo */\nconst PAYMENT_INFO_TYPEHASH = keccak256(toHex(new TextEncoder().encode(PAYMENT_INFO_TYPE)));\n\n/** ABI parameter encoding for PaymentInfo struct */\nconst PAYMENT_INFO_ABI_PARAMS =\n  'bytes32, address, address, address, address, uint120, uint48, uint48, uint48, uint16, uint16, address, uint256';\n\n/** ABI parameter encoding for nonce computation */\nconst NONCE_ABI_PARAMS = 'uint256, address, bytes32';\n\n/** ERC-3009 ReceiveWithAuthorization type definition */\nconst ERC3009_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const;\n\n// ============================================================================\n// Functions\n// ============================================================================\n\n/**\n * Compute the nonce for ERC-3009 authorization.\n * Uses payer=0 for payer-agnostic hash (allows any payer to use this session).\n */\nexport function computeEscrowNonce(\n  chainId: number,\n  escrowContract: Address,\n  paymentInfo: PaymentInfoParams\n): Hex {\n  // Use payer=0 for payer-agnostic hash\n  const paymentInfoHash = keccak256(\n    encodeAbiParameters(parseAbiParameters(PAYMENT_INFO_ABI_PARAMS), [\n      PAYMENT_INFO_TYPEHASH,\n      paymentInfo.operator,\n      ZERO_ADDRESS, // payer = 0 for payer-agnostic\n      paymentInfo.receiver,\n      paymentInfo.token,\n      paymentInfo.maxAmount,\n      paymentInfo.preApprovalExpiry,\n      paymentInfo.authorizationExpiry,\n      paymentInfo.refundExpiry,\n      paymentInfo.minFeeBps,\n      paymentInfo.maxFeeBps,\n      paymentInfo.feeReceiver,\n      paymentInfo.salt,\n    ])\n  );\n\n  return keccak256(\n    encodeAbiParameters(parseAbiParameters(NONCE_ABI_PARAMS), [\n      BigInt(chainId),\n      escrowContract,\n      paymentInfoHash,\n    ])\n  );\n}\n\n/**\n * Sign an ERC-3009 ReceiveWithAuthorization message.\n * This is required by USDC FiatTokenV2 for gasless transfers.\n */\nexport async function signERC3009(\n  wallet: WalletClient,\n  authorization: ERC3009Authorization,\n  domain: EIP712Domain\n): Promise<Hex> {\n  if (!wallet.account) {\n    throw new Error('WalletClient must have an account');\n  }\n\n  return wallet.signTypedData({\n    account: wallet.account,\n    domain,\n    types: ERC3009_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: authorization.from,\n      to: authorization.to,\n      value: authorization.value,\n      validAfter: authorization.validAfter,\n      validBefore: authorization.validBefore,\n      nonce: authorization.nonce,\n    },\n  });\n}\n"],"mappings":";AAgCA,SAAS,WAAW,cAAAA,mBAAqC;AACzD,SAAS,kBAAkB;AAC3B,SAAS,4BAA4B;;;ACtBrC,SAAS,SAAAC,QAAO,kBAA6D;;;ACLtE,IAAM,eAAe;AAgFrB,SAAS,WAAW,KAAqB;AAC9C,MAAI;AACF,QAAI,OAAO,SAAS,aAAa;AAC/B,aAAO,mBAAmB,OAAO,KAAK,GAAG,CAAC,CAAC;AAAA,IAC7C;AACA,WAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AAAA,EACpD,QAAQ;AACN,WAAO,OAAO,KAAK,KAAK,QAAQ,EAAE,SAAS,OAAO;AAAA,EACpD;AACF;AAKO,SAAS,oBAA4B;AAC1C,MAAI,OAAO,WAAW,eAAe,OAAO,YAAY;AACtD,WAAO,OAAO,WAAW;AAAA,EAC3B;AACA,SAAO,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1E;AAKO,SAAS,oBAAoB,QAA4B;AAC9D,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,MAAI,OAAO,WAAW,eAAe,OAAO,iBAAiB;AAC3D,WAAO,gBAAgB,KAAK;AAAA,EAC9B,OAAO;AACL,aAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,YAAM,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,SAAO;AACT;;;ACpHO,IAAM,eAAe;AAGrB,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;;;AC6BrC,IAAe,cAAf,MAAqD;AAAA,EAArD;AACE,SAAU,WAAW,oBAAI,IAA2B;AAAA;AAAA,EAEpD,IAAI,SAAiB,UAAyC;AAC5D,UAAM,MAAM,KAAK,IAAI,IAAI;AACzB,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,UACE,QAAQ,YAAY,WACpB,QAAQ,SAAS,YAAY,MAAM,SAAS,YAAY,KACxD,QAAQ,sBAAsB,KAC9B;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,SAAS,SAAiB,UAAmB,WAAyC;AACpF,UAAM,MAAM,KAAK,IAAI,IAAI;AACzB,QAAI,OAA6B;AACjC,QAAI,cAAc;AAElB,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC5C,UACE,QAAQ,YAAY,WACpB,QAAQ,SAAS,YAAY,MAAM,SAAS,YAAY,KACxD,QAAQ,sBAAsB,KAC9B;AACA,cAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,YAAI,WAAW,aAAa,UAAU,aAAa;AACjD,iBAAO;AACP,wBAAc;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAA8B;AAChC,SAAK,SAAS,IAAI,QAAQ,WAAW,OAAO;AAC5C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,OAAO,WAAmB,SAAuB;AAC/C,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,SAAS;AACX,WAAK,SAAS,IAAI,WAAW,EAAE,GAAG,SAAS,QAAQ,CAAC;AACpD,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,OAAwB;AACtB,WAAO,MAAM,KAAK,KAAK,SAAS,OAAO,CAAC;AAAA,EAC1C;AAAA,EAEA,OAAO,WAAyB;AAC9B,SAAK,SAAS,OAAO,SAAS;AAC9B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAGU,WAAiB;AAAA,EAAC;AAC9B;AAMO,IAAM,kBAAN,cAA8B,YAAY;AAAA;AAEjD;AAMO,IAAM,sBAAN,cAAkC,YAAY;AAAA,EAGnD,YAAY,MAAM,iBAAiB;AACjC,UAAM;AACN,SAAK,MAAM;AACX,SAAK,KAAK;AAAA,EACZ;AAAA,EAEmB,WAAiB;AAClC,SAAK,KAAK;AAAA,EACZ;AAAA,EAEQ,OAAa;AACnB,QAAI,OAAO,iBAAiB,YAAa;AACzC,QAAI;AACF,YAAM,OAAO,aAAa,QAAQ,KAAK,GAAG;AAC1C,UAAI,MAAM;AACR,cAAM,WAA4B,KAAK,MAAM,IAAI;AACjD,mBAAW,KAAK,SAAU,MAAK,SAAS,IAAI,EAAE,WAAW,CAAC;AAAA,MAC5D;AAAA,IACF,QAAQ;AACN,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,gBAAQ,KAAK,kDAAkD;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,OAAa;AACnB,QAAI,OAAO,iBAAiB,YAAa;AACzC,QAAI;AACF,mBAAa,QAAQ,KAAK,KAAK,KAAK,UAAU,MAAM,KAAK,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC;AAAA,IACnF,QAAQ;AACN,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,gBAAQ,KAAK,gDAAgD;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,cACd,MACA,YACgB;AAChB,SAAO,SAAS,iBAAiB,IAAI,oBAAoB,UAAU,IAAI,IAAI,gBAAgB;AAC7F;;;ACrIO,IAAM,iBAAN,MAAqB;AAAA,EAI1B,YAAY,SAAkB,UAAiC,CAAC,GAAG;AACjE,SAAK,UAAU;AACf,SAAK,UAAU,cAAc,QAAQ,WAAW,UAAU,QAAQ,UAAU;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAiD;AACrD,SAAK,QAAQ,IAAI,EAAE,GAAG,SAAS,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,UAAyC;AACtD,WAAO,KAAK,QAAQ,IAAI,KAAK,SAAS,QAAQ;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,UAAmB,WAAyC;AACnE,WAAO,KAAK,QAAQ,SAAS,KAAK,SAAS,UAAU,SAAS;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,UAAmB,WAA6B;AACvD,UAAM,UAAU,YACZ,KAAK,QAAQ,SAAS,KAAK,SAAS,UAAU,OAAO,SAAS,CAAC,IAC/D,KAAK,QAAQ,IAAI,KAAK,SAAS,QAAQ;AAC3C,WAAO,YAAY;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,cAAc,WAAmB,YAA0B;AACzD,SAAK,QAAQ,OAAO,WAAW,UAAU;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,SAA0B;AACxB,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,WAAyB;AAC9B,SAAK,QAAQ,OAAO,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,eAAW,WAAW,KAAK,QAAQ,KAAK,GAAG;AACzC,WAAK,QAAQ,OAAO,QAAQ,SAAS;AAAA,IACvC;AAAA,EACF;AACF;;;AC5FA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AA2CP,IAAM,oBACJ;AAGF,IAAM,wBAAwB,UAAU,MAAM,IAAI,YAAY,EAAE,OAAO,iBAAiB,CAAC,CAAC;AAG1F,IAAM,0BACJ;AAGF,IAAM,mBAAmB;AAGzB,IAAM,gBAAgB;AAAA,EACpB,0BAA0B;AAAA,IACxB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC,EAAE,MAAM,MAAM,MAAM,UAAU;AAAA,IAC9B,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,cAAc,MAAM,UAAU;AAAA,IACtC,EAAE,MAAM,eAAe,MAAM,UAAU;AAAA,IACvC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,EACnC;AACF;AAUO,SAAS,mBACd,SACA,gBACA,aACK;AAEL,QAAM,kBAAkB;AAAA,IACtB,oBAAoB,mBAAmB,uBAAuB,GAAG;AAAA,MAC/D;AAAA,MACA,YAAY;AAAA,MACZ;AAAA;AAAA,MACA,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,oBAAoB,mBAAmB,gBAAgB,GAAG;AAAA,MACxD,OAAO,OAAO;AAAA,MACd;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAMA,eAAsB,YACpB,QACA,eACA,QACc;AACd,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAEA,SAAO,OAAO,cAAc;AAAA,IAC1B,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,OAAO;AAAA,IACP,aAAa;AAAA,IACb,SAAS;AAAA,MACP,MAAM,cAAc;AAAA,MACpB,IAAI,cAAc;AAAA,MAClB,OAAO,cAAc;AAAA,MACrB,YAAY,cAAc;AAAA,MAC1B,aAAa,cAAc;AAAA,MAC3B,OAAO,cAAc;AAAA,IACvB;AAAA,EACF,CAAC;AACH;;;AL/DO,IAAM,eAAN,MAAkD;AAAA,EAavD,YAAY,cAA4B,UAA+B,CAAC,GAAG;AAZ3E,SAAS,SAAS;AAahB,QAAI,CAAC,aAAa,SAAS;AACzB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,CAAC,aAAa,OAAO;AACvB,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,SAAK,SAAS;AACd,SAAK,UAAU,aAAa,MAAM;AAClC,SAAK,UAAU,UAAU,aAAa,MAAM,EAAE;AAC9C,SAAK,kBAAkB,QAAQ,mBAAmB;AAClD,SAAK,eAAe,QAAQ,gBAAgB;AAC5C,SAAK,sBAAsB,QAAQ,gBAAgB,OAAO,QAAQ,aAAa,IAAI;AACnF,SAAK,WAAW,IAAI,eAAe,KAAK,SAAS;AAAA,MAC/C,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,IAAI,UAAmB;AACrB,WAAO,KAAK,OAAO,QAAS;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,qBACJ,aACA,qBAC0D;AAC1D,UAAM,WAAW,WAAW,oBAAoB,KAAK;AACrD,UAAM,SAAS,OAAO,oBAAoB,MAAM;AAGhD,UAAM,kBAAkB,KAAK,SAAS,SAAS,UAAU,MAAM;AAE/D,QAAI,iBAAiB;AACnB,aAAO,KAAK,mBAAmB,aAAa,iBAAiB,oBAAoB,MAAM;AAAA,IACzF;AAEA,WAAO,KAAK,sBAAsB,aAAa,mBAAmB;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,mBACN,aACA,SACA,QACiD;AACjD,WAAO;AAAA,MACL;AAAA,MACA,SAAS;AAAA,QACP,SAAS;AAAA,UACP,IAAI,QAAQ;AAAA,UACZ,OAAO,QAAQ;AAAA,QACjB;AAAA,QACA;AAAA,QACA,WAAW,kBAAkB;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,sBACZ,aACA,qBAC0D;AAC1D,UAAM,QAAQ,oBAAoB;AAElC,QAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,eAAe,CAAC,MAAM,gBAAgB;AACxE,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AAGA,UAAM,iBAAiB,WAAW,MAAM,cAAc;AACtD,UAAM,cAAc,WAAW,MAAM,WAAW;AAChD,UAAM,iBAAiB,WAAW,MAAM,cAAc;AACtD,UAAM,WAAW,WAAW,oBAAoB,KAAK;AACrD,UAAM,QAAQ,WAAW,oBAAoB,KAAK;AAGlD,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,UAAM,OAAO,KAAK,aAAa;AAC/B,UAAM,sBAAsB,MAAM,KAAK;AACvC,UAAM,eAAe,sBAAsB,KAAK;AAGhD,UAAM,aAAa,MAAM,aACrB,OAAO,MAAM,UAAU,IACvB,OAAO,oBAAoB,MAAM;AACrC,UAAM,aAAa,MAAM,aAAa,OAAO,MAAM,UAAU,IAAI;AAEjE,QAAI;AACJ,QAAI,KAAK,wBAAwB,QAAW;AAE1C,UAAI,KAAK,sBAAsB,YAAY;AACzC,cAAM,IAAI;AAAA,UACR,kBAAkB,KAAK,mBAAmB,qBAAqB,UAAU;AAAA,QAC3E;AAAA,MACF;AACA,UAAI,KAAK,sBAAsB,YAAY;AACzC,cAAM,IAAI,MAAM,kBAAkB,KAAK,mBAAmB,oBAAoB,UAAU,EAAE;AAAA,MAC5F;AACA,eAAS,KAAK;AAAA,IAChB,OAAO;AAEL,eAAS;AAAA,IACX;AAEA,UAAM,aAAa;AACnB,UAAM,cAAc,OAAO,mBAAmB;AAG9C,UAAM,QAAQ,mBAAmB,KAAK,SAAS,gBAAgB;AAAA,MAC7D,UAAU;AAAA,MACV,OAAO,KAAK;AAAA,MACZ;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,mBAAmB;AAAA,MACnB;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,MACX,aAAa;AAAA,MACb,MAAM,OAAO,IAAI;AAAA,IACnB,CAAC;AAGD,UAAM,SAAuB;AAAA,MAC3B,MAAM,MAAM;AAAA,MACZ,SAAS,MAAM;AAAA,MACf,SAAS,KAAK;AAAA,MACd,mBAAmB;AAAA,IACrB;AAEA,UAAM,YAAY,MAAM;AAAA,MACtB,KAAK;AAAA,MACL,EAAE,MAAM,KAAK,SAAS,IAAI,gBAAgB,OAAO,QAAQ,YAAY,aAAa,MAAM;AAAA,MACxF;AAAA,IACF;AAGA,UAAM,UAAmC;AAAA,MACvC;AAAA,MACA,eAAe;AAAA,QACb,MAAM,KAAK;AAAA,QACX,IAAI;AAAA,QACJ,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,WAAW,SAAS;AAAA,QAChC,aAAa,YAAY,SAAS;AAAA,QAClC;AAAA,MACF;AAAA,MACA,eAAe;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,oBAAoB,WAAW,UAAU;AAC3C,cAAQ,YAAY,kBAAkB;AAAA,IACxC;AAGA,UAAM,WAAW;AAAA,MACf,QAAQ,oBAAoB;AAAA,MAC5B,SAAS,oBAAoB;AAAA,MAC7B,OAAO,oBAAoB;AAAA,MAC3B,QAAQ,oBAAoB;AAAA,MAC5B,OAAO,oBAAoB;AAAA,MAC3B,mBAAmB,oBAAoB;AAAA,MACvC,OAAO,EAAE,GAAG,oBAAoB,OAAO,aAAa,gBAAgB,eAAe;AAAA,IACrF;AAEA,WAAO,EAAE,aAAa,UAAU,QAAQ;AAAA,EAC1C;AAAA,EAEQ,eAAoB;AAC1B,WAAOC,OAAM,oBAAoB,EAAE,CAAC;AAAA,EACtC;AACF;;;AD3MO,SAAS,kBACd,cACA,SACmB;AACnB,QAAM,SAAS,IAAI,aAAa,cAAc,OAAO;AACrD,QAAM,OAAO,IAAI,WAAW,EAAE,SAAS,OAAO,SAAS,MAAM;AAG7D,QAAM,YAAY,SAAS,SAAS,WAAW;AAC/C,QAAM,YAAY,qBAAqB,WAAW,IAAI;AAEtD,SAAO;AAAA,IACL,OAAO,sBAAsB,WAAW,MAAM;AAAA,IAC9C;AAAA,IACA;AAAA;AAAA,EACF;AACF;AAeA,SAAS,eAAe,WAAyB,cAAkC;AACjF,QAAM,wBAAwB,UAAU,kBAAkB,KAAK,UAAU,kBAAkB;AAC3F,MAAI,CAAC,sBAAuB;AAE5B,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,WAAW,qBAAqB,CAAC;AAGzD,QAAI,CAAC,KAAK,SAAS,GAAI;AAGvB,QAAI,CAAC,KAAK,QAAQ,OAAO;AAEvB,UAAI,KAAK,QAAQ,YAAY,QAAW;AACtC,qBAAa,SAAS,cAAc,KAAK,QAAQ,IAAI,KAAK,QAAQ,OAAO;AAAA,MAC3E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,KAAK,cAAc,SAAS,KAAK;AAClD,QAAI,CAAC,UAAU;AACb,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,gBAAQ,KAAK,gDAAgD;AAAA,MAC/D;AACA;AAAA,IACF;AAGA,QAAI,CAAC,UAAU,QAAQ,GAAG;AACxB,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,gBAAQ,KAAK,+CAA+C,QAAQ;AAAA,MACtE;AACA;AAAA,IACF;AAEA,iBAAa,SAAS,MAAM;AAAA,MAC1B,WAAW,KAAK,QAAQ;AAAA,MACxB,cAAc,KAAK,QAAQ;AAAA,MAC3B,SAAS,aAAa;AAAA,MACtB,OAAO,aAAa;AAAA,MACpB,UAAUC,YAAW,QAAQ;AAAA,MAC7B,SAAS,KAAK,QAAQ,WAAW;AAAA,MACjC,qBAAqB,KAAK,QAAQ,aAAa;AAAA,IACjD,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,cAAQ,KAAK,4CAA4C,KAAK;AAAA,IAChE;AAAA,EACF;AACF;AAqBO,SAAS,sBAAsB,WAAsB,cAAuC;AACjG,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,WAAW,MAAM,UAAU,OAAO,IAAI;AAC5C,mBAAe,CAAC,SAAS,SAAS,QAAQ,IAAI,IAAI,GAAG,YAAY;AACjE,WAAO;AAAA,EACT;AACF;AA0BO,SAAS,2BAA2B,cAA4B;AACrE,SAAO,CAA8B,aAAmB;AACtD,mBAAe,CAAC,SAAS,SAAS,QAAQ,KAAK,YAAY,CAAC,GAAG,YAAY;AAC3E,WAAO;AAAA,EACT;AACF;","names":["getAddress","toHex","toHex","getAddress"]}