@ninsei-labs/sdk 0.45.0 → 0.46.0

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 0.46.0 — 2026-10-21
+
+THE QUOTE CARRIES THE CLAIM TIP, AND THE CLAIM PAYS IT.
+
+- `claimTip` is the last field of the signed order quote and of `FactoryQuote`, and it is encoded into
+  `createOrderAndFund`. The escrow pays it to whoever sends `claim` when that sender is not the claimer, out of the
+  payout and in the same transaction (`router-escrow-evm` #19). Zero means no tip.
+- `ORDER_QUOTE_VERSION` is 9. The field set changed, so every quote signed by this package is a version 9 quote and
+  verifies only against an escrow that knows the field.
+- A quote object without `claimTip` is refused by `quoteMissingFields` like any other absent condition: a missing tip
+  is not read as zero.
+
 ## 0.45.0 — 2026-10-20
 
 THE RECOVERY PATH WORKS WITHOUT THE APP, AND A PASSPHRASE IS A CHOICE.

package/engine/evm/factory.js

@@ -32,6 +32,7 @@ export const ORDER_CREATED_TOPIC =
 export const QUOTE_FIELDS = [
   "provider", "quoteKey", "registry", "cashier", "locker", "claimer", "amount", "readyBy", "t1", "salt",
   "commitHalfClaimer", "edPointClaimer", "chainId", "feeBps", "fee", "feeRecipient", "validUntil", "nonce", "xmrAmount",
+  "claimTip",
 ];
 // The depositor fields are NOT in the quote: they go as separate arguments (into the escrow init code).
 const LOCKER_HALF_FIELDS = ["commitHalfLocker", "edPointLocker", "edViewPointLocker"];
@@ -89,6 +90,7 @@ function quoteWords(quote) {
     chainId: word(quote.chainId, 32), feeBps: word(quote.feeBps, 32), fee: word(quote.fee, 32),
     feeRecipient: word(quote.feeRecipient, 32), validUntil: word(quote.validUntil, 32), nonce: word(quote.nonce, 32),
     xmrAmount: word(quote.xmrAmount, 32),
+    claimTip: word(quote.claimTip, 32),
   };
   return QUOTE_FIELDS.map((n) => map[n]).join("");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ninsei-labs/sdk",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"

package/src/public/evm.d.ts

@@ -47,6 +47,8 @@ export interface FactoryQuote {
   readonly validUntil: string | number | bigint;
   readonly nonce: string | number | bigint;
   readonly xmrAmount: string | number | bigint;
+  /** The tip `claim` pays to a third-party sender out of the payout; zero means none. */
+  readonly claimTip: string | number | bigint;
   /** r || s || v over the quote digest, 65 bytes, with or without the `0x` prefix. */
   readonly signature: string;
   readonly commitHalfLocker: string;

package/src/public/order.d.ts

@@ -110,6 +110,8 @@ export interface OrderQuote {
   readonly validUntil: string | number | bigint;
   readonly nonce: string | number | bigint;
   readonly xmrAmount: string | number | bigint;
+  /** The tip `claim` pays to a third-party sender out of the payout; zero means none. */
+  readonly claimTip: string | number | bigint;
   /** The escrow factory the domain names as `verifyingContract`. */
   readonly factory: string;
   /** r || s || v over the digest, 65 bytes, with or without the `0x` prefix; v is normalised to 27/28. */

package/src/quoteEip712Spec.mjs

@@ -32,18 +32,22 @@
 //   validUntil           - the quote's own expiry, IN SECONDS (the order's readyBy/t1 and block.timestamp
 //                          scale): a quote past it is refused regardless of the price.
 //   nonce                - replay protection: the very same signed quote cannot be presented twice.
+//   claimTip             - the tip the escrow pays to whoever sends `claim`, out of the payout, in the same
+//                          transaction (#18). It is inside the signed set so a provider cannot raise it after the
+//                          taker has seen the quote. Zero means no tip and is the only value a buy uses.
 //
 // The domain's verifyingContract is the escrow FACTORY taken from the order: the contract that will verify the
 // quote in EVM (stage 2). The type order, the domain name and the version are part of the protocol - they may
 // change only together with the quote version.
 export const ORDER_QUOTE_DOMAIN_NAME = "NinseiEscrowFactory";
 export const ORDER_QUOTE_DOMAIN_VERSION = "1";
-// 8: the signed EIP-712 field set grew `xmrAmount` (#110 step 3) - the XMR the level walk gives is now covered by
-// the provider's signature and verified ON CHAIN. This is the request-shape generation label, and it moves WITH the
+// 9: the signed EIP-712 field set grew `claimTip` (#18) - the tip a third-party sender of `claim` takes from the
+// payout, covered by the provider's signature like every other condition.
+// 8: the field set grew `xmrAmount` (#110 step 3). This is the request-shape generation label, and it moves WITH the
 // field set (see the note above). The DOMAIN name and the domain version string are UNCHANGED by it: they name the
 // domain (the factory address and the chain), which did not change. So here the label and the domain version string
 // move apart, and that is deliberate - the label tracks the message shape, not the domain identity.
-export const ORDER_QUOTE_VERSION = 8;
+export const ORDER_QUOTE_VERSION = 9;
 
 // The domain type string is assembled from parts ON PURPOSE. A single literal of it is a phrase of several
 // space-separated words, and the SDK check reads such literals as user-facing text. Do not "simplify" it.
@@ -72,6 +76,7 @@ export const ORDER_QUOTE_FIELDS = [
   ["validUntil", "uint64"],
   ["nonce", "uint256"],
   ["xmrAmount", "uint256"],
+  ["claimTip", "uint256"],
 ];
 export const ORDER_QUOTE_TYPE = "OrderQuote(" + ORDER_QUOTE_FIELDS.map((f) => f[1] + " " + f[0]).join(",") + ")";
 

package/src/version.mjs

@@ -6,4 +6,4 @@
 // tools/sync-version.mjs. Do not edit it by hand - set the version in package.json and run `npm run sync:version`.
 // The `version` check in tools/check.mjs refuses a mismatch, and refuses a runtime read of package.json here.
 
-export const SDK_VERSION = "0.45.0";
+export const SDK_VERSION = "0.46.0";