@atumlabs/payment-gateway-client 2.0.0 → 2.2.0

package/dist/cli/quote-status.js

@@ -1,4 +1,10 @@
 #!/usr/bin/env node
+/*
+ * Copyright (c) 2026 Atum Labs, Inc. All rights reserved.
+ * Proprietary and confidential.
+ * Access and use are governed by the LICENSE file distributed with this package.
+ * Do not remove, alter, or obscure this notice.
+ */
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -243,12 +249,14 @@ var require_utils = __commonJS({
   "../schemas/declarations/PaymentRequest/v1/bindings/typescript/sender-auth/dist/utils.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.SOLANA_REPLAY_SLOTS = exports2.PERMIT_NONCE_DOMAIN = exports2.REPLAY_HORIZON_SECS = void 0;
+    exports2.REQUEST_ID_DOMAIN = exports2.SOLANA_REPLAY_SLOTS = exports2.PERMIT_NONCE_DOMAIN = exports2.REPLAY_HORIZON_SECS = void 0;
     exports2.resolvePermitDeadline = resolvePermitDeadline;
     exports2.generatePermitNonce = generatePermitNonce;
     exports2.resolvePermitNonce = resolvePermitNonce;
+    exports2.canonicalDepositor = canonicalDepositor;
     exports2.deterministicPermitNonce = deterministicPermitNonce2;
     exports2.deterministicSolanaNonce = deterministicSolanaNonce2;
+    exports2.deterministicRequestId = deterministicRequestId;
     exports2.sameAddress = sameAddress;
     exports2.assertKeyMatchesSender = assertKeyMatchesSender2;
     exports2.assertToken = assertToken;
@@ -293,6 +301,20 @@ var require_utils = __commonJS({
       const bucket = (seed >> 8n) % (1n << SOLANA_BUCKET_BITS);
       return bucket << 32n | slot;
     }
+    exports2.REQUEST_ID_DOMAIN = "atum-request:v1:";
+    function deterministicRequestId(params) {
+      if (!params.anchor) {
+        throw new Error("sender_auth: a per-intent anchor is required to derive a deterministic request_id (a random one would silently break idempotency and let a retry double-charge)");
+      }
+      if (!params.account) {
+        throw new Error("sender_auth: account is required to derive a deterministic request_id");
+      }
+      if (!/^[A-Za-z0-9_-]*$/.test(params.prefix)) {
+        throw new Error(`sender_auth: request_id prefix must contain only letters, digits, '_' or '-' (got ${JSON.stringify(params.prefix)})`);
+      }
+      const digest = (0, ethers_1.keccak256)((0, ethers_1.toUtf8Bytes)(`${exports2.REQUEST_ID_DOMAIN}${params.anchor}:${canonicalDepositor(params.account)}`));
+      return `${params.prefix}${digest.slice(2, 26)}`;
+    }
     function sameAddress(a, b) {
       if (a.startsWith("0x") && b.startsWith("0x")) {
         return a.toLowerCase() === b.toLowerCase();
@@ -884,7 +906,7 @@ var require_evm = __commonJS({
     exports2.evmAdapter = {
       async buildAuthMessage({ sourceAsset, maxSourceAmount, sourceDefaults, deadline, nonce }) {
         if (nonce === void 0) {
-          throw new Error("sender_auth: buildAuthMessage requires an explicit nonce \u2014 derive it deterministically from a stable request id (e.g. the challenge id) so retries reproduce the same permit; pass generatePermitNonce() only for genuinely one-shot builds");
+          throw new Error("sender_auth: buildAuthMessage requires an explicit nonce \u2014 derive it deterministically from a stable request id (e.g. an order id) so retries reproduce the same permit; pass generatePermitNonce() only for genuinely one-shot builds");
         }
         if (deadline === void 0) {
           throw new Error("sender_auth: buildAuthMessage requires an explicit permit deadline (absolute Unix seconds) \u2014 the low-level builder does not default it; derive it from the payment's fulfillment/settlement deadline in the calling layer (pgc/mppx)");
@@ -912,6 +934,10 @@ var require_evm = __commonJS({
           throw new Error("EVM adapter sign(): signed_messages[i].message_prehash is required");
         }
         const prehash = JSON.parse(signedMessage.message_prehash);
+        const prehashDigest = (0, evm_escrow_encoding_1.hashPermitWitnessTransferFrom)(prehash);
+        if (prehashDigest.toLowerCase() !== signedMessage.message.toLowerCase()) {
+          throw new Error(`EVM adapter sign(): message_prehash implies digest ${prehashDigest} but message is ${signedMessage.message}`);
+        }
         const wallet = new ethers_1.Wallet(privateKey);
         return wallet.signTypedData(prehash.domain, prehash.types, prehash.message);
       },
@@ -998,7 +1024,7 @@ var require_tron = __commonJS({
     exports2.tronAdapter = {
       async buildAuthMessage({ sourceAsset, maxSourceAmount, sourceDefaults, deadline, nonce }) {
         if (nonce === void 0) {
-          throw new Error("sender_auth: buildAuthMessage requires an explicit nonce \u2014 derive it deterministically from a stable request id (e.g. the challenge id) so retries reproduce the same permit; pass generatePermitNonce() only for genuinely one-shot builds");
+          throw new Error("sender_auth: buildAuthMessage requires an explicit nonce \u2014 derive it deterministically from a stable request id (e.g. an order id) so retries reproduce the same permit; pass generatePermitNonce() only for genuinely one-shot builds");
         }
         if (deadline === void 0) {
           throw new Error("sender_auth: buildAuthMessage requires an explicit permit deadline (absolute Unix seconds) \u2014 the low-level builder does not default it; derive it from the payment's fulfillment/settlement deadline in the calling layer (pgc/mppx)");
@@ -1021,9 +1047,19 @@ var require_tron = __commonJS({
         const messageHash = (0, tvm_escrow_encoding_1.hashTvmPermitWitnessTransferFrom)(messagePrehash);
         return { messageScheme: "EVM_PERMIT2", messageHash, messagePrehash: JSON.stringify(messagePrehash) };
       },
+      // Signs the TIP-712 typed data, not the bare digest, so a signer can inspect the fields it is
+      // authorizing (Turnkey policies read `eth.eip_712.message[...]`).
       async sign(signedMessage, privateKey) {
+        if (!signedMessage.message_prehash) {
+          throw new Error("Tron adapter sign(): signed_messages[i].message_prehash is required");
+        }
+        const prehash = JSON.parse(signedMessage.message_prehash);
+        const prehashDigest = (0, tvm_escrow_encoding_1.hashTvmPermitWitnessTransferFrom)(prehash);
+        if (prehashDigest.toLowerCase() !== signedMessage.message.toLowerCase()) {
+          throw new Error(`Tron adapter sign(): message_prehash implies digest ${prehashDigest} but message is ${signedMessage.message}`);
+        }
         const wallet = new ethers_1.Wallet(privateKey.startsWith("0x") ? privateKey : "0x" + privateKey);
-        return wallet.signingKey.sign(signedMessage.message).serialized;
+        return wallet.signTypedData(prehash.domain, prehash.types, prehash.message);
       },
       recoverSigner(signed, source) {
         let recovered;
@@ -2445,7 +2481,7 @@ var Interceptors = class {
   }
 };
 var OpenAPI = {
-  BASE: "https://api.atum.network",
+  BASE: "https://payment-gw.production-mainnet.atum.xyz",
   CREDENTIALS: "include",
   ENCODE_PATH: void 0,
   HEADERS: void 0,
@@ -2462,8 +2498,8 @@ var OpenAPI = {
 
 // src/generated/core/BaseHttpRequest.ts
 var BaseHttpRequest = class {
-  constructor(config) {
-    this.config = config;
+  constructor(config2) {
+    this.config = config2;
   }
 };
 
@@ -2614,15 +2650,15 @@ var getQueryString = (params) => {
   Object.entries(params).forEach(([key, value]) => encodePair(key, value));
   return qs.length ? `?${qs.join("&")}` : "";
 };
-var getUrl = (config, options) => {
-  const encoder = config.ENCODE_PATH || encodeURI;
-  const path = options.url.replace("{api-version}", config.VERSION).replace(/{(.*?)}/g, (substring, group) => {
+var getUrl = (config2, options) => {
+  const encoder = config2.ENCODE_PATH || encodeURI;
+  const path = options.url.replace("{api-version}", config2.VERSION).replace(/{(.*?)}/g, (substring, group) => {
     if (options.path?.hasOwnProperty(group)) {
       return encoder(String(options.path[group]));
     }
     return substring;
   });
-  const url = config.BASE + path;
+  const url = config2.BASE + path;
   return options.query ? url + getQueryString(options.query) : url;
 };
 var getFormData = (options) => {
@@ -2652,12 +2688,12 @@ var resolve = async (options, resolver) => {
   }
   return resolver;
 };
-var getHeaders = async (config, options) => {
+var getHeaders = async (config2, options) => {
   const [token, username, password, additionalHeaders] = await Promise.all([
-    resolve(options, config.TOKEN),
-    resolve(options, config.USERNAME),
-    resolve(options, config.PASSWORD),
-    resolve(options, config.HEADERS)
+    resolve(options, config2.TOKEN),
+    resolve(options, config2.USERNAME),
+    resolve(options, config2.PASSWORD),
+    resolve(options, config2.HEADERS)
   ]);
   const headers = Object.entries({
     Accept: "application/json",
@@ -2697,7 +2733,7 @@ var getRequestBody = (options) => {
   }
   return void 0;
 };
-var sendRequest = async (config, options, url, body, formData, headers, onCancel, axiosClient) => {
+var sendRequest = async (config2, options, url, body, formData, headers, onCancel, axiosClient) => {
   const controller = new AbortController();
   let requestConfig = {
     data: body ?? formData,
@@ -2705,10 +2741,10 @@ var sendRequest = async (config, options, url, body, formData, headers, onCancel
     method: options.method,
     signal: controller.signal,
     url,
-    withCredentials: config.WITH_CREDENTIALS
+    withCredentials: config2.WITH_CREDENTIALS
   };
   onCancel(() => controller.abort());
-  for (const fn of config.interceptors.request._fns) {
+  for (const fn of config2.interceptors.request._fns) {
     requestConfig = await fn(requestConfig);
   }
   try {
@@ -2801,16 +2837,16 @@ var catchErrorCodes = (options, result) => {
     );
   }
 };
-var request = (config, options, axiosClient = import_axios.default) => {
+var request = (config2, options, axiosClient = import_axios.default) => {
   return new CancelablePromise(async (resolve2, reject, onCancel) => {
     try {
-      const url = getUrl(config, options);
+      const url = getUrl(config2, options);
       const formData = getFormData(options);
       const body = getRequestBody(options);
-      const headers = await getHeaders(config, options);
+      const headers = await getHeaders(config2, options);
       if (!onCancel.isCancelled) {
-        let response = await sendRequest(config, options, url, body, formData, headers, onCancel, axiosClient);
-        for (const fn of config.interceptors.response._fns) {
+        let response = await sendRequest(config2, options, url, body, formData, headers, onCancel, axiosClient);
+        for (const fn of config2.interceptors.response._fns) {
           response = await fn(response);
         }
         const responseBody = getResponseBody(response);
@@ -2833,8 +2869,8 @@ var request = (config, options, axiosClient = import_axios.default) => {
 
 // src/generated/core/AxiosHttpRequest.ts
 var AxiosHttpRequest = class extends BaseHttpRequest {
-  constructor(config) {
-    super(config);
+  constructor(config2) {
+    super(config2);
   }
   /**
    * Request method
@@ -2861,8 +2897,26 @@ var PaymentsService = class {
    * 2. Find optimal settlement routes across chains/assets
    * 3. Secure funds in escrow
    * 4. Coordinate with settlement agents for execution
-   * 5. Return a real-time result if processing completes within 30 seconds,
-   * otherwise return a payment ID for status polling
+   * 5. Return a real-time result if settlement completes inside the synchronous window,
+   * otherwise return a payment ID and status for polling
+   *
+   * **Idempotency.** `request_id` is the idempotency key, scoped to the source account
+   * and originator. Submitting the same `request_id` again returns the ORIGINAL payment
+   * instead of charging a second time, so a client whose request timed out or failed
+   * in transit can safely re-submit.
+   *
+   * Because a re-submission must be admissible on its own, some fields legitimately
+   * differ between attempts and are excluded from the comparison: `quote_deadline` and
+   * `fulfillment_deadline` (both must be in the future, so a later attempt has to move
+   * them), and the `sender_auth` signature they are signed into.
+   *
+   * What must NOT differ is the payment's economics — source account and asset,
+   * destination accounts and assets, `fulfillment_amount`, and `max_source_amount` (the
+   * payer's own risk cap; lowering it on a retry describes a different payment, not the
+   * same one with less headroom). Re-using one `request_id` for a genuinely different
+   * payment is a client bug that would otherwise be silently collapsed onto the first
+   * payment, so it is rejected with `409` and `IDEMPOTENCY_TERMS_MISMATCH`. Use a
+   * distinct `request_id` per payment.
    *
    * @param data The data for the request.
    * @param data.requestBody
@@ -2879,6 +2933,11 @@ var PaymentsService = class {
         400: "Invalid request",
         401: "Signature or sender authorization could not be verified",
         403: "Payment declined during counterparty authorization",
+        409: `The \`request_id\` has already been used for a payment with different economics
+(\`IDEMPOTENCY_TERMS_MISMATCH\`). Re-submitting one \`request_id\` is how a retry is
+made safe, so it must identify one payment; use a distinct \`request_id\` per
+payment.
+`,
         413: "Payment request too large to process",
         500: "Internal server error",
         503: "A dependency is temporarily unavailable"
@@ -3166,20 +3225,20 @@ var HealthService = class {
 
 // src/generated/PaymentGatewayClient.ts
 var PaymentGatewayClient = class {
-  constructor(config, HttpRequest = AxiosHttpRequest) {
+  constructor(config2, HttpRequest = AxiosHttpRequest) {
     this.request = new HttpRequest({
-      BASE: config?.BASE ?? "https://api.atum.network",
-      VERSION: config?.VERSION ?? "1.0.0",
-      WITH_CREDENTIALS: config?.WITH_CREDENTIALS ?? false,
-      CREDENTIALS: config?.CREDENTIALS ?? "include",
-      TOKEN: config?.TOKEN,
-      USERNAME: config?.USERNAME,
-      PASSWORD: config?.PASSWORD,
-      HEADERS: config?.HEADERS,
-      ENCODE_PATH: config?.ENCODE_PATH,
+      BASE: config2?.BASE ?? "https://payment-gw.production-mainnet.atum.xyz",
+      VERSION: config2?.VERSION ?? "1.0.0",
+      WITH_CREDENTIALS: config2?.WITH_CREDENTIALS ?? false,
+      CREDENTIALS: config2?.CREDENTIALS ?? "include",
+      TOKEN: config2?.TOKEN,
+      USERNAME: config2?.USERNAME,
+      PASSWORD: config2?.PASSWORD,
+      HEADERS: config2?.HEADERS,
+      ENCODE_PATH: config2?.ENCODE_PATH,
       interceptors: {
-        request: config?.interceptors?.request ?? new Interceptors(),
-        response: config?.interceptors?.response ?? new Interceptors()
+        request: config2?.interceptors?.request ?? new Interceptors(),
+        response: config2?.interceptors?.response ?? new Interceptors()
       }
     });
     this.authorizations = new AuthorizationsService(this.request);
@@ -3389,7 +3448,8 @@ var import_payment_request_sender_auth = __toESM(require_dist4());
 
 // src/index.ts
 var PAYMENT_REQUEST_VERSION = "1.0";
-var defaultGateway = "https://payment-gateway-testnet.atumlabs.xyz";
+var defaultGateway = "https://payment-gw.production-testnet.atum.xyz";
+var OpenAPI2 = { ...OpenAPI, BASE: defaultGateway };
 var DEFAULT_QUOTE_DEADLINE_SECONDS = 5;
 var DEFAULT_FULFILLMENT_DEADLINE_SECONDS = 3600;
 var DEFAULT_PAYMENT_QUOTE_DEADLINE_SECONDS = 10;
@@ -3477,9 +3537,11 @@ async function assemblePaymentRequest(params) {
   };
 }
 var PaymentGatewayClient2 = class extends PaymentGatewayClient {
-  constructor(config, HttpRequest = AxiosHttpRequest) {
-    super(config, HttpRequest);
-    this.baseUrl = config?.BASE ?? defaultGateway;
+  constructor(config2, HttpRequest = AxiosHttpRequest) {
+    const envBase = (typeof process !== "undefined" ? process.env.GATEWAY_URL : void 0)?.trim();
+    const base = config2?.BASE ?? (envBase || defaultGateway);
+    super({ ...config2, BASE: base }, HttpRequest);
+    this.baseUrl = base;
   }
   /**
    * Fetches chain defaults from the payment gateway.
@@ -3694,9 +3756,19 @@ var PaymentGatewayClient2 = class extends PaymentGatewayClient {
   }
 };
 
+// src/version.ts
+var PACKAGE_VERSION = true ? "2.2.0" : "0.0.0-dev";
+
+// src/cli/load-env.ts
+var import_dotenv = require("dotenv");
+function loadCliEnv() {
+  (0, import_dotenv.config)({ override: false, quiet: true });
+}
+
 // src/cli/quote-status.ts
+loadCliEnv();
 var program = new import_commander.Command();
-program.name("quote-status").description("Fetch the status of a quote-request batch (no signing required)").version("1.0.0").argument("<quoteRequestId>", "The quote_request_id (qr_...) returned by request-quote").option("--gateway <url>", "Payment gateway URL", defaultGateway).addHelpText("after", `
+program.name("quote-status").description("Fetch the status of a quote-request batch (no signing required)").version(PACKAGE_VERSION).argument("<quoteRequestId>", "The quote_request_id (qr_...) returned by request-quote").option("--gateway <url>", "Payment gateway URL (overrides GATEWAY_URL env; default: production-testnet)").addHelpText("after", `
 Example:
   quote-status --gateway http://localhost:8080 qr_019f27b9-420d-7353-8263-0cf310670a77