@dexterai/x402 5.4.2 → 6.0.0-rc.1

package/dist/{types-CSuISjXA.d.ts → types-OHNNM1J2.d.ts}

@@ -25,10 +25,17 @@ interface VaultAdapter {
     swigAddress: string;
     /** Program/contract account holding the OTS gate state. */
     vaultPda: string;
+    /**
+     * Voucher generation this adapter issues. V6 requires `2` for buyer-side
+     * open/recovery. The `1` discriminator remains only so a historical adapter
+     * is rejected explicitly instead of being mistaken for V2 or silently
+     * falling through after an obligation may exist.
+     */
+    readonly sessionVoucherVersion: 1 | 2;
     /**
      * Use the ROOT signer (passkey) to authorize a fresh session key. This is
-     * the only call that prompts the user (twice when atomically replacing a
-     * live session — one revoke ceremony + one register ceremony). Returns a
+     * the only call that prompts the user. V7 live replacement binds retirement
+     * and replacement into one ceremony. Returns a
      * session that can be passed to `signWithSession` freely until the scope's
      * cap or expiry is reached.
      *
@@ -54,7 +61,90 @@ interface VaultAdapter {
      * facilitator settles via `settle_voucher(amount, increment: false)`.
      */
     signCloseTab(session: SessionKey, channelId: string, cumulativeAmount: AtomicAmount): Promise<Uint8Array>;
+    /**
+     * V2-only independent postcondition check. The reservation provider returns
+     * a voucher-bound receipt; the adapter must then prove the corresponding
+     * finalized on-chain reservation and authority-signed voucher-binding Memo
+     * from its own chain connection before the voucher may leave this process.
+     * V1 adapters omit this method.
+     */
+    verifyFinalVoucherV2Reservation?: VerifyFinalVoucherV2Reservation;
+}
+/** Exact durable release fence for a buyer-signed FINAL V2 voucher. */
+interface FinalVoucherV2ReservationInput {
+    network: TabNetworkId;
+    programId: string;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionNonce: number;
+    reservationAmountAtomic: AtomicAmount;
+    previousCumulativeAtomic: AtomicAmount;
+    /** SHA-256 of the canonical complete voucher identity. */
+    voucherDigest: string;
+    /** SDK retry identity. Exact-byte retries retain this value; provider
+     * lifecycle and receipt identities remain provider-owned and distinct. */
+    idempotencyKey: string;
+    voucher: SignedVoucher;
 }
+/**
+ * Provider attestation returned only after its durable transaction lifecycle
+ * has finalized the exact reservation and read back the exact post-state.
+ * The SDK validates every voucher/session field and the VaultAdapter proves
+ * both the reservation and its authority-signed voucher-binding Memo from the
+ * transaction itself; this is deliberately not a boolean ack.
+ */
+interface FinalVoucherV2ReservationReceipt {
+    contract: 'dexter-native-tab-open-receipt/v1' | 'dexter-native-tab-open-receipt/v2';
+    operationId: string;
+    callerOperationId: string;
+    network: string;
+    transaction: string;
+    /** FINAL vouchers are released only after the exact reservation transaction
+     * reaches Solana finalized commitment. A merely confirmed fork is not a
+     * durable capacity guarantee. */
+    commitment: 'finalized';
+    confirmationSlot: number;
+    postStateSlot: number;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionPublicKey: string;
+    voucherDigest: string;
+    cumulativeAmountAtomic: string;
+    sequenceNumber: number;
+    providerReceiptId: string;
+    reservationAmountAtomic: string;
+    pendingVoucherCountBefore: number;
+    pendingVoucherCountAfter: number;
+    currentOutstandingBeforeAtomic: '0';
+    currentOutstandingAfterAtomic: string;
+    rootOperationId?: string;
+    generation?: number;
+    predecessorCallerOperationId?: string;
+    predecessorLifecycleOperationId?: string;
+    predecessorReleaseDigest?: string;
+    stableReservationId?: string;
+    economicEffectDigest?: string;
+}
+/**
+ * Voucher released by a live Tab handle. Historical V1 vouchers omit the
+ * receipt. Every V2 voucher carries the complete provider receipt that the
+ * buyer already verified before release; sellers still treat that receipt as
+ * untrusted evidence and independently prove its finalized transaction.
+ *
+ * This extends the existing SignedVoucher shape so existing callers that only
+ * consume the four signed fields remain source-compatible.
+ */
+interface TabSignedVoucher extends SignedVoucher {
+    readonly reservationReceipt?: FinalVoucherV2ReservationReceipt;
+}
+type ReserveFinalVoucherV2 = (input: FinalVoucherV2ReservationInput) => Promise<FinalVoucherV2ReservationReceipt>;
+type VerifyFinalVoucherV2Reservation = (input: FinalVoucherV2ReservationInput, receipt: FinalVoucherV2ReservationReceipt) => Promise<void>;
 /**
  * Live-session policy for `authorizeSession` / `openTab` (K-T4e).
  *
@@ -69,8 +159,7 @@ interface VaultAdapter {
  *    (`tab.close()` — or POST its last signed voucher to `/tab/settle`) and
  *    retries, or acknowledges the replace explicitly.
  *  - `'replace'`: compose the ATOMIC same-transaction
- *    [secp(revoke), revoke, secp(register), register] so the buyer is never
- *    left sessionless mid-flow. Costs a second passkey ceremony. Value
+ *    [secp(replace), replace] so the buyer is never left sessionless. Value
  *    already settled or crystallized into LockedClaims survives the replace;
  *    anything signed beyond the frontier is voided.
  */
@@ -106,6 +195,14 @@ interface TabState {
 interface Tab {
     /** Deterministic channel id derived from buyer/seller/scope/salt. */
     readonly channelId: string;
+    /**
+     * Voucher contract used by this live handle. V2 FINAL vouchers are fenced
+     * by a durable reservation and therefore may never fall through to another
+     * payment rail after an indeterminate signing/reservation error.
+     *
+     * Required in v6. An absent generation is not safely equivalent to V1.
+     */
+    readonly voucherVersion: 1 | 2;
     /** Which network the underlying vault lives on. */
     readonly network: TabNetworkId;
     /**
@@ -124,7 +221,7 @@ interface Tab {
      * Same counter, same scope enforcement as stream() — throws
      * SessionScopeExceededError past the cap.
      */
-    signNextVoucher(incrementAtomic: AtomicAmount): Promise<SignedVoucher>;
+    signNextVoucher(incrementAtomic: AtomicAmount): Promise<TabSignedVoucher>;
     /**
      * Streamed paid request. Returns an async iterable of chunks. Voucher
      * signing is internal: the seller demands a fresh session-signed voucher
@@ -179,7 +276,7 @@ interface OpenTabOptions {
     vault: VaultAdapter;
     /** CAIP-2-style network the vault lives on; cross-checked against vault.network. */
     network: TabNetworkId;
-    /** Seller's endpoint host (used for the counterparty binding + voucher routing). */
+    /** Seller's base58 Solana public key for the counterparty binding. */
     seller: string;
     /** Max amount per voucher — caps how aggressive a single charge can be. */
     perUnitCap: HumanAmount;
@@ -203,6 +300,12 @@ interface OpenTabOptions {
      * See {@link AuthorizeSessionOptions}.
      */
     onLiveSession?: 'error' | 'replace';
+    /**
+     * Required by V2-capable adapters. The callback must durably persist and
+     * establish the exact FINAL voucher reservation before resolving. It must
+     * be idempotent for identical voucher bytes; a timeout is retried exactly.
+     */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
 }
 /**
  * Options for `resumeTab` — open a handle to a tab that was opened by a
@@ -227,6 +330,18 @@ declare class UnsupportedNetworkError extends Error {
     readonly network: string;
     constructor(network: string);
 }
+/**
+ * Thrown before buyer-side I/O when v6 is asked to open or reconstruct a
+ * historical V1 tab. The coupled v6 facilitator has no compatible V1 arming
+ * endpoint and the Vault-wide pending counter cannot prove which historical
+ * session owns an existing reservation. Seller-side verification of already
+ * issued V1 vouchers remains available so those obligations can be settled.
+ */
+declare class HistoricalV1MigrationRequiredError extends Error {
+    readonly surface: 'armTabOpen' | 'openTab' | 'tabFromGrant';
+    readonly code = "native_tab_v1_migration_required";
+    constructor(surface: 'armTabOpen' | 'openTab' | 'tabFromGrant');
+}
 /** Thrown by a buyer call when the session-key cap or expiry would be exceeded. */
 declare class SessionScopeExceededError extends Error {
     readonly reason: 'cap_exceeded' | 'expired' | 'wrong_counterparty';
@@ -277,4 +392,4 @@ declare class LiveSessionExistsError extends Error {
     constructor(details: LiveSessionDetails);
 }
 
-export { type AuthorizeSessionOptions as A, type LiveSessionDetails as L, type OpenTabOptions as O, type ResumeTabOptions as R, SessionScopeExceededError as S, type Tab as T, UnsupportedNetworkError as U, type VaultAdapter as V, type TabState as a, type TabCloseResult as b, TabClosedError as c, LiveSessionExistsError as d };
+export { type AuthorizeSessionOptions as A, type FinalVoucherV2ReservationInput as F, HistoricalV1MigrationRequiredError as H, type LiveSessionDetails as L, type OpenTabOptions as O, type ResumeTabOptions as R, SessionScopeExceededError as S, type Tab as T, UnsupportedNetworkError as U, type VerifyFinalVoucherV2Reservation as V, type FinalVoucherV2ReservationReceipt as a, type VaultAdapter as b, LiveSessionExistsError as c, type TabSignedVoucher as d, type ReserveFinalVoucherV2 as e, type TabCloseResult as f, TabClosedError as g, type TabState as h };

package/dist/utils/index.d.cts

@@ -1,4 +1,4 @@
-export { s as EVM_RPC_URLS, r as SOLANA_RPC_URLS } from '../constants-Icc4CXNG.cjs';
+export { r as EVM_RPC_URLS, s as SOLANA_RPC_URLS } from '../constants-BLvApMMl.cjs';
 
 /**
  * Utility Functions

package/dist/utils/index.d.ts

@@ -1,4 +1,4 @@
-export { s as EVM_RPC_URLS, r as SOLANA_RPC_URLS } from '../constants-Icc4CXNG.js';
+export { r as EVM_RPC_URLS, s as SOLANA_RPC_URLS } from '../constants-BLvApMMl.js';
 
 /**
  * Utility Functions

package/dist/{x402-client-BQKDeNxq.d.cts → x402-client-B8zdDeat.d.cts}

@@ -1,4 +1,4 @@
-import { SponsoredRecommendation, SponsoredAccessSettlementInfo } from '@dexterai/x402-ads-types';
+import { SponsoredAccessSettlementInfo, SponsoredRecommendation } from '@dexterai/x402-ads-types';
 
 /**
  * Sponsored Access (Ads for Agents) — Client Helpers
@@ -143,4 +143,4 @@ interface X402Client {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
 }
 
-export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getPaymentReceipt as b, fireImpressionBeacon as f, getSponsoredRecommendations as g };
+export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getSponsoredRecommendations as b, fireImpressionBeacon as f, getPaymentReceipt as g };

package/dist/{x402-client-BQKDeNxq.d.ts → x402-client-B8zdDeat.d.ts}

@@ -1,4 +1,4 @@
-import { SponsoredRecommendation, SponsoredAccessSettlementInfo } from '@dexterai/x402-ads-types';
+import { SponsoredAccessSettlementInfo, SponsoredRecommendation } from '@dexterai/x402-ads-types';
 
 /**
  * Sponsored Access (Ads for Agents) — Client Helpers
@@ -143,4 +143,4 @@ interface X402Client {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
 }
 
-export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getPaymentReceipt as b, fireImpressionBeacon as f, getSponsoredRecommendations as g };
+export { type PaymentReceipt as P, type X402Client as X, getSponsoredAccessInfo as a, getSponsoredRecommendations as b, fireImpressionBeacon as f, getPaymentReceipt as g };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/x402",
-  "version": "5.4.2",
+  "version": "6.0.0-rc.1",
   "description": "Full-stack x402 SDK - add paid API monetization to any endpoint. Express middleware, React hooks, Access Pass, dynamic pricing. Solana, Base, Polygon, Arbitrum, Optimism, Avalanche, World Chain, Monad, Robinhood Chain, SKALE.",
   "author": "Dexter",
   "license": "MIT",
@@ -74,7 +74,8 @@
     "prepublishOnly": "npm run build",
     "release": "npm version patch && npm publish --access public",
     "release:minor": "npm version minor && npm publish --access public",
-    "release:major": "npm version major && npm publish --access public"
+    "release:major": "npm version major && npm publish --access public",
+    "release:next": "npm publish --access public --tag next"
   },
   "dependencies": {
     "@dexterai/x402-ads-types": "^0.2.0",
@@ -86,15 +87,15 @@
     "@x402/core": "2.12.0",
     "@x402/evm": "2.12.0",
     "@x402/extensions": "2.12.0",
+    "bs58": "^6.0.0",
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
-    "@dexterai/vault": "^0.37.0",
+    "@dexterai/vault": "0.43.2",
     "@types/aws-lambda": "^8.10.161",
     "@types/express": "^5.0.6",
     "@types/node": "^22.10.0",
     "@types/react": "^18.0.0",
-    "bs58": "^6.0.0",
     "ethers": "^6.13.0",
     "express": "^5.2.1",
     "react": "^18.0.0",
@@ -104,7 +105,7 @@
     "vitest": "^2.1.8"
   },
   "peerDependencies": {
-    "@dexterai/vault": ">=0.34.0",
+    "@dexterai/vault": "0.43.2",
     "@solana/wallet-adapter-base": "^0.9.0",
     "react": "^18.0.0 || ^19.0.0",
     "stripe": "^20.0.0",
@@ -129,7 +130,7 @@
     }
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "keywords": [
     "x402",