@dexterai/x402 5.4.2 → 6.0.0-rc.1

package/dist/tab/index.d.cts

@@ -1,17 +1,17 @@
-import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, V as VaultAdapter } from '../types-CSuISjXA.cjs';
-export { A as AuthorizeSessionOptions, L as LiveSessionDetails, d as LiveSessionExistsError, S as SessionScopeExceededError, b as TabCloseResult, c as TabClosedError, a as TabState, U as UnsupportedNetworkError } from '../types-CSuISjXA.cjs';
-import { HumanAmount, AtomicAmount, SignedVoucher } from '@dexterai/vault/types';
+import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, d as TabSignedVoucher, a as FinalVoucherV2ReservationReceipt, F as FinalVoucherV2ReservationInput, e as ReserveFinalVoucherV2, b as VaultAdapter } from '../types-OHNNM1J2.cjs';
+export { A as AuthorizeSessionOptions, H as HistoricalV1MigrationRequiredError, L as LiveSessionDetails, c as LiveSessionExistsError, S as SessionScopeExceededError, f as TabCloseResult, g as TabClosedError, h as TabState, U as UnsupportedNetworkError, V as VerifyFinalVoucherV2Reservation } from '../types-OHNNM1J2.cjs';
+import { AtomicAmount, HumanAmount, SignedVoucher } from '@dexterai/vault/types';
 export { AtomicAmount, HumanAmount, SessionKey, SessionScope, SignedVoucher, TabNetworkId, VoucherPayload } from '@dexterai/vault/types';
 import { PublicKey, Connection } from '@solana/web3.js';
 import { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
 export { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
-import { a as PayResult } from '../types-CZHPdVkg.cjs';
-export { SessionRegisterMessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, sessionRegisterMessage, sessionRevokeMessage, voucherPayloadMessage } from '@dexterai/vault/messages';
+import { b as PayResult } from '../types-DnhCOjDx.cjs';
+export { SessionRegisterMessageArgs, SessionReplaceV1MessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, finalVoucherV2Sequence, sessionRegisterMessage, sessionReplaceV1Message, sessionRevokeMessage, sessionVoucherV2AuthorizationNonce, sessionVoucherV2Nonce, voucherPayloadMessage, voucherV2SequenceOrdinal } from '@dexterai/vault/messages';
 export { BuildRegisterSessionKeyArgs, BuildRevokeSessionKeyArgs, buildRegisterSessionKeyInstruction, buildRevokeSessionKeyInstruction } from '@dexterai/vault/instructions';
 export { buildSecp256r1VerifyInstruction } from '@dexterai/vault/precompile';
 export { DEXTER_VAULT_PROGRAM_ID, INSTRUCTIONS_SYSVAR_ID, SECP256R1_PROGRAM_ID } from '@dexterai/vault/constants';
-export { d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, a as scopeCapAtomic, s as signVoucher } from '../sessions-BG2OYLBi.cjs';
-import '../types-xQu1U4xk.cjs';
+export { S as SignContextBoundFinalVoucherV2Input, a as SignContextBoundFinalVoucherV2Result, d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, s as scopeCapAtomic, b as signContextBoundFinalVoucherV2, c as signVoucher } from '../sessions-rPdO1CgK.cjs';
+import '../types-BvQpNtFw.cjs';
 
 /**
  * The `Tab` runtime — the live object returned by `openTab()`.
@@ -39,24 +39,98 @@ declare function humanToAtomic(human: HumanAmount, decimals?: number): AtomicAmo
 declare function atomicToHuman(atomic: AtomicAmount, decimals?: number): HumanAmount;
 /**
  * Serialize a signed voucher to the `X-Tab-Voucher` header value:
- * base64-encoded JSON with hex-encoded byte fields. This is THE wire
- * encoding the seller middleware and the facilitator's `/tab/settle`
- * endpoint both parse — `stream()` uses it, and `payAndFetch` uses it to
- * pay a `tab`-scheme accepts entry directly.
+ * base64-encoded JSON with hex-encoded byte fields. V2 additionally carries
+ * the complete reservation receipt that was independently verified before the
+ * voucher left the buyer. The receipt is an untrusted transaction locator at
+ * the seller; it never replaces the seller's own finalized chain proof.
+ *
+ * This is THE wire encoding the seller middleware and the facilitator's
+ * `/tab/settle` endpoint both parse — `stream()` uses it, and `payAndFetch`
+ * uses it to pay a `tab`-scheme accepts entry directly.
  */
-declare function voucherToHeader(signed: SignedVoucher): string;
+declare function voucherToHeader(signed: SignedVoucher | TabSignedVoucher, reservationReceipt?: FinalVoucherV2ReservationReceipt): string;
 /**
  * Arm drain-protection for a freshly-registered tab via the facilitator's
  * /tab/open. THROWS if protection cannot be confirmed — a tab that is not
  * drain-protected must never be returned to the caller.
  */
-declare function armTabOpen(facilitatorUrl: string, buyerSwigAddress: string, maxAmountAtomic: bigint, network: string, counterparty: string): Promise<{
+/**
+ * @deprecated V6 has no buyer-side V1 arming route. This retained symbol is a
+ * deterministic migration fence for callers compiled against the old helper;
+ * it performs no fetch, signing, or chain action.
+ */
+declare function armTabOpen(_facilitatorUrl: string, _buyerSwigAddress: string, _maxAmountAtomic: bigint, _network: string, _counterparty: string): Promise<{
     armed: true;
     signature: string;
 }>;
 declare function openTab(options: OpenTabOptions): Promise<Tab>;
 declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
 
+/** Canonical network carried by the managed native-Tab transaction record. */
+declare const FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+/** Domain for the authority-signed transaction binding. Changing any bound
+ * field requires a new domain/version rather than silently changing bytes. */
+declare const FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN = "dexter-native-tab-v2-reservation/v1";
+/** UTF-8 prefix stored by the SPL Memo instruction. */
+declare const FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX = "dexter-native-tab-v2-reservation/v1:";
+/** Shared economic identity committed by the authority-signed Memo. This is
+ * intentionally independent of provider lifecycle IDs and SDK retry keys so
+ * the SDK and facilitator can derive identical bytes from their common facts. */
+interface FinalVoucherV2ReservationBindingIdentity {
+    network: string;
+    programId: string;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionNonce: number;
+    reservationAmountAtomic: string;
+    previousCumulativeAtomic: string;
+    voucherDigest: string;
+    cumulativeAmountAtomic: string;
+    sequenceNumber: number;
+}
+/** Normalize the SDK's historical Solana alias to the CAIP-2 value persisted
+ * by the managed facilitator. No other alias is accepted by this contract. */
+declare function canonicalFinalVoucherV2ReservationNetwork(network: string): string;
+/**
+ * Byte-for-byte mirror of the facilitator's voucher identity digest. It binds
+ * the complete signed voucher, not merely its amount or local counter.
+ */
+declare function finalVoucherV2Digest(voucher: SignedVoucher): string;
+declare function finalVoucherV2ReservationIdentity(voucher: SignedVoucher): {
+    voucherDigest: string;
+    idempotencyKey: string;
+};
+/**
+ * Low-level cross-system digest over the shared reservation identity. This
+ * helper exists so transaction builders and verifiers can lock byte-for-byte
+ * parity without manufacturing a SignedVoucher for an already-derived digest.
+ */
+declare function finalVoucherV2ReservationBindingDigestFromIdentity(identity: FinalVoucherV2ReservationBindingIdentity): string;
+/**
+ * Digest that must be carried by the same Dexter-authority-signed Solana
+ * transaction as the exact `settle_voucher(increment=true)` reservation.
+ *
+ * The Vault instruction binds the on-chain amount and account identities. This
+ * separate domain binds that economic effect to the complete FINAL voucher and
+ * shared economic identity. Provider lifecycle, receipt, and retry identifiers
+ * are deliberately excluded. The digest is computed locally from the voucher
+ * bytes; a provider-supplied `voucherDigest` is never trusted as the source of
+ * this transaction binding.
+ */
+declare function finalVoucherV2ReservationBindingDigest(input: FinalVoucherV2ReservationInput): string;
+/** Exact UTF-8 SPL Memo payload required in the reservation transaction. */
+declare function finalVoucherV2ReservationMemo(input: FinalVoucherV2ReservationInput): string;
+/**
+ * Validate the provider's immutable voucher-bound receipt before asking the
+ * chain adapter to prove the post-state independently. A receipt is evidence
+ * of the provider's durable lifecycle record; it is not a substitute for the
+ * adapter's chain read.
+ */
+declare function assertFinalVoucherV2ReservationReceipt(input: FinalVoucherV2ReservationInput, receipt: FinalVoucherV2ReservationReceipt): void;
+
 /**
  * tabFromGrant — open a buyer-side Tab from a GRANTED session key.
  *
@@ -81,8 +155,11 @@ declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
  *     odometer starts there so the first voucher strictly exceeds everything
  *     the chain has already terminally counted. The chain is the durable
  *     counter; there is no local state store to lose.
- *   - drain-protection arming via the facilitator's `POST /tab/open`,
- *     fail-closed exactly like `openTab` (an unarmed tab is never returned)
+ *   - a context-bound V2 reservation fence before every newly issued FINAL
+ *     voucher. Historical low-bit V1 grants are rejected before I/O: the v6
+ *     facilitator has no compatible buyer-side V1 arming/recovery endpoint.
+ *     Seller-side V1 verification remains available for obligations that were
+ *     already issued under the deployment that originally opened them.
  *
  * CUSTODY NOTE — why this constructor may hold a session secret when
  * `resumeTab` refuses to: the passkey path's "session keys are memory-only"
@@ -154,20 +231,31 @@ interface TabFromGrantOptions {
      */
     sellerUrl?: string;
     /**
-     * The buyer's Swig STATE address (`vault.swig_address`) for the `/tab/open`
-     * arming call. When omitted it is read from the on-chain vault account —
-     * one extra RPC read, never a guess.
+     * The buyer's Swig STATE address (`vault.swig_address`) bound into the exact
+     * V2 reservation request and receipt. When omitted it is read from the
+     * on-chain vault account — one extra RPC read, never a guess.
      */
     swigAddress?: string;
     /** Facilitator base URL. Default: DEFAULT_FACILITATOR_URL (https://x402.dexter.cash). */
     facilitatorUrl?: string;
     /** Vault program id override (test/devnet). Default: DEXTER_VAULT_PROGRAM_ID. */
     programId?: PublicKey;
+    /**
+     * Required for every context-bound V2 grant. Called with the exact FINAL
+     * voucher before it can be returned to merchant-facing code. The
+     * implementation must durably persist and establish that voucher's exact
+     * on-chain reservation, be idempotent for identical bytes, and resolve only
+     * after authoritative finalization. Low-bit V1 grants are rejected before
+     * this seam or any external I/O because v6 cannot reconstruct their arming
+     * identity safely.
+     */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
 }
 /**
  * Construct a live `Tab` from a granted session key. Fail-loud at every step:
- * key/params mismatch, dead or drifted on-chain session, exhausted cap, and
- * unarmed drain protection all THROW — an invalid tab is never returned.
+ * key/params mismatch, dead or drifted on-chain session, exhausted cap, and a
+ * missing exact V2 reservation fence all THROW — an invalid tab is never
+ * returned.
  */
 declare function tabFromGrant(options: TabFromGrantOptions): Promise<Tab>;
 
@@ -179,6 +267,11 @@ interface TabOffer {
     asset: string;
     /** CAIP-2 network from the challenge (x402 v2 form). */
     networkCaip2: string;
+    /** Preserved verbatim from accepts[].extra for policy-aware callers. */
+    voucherHeader?: string;
+    registrationEncoding?: string;
+    termsVersion?: string;
+    acceptanceRule?: string;
     resourceUrl?: string;
 }
 type TabOfferResult = {
@@ -206,6 +299,16 @@ type TabOfferResult = {
  */
 declare function resolveTabOffer(url: string, init?: RequestInit, fetchImpl?: typeof fetch): Promise<TabOfferResult>;
 
+/**
+ * Hosted-v1 commercial semantics advertised by the default Tab scheme.
+ * A different refund/dispute or delivery rule requires a new terms version;
+ * callers must never reinterpret these strings in place.
+ */
+declare const HOSTED_TAB_TERMS_VERSION: "dexter-tab-hosted-pay-before-delivery/v1";
+declare const HOSTED_TAB_ACCEPTANCE_RULE: "pay_before_delivery_seller_2xx";
+declare const HOSTED_TAB_VOUCHER_HEADER: "x-tab-voucher";
+declare const HOSTED_TAB_REGISTRATION_ENCODING: "base64(188-byte sessionRegisterMessage)";
+
 /**
  * Step-3a buyer orchestration: pay a URL through a tab with ZERO seller
  * knowledge. Resolution + lifecycle only — composes resolveTabOffer,
@@ -238,6 +341,8 @@ interface PayUrlWithTabOptions {
      * `OpenTabOptions.onLiveSession` (K-T4e).
      */
     onLiveSession?: 'error' | 'replace';
+    /** Exact V2 reservation fence forwarded to openTab. */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
     /**
      * Open-tab registry keyed by counterparty base58. Pass the SAME Map across
      * calls to reuse one open tab per seller instead of re-registering
@@ -313,4 +418,4 @@ interface ResolveTabTermsOptions {
  */
 declare function resolveTabTerms(url: string, init?: RequestInit, opts?: ResolveTabTermsOptions): Promise<TabTermsResult>;
 
-export { DEFAULT_FACILITATOR_URL, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, atomicToHuman, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };
+export { DEFAULT_FACILITATOR_URL, FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN, FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX, FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2, type FinalVoucherV2ReservationBindingIdentity, FinalVoucherV2ReservationInput, FinalVoucherV2ReservationReceipt, HOSTED_TAB_ACCEPTANCE_RULE, HOSTED_TAB_REGISTRATION_ENCODING, HOSTED_TAB_TERMS_VERSION, HOSTED_TAB_VOUCHER_HEADER, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, ReserveFinalVoucherV2, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, TabSignedVoucher, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, assertFinalVoucherV2ReservationReceipt, atomicToHuman, canonicalFinalVoucherV2ReservationNetwork, finalVoucherV2Digest, finalVoucherV2ReservationBindingDigest, finalVoucherV2ReservationBindingDigestFromIdentity, finalVoucherV2ReservationIdentity, finalVoucherV2ReservationMemo, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };

package/dist/tab/index.d.ts

@@ -1,17 +1,17 @@
-import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, V as VaultAdapter } from '../types-CSuISjXA.js';
-export { A as AuthorizeSessionOptions, L as LiveSessionDetails, d as LiveSessionExistsError, S as SessionScopeExceededError, b as TabCloseResult, c as TabClosedError, a as TabState, U as UnsupportedNetworkError } from '../types-CSuISjXA.js';
-import { HumanAmount, AtomicAmount, SignedVoucher } from '@dexterai/vault/types';
+import { O as OpenTabOptions, T as Tab, R as ResumeTabOptions, d as TabSignedVoucher, a as FinalVoucherV2ReservationReceipt, F as FinalVoucherV2ReservationInput, e as ReserveFinalVoucherV2, b as VaultAdapter } from '../types-OHNNM1J2.js';
+export { A as AuthorizeSessionOptions, H as HistoricalV1MigrationRequiredError, L as LiveSessionDetails, c as LiveSessionExistsError, S as SessionScopeExceededError, f as TabCloseResult, g as TabClosedError, h as TabState, U as UnsupportedNetworkError, V as VerifyFinalVoucherV2Reservation } from '../types-OHNNM1J2.js';
+import { AtomicAmount, HumanAmount, SignedVoucher } from '@dexterai/vault/types';
 export { AtomicAmount, HumanAmount, SessionKey, SessionScope, SignedVoucher, TabNetworkId, VoucherPayload } from '@dexterai/vault/types';
 import { PublicKey, Connection } from '@solana/web3.js';
 import { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
 export { ApprovedSpendGrantParams } from '@dexterai/vault/grant';
-import { a as PayResult } from '../types-Co5YYhVB.js';
-export { SessionRegisterMessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, sessionRegisterMessage, sessionRevokeMessage, voucherPayloadMessage } from '@dexterai/vault/messages';
+import { b as PayResult } from '../types-CwLPKV8T.js';
+export { SessionRegisterMessageArgs, SessionReplaceV1MessageArgs, SessionRevokeMessageArgs, VoucherPayloadBytes, buildVoucherMessage, finalVoucherV2Sequence, sessionRegisterMessage, sessionReplaceV1Message, sessionRevokeMessage, sessionVoucherV2AuthorizationNonce, sessionVoucherV2Nonce, voucherPayloadMessage, voucherV2SequenceOrdinal } from '@dexterai/vault/messages';
 export { BuildRegisterSessionKeyArgs, BuildRevokeSessionKeyArgs, buildRegisterSessionKeyInstruction, buildRevokeSessionKeyInstruction } from '@dexterai/vault/instructions';
 export { buildSecp256r1VerifyInstruction } from '@dexterai/vault/precompile';
 export { DEXTER_VAULT_PROGRAM_ID, INSTRUCTIONS_SYSVAR_ID, SECP256R1_PROGRAM_ID } from '@dexterai/vault/constants';
-export { d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, a as scopeCapAtomic, s as signVoucher } from '../sessions-BG2OYLBi.js';
-import '../types-xQu1U4xk.js';
+export { S as SignContextBoundFinalVoucherV2Input, a as SignContextBoundFinalVoucherV2Result, d as deriveChannelId, g as generateSessionKeypair, m as makeSessionKey, p as parseAtomic, s as scopeCapAtomic, b as signContextBoundFinalVoucherV2, c as signVoucher } from '../sessions-rPdO1CgK.js';
+import '../types-BvQpNtFw.js';
 
 /**
  * The `Tab` runtime — the live object returned by `openTab()`.
@@ -39,24 +39,98 @@ declare function humanToAtomic(human: HumanAmount, decimals?: number): AtomicAmo
 declare function atomicToHuman(atomic: AtomicAmount, decimals?: number): HumanAmount;
 /**
  * Serialize a signed voucher to the `X-Tab-Voucher` header value:
- * base64-encoded JSON with hex-encoded byte fields. This is THE wire
- * encoding the seller middleware and the facilitator's `/tab/settle`
- * endpoint both parse — `stream()` uses it, and `payAndFetch` uses it to
- * pay a `tab`-scheme accepts entry directly.
+ * base64-encoded JSON with hex-encoded byte fields. V2 additionally carries
+ * the complete reservation receipt that was independently verified before the
+ * voucher left the buyer. The receipt is an untrusted transaction locator at
+ * the seller; it never replaces the seller's own finalized chain proof.
+ *
+ * This is THE wire encoding the seller middleware and the facilitator's
+ * `/tab/settle` endpoint both parse — `stream()` uses it, and `payAndFetch`
+ * uses it to pay a `tab`-scheme accepts entry directly.
  */
-declare function voucherToHeader(signed: SignedVoucher): string;
+declare function voucherToHeader(signed: SignedVoucher | TabSignedVoucher, reservationReceipt?: FinalVoucherV2ReservationReceipt): string;
 /**
  * Arm drain-protection for a freshly-registered tab via the facilitator's
  * /tab/open. THROWS if protection cannot be confirmed — a tab that is not
  * drain-protected must never be returned to the caller.
  */
-declare function armTabOpen(facilitatorUrl: string, buyerSwigAddress: string, maxAmountAtomic: bigint, network: string, counterparty: string): Promise<{
+/**
+ * @deprecated V6 has no buyer-side V1 arming route. This retained symbol is a
+ * deterministic migration fence for callers compiled against the old helper;
+ * it performs no fetch, signing, or chain action.
+ */
+declare function armTabOpen(_facilitatorUrl: string, _buyerSwigAddress: string, _maxAmountAtomic: bigint, _network: string, _counterparty: string): Promise<{
     armed: true;
     signature: string;
 }>;
 declare function openTab(options: OpenTabOptions): Promise<Tab>;
 declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
 
+/** Canonical network carried by the managed native-Tab transaction record. */
+declare const FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+/** Domain for the authority-signed transaction binding. Changing any bound
+ * field requires a new domain/version rather than silently changing bytes. */
+declare const FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN = "dexter-native-tab-v2-reservation/v1";
+/** UTF-8 prefix stored by the SPL Memo instruction. */
+declare const FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX = "dexter-native-tab-v2-reservation/v1:";
+/** Shared economic identity committed by the authority-signed Memo. This is
+ * intentionally independent of provider lifecycle IDs and SDK retry keys so
+ * the SDK and facilitator can derive identical bytes from their common facts. */
+interface FinalVoucherV2ReservationBindingIdentity {
+    network: string;
+    programId: string;
+    buyerSwigAddress: string;
+    vaultPda: string;
+    sessionPda: string;
+    seller: string;
+    channelId: string;
+    sessionNonce: number;
+    reservationAmountAtomic: string;
+    previousCumulativeAtomic: string;
+    voucherDigest: string;
+    cumulativeAmountAtomic: string;
+    sequenceNumber: number;
+}
+/** Normalize the SDK's historical Solana alias to the CAIP-2 value persisted
+ * by the managed facilitator. No other alias is accepted by this contract. */
+declare function canonicalFinalVoucherV2ReservationNetwork(network: string): string;
+/**
+ * Byte-for-byte mirror of the facilitator's voucher identity digest. It binds
+ * the complete signed voucher, not merely its amount or local counter.
+ */
+declare function finalVoucherV2Digest(voucher: SignedVoucher): string;
+declare function finalVoucherV2ReservationIdentity(voucher: SignedVoucher): {
+    voucherDigest: string;
+    idempotencyKey: string;
+};
+/**
+ * Low-level cross-system digest over the shared reservation identity. This
+ * helper exists so transaction builders and verifiers can lock byte-for-byte
+ * parity without manufacturing a SignedVoucher for an already-derived digest.
+ */
+declare function finalVoucherV2ReservationBindingDigestFromIdentity(identity: FinalVoucherV2ReservationBindingIdentity): string;
+/**
+ * Digest that must be carried by the same Dexter-authority-signed Solana
+ * transaction as the exact `settle_voucher(increment=true)` reservation.
+ *
+ * The Vault instruction binds the on-chain amount and account identities. This
+ * separate domain binds that economic effect to the complete FINAL voucher and
+ * shared economic identity. Provider lifecycle, receipt, and retry identifiers
+ * are deliberately excluded. The digest is computed locally from the voucher
+ * bytes; a provider-supplied `voucherDigest` is never trusted as the source of
+ * this transaction binding.
+ */
+declare function finalVoucherV2ReservationBindingDigest(input: FinalVoucherV2ReservationInput): string;
+/** Exact UTF-8 SPL Memo payload required in the reservation transaction. */
+declare function finalVoucherV2ReservationMemo(input: FinalVoucherV2ReservationInput): string;
+/**
+ * Validate the provider's immutable voucher-bound receipt before asking the
+ * chain adapter to prove the post-state independently. A receipt is evidence
+ * of the provider's durable lifecycle record; it is not a substitute for the
+ * adapter's chain read.
+ */
+declare function assertFinalVoucherV2ReservationReceipt(input: FinalVoucherV2ReservationInput, receipt: FinalVoucherV2ReservationReceipt): void;
+
 /**
  * tabFromGrant — open a buyer-side Tab from a GRANTED session key.
  *
@@ -81,8 +155,11 @@ declare function resumeTab(_options: ResumeTabOptions): Promise<Tab>;
  *     odometer starts there so the first voucher strictly exceeds everything
  *     the chain has already terminally counted. The chain is the durable
  *     counter; there is no local state store to lose.
- *   - drain-protection arming via the facilitator's `POST /tab/open`,
- *     fail-closed exactly like `openTab` (an unarmed tab is never returned)
+ *   - a context-bound V2 reservation fence before every newly issued FINAL
+ *     voucher. Historical low-bit V1 grants are rejected before I/O: the v6
+ *     facilitator has no compatible buyer-side V1 arming/recovery endpoint.
+ *     Seller-side V1 verification remains available for obligations that were
+ *     already issued under the deployment that originally opened them.
  *
  * CUSTODY NOTE — why this constructor may hold a session secret when
  * `resumeTab` refuses to: the passkey path's "session keys are memory-only"
@@ -154,20 +231,31 @@ interface TabFromGrantOptions {
      */
     sellerUrl?: string;
     /**
-     * The buyer's Swig STATE address (`vault.swig_address`) for the `/tab/open`
-     * arming call. When omitted it is read from the on-chain vault account —
-     * one extra RPC read, never a guess.
+     * The buyer's Swig STATE address (`vault.swig_address`) bound into the exact
+     * V2 reservation request and receipt. When omitted it is read from the
+     * on-chain vault account — one extra RPC read, never a guess.
      */
     swigAddress?: string;
     /** Facilitator base URL. Default: DEFAULT_FACILITATOR_URL (https://x402.dexter.cash). */
     facilitatorUrl?: string;
     /** Vault program id override (test/devnet). Default: DEXTER_VAULT_PROGRAM_ID. */
     programId?: PublicKey;
+    /**
+     * Required for every context-bound V2 grant. Called with the exact FINAL
+     * voucher before it can be returned to merchant-facing code. The
+     * implementation must durably persist and establish that voucher's exact
+     * on-chain reservation, be idempotent for identical bytes, and resolve only
+     * after authoritative finalization. Low-bit V1 grants are rejected before
+     * this seam or any external I/O because v6 cannot reconstruct their arming
+     * identity safely.
+     */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
 }
 /**
  * Construct a live `Tab` from a granted session key. Fail-loud at every step:
- * key/params mismatch, dead or drifted on-chain session, exhausted cap, and
- * unarmed drain protection all THROW — an invalid tab is never returned.
+ * key/params mismatch, dead or drifted on-chain session, exhausted cap, and a
+ * missing exact V2 reservation fence all THROW — an invalid tab is never
+ * returned.
  */
 declare function tabFromGrant(options: TabFromGrantOptions): Promise<Tab>;
 
@@ -179,6 +267,11 @@ interface TabOffer {
     asset: string;
     /** CAIP-2 network from the challenge (x402 v2 form). */
     networkCaip2: string;
+    /** Preserved verbatim from accepts[].extra for policy-aware callers. */
+    voucherHeader?: string;
+    registrationEncoding?: string;
+    termsVersion?: string;
+    acceptanceRule?: string;
     resourceUrl?: string;
 }
 type TabOfferResult = {
@@ -206,6 +299,16 @@ type TabOfferResult = {
  */
 declare function resolveTabOffer(url: string, init?: RequestInit, fetchImpl?: typeof fetch): Promise<TabOfferResult>;
 
+/**
+ * Hosted-v1 commercial semantics advertised by the default Tab scheme.
+ * A different refund/dispute or delivery rule requires a new terms version;
+ * callers must never reinterpret these strings in place.
+ */
+declare const HOSTED_TAB_TERMS_VERSION: "dexter-tab-hosted-pay-before-delivery/v1";
+declare const HOSTED_TAB_ACCEPTANCE_RULE: "pay_before_delivery_seller_2xx";
+declare const HOSTED_TAB_VOUCHER_HEADER: "x-tab-voucher";
+declare const HOSTED_TAB_REGISTRATION_ENCODING: "base64(188-byte sessionRegisterMessage)";
+
 /**
  * Step-3a buyer orchestration: pay a URL through a tab with ZERO seller
  * knowledge. Resolution + lifecycle only — composes resolveTabOffer,
@@ -238,6 +341,8 @@ interface PayUrlWithTabOptions {
      * `OpenTabOptions.onLiveSession` (K-T4e).
      */
     onLiveSession?: 'error' | 'replace';
+    /** Exact V2 reservation fence forwarded to openTab. */
+    reserveFinalVoucherV2?: ReserveFinalVoucherV2;
     /**
      * Open-tab registry keyed by counterparty base58. Pass the SAME Map across
      * calls to reuse one open tab per seller instead of re-registering
@@ -313,4 +418,4 @@ interface ResolveTabTermsOptions {
  */
 declare function resolveTabTerms(url: string, init?: RequestInit, opts?: ResolveTabTermsOptions): Promise<TabTermsResult>;
 
-export { DEFAULT_FACILITATOR_URL, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, atomicToHuman, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };
+export { DEFAULT_FACILITATOR_URL, FINAL_VOUCHER_V2_RESERVATION_BINDING_DOMAIN, FINAL_VOUCHER_V2_RESERVATION_MEMO_PREFIX, FINAL_VOUCHER_V2_SOLANA_MAINNET_CAIP2, type FinalVoucherV2ReservationBindingIdentity, FinalVoucherV2ReservationInput, FinalVoucherV2ReservationReceipt, HOSTED_TAB_ACCEPTANCE_RULE, HOSTED_TAB_REGISTRATION_ENCODING, HOSTED_TAB_TERMS_VERSION, HOSTED_TAB_VOUCHER_HEADER, OpenTabOptions, type PayUrlWithTabOptions, type PayUrlWithTabResult, ReserveFinalVoucherV2, type ResolveTabTermsOptions, ResumeTabOptions, Tab, type TabFromGrantOptions, type TabOffer, type TabOfferResult, TabSignedVoucher, type TabTerms, type TabTermsResult, VaultAdapter, armTabOpen, assertFinalVoucherV2ReservationReceipt, atomicToHuman, canonicalFinalVoucherV2ReservationNetwork, finalVoucherV2Digest, finalVoucherV2ReservationBindingDigest, finalVoucherV2ReservationBindingDigestFromIdentity, finalVoucherV2ReservationIdentity, finalVoucherV2ReservationMemo, humanToAtomic, openTab, payUrlWithTab, resolveTabOffer, resolveTabTerms, resumeTab, tabFromGrant, voucherToHeader };