@dvmkit/sdk 0.7.0-rc.1 → 0.7.0-rc.3

package/dist/chunk-OFSOLHRX.js

@@ -0,0 +1,120 @@
+import {
+  X402_DEFAULT_NETWORK,
+  resolveRpcHttpTransportOptions,
+  resolveRpcOverride
+} from "./chunk-62FI3NJF.js";
+import {
+  redactUrl,
+  redactUrlsInText
+} from "./chunk-KXWROQGK.js";
+import {
+  DvmError,
+  x402NetworkByCaip2,
+  x402SupportedNetworksHint
+} from "./chunk-BPYMEMQX.js";
+
+// src/lib/x402/asset.ts
+function resolveX402Asset(network = X402_DEFAULT_NETWORK) {
+  const spec = x402NetworkByCaip2(network);
+  if (!spec) return null;
+  return {
+    address: spec.usdc,
+    symbol: "USDC",
+    // "native" is the load-bearing word: every contract in the table is
+    // Circle's own USDC, and the dollars that read as zero here are the
+    // bridged ones.
+    label: "native USDC",
+    unit: "USDC",
+    networkLabel: spec.label,
+    confusable: spec.confusable
+  };
+}
+
+// src/lib/evm-private-key.ts
+import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { hexToBytes } from "@noble/hashes/utils.js";
+var EVM_PRIVATE_KEY_RE = /^0x[0-9a-fA-F]{64}$/;
+function isValidEvmPrivateKey(value) {
+  return EVM_PRIVATE_KEY_RE.test(value) && secp256k1.utils.isValidSecretKey(hexToBytes(value.slice(2)));
+}
+
+// src/lib/x402/wallet.ts
+async function ensureAddress(wallet) {
+  if (!isValidEvmPrivateKey(wallet.privateKey)) throw invalidX402PrivateKey();
+  if (wallet.address) return wallet;
+  const { privateKeyToAccount } = await import("viem/accounts");
+  const account = privateKeyToAccount(wallet.privateKey);
+  return { ...wallet, address: account.address };
+}
+async function generateX402PrivateKey() {
+  const { generatePrivateKey } = await import("viem/accounts");
+  return generatePrivateKey();
+}
+function invalidX402PrivateKey() {
+  return new DvmError(
+    "invalid_key",
+    "Invalid secp256k1 private key.",
+    "Reconnect with `dvm wallet x402-connect --key-file <path>`, set DVM_X402_KEY, or pipe a valid 0x-prefixed 32-byte secp256k1 private key through stdin."
+  );
+}
+async function getX402Balance(wallet) {
+  const w = await ensureAddress(wallet);
+  const spec = x402NetworkByCaip2(w.network);
+  if (!spec) {
+    throw new DvmError(
+      "x402_unsupported_network",
+      `The x402 wallet is configured for ${w.network}, a chain this rail can't settle on.`,
+      `${x402SupportedNetworksHint()} Re-pin the connected wallet without handling its key: 'dvm wallet x402-network ${X402_DEFAULT_NETWORK}'.`
+    );
+  }
+  const chains = await import("viem/chains");
+  const { createPublicClient, http, erc20Abi } = await import("viem");
+  const chain = chains[spec.viemChain];
+  const { url: rpcUrl, source: rpcSource } = resolveRpcOverride(
+    process.env.DVM_X402_RPC_URL,
+    chain?.rpcUrls.default.http[0]
+  );
+  try {
+    const transportOptions = resolveRpcHttpTransportOptions(
+      rpcSource,
+      process.env.DVM_X402_RPC_HEADERS_JSON
+    );
+    const client = createPublicClient({
+      chain,
+      transport: transportOptions ? http(rpcUrl, transportOptions) : http(rpcUrl)
+    });
+    const balance = await client.readContract({
+      address: spec.usdc,
+      abi: erc20Abi,
+      functionName: "balanceOf",
+      args: [w.address]
+    });
+    return {
+      address: w.address,
+      usdc: Number(balance) / 1e6,
+      network: w.network,
+      tokenAddress: spec.usdc,
+      // redacted here rather than at a display surface, so the clear
+      // endpoint never leaves this function on the success path either.
+      rpcUrlRedacted: rpcUrl ? redactUrl(rpcUrl) : void 0,
+      rpcSource
+    };
+  } catch (err) {
+    const cause = redactUrlsInText(err instanceof Error ? err.message : String(err));
+    throw new DvmError(
+      "x402_rpc_error",
+      `x402 USDC balance lookup on ${spec.label} failed: ${cause}`,
+      // A caller who set the override doesn't need to be told to set it. Which
+      // knob is theirs to turn depends on whose endpoint this was.
+      rpcSource === "override" ? `DVM_X402_RPC_URL sent this read to ${redactUrl(rpcUrl)}. Correct it, or unset it to fall back to ${spec.label}'s bundled endpoint.` : `Verify connectivity to ${spec.label}'s bundled endpoint${rpcUrl ? ` (${redactUrl(rpcUrl)})` : ""}, or send the read somewhere else with DVM_X402_RPC_URL.`
+    );
+  }
+}
+
+export {
+  resolveX402Asset,
+  isValidEvmPrivateKey,
+  ensureAddress,
+  generateX402PrivateKey,
+  getX402Balance
+};

package/dist/{chunk-IV6Q7NRW.js → chunk-RAGX6VG7.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-AFV77S4C.js";
 import {
   loggers
-} from "./chunk-QR2EF2NI.js";
+} from "./chunk-AQ7OX5NX.js";
 import {
   redactUrl
-} from "./chunk-FUJ36YDV.js";
+} from "./chunk-KXWROQGK.js";
 
 // src/sdk/server/job-store.ts
 function accumulateAskedTopUp(prior, ask) {

package/dist/{chunk-KA6VN5FK.js → chunk-RXPHMS4C.js}

@@ -2,12 +2,12 @@ import {
   parseStoreValue,
   stringifyStoreValue
 } from "./chunk-YG7G4DPZ.js";
+import {
+  diagnosticConsole
+} from "./chunk-LAKP6FUI.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
-import {
-  diagnosticConsole
-} from "./chunk-ETXDTUJO.js";
 
 // src/sdk/server/tempo-charge-store.ts
 import { Credential } from "mppx";

package/dist/{chunk-6XF3RVVX.js → chunk-SPYEJXI7.js}

@@ -1,15 +1,15 @@
-import {
-  withSdkInitLock
-} from "./chunk-COYKJRMM.js";
 import {
   applyRetryToPool
-} from "./chunk-P6QON7ER.js";
+} from "./chunk-TRNMTTPX.js";
 import {
   x402NetworkByCaip2
 } from "./chunk-BPYMEMQX.js";
 import {
   diagnosticConsole
-} from "./chunk-ETXDTUJO.js";
+} from "./chunk-LAKP6FUI.js";
+import {
+  withSdkInitLock
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/credit-ledger.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-P6QON7ER.js → chunk-TRNMTTPX.js}

@@ -1,6 +1,6 @@
 import {
   diagnosticConsole
-} from "./chunk-ETXDTUJO.js";
+} from "./chunk-LAKP6FUI.js";
 
 // src/lib/pg-retry.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-RCM3P2HE.js → chunk-UKD3R2KU.js}

@@ -1,7 +1,3 @@
-import {
-  canonicaliseForSigning
-} from "./chunk-OFVV37XC.js";
-
 // src/sdk/types.ts
 function isZodSchema(value) {
   return typeof value === "object" && value !== null && "_zod" in value && "parse" in value && "safeParse" in value;
@@ -16,6 +12,58 @@ var DEFAULT_CREDIT_MAX = "$5.00";
 var DEFAULT_CREDIT_TTL_SECONDS = 30 * 24 * 60 * 60;
 var DEFAULT_JOB_RETENTION_DAYS = 730;
 
+// src/lib/cast-auth/canonical-json.ts
+function canonicalize(value) {
+  return JSON.stringify(sortDeep(value));
+}
+function canonicaliseForSigning(value) {
+  return new TextEncoder().encode(canonicalize(value));
+}
+function sortDeep(value) {
+  if (value === null) return null;
+  if (typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new TypeError(`canonicalize: non-finite number is not JSON-serialisable`);
+    }
+    return value;
+  }
+  if (Array.isArray(value)) return value.map(sortDeep);
+  if (typeof value === "object") {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      const v = value[key];
+      if (v === void 0) continue;
+      sorted[key] = sortDeep(v);
+    }
+    return sorted;
+  }
+  throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);
+}
+
+// src/lib/cast-auth/verify.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+function verifyCanonicalSignedRequest(payload, signatureHex, pubkeyHex) {
+  if (!/^[0-9a-f]{64}$/i.test(pubkeyHex) || !/^[0-9a-f]{128}$/i.test(signatureHex)) {
+    return false;
+  }
+  const data = canonicaliseForSigning(payload);
+  const signature = hexToBytes(signatureHex);
+  const pubkey = hexToBytes(pubkeyHex);
+  try {
+    return schnorr.verify(signature, data, pubkey);
+  } catch {
+    return false;
+  }
+}
+function hexToBytes(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) {
+    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return out;
+}
+
 // src/lib/signed-request-statement.ts
 var SIGNED_REQUEST_AUTH_ID = "secp256k1-schnorr-v2";
 var SIGNED_REQUEST_STATEMENT_VERSION = 2;
@@ -81,6 +129,9 @@ export {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_TTL_SECONDS,
   DEFAULT_JOB_RETENTION_DAYS,
+  canonicalize,
+  canonicaliseForSigning,
+  verifyCanonicalSignedRequest,
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader,

package/dist/chunk-USL7ZEXN.js

@@ -0,0 +1,17 @@
+import {
+  validateCurrency
+} from "./chunk-CLIAFTUR.js";
+
+// src/sdk/pricing/upfront.ts
+function buildUpfront(input) {
+  const currency = validateCurrency(input.currency);
+  const amount = input.amount;
+  if (!Number.isFinite(amount) || amount < 0) {
+    throw new Error(`invalid upfront amount: ${String(amount)} (must be a non-negative number)`);
+  }
+  return { amount, currency };
+}
+
+export {
+  buildUpfront
+};