@daski/x402-scheme 0.1.0

package/dist/register.js

@@ -0,0 +1,12 @@
+import { DaskiExactEvmScheme } from "./scheme.js";
+/**
+ * Wraps `stock` in the Daski composite and registers it for one network.
+ * Returns the composite so the caller can inspect or reuse it.
+ */
+export function registerDaskiExactEvmScheme(client, options) {
+    const { network, ...rest } = options;
+    const composite = new DaskiExactEvmScheme(rest);
+    client.register(network, composite);
+    return composite;
+}
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,mBAAmB,EAAiE,MAAM,aAAa,CAAC;AAsBjH;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAsB,EACtB,OAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,IAAyC,CAAC,CAAC;IACrF,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/scheme.d.ts

@@ -0,0 +1,92 @@
+/**
+ * §3 — the composite Exact-EVM client.
+ *
+ * This is a *wrapper*, not a replacement. The facilitator knows one scheme
+ * name, `exact`, so inventing a second one would make our payments
+ * unverifiable; and clobbering the stock handler for a network would silently
+ * change the semantics of every non-Daski payment the host makes. So:
+ *
+ *   - `scheme` stays `"exact"`;
+ *   - a challenge without `daski-order-binding` is handed to the stock
+ *     handler untouched, context and all;
+ *   - a challenge with one takes the Daski path, which validates and
+ *     recomputes before it signs.
+ *
+ * Hooks and `findDefaultAsset` are forwarded so the host's spend controls and
+ * money parsing keep working exactly as they did before registration.
+ */
+import { type Address } from "viem";
+import { type PolicyConfig } from "./policy.js";
+import type { SignerAdapter } from "./signer.js";
+/** Structural mirrors of the `@x402/core` types, so this package needs no
+ *  value import from the SDK and stays usable with any 2.x host. */
+export interface PaymentRequirementsLike {
+    scheme: string;
+    network: string;
+    asset: string;
+    amount: string;
+    payTo: string;
+    maxTimeoutSeconds: number;
+    extra?: {
+        assetTransferMethod?: string;
+        name?: string;
+        version?: string;
+    } | undefined;
+}
+export interface PaymentPayloadContextLike {
+    extensions?: Record<string, unknown> | undefined;
+}
+export interface PaymentPayloadResultLike {
+    x402Version: number;
+    payload: unknown;
+    extensions?: Record<string, unknown>;
+}
+/** The subset of `SchemeNetworkClient` this package produces and consumes. */
+export interface SchemeNetworkClientLike {
+    readonly scheme: string;
+    readonly schemeHooks?: unknown;
+    findDefaultAsset?: unknown;
+    createPaymentPayload(x402Version: number, paymentRequirements: PaymentRequirementsLike, context?: PaymentPayloadContextLike): Promise<PaymentPayloadResultLike>;
+}
+/**
+ * Resolves the purchase this challenge belongs to, and the quote a human
+ * approved for it. The scheme cannot infer either from the challenge — that
+ * would be the counterparty supplying its own expectations — so the host app
+ * states them.
+ */
+export interface PurchaseContextResolver {
+    (requirements: PaymentRequirementsLike, context: PaymentPayloadContextLike | undefined): Promise<{
+        providerAgentId: string;
+        outcomeId: string;
+        /** Atomic units the human approved. */
+        approvedQuoteAtomic: bigint;
+        /** Idempotency key for this intent; also the reconciliation key. */
+        paymentIdentifier?: string | undefined;
+    }>;
+}
+export interface DaskiExactEvmSchemeOptions {
+    /** The wallet. Never the gateway's. */
+    signer: SignerAdapter;
+    /** Resolved once so the stock handler's synchronous `address` works. */
+    payerAddress: Address;
+    /** §4 policy. Without it there is no signing. */
+    policy: PolicyConfig;
+    /** The stock handler this composite wraps. */
+    stock: SchemeNetworkClientLike;
+    /** How the host names the purchase and the approved quote. */
+    resolvePurchaseContext: PurchaseContextResolver;
+    /** Injectable clock, for tests. */
+    now?: () => number;
+}
+export declare class DaskiExactEvmScheme implements SchemeNetworkClientLike {
+    #private;
+    /** The facilitator knows exactly one name. We do not invent a second. */
+    readonly scheme = "exact";
+    constructor(options: DaskiExactEvmSchemeOptions);
+    /** Forwarded so the host's spend controls keep resolving default assets. */
+    get findDefaultAsset(): unknown;
+    /** Forwarded so registering the composite does not drop stock hooks. */
+    get schemeHooks(): unknown;
+    createPaymentPayload(x402Version: number, requirements: PaymentRequirementsLike, context?: PaymentPayloadContextLike): Promise<PaymentPayloadResultLike>;
+}
+//# sourceMappingURL=scheme.d.ts.map

package/dist/scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheme.d.ts","sourceRoot":"","sources":["../src/scheme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAwD,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAYtG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;oEACoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACvF;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAClB,WAAW,EAAE,MAAM,EACnB,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,CAAC,YAAY,EAAE,uBAAuB,EAAE,OAAO,EAAE,yBAAyB,GAAG,SAAS,GAAG,OAAO,CAAC;QAC/F,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,uCAAuC;QACvC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,oEAAoE;QACpE,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACxC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,0BAA0B;IACzC,uCAAuC;IACvC,MAAM,EAAE,aAAa,CAAC;IACtB,wEAAwE;IACxE,YAAY,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,MAAM,EAAE,YAAY,CAAC;IACrB,8CAA8C;IAC9C,KAAK,EAAE,uBAAuB,CAAC;IAC/B,8DAA8D;IAC9D,sBAAsB,EAAE,uBAAuB,CAAC;IAChD,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAKD,qBAAa,mBAAoB,YAAW,uBAAuB;;IACjE,yEAAyE;IACzE,QAAQ,CAAC,MAAM,WAAW;gBAId,OAAO,EAAE,0BAA0B;IAc/C,4EAA4E;IAC5E,IAAI,gBAAgB,IAAI,OAAO,CAE9B;IAED,wEAAwE;IACxE,IAAI,WAAW,IAAI,OAAO,CAEzB;IAEK,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,uBAAuB,EACrC,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,wBAAwB,CAAC;CAoHrC"}

package/dist/scheme.js

@@ -0,0 +1,182 @@
+/**
+ * §3 — the composite Exact-EVM client.
+ *
+ * This is a *wrapper*, not a replacement. The facilitator knows one scheme
+ * name, `exact`, so inventing a second one would make our payments
+ * unverifiable; and clobbering the stock handler for a network would silently
+ * change the semantics of every non-Daski payment the host makes. So:
+ *
+ *   - `scheme` stays `"exact"`;
+ *   - a challenge without `daski-order-binding` is handed to the stock
+ *     handler untouched, context and all;
+ *   - a challenge with one takes the Daski path, which validates and
+ *     recomputes before it signs.
+ *
+ * Hooks and `findDefaultAsset` are forwarded so the host's spend controls and
+ * money parsing keep working exactly as they did before registration.
+ */
+import { getAddress } from "viem";
+import { bindingFromExtensions, validatePurchaseAuthorization } from "./policy.js";
+import { transferWithAuthorizationTypedData } from "./eip712.js";
+import { refuse } from "./errors.js";
+import { DASKI_ORDER_BINDING, DASKI_SIGN_REQUEST, issuedPaymentIdentifier, paymentEchoExtensions, withPaymentIdentifier, } from "./extensions.js";
+import { deriveBindingNonce } from "./recipe.js";
+import { parseSignRequest } from "./signRequest.js";
+/** Backdate tolerance applied to `validAfter` on the locally-computed path. */
+const AUTHORIZATION_CLOCK_SKEW_SECONDS = 30;
+export class DaskiExactEvmScheme {
+    /** The facilitator knows exactly one name. We do not invent a second. */
+    scheme = "exact";
+    #options;
+    constructor(options) {
+        if (!options.policy) {
+            refuse({
+                check: "challenge-shape",
+                code: "DASKI_SCHEME_POLICY_REQUIRED",
+                expected: "a PolicyConfig",
+                remediation: "No config, no signing. Supply a PolicyConfig when constructing " +
+                    "DaskiExactEvmScheme.",
+            });
+        }
+        this.#options = options;
+    }
+    /** Forwarded so the host's spend controls keep resolving default assets. */
+    get findDefaultAsset() {
+        return this.#options.stock.findDefaultAsset;
+    }
+    /** Forwarded so registering the composite does not drop stock hooks. */
+    get schemeHooks() {
+        return this.#options.stock.schemeHooks;
+    }
+    async createPaymentPayload(x402Version, requirements, context) {
+        const extensions = context?.extensions;
+        // Not a Daski challenge: the stock handler owns this entirely.
+        if (extensions?.[DASKI_ORDER_BINDING] === undefined) {
+            return this.#options.stock.createPaymentPayload(x402Version, requirements, context);
+        }
+        return this.#createDaskiPayload(x402Version, requirements, context);
+    }
+    async #createDaskiPayload(x402Version, requirements, context) {
+        const { policy, signer } = this.#options;
+        if (x402Version !== 2) {
+            refuse({
+                check: "challenge-shape",
+                code: "DASKI_SCHEME_VERSION_UNSUPPORTED",
+                expected: "x402 version 2",
+                actual: `version ${x402Version}`,
+                remediation: "Daski settles on x402 V2 only.",
+            });
+        }
+        assertExactEvmRequirement(requirements);
+        const issued = context?.extensions ?? {};
+        const binding = bindingFromExtensions(issued);
+        const purchase = await this.#options.resolvePurchaseContext(requirements, context);
+        const now = (this.#options.now ?? (() => Math.floor(Date.now() / 1_000)))();
+        // The server may propose the whole document; we still recompute it and
+        // require agreement, so the proposal is an input, never an authority.
+        const proposed = parseSignRequest(issued[DASKI_SIGN_REQUEST]);
+        const domain = {
+            name: requirements.extra.name,
+            version: requirements.extra.version,
+            chainId: policy.chainId,
+            verifyingContract: getAddress(requirements.asset),
+        };
+        const authorization = proposed
+            ? authorizationFromProposal(proposed)
+            : this.#computeAuthorization(requirements, binding, now);
+        const typedData = proposed ?? transferWithAuthorizationTypedData(domain, authorization);
+        const identifier = purchase.paymentIdentifier ?? issuedPaymentIdentifier(issued);
+        const validated = await validatePurchaseAuthorization(policy, typedData, {
+            providerAgentId: purchase.providerAgentId,
+            outcomeId: purchase.outcomeId,
+            challengeAmountAtomic: BigInt(requirements.amount),
+            challengeAsset: getAddress(requirements.asset),
+            challengePayTo: getAddress(requirements.payTo),
+            challengeNetwork: requirements.network,
+            approvedQuoteAtomic: purchase.approvedQuoteAtomic,
+            paymentIdentifier: identifier,
+            binding,
+            nowSeconds: now,
+        });
+        const signature = await signer.signTypedData(transferWithAuthorizationTypedData(domain, validated.authorization));
+        return {
+            x402Version,
+            payload: { authorization: validated.authorization, signature },
+            extensions: withPaymentIdentifier(paymentEchoExtensions(issued), identifier),
+        };
+    }
+    /**
+     * The verify-and-sign tier: build the authorization ourselves from the
+     * binding, so a gateway that ships no `daski-sign-request` is fully
+     * supported and the recompute path stays exercised.
+     */
+    #computeAuthorization(requirements, binding, now) {
+        const { policy } = this.#options;
+        const payer = getAddress(policy.payerAddress);
+        const splitter = getAddress(requirements.payTo);
+        const grossAmount = BigInt(requirements.amount);
+        const validAfter = binding
+            ? BigInt(Math.max(0, now - AUTHORIZATION_CLOCK_SKEW_SECONDS))
+            : 0n;
+        const validBefore = BigInt(Math.min(now + requirements.maxTimeoutSeconds, binding?.expiresAt ?? Number.MAX_SAFE_INTEGER));
+        const nonce = binding
+            ? deriveBindingNonce(binding, {
+                chainId: policy.chainId,
+                canonicalToken: getAddress(policy.canonicalToken),
+                payer,
+                splitter,
+                grossAmount,
+            })
+            : refuse({
+                check: "recipe-recompute",
+                code: "DASKI_SCHEME_BINDING_REQUIRED",
+                expected: "a daski-order-binding extension on the Daski path",
+                remediation: "A Daski purchase without a binding cannot be recomputed. Request a " +
+                    "fresh challenge.",
+            });
+        return {
+            from: payer,
+            to: splitter,
+            value: grossAmount.toString(),
+            validAfter: validAfter.toString(),
+            validBefore: validBefore.toString(),
+            nonce,
+        };
+    }
+}
+function authorizationFromProposal(proposal) {
+    const message = proposal.message;
+    return {
+        from: String(message.from),
+        to: String(message.to),
+        value: String(message.value),
+        validAfter: String(message.validAfter),
+        validBefore: String(message.validBefore),
+        nonce: String(message.nonce),
+    };
+}
+function assertExactEvmRequirement(requirements) {
+    if (requirements.scheme !== "exact") {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SCHEME_UNSUPPORTED_SCHEME",
+            expected: "scheme exact",
+            actual: `scheme ${requirements.scheme}`,
+            remediation: "Daski settles only on the standard Exact-EVM rail.",
+        });
+    }
+    const extra = requirements.extra;
+    if (extra?.assetTransferMethod !== "eip3009" || !extra.name || !extra.version ||
+        !/^\d+$/.test(requirements.amount) ||
+        !Number.isSafeInteger(requirements.maxTimeoutSeconds) ||
+        requirements.maxTimeoutSeconds <= 10) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SCHEME_REQUIREMENT_INCOMPLETE",
+            expected: "eip3009 transfer metadata, an integer amount, and a sane timeout",
+            actual: `assetTransferMethod=${String(extra?.assetTransferMethod)} amount=${requirements.amount}`,
+            remediation: "Request a fresh challenge from the gateway.",
+        });
+    }
+}
+//# sourceMappingURL=scheme.js.map

package/dist/scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheme.js","sourceRoot":"","sources":["../src/scheme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAgB,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAqB,MAAM,aAAa,CAAC;AACtG,OAAO,EAAE,kCAAkC,EAA8B,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAqEpD,+EAA+E;AAC/E,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAE5C,MAAM,OAAO,mBAAmB;IAC9B,yEAAyE;IAChE,MAAM,GAAG,OAAO,CAAC;IAEjB,QAAQ,CAA6B;IAE9C,YAAY,OAAmC;QAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,CAAC;gBACL,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW,EACT,iEAAiE;oBACjE,sBAAsB;aACzB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,4EAA4E;IAC5E,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC9C,CAAC;IAED,wEAAwE;IACxE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,YAAqC,EACrC,OAAmC;QAEnC,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;QACvC,+DAA+D;QAC/D,IAAI,UAAU,EAAE,CAAC,mBAAmB,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,YAAqC,EACrC,OAA8C;QAE9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzC,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC;gBACL,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,kCAAkC;gBACxC,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,WAAW,WAAW,EAAE;gBAChC,WAAW,EAAE,gCAAgC;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,yBAAyB,CAAC,YAAY,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5E,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,YAAY,CAAC,KAAM,CAAC,IAAK;YAC/B,OAAO,EAAE,YAAY,CAAC,KAAM,CAAC,OAAQ;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,iBAAiB,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC;SAClD,CAAC;QACF,MAAM,aAAa,GAAG,QAAQ;YAC5B,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,QAAQ,IAAI,kCAAkC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,QAAQ,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,SAAS,EAAE;YACvE,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,qBAAqB,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YAClD,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC;YAC9C,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC;YAC9C,gBAAgB,EAAE,YAAY,CAAC,OAAO;YACtC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,iBAAiB,EAAE,UAAU;YAC7B,OAAO;YACP,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAC1C,kCAAkC,CAAC,MAAM,EAAE,SAAS,CAAC,aAAa,CAAC,CACpE,CAAC;QAEF,OAAO;YACL,WAAW;YACX,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YAC9D,UAAU,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CACnB,YAAqC,EACrC,OAAiD,EACjD,GAAW;QAEX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,OAAO;YACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,gCAAgC,CAAC,CAAC;YAC7D,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CACjC,GAAG,GAAG,YAAY,CAAC,iBAAiB,EACpC,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAC9C,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO;YACnB,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;gBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC;gBACjD,KAAK;gBACL,QAAQ;gBACR,WAAW;aACZ,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC;gBACL,KAAK,EAAE,kBAAkB;gBACzB,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,mDAAmD;gBAC7D,WAAW,EACT,qEAAqE;oBACrE,kBAAkB;aACrB,CAAC,CAAC;QACP,OAAO;YACL,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;YAC7B,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;YACnC,KAAK;SACN,CAAC;IACJ,CAAC;CACF;AAED,SAAS,yBAAyB,CAAC,QAElC;IACC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAY;QACrC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAY;QACjC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAkB;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAqC;IACtE,IAAI,YAAY,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,UAAU,YAAY,CAAC,MAAM,EAAE;YACvC,WAAW,EAAE,oDAAoD;SAClE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;IACjC,IACE,KAAK,EAAE,mBAAmB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO;QACzE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAClC,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,iBAAiB,CAAC;QACrD,YAAY,CAAC,iBAAiB,IAAI,EAAE,EACpC,CAAC;QACD,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,qCAAqC;YAC3C,QAAQ,EAAE,kEAAkE;YAC5E,MAAM,EAAE,uBAAuB,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,WAAW,YAAY,CAAC,MAAM,EAAE;YACjG,WAAW,EAAE,6CAA6C;SAC3D,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/signRequest.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `daski-sign-request` — the server's proposed authorization.
+ *
+ * When the gateway ships this extension it hands the buyer a fully-formed
+ * typed-data document. That is a convenience, not an authority: the bridge
+ * parses it into a closed shape, hands it to the policy validator like any
+ * other proposal, and recomputes the recipe nonce. A proposal that survives
+ * all of that is signed; one that does not is reported, never repaired.
+ */
+import type { Hex } from "viem";
+import type { Eip712Domain, TypedDataRequest } from "./eip712.js";
+export interface ParsedSignRequest {
+    domain: Eip712Domain;
+    primaryType: string;
+    types: Record<string, readonly {
+        name: string;
+        type: string;
+    }[]>;
+    message: Record<string, unknown>;
+}
+/**
+ * Parses a `daski-sign-request` extension into a typed-data proposal.
+ *
+ * Nothing is validated here beyond structural sanity — the §4 validator owns
+ * every semantic check, so this cannot become a second, weaker gate.
+ */
+export declare function parseSignRequest(value: unknown): TypedDataRequest | undefined;
+/** The nonce a proposal carries, for the recompute-and-compare in §4.3. */
+export declare function proposedNonce(proposal: TypedDataRequest): Hex | undefined;
+//# sourceMappingURL=signRequest.d.ts.map

package/dist/signRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signRequest.d.ts","sourceRoot":"","sources":["../src/signRequest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAW,GAAG,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAKlE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAmE7E;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,gBAAgB,GAAG,GAAG,GAAG,SAAS,CAKzE"}

package/dist/signRequest.js

@@ -0,0 +1,83 @@
+import { refuse } from "./errors.js";
+const DOC = "https://github.com/daski-io/buyer/blob/main/docs/policy.md#sign-request";
+/**
+ * Parses a `daski-sign-request` extension into a typed-data proposal.
+ *
+ * Nothing is validated here beyond structural sanity — the §4 validator owns
+ * every semantic check, so this cannot become a second, weaker gate.
+ */
+export function parseSignRequest(value) {
+    if (value === undefined)
+        return undefined;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SIGN_REQUEST_NOT_AN_OBJECT",
+            expected: "an object under extensions['daski-sign-request']",
+            actual: Array.isArray(value) ? "an array" : typeof value,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    const request = value;
+    const keys = Object.keys(request).sort();
+    if (keys.join(",") !== "domain,message,primaryType,types") {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SIGN_REQUEST_OPEN_SHAPE",
+            expected: "exactly [domain, message, primaryType, types]",
+            actual: `[${keys.join(", ")}]`,
+            remediation: "An unrecognized sign-request layout cannot be validated, so it cannot " +
+                `be signed. Upgrade @daski/x402-scheme; see ${DOC}`,
+        });
+    }
+    const domain = request.domain;
+    if (!domain || typeof domain !== "object" || Array.isArray(domain)) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SIGN_REQUEST_MALFORMED_DOMAIN",
+            expected: "an EIP-712 domain object",
+            actual: typeof domain,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    const domainKeys = Object.keys(domain).sort();
+    if (domainKeys.join(",") !== "chainId,name,verifyingContract,version") {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SIGN_REQUEST_OPEN_DOMAIN",
+            expected: "exactly [chainId, name, verifyingContract, version]",
+            actual: `[${domainKeys.join(", ")}]`,
+            remediation: "A domain with extra or missing fields hashes differently than the one " +
+                `we would validate; see ${DOC}`,
+        });
+    }
+    const message = request.message;
+    if (!message || typeof message !== "object" || Array.isArray(message)) {
+        refuse({
+            check: "challenge-shape",
+            code: "DASKI_SIGN_REQUEST_MALFORMED_MESSAGE",
+            expected: "an EIP-712 message object",
+            actual: typeof message,
+            remediation: `Request a fresh challenge; see ${DOC}`,
+        });
+    }
+    return {
+        domain: {
+            name: String(domain.name),
+            version: String(domain.version),
+            chainId: Number(domain.chainId),
+            verifyingContract: domain.verifyingContract,
+        },
+        primaryType: String(request.primaryType),
+        types: request.types,
+        message: message,
+    };
+}
+/** The nonce a proposal carries, for the recompute-and-compare in §4.3. */
+export function proposedNonce(proposal) {
+    const nonce = proposal.message.nonce;
+    return typeof nonce === "string" && /^0x[0-9a-fA-F]{64}$/.test(nonce)
+        ? nonce
+        : undefined;
+}
+//# sourceMappingURL=signRequest.js.map

package/dist/signRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signRequest.js","sourceRoot":"","sources":["../src/signRequest.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,GAAG,GAAG,yEAAyE,CAAC;AAStF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,kDAAkD;YAC5D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK;YACxD,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,kCAAkC,EAAE,CAAC;QAC1D,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,+CAA+C;YACzD,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC9B,WAAW,EACT,wEAAwE;gBACxE,8CAA8C,GAAG,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAiC,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,qCAAqC;YAC3C,QAAQ,EAAE,0BAA0B;YACpC,MAAM,EAAE,OAAO,MAAM;YACrB,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,wCAAwC,EAAE,CAAC;QACtE,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,qDAAqD;YAC/D,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpC,WAAW,EACT,wEAAwE;gBACxE,0BAA0B,GAAG,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC;YACL,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,2BAA2B;YACrC,MAAM,EAAE,OAAO,OAAO;YACtB,WAAW,EAAE,kCAAkC,GAAG,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAA4B;SACvD;QACD,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,OAAO,CAAC,KAAkE;QACjF,OAAO,EAAE,OAAkC;KAC5C,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,QAA0B;IACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QACnE,CAAC,CAAE,KAAa;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/signer.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The signer boundary.
+ *
+ * Everything above this line decides *what* may be signed; everything below
+ * it holds the key. The gateway is on neither side — it never sees key
+ * material, and no adapter here returns any.
+ */
+import type { Address, Hex } from "viem";
+import type { TypedDataRequest } from "./eip712.js";
+/** How a signer describes itself to `daski doctor`. */
+export interface SignerDescription {
+    /** e.g. `local`, `cdp`, `circle`. */
+    provider: string;
+    /** e.g. `eoa`, `smart-contract`. */
+    accountType: "eoa" | "smart-contract" | "unknown";
+    /** Set when an adapter has not yet passed the §6 conformance suite. */
+    conformance?: "verified" | "candidate-pending-conformance";
+}
+/**
+ * The one interface every wallet backend implements. Deliberately tiny: an
+ * address, a typed-data signature, and a self-description. No raw message
+ * signing, no transaction signing, no key export.
+ */
+export interface SignerAdapter {
+    getAddress(): Promise<Address>;
+    signTypedData(payload: TypedDataRequest): Promise<Hex>;
+    describe(): SignerDescription;
+}
+/**
+ * Adapts a `SignerAdapter` to the shape `@x402/evm`'s stock scheme expects.
+ * The stock handler wants a synchronous `address`, so the caller resolves it
+ * once up front.
+ */
+export declare function toClientEvmSigner(address: Address, adapter: SignerAdapter): {
+    address: Address;
+    signTypedData(payload: TypedDataRequest): Promise<Hex>;
+};
+//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,WAAW,EAAE,KAAK,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAClD,uEAAuE;IACvE,WAAW,CAAC,EAAE,UAAU,GAAG,+BAA+B,CAAC;CAC5D;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,QAAQ,IAAI,iBAAiB,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,aAAa,GACrB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,CAK9E"}

package/dist/signer.js

@@ -0,0 +1,12 @@
+/**
+ * Adapts a `SignerAdapter` to the shape `@x402/evm`'s stock scheme expects.
+ * The stock handler wants a synchronous `address`, so the caller resolves it
+ * once up front.
+ */
+export function toClientEvmSigner(address, adapter) {
+    return {
+        address,
+        signTypedData: (payload) => adapter.signTypedData(payload),
+    };
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AA+BA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,OAAsB;IAEtB,OAAO;QACL,OAAO;QACP,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@daski/x402-scheme",
+  "version": "0.1.0",
+  "description": "Composite Exact-EVM client plugin for the modular x402 v2 SDK: wraps the stock handler, adds Daski recipe-order binding, and refuses to sign anything its policy validator has not independently checked.",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/daski-io/buyer.git",
+    "directory": "packages/x402-scheme"
+  },
+  "homepage": "https://github.com/daski-io/buyer/tree/main/packages/x402-scheme#readme",
+  "bugs": {
+    "url": "https://github.com/daski-io/buyer/issues"
+  },
+  "keywords": [
+    "x402",
+    "daski",
+    "eip-3009",
+    "exact-evm",
+    "agent-payments"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json",
+    "test": "tsc -p tsconfig.test.json && node --test .test-dist/test/*.test.js",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "viem": "2.21.55"
+  },
+  "peerDependencies": {
+    "@x402/core": ">=2.20.0 <3"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}