@daski/x402-scheme 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Daski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+# `@daski/x402-scheme`
+
+A composite Exact-EVM client plugin for the modular x402 v2 SDK, and the
+policy validator that decides whether a challenge may be signed at all.
+
+```bash
+npm install @daski/x402-scheme @x402/core @x402/evm
+```
+
+## It wraps, it does not replace
+
+```ts
+import { x402Client } from "@x402/core/client";
+import { ExactEvmScheme } from "@x402/evm/exact/client";
+import { registerDaskiExactEvmScheme } from "@daski/x402-scheme";
+
+const client = new x402Client();
+registerDaskiExactEvmScheme(client, {
+  network: "eip155:84532",
+  signer,                              // your SignerAdapter
+  payerAddress,
+  policy,                              // PolicyConfig — no config, no signing
+  stock: new ExactEvmScheme(account),  // wrapped, not discarded
+  resolvePurchaseContext,              // what you're buying, what you approved
+});
+```
+
+On `PaymentRequired`:
+
+- **`extensions["daski-order-binding"]` present** → the Daski path: validate,
+  recompute, sign.
+- **absent** → the wrapped stock handler, called with the same requirements and
+  context objects, by reference, untouched.
+
+The scheme name stays `"exact"`, because that is the only name the facilitator
+knows — inventing a second one would make the payments unverifiable.
+`findDefaultAsset` and `schemeHooks` are forwarded, so registering the
+composite does not quietly disable the host's spend controls.
+
+## The policy validator
+
+`PolicyConfig` is required. No config, no signing.
+
+Every expectation is config- or catalog-sourced; nothing is read from the
+challenge being validated. Before any purchase authorization is signed:
+
+1. Chain and verifying contract equal the pinned profile values
+2. `types` is exactly the closed 6-field `TransferWithAuthorization`
+3. `message.from` is the configured payer
+4. `message.to` is corroborated by **two** independent catalog sources
+5. The amount matches the challenge, the approved quote, and the caps
+6. The validity window is sane, and does not outlive the binding
+7. The payment identifier is unused
+8. (Lifecycle) the action URI and request hash are **recomputed**, not accepted
+
+Failures raise `PolicyRefusal`, carrying the failed check, a stable code, and
+a remediation. The validator never repairs a payload and proceeds.
+
+## Recipe recomputation
+
+```ts
+import { recipeNonceV2 } from "@daski/x402-scheme";
+```
+
+The authorization nonce is a commitment to the whole deal — chain, token,
+payer, splitter, amount, and the five deal hashes. Recomputing it locally is
+what lets you sign a server-proposed authorization without trusting the
+server. When the gateway supplies `daski-sign-request`, its proposal is
+treated as an input: recomputed, compared, and refused on mismatch.
+
+Both `recipeNonce` (v1) and `recipeNonceV2` are implemented and pinned by
+tests against a vector produced independently by the reference client behind
+43 settled sandbox orders.
+
+## Examples
+
+[`examples/fetch`](../../examples/fetch) · [`examples/mcp`](../../examples/mcp)
+
+## License
+
+MIT

package/dist/binding.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The `daski-order-binding` challenge extension: parsed as a closed shape.
+ *
+ * "Closed" is load-bearing. An extra field in a binding is a field the bridge
+ * did not check and did not feed into the recipe recomputation, so a binding
+ * that carries one is refused rather than trimmed.
+ */
+import type { Hex } from "viem";
+export interface OrderBindingV1 {
+    version: 1;
+    profile: "recipe-bound-v1";
+    listingManifestHash: Hex;
+    providerOfferHash: Hex;
+    quoteHash: Hex;
+    canonicalRequestHash: Hex;
+    orderNonce: Hex;
+    expiresAt: number;
+}
+/** Catalog-driven checkout: the runtime listing commitment plus the
+ *  provider's signed registration intent. */
+export interface OrderBindingV2 {
+    version: 2;
+    profile: "recipe-bound-v2";
+    runtimeCommitmentHash: Hex;
+    providerIntentHash: Hex;
+    quoteHash: Hex;
+    canonicalRequestHash: Hex;
+    orderNonce: Hex;
+    expiresAt: number;
+}
+export type OrderBinding = OrderBindingV1 | OrderBindingV2;
+/**
+ * Parses the `daski-order-binding` extension, or returns `undefined` when the
+ * challenge carries none (the stock-delegation path).
+ */
+export declare function parseOrderBinding(value: unknown): OrderBinding | undefined;
+//# sourceMappingURL=binding.d.ts.map

package/dist/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAKhC,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,iBAAiB,CAAC;IAC3B,mBAAmB,EAAE,GAAG,CAAC;IACzB,iBAAiB,EAAE,GAAG,CAAC;IACvB,SAAS,EAAE,GAAG,CAAC;IACf,oBAAoB,EAAE,GAAG,CAAC;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;6CAC6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qBAAqB,EAAE,GAAG,CAAC;IAC3B,kBAAkB,EAAE,GAAG,CAAC;IACxB,SAAS,EAAE,GAAG,CAAC;IACf,oBAAoB,EAAE,GAAG,CAAC;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,cAAc,CAAC;AAS3D;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,SAAS,CA8D1E"}

package/dist/binding.js

@@ -0,0 +1,74 @@
+import { refuse } from "./errors.js";
+const HEX32 = /^0x[0-9a-fA-F]{64}$/;
+const SHARED_SLOTS = ["quoteHash", "canonicalRequestHash", "orderNonce"];
+const DEAL_SLOTS_V1 = ["listingManifestHash", "providerOfferHash"];
+const DEAL_SLOTS_V2 = ["runtimeCommitmentHash", "providerIntentHash"];
+const BINDING_DOC = "https://github.com/daski-io/buyer/blob/main/docs/policy.md#daski-order-binding";
+/**
+ * Parses the `daski-order-binding` extension, or returns `undefined` when the
+ * challenge carries none (the stock-delegation path).
+ */
+export function parseOrderBinding(value) {
+    if (value === undefined)
+        return undefined;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_BINDING_NOT_AN_OBJECT",
+            expected: "an object under extensions['daski-order-binding']",
+            actual: Array.isArray(value) ? "an array" : typeof value,
+            remediation: `Request a fresh challenge; see ${BINDING_DOC}`,
+        });
+    }
+    const binding = value;
+    const isV2 = binding.profile === "recipe-bound-v2";
+    const dealSlots = isV2 ? DEAL_SLOTS_V2 : DEAL_SLOTS_V1;
+    const expectedKeys = [
+        "version", "profile", ...dealSlots, ...SHARED_SLOTS, "expiresAt",
+    ].sort();
+    const actualKeys = Object.keys(binding).sort();
+    if (actualKeys.join(",") !== expectedKeys.join(",")) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_BINDING_OPEN_SHAPE",
+            expected: `exactly [${expectedKeys.join(", ")}]`,
+            actual: `[${actualKeys.join(", ")}]`,
+            remediation: "An unrecognized binding layout cannot be recomputed, so it cannot be " +
+                `signed. Upgrade @daski/x402-scheme, or see ${BINDING_DOC}`,
+        });
+    }
+    const versionOk = isV2
+        ? binding.version === 2
+        : binding.version === 1 && binding.profile === "recipe-bound-v1";
+    if (!versionOk) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_BINDING_UNKNOWN_PROFILE",
+            expected: "recipe-bound-v1 (version 1) or recipe-bound-v2 (version 2)",
+            actual: `profile=${String(binding.profile)} version=${String(binding.version)}`,
+            remediation: `Upgrade @daski/x402-scheme; see ${BINDING_DOC}`,
+        });
+    }
+    for (const slot of [...dealSlots, ...SHARED_SLOTS]) {
+        if (!HEX32.test(String(binding[slot]))) {
+            refuse({
+                check: "challenge-shape",
+                code: "DASKI_BINDING_MALFORMED_SLOT",
+                expected: `${slot} to be a 32-byte hex string`,
+                actual: `${slot}=${String(binding[slot])}`,
+                remediation: `Request a fresh challenge; see ${BINDING_DOC}`,
+            });
+        }
+    }
+    if (!Number.isSafeInteger(binding.expiresAt) || Number(binding.expiresAt) <= 0) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_BINDING_MALFORMED_EXPIRY",
+            expected: "expiresAt to be a positive unix timestamp in seconds",
+            actual: `expiresAt=${String(binding.expiresAt)}`,
+            remediation: `Request a fresh challenge; see ${BINDING_DOC}`,
+        });
+    }
+    return binding;
+}
+//# sourceMappingURL=binding.js.map

package/dist/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,KAAK,GAAG,qBAAqB,CAAC;AA4BpC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE,YAAY,CAAU,CAAC;AAClF,MAAM,aAAa,GAAG,CAAC,qBAAqB,EAAE,mBAAmB,CAAU,CAAC;AAC5E,MAAM,aAAa,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAU,CAAC;AAE/E,MAAM,WAAW,GACf,gFAAgF,CAAC;AAEnF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,mDAAmD;YAC7D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK;YACxD,WAAW,EAAE,kCAAkC,WAAW,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;IACvD,MAAM,YAAY,GAAG;QACnB,SAAS,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,YAAY,EAAE,WAAW;KACjE,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,YAAY,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChD,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpC,WAAW,EACT,uEAAuE;gBACvE,8CAA8C,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,IAAI;QACpB,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC;QACvB,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC;IACnE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,4DAA4D;YACtE,MAAM,EAAE,WAAW,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC/E,WAAW,EAAE,mCAAmC,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC;gBACL,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,GAAG,IAAI,6BAA6B;gBAC9C,MAAM,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC1C,WAAW,EAAE,kCAAkC,WAAW,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,sDAAsD;YAChE,MAAM,EAAE,aAAa,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAChD,WAAW,EAAE,kCAAkC,WAAW,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAkC,CAAC;AAC5C,CAAC"}

package/dist/canonical.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Canonical JSON, byte-identical to the gateway's.
+ *
+ * Object keys sort, numbers must be finite, lone surrogates are rejected, and
+ * `undefined` is an error rather than an omission. The bridge uses this to
+ * recompute the `requestHash` in a lifecycle challenge instead of trusting
+ * the one it was handed.
+ */
+import { type Hex } from "viem";
+export declare const canonicalJson: (value: unknown) => string;
+export declare const canonicalHash: (value: unknown) => Hex;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA0B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAsCxD,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,MAA+B,CAAC;AAC/E,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,GAAoD,CAAC"}

package/dist/canonical.js

@@ -0,0 +1,53 @@
+/**
+ * Canonical JSON, byte-identical to the gateway's.
+ *
+ * Object keys sort, numbers must be finite, lone surrogates are rejected, and
+ * `undefined` is an error rather than an omission. The bridge uses this to
+ * recompute the `requestHash` in a lifecycle challenge instead of trusting
+ * the one it was handed.
+ */
+import { keccak256, stringToHex } from "viem";
+function assertValidUnicode(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code >= 0xd800 && code <= 0xdbff) {
+            const next = value.charCodeAt(index + 1);
+            if (!(next >= 0xdc00 && next <= 0xdfff)) {
+                throw new Error("Canonical JSON contains invalid Unicode");
+            }
+            index += 1;
+        }
+        else if (code >= 0xdc00 && code <= 0xdfff) {
+            throw new Error("Canonical JSON contains invalid Unicode");
+        }
+    }
+}
+function canonicalValue(value) {
+    if (value === null)
+        return "null";
+    if (typeof value === "string") {
+        assertValidUnicode(value);
+        return JSON.stringify(value);
+    }
+    if (typeof value === "boolean")
+        return JSON.stringify(value);
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new Error("Canonical JSON accepts only finite numbers");
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value))
+        return `[${value.map(canonicalValue).join(",")}]`;
+    if (!value || typeof value !== "object")
+        throw new Error("Unsupported canonical value");
+    const object = value;
+    return `{${Object.keys(object).sort().map((key) => {
+        assertValidUnicode(key);
+        if (object[key] === undefined)
+            throw new Error("Undefined canonical value");
+        return `${JSON.stringify(key)}:${canonicalValue(object[key])}`;
+    }).join(",")}}`;
+}
+export const canonicalJson = (value) => canonicalValue(value);
+export const canonicalHash = (value) => keccak256(stringToHex(canonicalValue(value)));
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAY,MAAM,MAAM,CAAC;AAExD,SAAS,kBAAkB,CAAC,KAAa;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChD,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC5E,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAO,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/eip712.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The one typed-data shape this package will ever sign for a purchase.
+ *
+ * `TransferWithAuthorization` is declared here as a closed literal and
+ * compared field-for-field against whatever the server proposes. The bridge
+ * never signs a server-supplied `types` object: it signs *this* one, after
+ * confirming the server asked for exactly this one.
+ */
+import type { Address, Hex } from "viem";
+export declare const TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE: "TransferWithAuthorization";
+/** The closed 6-field EIP-3009 type set. Order is part of the hash. */
+export declare const TRANSFER_WITH_AUTHORIZATION_TYPES: {
+    readonly TransferWithAuthorization: readonly [{
+        readonly name: "from";
+        readonly type: "address";
+    }, {
+        readonly name: "to";
+        readonly type: "address";
+    }, {
+        readonly name: "value";
+        readonly type: "uint256";
+    }, {
+        readonly name: "validAfter";
+        readonly type: "uint256";
+    }, {
+        readonly name: "validBefore";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "bytes32";
+    }];
+};
+/** The EIP-3009 authorization as it travels on the wire: decimal strings. */
+export interface TransferAuthorization {
+    from: Address;
+    to: Address;
+    value: string;
+    validAfter: string;
+    validBefore: string;
+    nonce: Hex;
+}
+export interface Eip712Domain {
+    name: string;
+    version: string;
+    chainId: number;
+    verifyingContract: Address;
+}
+/** A complete typed-data request, in the shape a signer adapter receives. */
+export interface TypedDataRequest {
+    domain: Eip712Domain;
+    types: Record<string, readonly {
+        name: string;
+        type: string;
+    }[]>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/**
+ * Builds the exact typed-data payload for an authorization. `value`,
+ * `validAfter` and `validBefore` become bigints here because that is what
+ * EIP-712 encoding requires; the wire form keeps them as strings.
+ */
+export declare function transferWithAuthorizationTypedData(domain: Eip712Domain, authorization: TransferAuthorization): TypedDataRequest;
+/**
+ * True when `types` is exactly the closed 6-field set: same type names, same
+ * field names, same field types, same order, and nothing extra at either
+ * level. Used by §4.1 check 2.
+ */
+export declare function isClosedTransferWithAuthorizationTypes(types: unknown): boolean;
+/** The exact field set an EIP-3009 authorization message may carry. */
+export declare const AUTHORIZATION_FIELDS: readonly ["from", "to", "value", "validAfter", "validBefore", "nonce"];
+//# sourceMappingURL=eip712.d.ts.map

package/dist/eip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip712.d.ts","sourceRoot":"","sources":["../src/eip712.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC,eAAO,MAAM,wCAAwC,EAAG,2BAAoC,CAAC;AAE7F,uEAAuE;AACvE,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;CASpC,CAAC;AAEX,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,GAAG,CAAC;CACZ;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,qBAAqB,GACnC,gBAAgB,CAclB;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAe9E;AAED,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,wEAEvB,CAAC"}

package/dist/eip712.js

@@ -0,0 +1,61 @@
+export const TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE = "TransferWithAuthorization";
+/** The closed 6-field EIP-3009 type set. Order is part of the hash. */
+export const TRANSFER_WITH_AUTHORIZATION_TYPES = {
+    TransferWithAuthorization: [
+        { name: "from", type: "address" },
+        { name: "to", type: "address" },
+        { name: "value", type: "uint256" },
+        { name: "validAfter", type: "uint256" },
+        { name: "validBefore", type: "uint256" },
+        { name: "nonce", type: "bytes32" },
+    ],
+};
+/**
+ * Builds the exact typed-data payload for an authorization. `value`,
+ * `validAfter` and `validBefore` become bigints here because that is what
+ * EIP-712 encoding requires; the wire form keeps them as strings.
+ */
+export function transferWithAuthorizationTypedData(domain, authorization) {
+    return {
+        domain,
+        types: TRANSFER_WITH_AUTHORIZATION_TYPES,
+        primaryType: TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE,
+        message: {
+            from: authorization.from,
+            to: authorization.to,
+            value: BigInt(authorization.value),
+            validAfter: BigInt(authorization.validAfter),
+            validBefore: BigInt(authorization.validBefore),
+            nonce: authorization.nonce,
+        },
+    };
+}
+/**
+ * True when `types` is exactly the closed 6-field set: same type names, same
+ * field names, same field types, same order, and nothing extra at either
+ * level. Used by §4.1 check 2.
+ */
+export function isClosedTransferWithAuthorizationTypes(types) {
+    if (!types || typeof types !== "object" || Array.isArray(types))
+        return false;
+    const record = types;
+    // EIP712Domain is derived from the domain, never accepted as a declared type.
+    if (Object.keys(record).join(",") !== TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE)
+        return false;
+    const fields = record[TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE];
+    const expected = TRANSFER_WITH_AUTHORIZATION_TYPES.TransferWithAuthorization;
+    if (!Array.isArray(fields) || fields.length !== expected.length)
+        return false;
+    return expected.every((want, index) => {
+        const got = fields[index];
+        return !!got && typeof got === "object" && !Array.isArray(got) &&
+            Object.keys(got).sort().join(",") === "name,type" &&
+            got.name === want.name &&
+            got.type === want.type;
+    });
+}
+/** The exact field set an EIP-3009 authorization message may carry. */
+export const AUTHORIZATION_FIELDS = [
+    "from", "to", "value", "validAfter", "validBefore", "nonce",
+];
+//# sourceMappingURL=eip712.js.map

package/dist/eip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip712.js","sourceRoot":"","sources":["../src/eip712.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,wCAAwC,GAAG,2BAAoC,CAAC;AAE7F,uEAAuE;AACvE,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AA2BX;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAAoB,EACpB,aAAoC;IAEpC,OAAO;QACL,MAAM;QACN,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE;YACP,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YAC5C,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;YAC9C,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,8EAA8E;IAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,wCAAwC;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,wCAAwC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,iCAAiC,CAAC,yBAAyB,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,WAAW;YAC1D,GAAyB,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAC5C,GAAyB,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO;CACnD,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Every refusal this package raises is structured: a stable machine code, the
+ * §4 check that failed, and the remediation a human can act on. Nothing here
+ * ever carries key material — see `redact.ts` for the outbound guard.
+ */
+/** The §4.1 checks, in spec order, plus the lifecycle and recompute tiers. */
+export type PolicyCheck = "chain-pinning" | "typed-data-shape" | "payer-match" | "splitter-allowlist" | "amount-and-caps" | "authorization-window" | "payment-identifier" | "lifecycle-binding" | "recipe-recompute" | "challenge-shape";
+export interface PolicyRefusalDetail {
+    /** Which §4.1 assertion refused. */
+    check: PolicyCheck;
+    /** Stable machine-readable code, e.g. `DASKI_POLICY_SPLITTER_NOT_ALLOWLISTED`. */
+    code: string;
+    /** What the bridge required. */
+    expected?: string;
+    /** What the server proposed. Never key material. */
+    actual?: string;
+    /** The exact command or doc URL that resolves this. */
+    remediation: string;
+}
+/**
+ * A refusal to sign. The bridge never "fixes and proceeds": a failed check
+ * ends the attempt, and the caller is told which check and what to do.
+ */
+export declare class PolicyRefusal extends Error {
+    readonly name = "PolicyRefusal";
+    readonly detail: PolicyRefusalDetail;
+    constructor(detail: PolicyRefusalDetail);
+    toJSON(): PolicyRefusalDetail & {
+        error: "policy_refusal";
+        message: string;
+    };
+}
+export declare function refuse(detail: PolicyRefusalDetail): never;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,8EAA8E;AAC9E,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,kBAAkB,GAClB,aAAa,GACb,oBAAoB,GACpB,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,KAAK,EAAE,WAAW,CAAC;IACnB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAkB,IAAI,mBAAmB;IACzC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;gBAEzB,MAAM,EAAE,mBAAmB;IAKvC,MAAM,IAAI,mBAAmB,GAAG;QAAE,KAAK,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAG7E;AASD,wBAAgB,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,KAAK,CAEzD"}

package/dist/errors.js

@@ -0,0 +1,32 @@
+/**
+ * Every refusal this package raises is structured: a stable machine code, the
+ * §4 check that failed, and the remediation a human can act on. Nothing here
+ * ever carries key material — see `redact.ts` for the outbound guard.
+ */
+/**
+ * A refusal to sign. The bridge never "fixes and proceeds": a failed check
+ * ends the attempt, and the caller is told which check and what to do.
+ */
+export class PolicyRefusal extends Error {
+    name = "PolicyRefusal";
+    detail;
+    constructor(detail) {
+        super(`${detail.code}: ${refusalSentence(detail)}`);
+        this.detail = detail;
+    }
+    toJSON() {
+        return { error: "policy_refusal", message: this.message, ...this.detail };
+    }
+}
+function refusalSentence(detail) {
+    const parts = [`the ${detail.check} check refused this challenge`];
+    if (detail.expected !== undefined)
+        parts.push(`expected ${detail.expected}`);
+    if (detail.actual !== undefined)
+        parts.push(`server proposed ${detail.actual}`);
+    return parts.join("; ");
+}
+export function refuse(detail) {
+    throw new PolicyRefusal(detail);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA4BH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACpB,IAAI,GAAG,eAAe,CAAC;IAChC,MAAM,CAAsB;IAErC,YAAY,MAA2B;QACrC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5E,CAAC;CACF;AAED,SAAS,eAAe,CAAC,MAA2B;IAClD,MAAM,KAAK,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,+BAA+B,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAA2B;IAChD,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/extensions.d.ts

@@ -0,0 +1,29 @@
+export declare const DASKI_ORDER_BINDING = "daski-order-binding";
+export declare const DASKI_SIGN_REQUEST = "daski-sign-request";
+export declare const PAYMENT_IDENTIFIER = "payment-identifier";
+/** Alphanumeric, hyphen and underscore, 16–128 characters. */
+export declare const PAYMENT_IDENTIFIER_PATTERN: RegExp;
+/**
+ * The extension set a paid submission echoes: every issued extension except
+ * `bazaar` and `daski-sign-request`.
+ *
+ * `bazaar` is dropped because its inlined outcome schemas can push the encoded
+ * `PAYMENT-SIGNATURE` header past the inbound caps in front of the gateway
+ * (Node's 16 KiB default, Cloudflare's per-header limit), which would refuse
+ * the paid retry with a 431 before the gateway ever saw it. The gateway
+ * verifies a payment that omits `bazaar` and hash-checks it when echoed.
+ *
+ * `daski-sign-request` is dropped because it is the server's *proposal*, not
+ * part of the deal: echoing it back would assert we agreed to a document we
+ * only used as an input to our own recomputation.
+ */
+export declare function paymentEchoExtensions(issued: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * Adds our payment identifier to the issued `payment-identifier` extension.
+ * The identifier is the reconciliation key: it is what makes an interrupted
+ * purchase provably findable instead of ambiguously re-signable.
+ */
+export declare function withPaymentIdentifier(extensions: Record<string, unknown>, identifier: string | undefined): Record<string, unknown>;
+/** Reads the identifier the server pinned, if it pinned one. */
+export declare function issuedPaymentIdentifier(extensions: Record<string, unknown> | undefined): string | undefined;
+//# sourceMappingURL=extensions.d.ts.map

package/dist/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,QAA4B,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,gEAAgE;AAChE,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC9C,MAAM,GAAG,SAAS,CAKpB"}

package/dist/extensions.js

@@ -0,0 +1,65 @@
+/**
+ * Challenge extensions: what we echo back with a paid submission, and what we
+ * refuse to echo.
+ */
+import { refuse } from "./errors.js";
+export const DASKI_ORDER_BINDING = "daski-order-binding";
+export const DASKI_SIGN_REQUEST = "daski-sign-request";
+export const PAYMENT_IDENTIFIER = "payment-identifier";
+/** Alphanumeric, hyphen and underscore, 16–128 characters. */
+export const PAYMENT_IDENTIFIER_PATTERN = /^[a-zA-Z0-9_-]{16,128}$/;
+/**
+ * The extension set a paid submission echoes: every issued extension except
+ * `bazaar` and `daski-sign-request`.
+ *
+ * `bazaar` is dropped because its inlined outcome schemas can push the encoded
+ * `PAYMENT-SIGNATURE` header past the inbound caps in front of the gateway
+ * (Node's 16 KiB default, Cloudflare's per-header limit), which would refuse
+ * the paid retry with a 431 before the gateway ever saw it. The gateway
+ * verifies a payment that omits `bazaar` and hash-checks it when echoed.
+ *
+ * `daski-sign-request` is dropped because it is the server's *proposal*, not
+ * part of the deal: echoing it back would assert we agreed to a document we
+ * only used as an input to our own recomputation.
+ */
+export function paymentEchoExtensions(issued) {
+    const { bazaar: _discovery, [DASKI_SIGN_REQUEST]: _proposal, ...extensions } = issued ?? {};
+    return extensions;
+}
+/**
+ * Adds our payment identifier to the issued `payment-identifier` extension.
+ * The identifier is the reconciliation key: it is what makes an interrupted
+ * purchase provably findable instead of ambiguously re-signable.
+ */
+export function withPaymentIdentifier(extensions, identifier) {
+    if (identifier === undefined)
+        return extensions;
+    if (!PAYMENT_IDENTIFIER_PATTERN.test(identifier)) {
+        refuse({
+            check: "payment-identifier",
+            code: "DASKI_PAYMENT_IDENTIFIER_MALFORMED",
+            expected: "16-128 characters of [A-Za-z0-9_-]",
+            actual: `identifier of length ${identifier.length}`,
+            remediation: "Let @daski/pay generate the identifier, or supply one matching the " +
+                "documented pattern.",
+        });
+    }
+    const issued = extensions[PAYMENT_IDENTIFIER];
+    if (issued === undefined)
+        return extensions;
+    const declaration = issued;
+    return {
+        ...extensions,
+        [PAYMENT_IDENTIFIER]: {
+            ...declaration,
+            info: { ...(declaration.info ?? {}), id: identifier },
+        },
+    };
+}
+/** Reads the identifier the server pinned, if it pinned one. */
+export function issuedPaymentIdentifier(extensions) {
+    const issued = extensions?.[PAYMENT_IDENTIFIER];
+    const id = issued?.info?.id;
+    return typeof id === "string" ? id : undefined;
+}
+//# sourceMappingURL=extensions.js.map

package/dist/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA2C;IAE3C,MAAM,EACJ,MAAM,EAAE,UAAU,EAClB,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAC/B,GAAG,UAAU,EACd,GAAG,MAAM,IAAI,EAAE,CAAC;IACjB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAmC,EACnC,UAA8B;IAE9B,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC;YACL,KAAK,EAAE,oBAAoB;YAC3B,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,oCAAoC;YAC9C,MAAM,EAAE,wBAAwB,UAAU,CAAC,MAAM,EAAE;YACnD,WAAW,EACT,qEAAqE;gBACrE,qBAAqB;SACxB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,WAAW,GAAG,MAA4C,CAAC;IACjE,OAAO;QACL,GAAG,UAAU;QACb,CAAC,kBAAkB,CAAC,EAAE;YACpB,GAAG,WAAW;YACd,IAAI,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE;SACtD;KACF,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,uBAAuB,CACrC,UAA+C;IAE/C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,kBAAkB,CACL,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAC5B,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}