@opendatalabs/vana-sdk 3.23.0-pr.211.fa01520 → 4.0.0

package/dist/index.node.cjs

@@ -1206,6 +1206,8 @@ __export(index_node_exports, {
   ENCLAVE_TRUST_ANCHORS: () => ENCLAVE_TRUST_ANCHORS,
   ENCLAVE_WALLET_PURPOSE: () => ENCLAVE_WALLET_PURPOSE,
   ESCROW_DEPOSIT_ABI: () => ESCROW_DEPOSIT_ABI2,
+  EscrowWithdrawalLifecycleError: () => EscrowWithdrawalLifecycleError,
+  EscrowWithdrawalRejectionError: () => EscrowWithdrawalRejectionError,
   ExpiredTokenError: () => import_errors14.ExpiredTokenError,
   FEE_REGISTRY_ABI: () => FEE_REGISTRY_ABI,
   GENERIC_PAYMENT_TYPES: () => GENERIC_PAYMENT_TYPES,
@@ -1277,6 +1279,7 @@ __export(index_node_exports, {
   TOMBSTONE_METADATA_HASH_PREIMAGE: () => TOMBSTONE_METADATA_HASH_PREIMAGE,
   USER_PS_ID_DOMAIN: () => USER_PS_ID_DOMAIN,
   VanaStorage: () => VanaStorage,
+  WITHDRAW_AUTHORIZATION_TYPES: () => WITHDRAW_AUTHORIZATION_TYPES,
   WRITER_ATTRIBUTION_KEY: () => WRITER_ATTRIBUTION_KEY,
   WRITE_CONTENT_DISPOSITION_HEADER: () => WRITE_CONTENT_DISPOSITION_HEADER,
   WRITE_FILENAME_HEADER: () => WRITE_FILENAME_HEADER,
@@ -1305,6 +1308,7 @@ __export(index_node_exports, {
   buildPersonalServerRegistrationTypedData: () => buildPersonalServerRegistrationTypedData,
   buildSetDataPointStatusRequest: () => buildSetDataPointStatusRequest,
   buildWeb3SignedHeader: () => buildWeb3SignedHeader,
+  buildWithdrawAuthorizationTypedData: () => buildWithdrawAuthorizationTypedData,
   builderRegistrationDomain: () => builderRegistrationDomain,
   canonicalJobRequestBytes: () => canonicalJobRequestBytes,
   chains: () => chains,
@@ -1432,6 +1436,7 @@ __export(index_node_exports, {
   verifyWeb3Signed: () => verifyWeb3Signed,
   waitForDerivativeStatus: () => waitForDerivativeStatus,
   waitForQuestion: () => waitForQuestion,
+  withdrawAuthorizationDomain: () => withdrawAuthorizationDomain,
   writeData: () => writeData,
   writePersonalServerData: () => writePersonalServerData
 });
@@ -32286,6 +32291,9 @@ function escrowPaymentDomain(config) {
     config.contracts.dataPortabilityEscrow
   );
 }
+function withdrawAuthorizationDomain(config) {
+  return escrowPaymentDomain(config);
+}
 var GRANT_REGISTRATION_TYPES = {
   GrantRegistration: [
     { name: "grantorAddress", type: "address" },
@@ -32318,6 +32326,15 @@ var BUILDER_REGISTRATION_TYPES = {
     { name: "appUrl", type: "string" }
   ]
 };
+var WITHDRAW_AUTHORIZATION_TYPES = {
+  WithdrawAuthorization: [
+    { name: "account", type: "address" },
+    { name: "asset", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "withdrawNonce", type: "uint256" },
+    { name: "deadline", type: "uint256" }
+  ]
+};
 var ADD_DATA_TYPES = {
   AddData: [
     { name: "ownerAddress", type: "address" },
@@ -32336,6 +32353,14 @@ var RECORD_DATA_ACCESS_TYPES = {
     { name: "recordId", type: "bytes32" }
   ]
 };
+function buildWithdrawAuthorizationTypedData(config, message) {
+  return {
+    domain: withdrawAuthorizationDomain(config),
+    types: WITHDRAW_AUTHORIZATION_TYPES,
+    primaryType: "WithdrawAuthorization",
+    message
+  };
+}
 
 // src/protocol/identity.ts
 var secp256k14 = __toESM(require("@noble/secp256k1"), 1);
@@ -32364,8 +32389,13 @@ function emptyAnchor() {
 var ENCLAVE_TRUST_ANCHORS = Object.freeze({
   // filled at fleet provisioning; verify fails closed while empty
   [VANA_MAINNET_CHAIN_ID]: emptyAnchor(),
-  // filled at fleet provisioning; verify fails closed while empty
-  [MOKSHA_CHAIN_ID]: emptyAnchor()
+  // Moksha workers share this dstack app and KMS root; the controller does not derive owner keys.
+  [MOKSHA_CHAIN_ID]: Object.freeze({
+    kmsRootPubkey: "0x0434c76e0c3f52ec64cbf9bbf5c910c272330166fd656c0a86bb330963e46910e1a0e6fa51bec74be2f9129342707636060d85856d102cee8290185409ecf7422f",
+    appIds: Object.freeze([
+      "0xec9a39de98c760e1ded9f1e97016dc5f0e357cf2"
+    ])
+  })
 });
 function userPsId(chainId, ownerAddress) {
   const packed = (0, import_viem14.encodePacked)(
@@ -36880,6 +36910,7 @@ function createGatewayClient(baseUrl) {
 }
 
 // src/protocol/escrow.ts
+var import_viem28 = require("viem");
 var GENERIC_PAYMENT_TYPES = {
   GenericPayment: [
     { name: "payerAddress", type: "address" },
@@ -36919,6 +36950,26 @@ var ESCROW_DEPOSIT_ABI2 = [
   }
 ];
 var NATIVE_ASSET_ADDRESS = "0x0000000000000000000000000000000000000000";
+var EscrowWithdrawalLifecycleError = class extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalLifecycleError";
+};
+var EscrowWithdrawalRejectionError = class extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalRejectionError";
+};
 function createEscrowGatewayClient(baseUrl) {
   const base = baseUrl.replace(/\/+$/, "");
   async function throwOnError(res, context) {
@@ -36934,6 +36985,27 @@ function createEscrowGatewayClient(baseUrl) {
       );
     }
   }
+  async function throwOnWithdrawError(res) {
+    if (res.ok) return;
+    let body;
+    try {
+      body = await res.json();
+    } catch {
+      throw new Error(
+        `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}`
+      );
+    }
+    if (isEscrowWithdrawalFailureResult(body)) {
+      throw new EscrowWithdrawalLifecycleError(res.status, body);
+    }
+    if (isEscrowWithdrawalRejectedResult(body)) {
+      throw new EscrowWithdrawalRejectionError(res.status, body);
+    }
+    const error = getGatewayErrorMessage(body);
+    throw new Error(
+      `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}${error ? `: ${error}` : ""}`
+    );
+  }
   return {
     async submitDeposit({ txHash }) {
       const res = await fetch(`${base}/v1/escrow/deposit`, {
@@ -36989,9 +37061,108 @@ function createEscrowGatewayClient(baseUrl) {
       });
       await throwOnError(res, "POST /v1/escrow/pay");
       return res.json();
+    },
+    async withdraw({
+      account,
+      asset,
+      amount,
+      withdrawNonce,
+      deadline,
+      signature
+    }) {
+      const res = await fetch(`${base}/v1/escrow/withdraw`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Web3Signed ${signature}`
+        },
+        body: JSON.stringify({
+          account,
+          asset,
+          amount,
+          withdrawNonce,
+          deadline
+        })
+      });
+      await throwOnWithdrawError(res);
+      return res.json();
+    },
+    async getWithdrawNonce(account) {
+      const res = await fetch(
+        `${base}/v1/escrow/withdraw/nonce?account=${encodeURIComponent(account)}`,
+        { cache: "no-store" }
+      );
+      await throwOnError(res, "GET /v1/escrow/withdraw/nonce");
+      const body = await res.json();
+      if (!isWithdrawNonceResponse(body, account)) {
+        throw new Error(
+          "GET /v1/escrow/withdraw/nonce: invalid response structure"
+        );
+      }
+      return body;
     }
   };
 }
+function getGatewayErrorMessage(body) {
+  if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string") {
+    return body.error;
+  }
+  return void 0;
+}
+function isEscrowWithdrawalFailureResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && (value.status === "retryable" || value.status === "reorged" || value.status === "failed") && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && (isHash(value.txHash) || value.txHash === null) && (!("blockNumber" in value) || isBlockNumber(value.blockNumber));
+}
+function isEscrowWithdrawalRejectedResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && value.status === "rejected" && isWithdrawalRejectionCode(value.code) && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && optionalUint256Decimal(value.balance) && optionalUint256Decimal(value.authorizedAmount) && optionalUint256Decimal(value.withdrawingAmount) && optionalUint256Decimal(value.availableAmount) && optionalUint256Decimal(value.requestedAmount) && optionalUint256Decimal(value.minimumAmount);
+}
+function isWithdrawalRejectionCode(value) {
+  return value === "below_minimum" || value === "deadline_too_far" || value === "expired" || value === "insufficient_available" || value === "stale_nonce";
+}
+function optionalUint256Decimal(value) {
+  return value === void 0 || isUint256Decimal(value);
+}
+function isAddressHex(value) {
+  return typeof value === "string" && (0, import_viem28.isHex)(value, { strict: true }) && value.length === 42;
+}
+function isHash(value) {
+  return typeof value === "string" && (0, import_viem28.isHex)(value, { strict: true }) && value.length === 66;
+}
+function isUint256Decimal(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 78) {
+    return false;
+  }
+  if (!/^(0|[1-9]\d*)$/.test(value)) return false;
+  return BigInt(value) <= 2n ** 256n - 1n;
+}
+function isBlockNumber(value) {
+  return value === null || isUint256Decimal(value);
+}
+function isWithdrawNonceResponse(body, requestedAccount) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  if (value.success !== true) return false;
+  if (!isAddressHex(value.account)) return false;
+  if (value.account.toLowerCase() !== requestedAccount.toLowerCase())
+    return false;
+  if (typeof value.chainId !== "string") return false;
+  if (!/^(0|[1-9]\d*)$/.test(value.chainId)) return false;
+  const isLastNull = value.lastWithdrawNonce === null;
+  const lastNonceValid = isLastNull || isUint256Decimal(value.lastWithdrawNonce);
+  if (!lastNonceValid) return false;
+  if (!isUint256Decimal(value.nextWithdrawNonce)) return false;
+  if (isLastNull) {
+    return value.nextWithdrawNonce === "1";
+  }
+  const lastNonce = BigInt(value.lastWithdrawNonce);
+  const nextNonce = BigInt(value.nextWithdrawNonce);
+  const expectedNextNonce = lastNonce + 1n;
+  if (expectedNextNonce > 2n ** 256n - 1n) return false;
+  return nextNonce === expectedNextNonce;
+}
 
 // src/direct/escrow-payment.ts
 var GRANT_OP_TYPE = "grant";
@@ -37028,12 +37199,12 @@ var UINT256_MAX = (1n << 256n) - 1n;
 var ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
 var BYTES32_RE = /^0x[0-9a-fA-F]{64}$/;
 var SIGNATURE_RE = /^0x[0-9a-fA-F]{130}$/;
-function isUint256Decimal(value, allowZero) {
+function isUint256Decimal2(value, allowZero) {
   const pattern = allowZero ? /^(0|[1-9]\d*)$/ : /^[1-9]\d*$/;
   return value.length <= UINT256_MAX.toString().length && pattern.test(value) && BigInt(value) <= UINT256_MAX;
 }
 function isValidAccessRecord(record) {
-  return BYTES32_RE.test(record.dataPointId) && isUint256Decimal(record.version, false) && ADDRESS_RE.test(record.accessor) && BYTES32_RE.test(record.recordId) && SIGNATURE_RE.test(record.signature);
+  return BYTES32_RE.test(record.dataPointId) && isUint256Decimal2(record.version, false) && ADDRESS_RE.test(record.accessor) && BYTES32_RE.test(record.recordId) && SIGNATURE_RE.test(record.signature);
 }
 function validateSigningOperation(payerAddress, required) {
   if (!ADDRESS_RE.test(payerAddress)) {
@@ -37045,10 +37216,10 @@ function validateSigningOperation(payerAddress, required) {
   if (!ADDRESS_RE.test(required.asset || NATIVE_ASSET_ADDRESS)) {
     throw new Error("Payment asset must be a 20-byte EVM address");
   }
-  if (!isUint256Decimal(required.amount, true)) {
+  if (!isUint256Decimal2(required.amount, true)) {
     throw new Error("Payment amount must be a canonical uint256 decimal");
   }
-  if (required.paymentNonce !== void 0 && !isUint256Decimal(required.paymentNonce, false)) {
+  if (required.paymentNonce !== void 0 && !isUint256Decimal2(required.paymentNonce, false)) {
     throw new Error("Payment nonce must be a positive uint256 decimal");
   }
   const accessRecord = required.accessRecord;
@@ -37179,7 +37350,7 @@ function paymentResponseMetadataFromHeader(header) {
     const registrationFee = stringField(breakdown, "registrationFee");
     const dataAccessFee = stringField(breakdown, "dataAccessFee");
     const paidAt = stringField(result, "paidAt");
-    if (result?.success !== true || !opType || !opId || !BYTES32_RE.test(opId) || !payerAddress || !ADDRESS_RE.test(payerAddress) || !asset || !ADDRESS_RE.test(asset) || !amount || !isUint256Decimal(amount, true) || !paymentNonce || !isUint256Decimal(paymentNonce, false) || !registrationFee || !isUint256Decimal(registrationFee, true) || !dataAccessFee || !isUint256Decimal(dataAccessFee, true) || typeof breakdown?.registrationPaid !== "boolean" || !paidAt || !isCanonicalIsoTimestamp(paidAt)) {
+    if (result?.success !== true || !opType || !opId || !BYTES32_RE.test(opId) || !payerAddress || !ADDRESS_RE.test(payerAddress) || !asset || !ADDRESS_RE.test(asset) || !amount || !isUint256Decimal2(amount, true) || !paymentNonce || !isUint256Decimal2(paymentNonce, false) || !registrationFee || !isUint256Decimal2(registrationFee, true) || !dataAccessFee || !isUint256Decimal2(dataAccessFee, true) || typeof breakdown?.registrationPaid !== "boolean" || !paidAt || !isCanonicalIsoTimestamp(paidAt)) {
       return void 0;
     }
     return {
@@ -37260,15 +37431,15 @@ function isBytes32Hex(value) {
   return /^0x[0-9a-fA-F]{64}$/.test(value);
 }
 var UINT256_MAX2 = (1n << 256n) - 1n;
-function isAddressHex(value) {
+function isAddressHex2(value) {
   return /^0x[0-9a-fA-F]{40}$/.test(value);
 }
-function isUint256Decimal2(value, allowZero) {
+function isUint256Decimal3(value, allowZero) {
   const pattern = allowZero ? /^(0|[1-9]\d*)$/ : /^[1-9]\d*$/;
   return value.length <= UINT256_MAX2.toString().length && pattern.test(value) && BigInt(value) <= UINT256_MAX2;
 }
 function isValidDataAccessRecord(record) {
-  return isBytes32Hex(record.dataPointId) && isUint256Decimal2(record.version, false) && isAddressHex(record.accessor) && isBytes32Hex(record.recordId) && /^0x[0-9a-fA-F]{130}$/.test(record.signature);
+  return isBytes32Hex(record.dataPointId) && isUint256Decimal3(record.version, false) && isAddressHex2(record.accessor) && isBytes32Hex(record.recordId) && /^0x[0-9a-fA-F]{130}$/.test(record.signature);
 }
 function parseLegacyGrantOperation(params) {
   const { challengeGrantId, challengeOpId, challengeOpType, grantId } = params;
@@ -37319,7 +37490,7 @@ function parseCanonicalDataAccessAccept(value) {
   const accessRecord = parseAccessRecord(accept?.accessRecord);
   const acceptAsset = stringField2(accept, "asset");
   const acceptAmount = stringField2(accept, "amount");
-  if (!network || !payerAddress || !isAddressHex(payerAddress) || !opId || !isBytes32Hex(opId) || !asset || !isAddressHex(asset) || !amount || !isUint256Decimal2(amount, true) || !paymentNonce || !isUint256Decimal2(paymentNonce, false) || !accessRecord || !isValidDataAccessRecord(accessRecord) || payerAddress.toLowerCase() !== accessRecord.accessor.toLowerCase() || opId.toLowerCase() !== accessRecord.recordId.toLowerCase() || !acceptAsset || acceptAsset.toLowerCase() !== asset.toLowerCase() || acceptAmount !== amount) {
+  if (!network || !payerAddress || !isAddressHex2(payerAddress) || !opId || !isBytes32Hex(opId) || !asset || !isAddressHex2(asset) || !amount || !isUint256Decimal3(amount, true) || !paymentNonce || !isUint256Decimal3(paymentNonce, false) || !accessRecord || !isValidDataAccessRecord(accessRecord) || payerAddress.toLowerCase() !== accessRecord.accessor.toLowerCase() || opId.toLowerCase() !== accessRecord.recordId.toLowerCase() || !acceptAsset || acceptAsset.toLowerCase() !== asset.toLowerCase() || acceptAmount !== amount) {
     return null;
   }
   return {
@@ -37404,7 +37575,7 @@ async function parsePersonalServerPaymentRequired(res, grantId) {
     const acceptAmount = stringField2(accept, "amount");
     const accessRecord2 = parseAccessRecord(accept.accessRecord);
     const hasAccessRecord = accept.accessRecord !== void 0;
-    if (!network || !payerAddress || !isAddressHex(payerAddress) || !opId || !isBytes32Hex(opId) || !asset || !isAddressHex(asset) || !amount || !isUint256Decimal2(amount, true) || !paymentNonce || !isUint256Decimal2(paymentNonce, false) || !acceptAsset || acceptAsset.toLowerCase() !== asset.toLowerCase() || acceptAmount !== amount || hasAccessRecord && (!accessRecord2 || !isValidDataAccessRecord(accessRecord2) || accessRecord2.accessor.toLowerCase() !== payerAddress.toLowerCase()) || amount === "0" && !accessRecord2) {
+    if (!network || !payerAddress || !isAddressHex2(payerAddress) || !opId || !isBytes32Hex(opId) || !asset || !isAddressHex2(asset) || !amount || !isUint256Decimal3(amount, true) || !paymentNonce || !isUint256Decimal3(paymentNonce, false) || !acceptAsset || acceptAsset.toLowerCase() !== asset.toLowerCase() || acceptAmount !== amount || hasAccessRecord && (!accessRecord2 || !isValidDataAccessRecord(accessRecord2) || accessRecord2.accessor.toLowerCase() !== payerAddress.toLowerCase()) || amount === "0" && !accessRecord2) {
       throw new import_errors12.PersonalServerReadError(
         "Personal Server grant payment challenge was untrusted or incomplete",
         402
@@ -37548,6 +37719,8 @@ async function parsePSError(response) {
   ENCLAVE_TRUST_ANCHORS,
   ENCLAVE_WALLET_PURPOSE,
   ESCROW_DEPOSIT_ABI,
+  EscrowWithdrawalLifecycleError,
+  EscrowWithdrawalRejectionError,
   ExpiredTokenError,
   FEE_REGISTRY_ABI,
   GENERIC_PAYMENT_TYPES,
@@ -37619,6 +37792,7 @@ async function parsePSError(response) {
   TOMBSTONE_METADATA_HASH_PREIMAGE,
   USER_PS_ID_DOMAIN,
   VanaStorage,
+  WITHDRAW_AUTHORIZATION_TYPES,
   WRITER_ATTRIBUTION_KEY,
   WRITE_CONTENT_DISPOSITION_HEADER,
   WRITE_FILENAME_HEADER,
@@ -37647,6 +37821,7 @@ async function parsePSError(response) {
   buildPersonalServerRegistrationTypedData,
   buildSetDataPointStatusRequest,
   buildWeb3SignedHeader,
+  buildWithdrawAuthorizationTypedData,
   builderRegistrationDomain,
   canonicalJobRequestBytes,
   chains,
@@ -37774,6 +37949,7 @@ async function parsePSError(response) {
   verifyWeb3Signed,
   waitForDerivativeStatus,
   waitForQuestion,
+  withdrawAuthorizationDomain,
   writeData,
   writePersonalServerData,
   ...require("./errors.cjs")