@dexterai/x402 5.4.2 → 6.0.0-rc.0

package/dist/{types-CSuISjXA.d.ts → types-45M9fb5M.d.ts}

@@ -25,10 +25,17 @@ interface VaultAdapter {
     swigAddress: string;
     /** Program/contract account holding the OTS gate state. */
     vaultPda: string;
+    /**
+     * Voucher generation this adapter issues. V6 requires `2` for buyer-side
+     * open/recovery. The `1` discriminator remains only so a historical adapter
+     * is rejected explicitly instead of being mistaken for V2 or silently
+     * falling through after an obligation may exist.
+     */
+    readonly sessionVoucherVersion: 1 | 2;
     /**
      * Use the ROOT signer (passkey) to authorize a fresh session key. This is
-     * the only call that prompts the user (twice when atomically replacing a
-     * live session — one revoke ceremony + one register ceremony). Returns a
+     * the only call that prompts the user. V7 live replacement binds retirement
+     * and replacement into one ceremony. Returns a
      * session that can be passed to `signWithSession` freely until the scope's
      * cap or expiry is reached.
      *
@@ -54,7 +61,78 @@ interface VaultAdapter {
      * facilitator settles via `settle_voucher(amount, increment: false)`.
      */
     signCloseTab(session: SessionKey, channelId: string, cumulativeAmount: AtomicAmount): Promise<Uint8Array>;
+    /**
+     * V2-only independent postcondition check. The reservation provider returns
+     * a voucher-bound receipt; the adapter must then prove the corresponding
+     * finalized on-chain reservation and authority-signed voucher-binding Memo
+     * from its own chain connection before the voucher may leave this process.
+     * V1 adapters omit this method.
+     */
+    verifyFinalVoucherV2Reservation?: VerifyFinalVoucherV2Reservation;
+}
+/** Exact durable release fence for a buyer-signed FINAL V2 voucher. */
+interface FinalVoucherV2ReservationInput {
+    network: TabNetworkId;
+    programId: string;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionNonce: number;
+    reservationAmountAtomic: AtomicAmount;
+    previousCumulativeAtomic: AtomicAmount;
+    /** SHA-256 of the canonical complete voucher identity. */
+    voucherDigest: string;
+    /** SDK retry identity. Exact-byte retries retain this value; provider
+     * lifecycle and receipt identities remain provider-owned and distinct. */
+    idempotencyKey: string;
+    voucher: SignedVoucher;
 }
+/**
+ * Provider attestation returned only after its durable transaction lifecycle
+ * has finalized the exact reservation and read back the exact post-state.
+ * The SDK validates every voucher/session field and the VaultAdapter proves
+ * both the reservation and its authority-signed voucher-binding Memo from the
+ * transaction itself; this is deliberately not a boolean ack.
+ */
+interface FinalVoucherV2ReservationReceipt {
+    contract: 'dexter-native-tab-open-receipt/v1' | 'dexter-native-tab-open-receipt/v2';
+    operationId: string;
+    callerOperationId: string;
+    network: string;
+    transaction: string;
+    /** FINAL vouchers are released only after the exact reservation transaction
+     * reaches Solana finalized commitment. A merely confirmed fork is not a
+     * durable capacity guarantee. */
+    commitment: 'finalized';
+    confirmationSlot: number;
+    postStateSlot: number;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionPublicKey: string;
+    voucherDigest: string;
+    cumulativeAmountAtomic: string;
+    sequenceNumber: number;
+    providerReceiptId: string;
+    reservationAmountAtomic: string;
+    pendingVoucherCountBefore: number;
+    pendingVoucherCountAfter: number;
+    currentOutstandingBeforeAtomic: '0';
+    currentOutstandingAfterAtomic: string;
+    rootOperationId?: string;
+    generation?: number;
+    predecessorCallerOperationId?: string;
+    predecessorLifecycleOperationId?: string;
+    predecessorReleaseDigest?: string;
+    stableReservationId?: string;
+    economicEffectDigest?: string;
+}
+type ReserveFinalVoucherV2 = (input: FinalVoucherV2ReservationInput) => Promise<FinalVoucherV2ReservationReceipt>;
+type VerifyFinalVoucherV2Reservation = (input: FinalVoucherV2ReservationInput, receipt: FinalVoucherV2ReservationReceipt) => Promise<void>;
 /**
  * Live-session policy for `authorizeSession` / `openTab` (K-T4e).
  *
@@ -69,8 +147,7 @@ interface VaultAdapter {
  *    (`tab.close()` — or POST its last signed voucher to `/tab/settle`) and
  *    retries, or acknowledges the replace explicitly.
  *  - `'replace'`: compose the ATOMIC same-transaction
- *    [secp(revoke), revoke, secp(register), register] so the buyer is never
- *    left sessionless mid-flow. Costs a second passkey ceremony. Value
+ *    [secp(replace), replace] so the buyer is never left sessionless. Value
  *    already settled or crystallized into LockedClaims survives the replace;
  *    anything signed beyond the frontier is voided.
  */
@@ -106,6 +183,14 @@ interface TabState {
 interface Tab {
     /** Deterministic channel id derived from buyer/seller/scope/salt. */
     readonly channelId: string;
+    /**
+     * Voucher contract used by this live handle. V2 FINAL vouchers are fenced
+     * by a durable reservation and therefore may never fall through to another
+     * payment rail after an indeterminate signing/reservation error.
+     *
+     * Required in v6. An absent generation is not safely equivalent to V1.
+     */
+    readonly voucherVersion: 1 | 2;
     /** Which network the underlying vault lives on. */
     readonly network: TabNetworkId;
     /**
@@ -179,7 +264,7 @@ interface OpenTabOptions {
     vault: VaultAdapter;
     /** CAIP-2-style network the vault lives on; cross-checked against vault.network. */
     network: TabNetworkId;
-    /** Seller's endpoint host (used for the counterparty binding + voucher routing). */
+    /** Seller's base58 Solana public key for the counterparty binding. */
     seller: string;
     /** Max amount per voucher — caps how aggressive a single charge can be. */
     perUnitCap: HumanAmount;
@@ -203,6 +288,12 @@ interface OpenTabOptions {
      * See {@link AuthorizeSessionOptions}.
      */
     onLiveSession?: 'error' | 'replace';
+    /**
+     * Required by V2-capable adapters. The callback must durably persist and
+     * establish the exact FINAL voucher reservation before resolving. It must
+     * be idempotent for identical voucher bytes; a timeout is retried exactly.
+     */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
 }
 /**
  * Options for `resumeTab` — open a handle to a tab that was opened by a
@@ -227,6 +318,18 @@ declare class UnsupportedNetworkError extends Error {
     readonly network: string;
     constructor(network: string);
 }
+/**
+ * Thrown before buyer-side I/O when v6 is asked to open or reconstruct a
+ * historical V1 tab. The coupled v6 facilitator has no compatible V1 arming
+ * endpoint and the Vault-wide pending counter cannot prove which historical
+ * session owns an existing reservation. Seller-side verification of already
+ * issued V1 vouchers remains available so those obligations can be settled.
+ */
+declare class HistoricalV1MigrationRequiredError extends Error {
+    readonly surface: 'armTabOpen' | 'openTab' | 'tabFromGrant';
+    readonly code = "native_tab_v1_migration_required";
+    constructor(surface: 'armTabOpen' | 'openTab' | 'tabFromGrant');
+}
 /** Thrown by a buyer call when the session-key cap or expiry would be exceeded. */
 declare class SessionScopeExceededError extends Error {
     readonly reason: 'cap_exceeded' | 'expired' | 'wrong_counterparty';
@@ -277,4 +380,4 @@ declare class LiveSessionExistsError extends Error {
     constructor(details: LiveSessionDetails);
 }
 
-export { type AuthorizeSessionOptions as A, type LiveSessionDetails as L, type OpenTabOptions as O, type ResumeTabOptions as R, SessionScopeExceededError as S, type Tab as T, UnsupportedNetworkError as U, type VaultAdapter as V, type TabState as a, type TabCloseResult as b, TabClosedError as c, LiveSessionExistsError as d };
+export { type AuthorizeSessionOptions as A, type FinalVoucherV2ReservationInput as F, HistoricalV1MigrationRequiredError as H, type LiveSessionDetails as L, type OpenTabOptions as O, type ResumeTabOptions as R, SessionScopeExceededError as S, type Tab as T, UnsupportedNetworkError as U, type VerifyFinalVoucherV2Reservation as V, type FinalVoucherV2ReservationReceipt as a, type VaultAdapter as b, LiveSessionExistsError as c, type ReserveFinalVoucherV2 as d, type TabCloseResult as e, TabClosedError as f, type TabState as g };

package/dist/{types-BdS_uvNs.d.cts → types-BbvuPNXl.d.cts}

@@ -1,5 +1,5 @@
 import { ClientChannelStorage } from '@x402/evm/batch-settlement/client';
-import { E as EvmWallet } from './types-xQu1U4xk.cjs';
+import { a as EvmWallet } from './types-BvQpNtFw.cjs';
 
 /**
  * Buyer withdrawal escape hatch for batch-settlement escrow channels.
@@ -162,4 +162,4 @@ declare class UnsupportedNetworkError extends Error {
     constructor(message: string);
 }
 
-export { type BatchSettlementChannel as B, type ChannelStore as C, type ForceWithdrawResult as F, InsufficientBalanceError as I, type OpenBatchChannelOptions as O, type ResumeBatchChannelOptions as R, UnsupportedNetworkError as U, WithdrawNotReadyError as W, type ChannelState as a, type CloseReceipt as b, type CloseResult as c, type FinalizeWithdrawResult as d };
+export { type BatchSettlementChannel as B, type ChannelStore as C, type FinalizeWithdrawResult as F, InsufficientBalanceError as I, type OpenBatchChannelOptions as O, type ResumeBatchChannelOptions as R, UnsupportedNetworkError as U, WithdrawNotReadyError as W, type ChannelState as a, type CloseReceipt as b, type CloseResult as c, type ForceWithdrawResult as d };

package/dist/{types-Co5YYhVB.d.ts → types-BhXu7cgi.d.ts}

@@ -1,5 +1,5 @@
-import { W as WalletSet } from './types-xQu1U4xk.js';
-import { T as Tab } from './types-CSuISjXA.js';
+import { W as WalletSet } from './types-BvQpNtFw.js';
+import { T as Tab } from './types-45M9fb5M.js';
 
 /**
  * Shared contract for the x402 version seam. Both the v1 and v2 strategy
@@ -151,4 +151,4 @@ interface PaymentStrategy {
     pay(url: string, requestInit: RequestInit, challenge: PaymentChallenge, wallets: WalletSet, opts: PayAndFetchOptions): Promise<PayResult>;
 }
 
-export type { ChallengeOption as C, NetworkRef as N, PayAndFetchOptions as P, PayResult as a, PaymentStrategy as b, PaymentChallenge as c };
+export type { ChallengeOption as C, NetworkRef as N, PaymentStrategy as P, PayAndFetchOptions as a, PayResult as b, PaymentChallenge as c };

package/dist/{types-xQu1U4xk.d.cts → types-BvQpNtFw.d.cts}

@@ -72,6 +72,14 @@ interface AcceptsExtra {
      * Provided by the facilitator's batch-settlement kind. EVM only.
      */
     receiverAuthorizer?: string;
+    /** Tab seller-wire header advertised by the default hosted scheme. */
+    voucherHeader?: string;
+    /** Tab registration encoding carried inside each seller voucher. */
+    registrationEncoding?: string;
+    /** Immutable commercial-terms version for this Tab offer. */
+    termsVersion?: string;
+    /** Event that makes usage accepted under the advertised terms version. */
+    acceptanceRule?: string;
     /** Additional chain-specific fields */
     [key: string]: unknown;
 }
@@ -637,4 +645,4 @@ interface BalanceInfo {
     asset: string;
 }
 
-export { type AccessPassClientConfig as A, type BalanceInfo as B, type ChainAdapter as C, type EvmWallet as E, type GenericWallet as G, type PaymentAccept as P, type SettlementProbe as S, type VerifyResponse as V, type WalletSet as W, X402Error as X, type SolanaWallet as a, createEvmAdapter as b, createSolanaAdapter as c, type AccessPassTier as d, type AccessPassInfo as e, type SettleResponse as f, type PayToProvider as g, type PaymentRequired as h, type PayToContext as i, type PayToProviderDefaults as j, type AccessPassClaims as k, SolanaAdapter as l, EvmAdapter as m, type AdapterConfig as n, type SignedTransaction as o, isSolanaWallet as p, isEvmWallet as q };
+export { type AdapterConfig as A, type BalanceInfo as B, type ChainAdapter as C, EvmAdapter as E, type GenericWallet as G, type PaymentAccept as P, SolanaAdapter as S, type VerifyResponse as V, type WalletSet as W, X402Error as X, type EvmWallet as a, type SignedTransaction as b, type SolanaWallet as c, createEvmAdapter as d, createSolanaAdapter as e, isSolanaWallet as f, type SettlementProbe as g, type AccessPassClientConfig as h, isEvmWallet as i, type AccessPassInfo as j, type AccessPassTier as k, type SettleResponse as l, type PaymentRequired as m, type PayToProvider as n, type AccessPassClaims as o, type PayToContext as p, type PayToProviderDefaults as q };

package/dist/{types-xQu1U4xk.d.ts → types-BvQpNtFw.d.ts}

@@ -72,6 +72,14 @@ interface AcceptsExtra {
      * Provided by the facilitator's batch-settlement kind. EVM only.
      */
     receiverAuthorizer?: string;
+    /** Tab seller-wire header advertised by the default hosted scheme. */
+    voucherHeader?: string;
+    /** Tab registration encoding carried inside each seller voucher. */
+    registrationEncoding?: string;
+    /** Immutable commercial-terms version for this Tab offer. */
+    termsVersion?: string;
+    /** Event that makes usage accepted under the advertised terms version. */
+    acceptanceRule?: string;
     /** Additional chain-specific fields */
     [key: string]: unknown;
 }
@@ -637,4 +645,4 @@ interface BalanceInfo {
     asset: string;
 }
 
-export { type AccessPassClientConfig as A, type BalanceInfo as B, type ChainAdapter as C, type EvmWallet as E, type GenericWallet as G, type PaymentAccept as P, type SettlementProbe as S, type VerifyResponse as V, type WalletSet as W, X402Error as X, type SolanaWallet as a, createEvmAdapter as b, createSolanaAdapter as c, type AccessPassTier as d, type AccessPassInfo as e, type SettleResponse as f, type PayToProvider as g, type PaymentRequired as h, type PayToContext as i, type PayToProviderDefaults as j, type AccessPassClaims as k, SolanaAdapter as l, EvmAdapter as m, type AdapterConfig as n, type SignedTransaction as o, isSolanaWallet as p, isEvmWallet as q };
+export { type AdapterConfig as A, type BalanceInfo as B, type ChainAdapter as C, EvmAdapter as E, type GenericWallet as G, type PaymentAccept as P, SolanaAdapter as S, type VerifyResponse as V, type WalletSet as W, X402Error as X, type EvmWallet as a, type SignedTransaction as b, type SolanaWallet as c, createEvmAdapter as d, createSolanaAdapter as e, isSolanaWallet as f, type SettlementProbe as g, type AccessPassClientConfig as h, isEvmWallet as i, type AccessPassInfo as j, type AccessPassTier as k, type SettleResponse as l, type PaymentRequired as m, type PayToProvider as n, type AccessPassClaims as o, type PayToContext as p, type PayToProviderDefaults as q };

package/dist/{types-CZHPdVkg.d.cts → types-C6z04Mxr.d.cts}

@@ -1,5 +1,5 @@
-import { W as WalletSet } from './types-xQu1U4xk.cjs';
-import { T as Tab } from './types-CSuISjXA.cjs';
+import { W as WalletSet } from './types-BvQpNtFw.cjs';
+import { T as Tab } from './types-45M9fb5M.cjs';
 
 /**
  * Shared contract for the x402 version seam. Both the v1 and v2 strategy
@@ -151,4 +151,4 @@ interface PaymentStrategy {
     pay(url: string, requestInit: RequestInit, challenge: PaymentChallenge, wallets: WalletSet, opts: PayAndFetchOptions): Promise<PayResult>;
 }
 
-export type { ChallengeOption as C, NetworkRef as N, PayAndFetchOptions as P, PayResult as a, PaymentStrategy as b, PaymentChallenge as c };
+export type { ChallengeOption as C, NetworkRef as N, PaymentStrategy as P, PayAndFetchOptions as a, PayResult as b, PaymentChallenge as c };

package/dist/{types-DY8xKheW.d.ts → types-CkcNYx1Q.d.ts}

@@ -1,6 +1,6 @@
 import { RequestHandler } from 'express';
 import { ChannelStorage } from '@x402/evm/batch-settlement/server';
-import { b as CloseReceipt } from './types-_wdHzVG-.js';
+import { b as CloseReceipt } from './types-DwVhPqOZ.js';
 
 /**
  * Result of closing one channel from the seller side. Either a settlement
@@ -57,4 +57,4 @@ interface BatchSettlementSeller extends RequestHandler {
     stop(): Promise<void>;
 }
 
-export type { BatchSettlementSeller as B, SellerCloseResult as S, BatchSettlementSellerConfig as a };
+export type { BatchSettlementSellerConfig as B, SellerCloseResult as S, BatchSettlementSeller as a };

package/dist/{types-_wdHzVG-.d.ts → types-DwVhPqOZ.d.ts}

@@ -1,5 +1,5 @@
 import { ClientChannelStorage } from '@x402/evm/batch-settlement/client';
-import { E as EvmWallet } from './types-xQu1U4xk.js';
+import { a as EvmWallet } from './types-BvQpNtFw.js';
 
 /**
  * Buyer withdrawal escape hatch for batch-settlement escrow channels.
@@ -162,4 +162,4 @@ declare class UnsupportedNetworkError extends Error {
     constructor(message: string);
 }
 
-export { type BatchSettlementChannel as B, type ChannelStore as C, type ForceWithdrawResult as F, InsufficientBalanceError as I, type OpenBatchChannelOptions as O, type ResumeBatchChannelOptions as R, UnsupportedNetworkError as U, WithdrawNotReadyError as W, type ChannelState as a, type CloseReceipt as b, type CloseResult as c, type FinalizeWithdrawResult as d };
+export { type BatchSettlementChannel as B, type ChannelStore as C, type FinalizeWithdrawResult as F, InsufficientBalanceError as I, type OpenBatchChannelOptions as O, type ResumeBatchChannelOptions as R, UnsupportedNetworkError as U, WithdrawNotReadyError as W, type ChannelState as a, type CloseReceipt as b, type CloseResult as c, type ForceWithdrawResult as d };

package/dist/{types-WMqs5xII.d.cts → types-JpkrtFbZ.d.cts}

@@ -1,6 +1,6 @@
 import { RequestHandler } from 'express';
 import { ChannelStorage } from '@x402/evm/batch-settlement/server';
-import { b as CloseReceipt } from './types-BdS_uvNs.cjs';
+import { b as CloseReceipt } from './types-BbvuPNXl.cjs';
 
 /**
  * Result of closing one channel from the seller side. Either a settlement
@@ -57,4 +57,4 @@ interface BatchSettlementSeller extends RequestHandler {
     stop(): Promise<void>;
 }
 
-export type { BatchSettlementSeller as B, SellerCloseResult as S, BatchSettlementSellerConfig as a };
+export type { BatchSettlementSellerConfig as B, SellerCloseResult as S, BatchSettlementSeller as a };

package/dist/utils/index.d.cts

@@ -1,4 +1,4 @@
-export { s as EVM_RPC_URLS, r as SOLANA_RPC_URLS } from '../constants-Icc4CXNG.cjs';
+export { r as EVM_RPC_URLS, s as SOLANA_RPC_URLS } from '../constants-BLvApMMl.cjs';
 
 /**
  * Utility Functions

package/dist/utils/index.d.ts

@@ -1,4 +1,4 @@
-export { s as EVM_RPC_URLS, r as SOLANA_RPC_URLS } from '../constants-Icc4CXNG.js';
+export { r as EVM_RPC_URLS, s as SOLANA_RPC_URLS } from '../constants-BLvApMMl.js';
 
 /**
  * Utility Functions

package/dist/{x402-client-BQKDeNxq.d.cts → x402-client-B8zdDeat.d.cts}

@@ -1,4 +1,4 @@
-import { SponsoredRecommendation, SponsoredAccessSettlementInfo } from '@dexterai/x402-ads-types';
+import { SponsoredAccessSettlementInfo, SponsoredRecommendation } from '@dexterai/x402-ads-types';
 
 /**
  * Sponsored Access (Ads for Agents) — Client Helpers
@@ -143,4 +143,4 @@ interface X402Client {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
 }
 
-export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getPaymentReceipt as b, fireImpressionBeacon as f, getSponsoredRecommendations as g };
+export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getSponsoredRecommendations as b, fireImpressionBeacon as f, getPaymentReceipt as g };

package/dist/{x402-client-BQKDeNxq.d.ts → x402-client-B8zdDeat.d.ts}

@@ -1,4 +1,4 @@
-import { SponsoredRecommendation, SponsoredAccessSettlementInfo } from '@dexterai/x402-ads-types';
+import { SponsoredAccessSettlementInfo, SponsoredRecommendation } from '@dexterai/x402-ads-types';
 
 /**
  * Sponsored Access (Ads for Agents) — Client Helpers
@@ -143,4 +143,4 @@ interface X402Client {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
 }
 
-export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getPaymentReceipt as b, fireImpressionBeacon as f, getSponsoredRecommendations as g };
+export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getSponsoredRecommendations as b, fireImpressionBeacon as f, getPaymentReceipt as g };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/x402",
-  "version": "5.4.2",
+  "version": "6.0.0-rc.0",
   "description": "Full-stack x402 SDK - add paid API monetization to any endpoint. Express middleware, React hooks, Access Pass, dynamic pricing. Solana, Base, Polygon, Arbitrum, Optimism, Avalanche, World Chain, Monad, Robinhood Chain, SKALE.",
   "author": "Dexter",
   "license": "MIT",
@@ -74,7 +74,8 @@
     "prepublishOnly": "npm run build",
     "release": "npm version patch && npm publish --access public",
     "release:minor": "npm version minor && npm publish --access public",
-    "release:major": "npm version major && npm publish --access public"
+    "release:major": "npm version major && npm publish --access public",
+    "release:next": "npm publish --access public --tag next"
   },
   "dependencies": {
     "@dexterai/x402-ads-types": "^0.2.0",
@@ -86,15 +87,15 @@
     "@x402/core": "2.12.0",
     "@x402/evm": "2.12.0",
     "@x402/extensions": "2.12.0",
+    "bs58": "^6.0.0",
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
-    "@dexterai/vault": "^0.37.0",
+    "@dexterai/vault": "0.43.1",
     "@types/aws-lambda": "^8.10.161",
     "@types/express": "^5.0.6",
     "@types/node": "^22.10.0",
     "@types/react": "^18.0.0",
-    "bs58": "^6.0.0",
     "ethers": "^6.13.0",
     "express": "^5.2.1",
     "react": "^18.0.0",
@@ -104,7 +105,7 @@
     "vitest": "^2.1.8"
   },
   "peerDependencies": {
-    "@dexterai/vault": ">=0.34.0",
+    "@dexterai/vault": "0.43.1",
     "@solana/wallet-adapter-base": "^0.9.0",
     "react": "^18.0.0 || ^19.0.0",
     "stripe": "^20.0.0",
@@ -129,7 +130,7 @@
     }
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "keywords": [
     "x402",