@ninsei-labs/sdk 0.45.0 → 0.46.1

package/CHANGELOG.md

@@ -1,3 +1,26 @@
+## 0.46.1 — 2026-10-21
+
+THE FACTORY SELECTORS FOLLOW THE 20-FIELD QUOTE.
+
+- `FACTORY_METHODS.predict` is `0x3e949279` and `createOrderAndFund` is `0x3a504547` (the 19-field values were
+  `0x0824d205` and `0x4703a9d3`). With the old selectors the node's calldata reverted at the factory on the first
+  call, so no order could be created even though the quote itself was correct.
+- `tools/check-factory-selectors.mjs` derives both selectors from `QUOTE_FIELDS` and the ABI types, and a
+  breaking run mutates a copy of the module to prove the check reddens. The pair can no longer go stale in
+  silence when a field joins the signed tuple.
+
+## 0.46.0 — 2026-10-21
+
+THE QUOTE CARRIES THE CLAIM TIP, AND THE CLAIM PAYS IT.
+
+- `claimTip` is the last field of the signed order quote and of `FactoryQuote`, and it is encoded into
+  `createOrderAndFund`. The escrow pays it to whoever sends `claim` when that sender is not the claimer, out of the
+  payout and in the same transaction (`router-escrow-evm` #19). Zero means no tip.
+- `ORDER_QUOTE_VERSION` is 9. The field set changed, so every quote signed by this package is a version 9 quote and
+  verifies only against an escrow that knows the field.
+- A quote object without `claimTip` is refused by `quoteMissingFields` like any other absent condition: a missing tip
+  is not read as zero.
+
 ## 0.45.0 — 2026-10-20
 
 THE RECOVERY PATH WORKS WITHOUT THE APP, AND A PASSPHRASE IS A CHOICE.

package/engine/evm/factory.js

@@ -10,15 +10,16 @@
 // feeFor() (the router was removed), so there is nothing to ask. All arguments are static, so calldata is a
 // selector plus 32-byte words, built here in one place and checked mechanically.
 //
-//   cast sig "predict((address,address,address,address,address,address,uint256,uint64,uint64,bytes32,bytes32,bytes32,uint256,uint256,uint256,address,uint64,uint256,uint256),bytes32,bytes32,uint8,bytes32,bytes32,bytes32)" -> 0x0824d205
-//   cast sig "createOrderAndFund(<same tuple>,...)"                                                                                                                -> 0x4703a9d3
+//   cast sig "predict((address,address,address,address,address,address,uint256,uint64,uint64,bytes32,bytes32,bytes32,uint256,uint256,uint256,address,uint64,uint256,uint256,uint256),bytes32,bytes32,uint8,bytes32,bytes32,bytes32)" -> 0x3e949279
+//   cast sig "createOrderAndFund(<same tuple>,...)"                                                                                                                -> 0x3a504547
 
 export const FACTORY_METHODS = {
-  // THE QUOTE GREW THE xmrAmount FIELD: the XMR side of the deal is part of the signed set, so both selectors
-  // changed a second time (earlier for the cashier field).
-  predict: "0x0824d205",
+  // THE SELECTORS FOLLOW THE 20-FIELD QUOTE. claimTip is the last field of the tuple, so both selectors changed when
+  // it joined the signed set; the old 19-field values (0x0824d205 / 0x4703a9d3) address a function this factory no
+  // longer has.
+  predict: "0x3e949279",
   // create the escrow AND deposit funds in ONE transaction (a value transfer with the call).
-  createOrderAndFund: "0x4703a9d3",
+  createOrderAndFund: "0x3a504547",
 };
 
 // The OrderCreated event topic. It grew the registry address, the provider and the signing key:
@@ -32,6 +33,7 @@ export const ORDER_CREATED_TOPIC =
 export const QUOTE_FIELDS = [
   "provider", "quoteKey", "registry", "cashier", "locker", "claimer", "amount", "readyBy", "t1", "salt",
   "commitHalfClaimer", "edPointClaimer", "chainId", "feeBps", "fee", "feeRecipient", "validUntil", "nonce", "xmrAmount",
+  "claimTip",
 ];
 // The depositor fields are NOT in the quote: they go as separate arguments (into the escrow init code).
 const LOCKER_HALF_FIELDS = ["commitHalfLocker", "edPointLocker", "edViewPointLocker"];
@@ -89,6 +91,7 @@ function quoteWords(quote) {
     chainId: word(quote.chainId, 32), feeBps: word(quote.feeBps, 32), fee: word(quote.fee, 32),
     feeRecipient: word(quote.feeRecipient, 32), validUntil: word(quote.validUntil, 32), nonce: word(quote.nonce, 32),
     xmrAmount: word(quote.xmrAmount, 32),
+    claimTip: word(quote.claimTip, 32),
   };
   return QUOTE_FIELDS.map((n) => map[n]).join("");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ninsei-labs/sdk",
-  "version": "0.45.0",
+  "version": "0.46.1",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
@@ -39,6 +39,7 @@
     "check:arrival-read": "node tools/check-arrival-read.mjs",
     "check:daemon-address": "node tools/check-daemon-address.mjs",
     "check:ci-scripts": "node tools/check-ci-scripts.mjs",
+    "check:factory-selectors": "node tools/check-factory-selectors.mjs",
     "check:fee-estimate": "node tools/check-fee-estimate.mjs",
     "check:deadline-scale": "node tools/check-deadline-scale.mjs",
     "check:node-probe": "node tools/check-node-probe.mjs"

package/src/public/evm.d.ts

@@ -47,6 +47,8 @@ export interface FactoryQuote {
   readonly validUntil: string | number | bigint;
   readonly nonce: string | number | bigint;
   readonly xmrAmount: string | number | bigint;
+  /** The tip `claim` pays to a third-party sender out of the payout; zero means none. */
+  readonly claimTip: string | number | bigint;
   /** r || s || v over the quote digest, 65 bytes, with or without the `0x` prefix. */
   readonly signature: string;
   readonly commitHalfLocker: string;

package/src/public/order.d.ts

@@ -110,6 +110,8 @@ export interface OrderQuote {
   readonly validUntil: string | number | bigint;
   readonly nonce: string | number | bigint;
   readonly xmrAmount: string | number | bigint;
+  /** The tip `claim` pays to a third-party sender out of the payout; zero means none. */
+  readonly claimTip: string | number | bigint;
   /** The escrow factory the domain names as `verifyingContract`. */
   readonly factory: string;
   /** r || s || v over the digest, 65 bytes, with or without the `0x` prefix; v is normalised to 27/28. */

package/src/quoteEip712Spec.mjs

@@ -32,18 +32,22 @@
 //   validUntil           - the quote's own expiry, IN SECONDS (the order's readyBy/t1 and block.timestamp
 //                          scale): a quote past it is refused regardless of the price.
 //   nonce                - replay protection: the very same signed quote cannot be presented twice.
+//   claimTip             - the tip the escrow pays to whoever sends `claim`, out of the payout, in the same
+//                          transaction (#18). It is inside the signed set so a provider cannot raise it after the
+//                          taker has seen the quote. Zero means no tip and is the only value a buy uses.
 //
 // The domain's verifyingContract is the escrow FACTORY taken from the order: the contract that will verify the
 // quote in EVM (stage 2). The type order, the domain name and the version are part of the protocol - they may
 // change only together with the quote version.
 export const ORDER_QUOTE_DOMAIN_NAME = "NinseiEscrowFactory";
 export const ORDER_QUOTE_DOMAIN_VERSION = "1";
-// 8: the signed EIP-712 field set grew `xmrAmount` (#110 step 3) - the XMR the level walk gives is now covered by
-// the provider's signature and verified ON CHAIN. This is the request-shape generation label, and it moves WITH the
+// 9: the signed EIP-712 field set grew `claimTip` (#18) - the tip a third-party sender of `claim` takes from the
+// payout, covered by the provider's signature like every other condition.
+// 8: the field set grew `xmrAmount` (#110 step 3). This is the request-shape generation label, and it moves WITH the
 // field set (see the note above). The DOMAIN name and the domain version string are UNCHANGED by it: they name the
 // domain (the factory address and the chain), which did not change. So here the label and the domain version string
 // move apart, and that is deliberate - the label tracks the message shape, not the domain identity.
-export const ORDER_QUOTE_VERSION = 8;
+export const ORDER_QUOTE_VERSION = 9;
 
 // The domain type string is assembled from parts ON PURPOSE. A single literal of it is a phrase of several
 // space-separated words, and the SDK check reads such literals as user-facing text. Do not "simplify" it.
@@ -72,6 +76,7 @@ export const ORDER_QUOTE_FIELDS = [
   ["validUntil", "uint64"],
   ["nonce", "uint256"],
   ["xmrAmount", "uint256"],
+  ["claimTip", "uint256"],
 ];
 export const ORDER_QUOTE_TYPE = "OrderQuote(" + ORDER_QUOTE_FIELDS.map((f) => f[1] + " " + f[0]).join(",") + ")";
 

package/src/version.mjs

@@ -6,4 +6,4 @@
 // tools/sync-version.mjs. Do not edit it by hand - set the version in package.json and run `npm run sync:version`.
 // The `version` check in tools/check.mjs refuses a mismatch, and refuses a runtime read of package.json here.
 
-export const SDK_VERSION = "0.45.0";
+export const SDK_VERSION = "0.46.1";