@opendatalabs/vana-sdk 3.23.0 → 4.0.0

package/dist/protocol/data-point-deletion.cjs

@@ -33,7 +33,7 @@ __export(data_point_deletion_exports, {
 });
 module.exports = __toCommonJS(data_point_deletion_exports);
 var import_viem = require("viem");
-var import_errors = require("../errors");
+var import_errors = require("../errors.cjs");
 var import_response_body = require("../utils/response-body");
 var import_eip712 = require("./eip712");
 var import_lineage = require("./lineage");

package/dist/protocol/derivative-questions.cjs

@@ -44,7 +44,7 @@ __export(derivative_questions_exports, {
 module.exports = __toCommonJS(derivative_questions_exports);
 var import_zod = require("zod");
 var import_web3_signed_builder = require("../auth/web3-signed-builder");
-var import_errors = require("../errors");
+var import_errors = require("../errors.cjs");
 var import_lineage = require("./lineage");
 var import_personal_server_error_body = require("./personal-server-error-body");
 var import_personal_server_data = require("./personal-server-data");

package/dist/protocol/derivative-status.cjs

@@ -32,7 +32,7 @@ __export(derivative_status_exports, {
 module.exports = __toCommonJS(derivative_status_exports);
 var import_zod = require("zod");
 var import_web3_signed_builder = require("../auth/web3-signed-builder");
-var import_errors = require("../errors");
+var import_errors = require("../errors.cjs");
 var import_derivative_questions = require("./derivative-questions");
 var import_write_signer = require("./write-signer");
 var import_derivative_questions2 = require("./derivative-questions");

package/dist/protocol/eip712.cjs

@@ -26,12 +26,15 @@ __export(eip712_exports, {
   NATIVE_VANA_ASSET: () => NATIVE_VANA_ASSET,
   RECORD_DATA_ACCESS_TYPES: () => RECORD_DATA_ACCESS_TYPES,
   SERVER_REGISTRATION_TYPES: () => SERVER_REGISTRATION_TYPES,
+  WITHDRAW_AUTHORIZATION_TYPES: () => WITHDRAW_AUTHORIZATION_TYPES,
+  buildWithdrawAuthorizationTypedData: () => buildWithdrawAuthorizationTypedData,
   builderRegistrationDomain: () => builderRegistrationDomain,
   dataRegistryDomain: () => dataRegistryDomain,
   escrowPaymentDomain: () => escrowPaymentDomain,
   grantRegistrationDomain: () => grantRegistrationDomain,
   grantRevocationDomain: () => grantRevocationDomain,
-  serverRegistrationDomain: () => serverRegistrationDomain
+  serverRegistrationDomain: () => serverRegistrationDomain,
+  withdrawAuthorizationDomain: () => withdrawAuthorizationDomain
 });
 module.exports = __toCommonJS(eip712_exports);
 const DOMAIN_NAME = "Vana Data Portability";
@@ -81,6 +84,9 @@ function escrowPaymentDomain(config) {
     config.contracts.dataPortabilityEscrow
   );
 }
+function withdrawAuthorizationDomain(config) {
+  return escrowPaymentDomain(config);
+}
 const GRANT_REGISTRATION_TYPES = {
   GrantRegistration: [
     { name: "grantorAddress", type: "address" },
@@ -123,6 +129,15 @@ const GENERIC_PAYMENT_TYPES = {
     { name: "paymentNonce", type: "uint256" }
   ]
 };
+const WITHDRAW_AUTHORIZATION_TYPES = {
+  WithdrawAuthorization: [
+    { name: "account", type: "address" },
+    { name: "asset", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "withdrawNonce", type: "uint256" },
+    { name: "deadline", type: "uint256" }
+  ]
+};
 const ADD_DATA_TYPES = {
   AddData: [
     { name: "ownerAddress", type: "address" },
@@ -141,6 +156,14 @@ const RECORD_DATA_ACCESS_TYPES = {
     { name: "recordId", type: "bytes32" }
   ]
 };
+function buildWithdrawAuthorizationTypedData(config, message) {
+  return {
+    domain: withdrawAuthorizationDomain(config),
+    types: WITHDRAW_AUTHORIZATION_TYPES,
+    primaryType: "WithdrawAuthorization",
+    message
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ADD_DATA_TYPES,
@@ -151,11 +174,14 @@ const RECORD_DATA_ACCESS_TYPES = {
   NATIVE_VANA_ASSET,
   RECORD_DATA_ACCESS_TYPES,
   SERVER_REGISTRATION_TYPES,
+  WITHDRAW_AUTHORIZATION_TYPES,
+  buildWithdrawAuthorizationTypedData,
   builderRegistrationDomain,
   dataRegistryDomain,
   escrowPaymentDomain,
   grantRegistrationDomain,
   grantRevocationDomain,
-  serverRegistrationDomain
+  serverRegistrationDomain,
+  withdrawAuthorizationDomain
 });
 //# sourceMappingURL=eip712.cjs.map

package/dist/protocol/eip712.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/eip712.ts"],"sourcesContent":["/**\n * EIP-712 domain and type builders for Data Portability protocol writes.\n *\n * These helpers are shared primitives only. Personal Server runtimes own when\n * to sign and submit these payloads.\n *\n * @category Protocol\n */\n\nimport type { TypedDataDomain } from \"viem\";\n\nconst DOMAIN_NAME = \"Vana Data Portability\";\nconst DOMAIN_VERSION = \"1\";\n\nexport interface DataPortabilityContracts {\n  dataRegistry: string;\n  dataPortabilityPermissions: string;\n  dataPortabilityServer: string;\n  dataPortabilityGrantees: string;\n  // DataPortabilityEscrow — verifies GENERIC_PAYMENT_TYPES signatures backing\n  // /v1/escrow/pay (the data-access payment path).\n  dataPortabilityEscrow: string;\n  // FeeRegistry — per-operation `{amount, asset, payee, enabled}` records\n  // keyed on `keccak256(name)`. The gateway re-resolves fees against this\n  // contract on every /v1/escrow/pay so the SDK has to read the same\n  // source of truth to size payment amounts.\n  feeRegistry: string;\n}\n\n// Native VANA asset sentinel used by /v1/escrow/pay's `asset` field — pay any\n// other ERC-20 by passing its contract address instead.\nexport const NATIVE_VANA_ASSET =\n  \"0x0000000000000000000000000000000000000000\" as const;\n\nexport interface DataPortabilityGatewayConfig {\n  chainId: number;\n  contracts: DataPortabilityContracts;\n}\n\nfunction buildDomain(\n  chainId: number,\n  verifyingContract: `0x${string}`,\n): TypedDataDomain {\n  return {\n    name: DOMAIN_NAME,\n    version: DOMAIN_VERSION,\n    chainId,\n    verifyingContract,\n  };\n}\n\n// Domain for the DataRegistryV2 contract — verifies the AddData and\n// RecordDataAccess EIP-712 signatures. The v2 contract dropped the file\n// concept entirely in favor of versioned data points keyed on (owner,\n// scope); the primaryType distinguishes the two flows.\nexport function dataRegistryDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataRegistry as `0x${string}`,\n  );\n}\n\nexport function grantRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function grantRevocationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function serverRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityServer as `0x${string}`,\n  );\n}\n\nexport function builderRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityGrantees as `0x${string}`,\n  );\n}\n\n// Domain for the generic-payment EIP-712 signature consumed by\n// /v1/escrow/pay. The verifyingContract is the escrow itself (not the per-op\n// contract), so a single signature debits the payer's escrow balance for any\n// supported op — `grant` today; file/builder/schema in the future.\nexport function escrowPaymentDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityEscrow as `0x${string}`,\n  );\n}\n\n// grantVersion is a monotonic uint256 nonce per (grantor, grantee) pair. The\n// gateway rejects any registration whose version is <= the stored value,\n// which is the replay-attack defence now that re-registering the same pair\n// is a permitted override. expiresAt is unix seconds; 0 = no expiry.\nexport const GRANT_REGISTRATION_TYPES = {\n  GrantRegistration: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"granteeId\", type: \"bytes32\" },\n    { name: \"scopes\", type: \"string[]\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n    { name: \"expiresAt\", type: \"uint256\" },\n  ],\n} as const;\n\n// Revocation shares the (grantor, grantee) monotonic nonce with registration —\n// both events advance the same grantVersion counter so an old revocation sig\n// can't be replayed across a revoke → re-register cycle.\nexport const GRANT_REVOCATION_TYPES = {\n  GrantRevocation: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"grantId\", type: \"bytes32\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n  ],\n} as const;\n\nexport const SERVER_REGISTRATION_TYPES = {\n  ServerRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"serverAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"serverUrl\", type: \"string\" },\n  ],\n} as const;\n\nexport const BUILDER_REGISTRATION_TYPES = {\n  BuilderRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"granteeAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"appUrl\", type: \"string\" },\n  ],\n} as const;\n\n// Generic payment for the escrow flow. The (opType, opId) pair routes the\n// debit to the right op-row; paymentNonce is per-payer monotonic so the same\n// signed message can't be replayed after a revoke + re-register cycle.\n//\n// Legacy grant payments bind opId to grantId; standalone data_access payments\n// bind opId to the accompanying accessRecord.recordId.\nexport const GENERIC_PAYMENT_TYPES = {\n  GenericPayment: [\n    { name: \"payerAddress\", type: \"address\" },\n    { name: \"opType\", type: \"string\" },\n    { name: \"opId\", type: \"bytes32\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"paymentNonce\", type: \"uint256\" },\n  ],\n} as const;\n\n// AddData is signed by the data point's owner — registers (scope, dataHash,\n// metadataHash) on DataRegistryV2. expectedVersion is the version the caller\n// believes is current; the contract rejects with a CAS error if it isn't.\n// Used at POST /v1/data.\nexport const ADD_DATA_TYPES = {\n  AddData: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"dataHash\", type: \"bytes32\" },\n    { name: \"metadataHash\", type: \"bytes32\" },\n    { name: \"expectedVersion\", type: \"uint256\" },\n  ],\n} as const;\n\n// RecordDataAccess is signed by a *trusted personal server* of `ownerAddress`\n// — attests that (scope, version) was served to `accessor`. recordId is a\n// per-event bytes32 the contract pins in `_usedRecordIds` to prevent replay.\n// Used as the optional `accessRecord` on POST /v1/escrow/pay.\nexport const RECORD_DATA_ACCESS_TYPES = {\n  RecordDataAccess: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"version\", type: \"uint256\" },\n    { name: \"accessor\", type: \"address\" },\n    { name: \"recordId\", type: \"bytes32\" },\n  ],\n} as const;\n\nexport interface GrantRegistrationMessage {\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  grantVersion: bigint;\n  expiresAt: bigint;\n}\n\nexport interface GrantRevocationMessage {\n  grantorAddress: `0x${string}`;\n  grantId: `0x${string}`;\n  grantVersion: bigint;\n}\n\nexport interface ServerRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  serverAddress: `0x${string}`;\n  publicKey: string;\n  serverUrl: string;\n}\n\nexport interface BuilderRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  granteeAddress: `0x${string}`;\n  publicKey: string;\n  appUrl: string;\n}\n\nexport interface GenericPaymentMessage {\n  payerAddress: `0x${string}`;\n  // 'grant' today — extensible to 'file' | 'builder' | 'schema' as those\n  // op-types become payable. Sent verbatim over the wire and into the\n  // typed-data string field, so callers must match the gateway's spelling.\n  opType: string;\n  opId: `0x${string}`;\n  // NATIVE_VANA_ASSET for native VANA; an ERC-20 contract address otherwise.\n  asset: `0x${string}`;\n  amount: bigint;\n  paymentNonce: bigint;\n}\n\nexport interface AddDataMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  dataHash: `0x${string}`;\n  metadataHash: `0x${string}`;\n  expectedVersion: bigint;\n}\n\nexport interface RecordDataAccessMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  version: bigint;\n  accessor: `0x${string}`;\n  recordId: `0x${string}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AAmBhB,MAAM,oBACX;AAOF,SAAS,YACP,SACA,mBACiB;AACjB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,mBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,wBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,sBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,yBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,0BACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,SAAS,oBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,mBAAmB;AAAA,IACjB,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,WAAW;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,EACvC;AACF;AAKO,MAAM,yBAAyB;AAAA,EACpC,iBAAiB;AAAA,IACf,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAEO,MAAM,4BAA4B;AAAA,EACvC,oBAAoB;AAAA,IAClB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,EACtC;AACF;AAEO,MAAM,6BAA6B;AAAA,EACxC,qBAAqB;AAAA,IACnB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,EACnC;AACF;AAQO,MAAM,wBAAwB;AAAA,EACnC,gBAAgB;AAAA,IACd,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,IACjC,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAMO,MAAM,iBAAiB;AAAA,EAC5B,SAAS;AAAA,IACP,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,mBAAmB,MAAM,UAAU;AAAA,EAC7C;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,kBAAkB;AAAA,IAChB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;","names":[]}
+{"version":3,"sources":["../../src/protocol/eip712.ts"],"sourcesContent":["/**\n * EIP-712 domain and type builders for Data Portability protocol writes.\n *\n * These helpers are shared primitives only. Personal Server runtimes own when\n * to sign and submit these payloads.\n *\n * @category Protocol\n */\n\nimport type { TypedDataDomain } from \"viem\";\n\nconst DOMAIN_NAME = \"Vana Data Portability\";\nconst DOMAIN_VERSION = \"1\";\n\nexport interface DataPortabilityContracts {\n  dataRegistry: string;\n  dataPortabilityPermissions: string;\n  dataPortabilityServer: string;\n  dataPortabilityGrantees: string;\n  // DataPortabilityEscrow — verifies GENERIC_PAYMENT_TYPES signatures backing\n  // /v1/escrow/pay (the data-access payment path).\n  dataPortabilityEscrow: string;\n  // FeeRegistry — per-operation `{amount, asset, payee, enabled}` records\n  // keyed on `keccak256(name)`. The gateway re-resolves fees against this\n  // contract on every /v1/escrow/pay so the SDK has to read the same\n  // source of truth to size payment amounts.\n  feeRegistry: string;\n}\n\n// Native VANA asset sentinel used by /v1/escrow/pay's `asset` field — pay any\n// other ERC-20 by passing its contract address instead.\nexport const NATIVE_VANA_ASSET =\n  \"0x0000000000000000000000000000000000000000\" as const;\n\nexport interface DataPortabilityGatewayConfig {\n  chainId: number;\n  contracts: DataPortabilityContracts;\n}\n\nfunction buildDomain(\n  chainId: number,\n  verifyingContract: `0x${string}`,\n): TypedDataDomain {\n  return {\n    name: DOMAIN_NAME,\n    version: DOMAIN_VERSION,\n    chainId,\n    verifyingContract,\n  };\n}\n\n// Domain for the DataRegistryV2 contract — verifies the AddData and\n// RecordDataAccess EIP-712 signatures. The v2 contract dropped the file\n// concept entirely in favor of versioned data points keyed on (owner,\n// scope); the primaryType distinguishes the two flows.\nexport function dataRegistryDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataRegistry as `0x${string}`,\n  );\n}\n\nexport function grantRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function grantRevocationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function serverRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityServer as `0x${string}`,\n  );\n}\n\nexport function builderRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityGrantees as `0x${string}`,\n  );\n}\n\n// Domain for the generic-payment EIP-712 signature consumed by\n// /v1/escrow/pay. The verifyingContract is the escrow itself (not the per-op\n// contract), so a single signature debits the payer's escrow balance for any\n// supported op — `grant` today; file/builder/schema in the future.\nexport function escrowPaymentDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityEscrow as `0x${string}`,\n  );\n}\n\n/**\n * Domain for a gateway-authorized escrow withdrawal.\n *\n * Withdrawals use the escrow contract as their verifying contract, just like\n * generic payments. The distinct primary type prevents a payment signature\n * from authorizing a withdrawal.\n */\nexport function withdrawAuthorizationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return escrowPaymentDomain(config);\n}\n\n// grantVersion is a monotonic uint256 nonce per (grantor, grantee) pair. The\n// gateway rejects any registration whose version is <= the stored value,\n// which is the replay-attack defence now that re-registering the same pair\n// is a permitted override. expiresAt is unix seconds; 0 = no expiry.\nexport const GRANT_REGISTRATION_TYPES = {\n  GrantRegistration: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"granteeId\", type: \"bytes32\" },\n    { name: \"scopes\", type: \"string[]\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n    { name: \"expiresAt\", type: \"uint256\" },\n  ],\n} as const;\n\n// Revocation shares the (grantor, grantee) monotonic nonce with registration —\n// both events advance the same grantVersion counter so an old revocation sig\n// can't be replayed across a revoke → re-register cycle.\nexport const GRANT_REVOCATION_TYPES = {\n  GrantRevocation: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"grantId\", type: \"bytes32\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n  ],\n} as const;\n\nexport const SERVER_REGISTRATION_TYPES = {\n  ServerRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"serverAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"serverUrl\", type: \"string\" },\n  ],\n} as const;\n\nexport const BUILDER_REGISTRATION_TYPES = {\n  BuilderRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"granteeAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"appUrl\", type: \"string\" },\n  ],\n} as const;\n\n// Generic payment for the escrow flow. The (opType, opId) pair routes the\n// debit to the right op-row; paymentNonce is per-payer monotonic so the same\n// signed message can't be replayed after a revoke + re-register cycle.\n//\n// Legacy grant payments bind opId to grantId; standalone data_access payments\n// bind opId to the accompanying accessRecord.recordId.\nexport const GENERIC_PAYMENT_TYPES = {\n  GenericPayment: [\n    { name: \"payerAddress\", type: \"address\" },\n    { name: \"opType\", type: \"string\" },\n    { name: \"opId\", type: \"bytes32\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"paymentNonce\", type: \"uint256\" },\n  ],\n} as const;\n\n/**\n * Authorization consumed by `POST /v1/escrow/withdraw`.\n *\n * The current escrow contract always pays `account` itself. Do not add an\n * unsigned recipient field: a future recipient capability must be introduced\n * as a new, signed protocol type after the contract and gateway support it.\n */\nexport const WITHDRAW_AUTHORIZATION_TYPES = {\n  WithdrawAuthorization: [\n    { name: \"account\", type: \"address\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"withdrawNonce\", type: \"uint256\" },\n    { name: \"deadline\", type: \"uint256\" },\n  ],\n} as const;\n\n// AddData is signed by the data point's owner — registers (scope, dataHash,\n// metadataHash) on DataRegistryV2. expectedVersion is the version the caller\n// believes is current; the contract rejects with a CAS error if it isn't.\n// Used at POST /v1/data.\nexport const ADD_DATA_TYPES = {\n  AddData: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"dataHash\", type: \"bytes32\" },\n    { name: \"metadataHash\", type: \"bytes32\" },\n    { name: \"expectedVersion\", type: \"uint256\" },\n  ],\n} as const;\n\n// RecordDataAccess is signed by a *trusted personal server* of `ownerAddress`\n// — attests that (scope, version) was served to `accessor`. recordId is a\n// per-event bytes32 the contract pins in `_usedRecordIds` to prevent replay.\n// Used as the optional `accessRecord` on POST /v1/escrow/pay.\nexport const RECORD_DATA_ACCESS_TYPES = {\n  RecordDataAccess: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"version\", type: \"uint256\" },\n    { name: \"accessor\", type: \"address\" },\n    { name: \"recordId\", type: \"bytes32\" },\n  ],\n} as const;\n\nexport interface GrantRegistrationMessage {\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  grantVersion: bigint;\n  expiresAt: bigint;\n}\n\nexport interface GrantRevocationMessage {\n  grantorAddress: `0x${string}`;\n  grantId: `0x${string}`;\n  grantVersion: bigint;\n}\n\nexport interface ServerRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  serverAddress: `0x${string}`;\n  publicKey: string;\n  serverUrl: string;\n}\n\nexport interface BuilderRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  granteeAddress: `0x${string}`;\n  publicKey: string;\n  appUrl: string;\n}\n\nexport interface GenericPaymentMessage {\n  payerAddress: `0x${string}`;\n  // 'grant' today — extensible to 'file' | 'builder' | 'schema' as those\n  // op-types become payable. Sent verbatim over the wire and into the\n  // typed-data string field, so callers must match the gateway's spelling.\n  opType: string;\n  opId: `0x${string}`;\n  // NATIVE_VANA_ASSET for native VANA; an ERC-20 contract address otherwise.\n  asset: `0x${string}`;\n  amount: bigint;\n  paymentNonce: bigint;\n}\n\n/** EIP-712 message authorizing a withdrawal of an account's escrow balance. */\nexport interface WithdrawAuthorizationMessage {\n  /** The escrow account to debit and the withdrawal recipient. */\n  account: `0x${string}`;\n  /** Native VANA sentinel or the ERC-20 asset contract. */\n  asset: `0x${string}`;\n  /** Base-unit amount. */\n  amount: bigint;\n  /** Caller-managed, strictly increasing nonce for newly accepted intents. */\n  withdrawNonce: bigint;\n  /** Unix seconds. Bounds first acceptance; exact accepted retries remain valid. */\n  deadline: bigint;\n}\n\n/** Builds the typed data a wallet must sign before calling the withdraw API. */\nexport function buildWithdrawAuthorizationTypedData(\n  config: DataPortabilityGatewayConfig,\n  message: WithdrawAuthorizationMessage,\n) {\n  return {\n    domain: withdrawAuthorizationDomain(config),\n    types: WITHDRAW_AUTHORIZATION_TYPES,\n    primaryType: \"WithdrawAuthorization\" as const,\n    message,\n  };\n}\n\nexport interface AddDataMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  dataHash: `0x${string}`;\n  metadataHash: `0x${string}`;\n  expectedVersion: bigint;\n}\n\nexport interface RecordDataAccessMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  version: bigint;\n  accessor: `0x${string}`;\n  recordId: `0x${string}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AAmBhB,MAAM,oBACX;AAOF,SAAS,YACP,SACA,mBACiB;AACjB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,mBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,wBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,sBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,yBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,0BACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,SAAS,oBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AASO,SAAS,4BACd,QACiB;AACjB,SAAO,oBAAoB,MAAM;AACnC;AAMO,MAAM,2BAA2B;AAAA,EACtC,mBAAmB;AAAA,IACjB,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,WAAW;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,EACvC;AACF;AAKO,MAAM,yBAAyB;AAAA,EACpC,iBAAiB;AAAA,IACf,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAEO,MAAM,4BAA4B;AAAA,EACvC,oBAAoB;AAAA,IAClB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,EACtC;AACF;AAEO,MAAM,6BAA6B;AAAA,EACxC,qBAAqB;AAAA,IACnB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,EACnC;AACF;AAQO,MAAM,wBAAwB;AAAA,EACnC,gBAAgB;AAAA,IACd,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,IACjC,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AASO,MAAM,+BAA+B;AAAA,EAC1C,uBAAuB;AAAA,IACrB,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;AAMO,MAAM,iBAAiB;AAAA,EAC5B,SAAS;AAAA,IACP,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,mBAAmB,MAAM,UAAU;AAAA,EAC7C;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,kBAAkB;AAAA,IAChB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;AA0DO,SAAS,oCACd,QACA,SACA;AACA,SAAO;AAAA,IACL,QAAQ,4BAA4B,MAAM;AAAA,IAC1C,OAAO;AAAA,IACP,aAAa;AAAA,IACb;AAAA,EACF;AACF;","names":[]}

package/dist/protocol/eip712.d.ts

@@ -26,6 +26,14 @@ export declare function grantRevocationDomain(config: DataPortabilityGatewayConf
 export declare function serverRegistrationDomain(config: DataPortabilityGatewayConfig): TypedDataDomain;
 export declare function builderRegistrationDomain(config: DataPortabilityGatewayConfig): TypedDataDomain;
 export declare function escrowPaymentDomain(config: DataPortabilityGatewayConfig): TypedDataDomain;
+/**
+ * Domain for a gateway-authorized escrow withdrawal.
+ *
+ * Withdrawals use the escrow contract as their verifying contract, just like
+ * generic payments. The distinct primary type prevents a payment signature
+ * from authorizing a withdrawal.
+ */
+export declare function withdrawAuthorizationDomain(config: DataPortabilityGatewayConfig): TypedDataDomain;
 export declare const GRANT_REGISTRATION_TYPES: {
     readonly GrantRegistration: readonly [{
         readonly name: "grantorAddress";
@@ -107,6 +115,31 @@ export declare const GENERIC_PAYMENT_TYPES: {
         readonly type: "uint256";
     }];
 };
+/**
+ * Authorization consumed by `POST /v1/escrow/withdraw`.
+ *
+ * The current escrow contract always pays `account` itself. Do not add an
+ * unsigned recipient field: a future recipient capability must be introduced
+ * as a new, signed protocol type after the contract and gateway support it.
+ */
+export declare const WITHDRAW_AUTHORIZATION_TYPES: {
+    readonly WithdrawAuthorization: readonly [{
+        readonly name: "account";
+        readonly type: "address";
+    }, {
+        readonly name: "asset";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "withdrawNonce";
+        readonly type: "uint256";
+    }, {
+        readonly name: "deadline";
+        readonly type: "uint256";
+    }];
+};
 export declare const ADD_DATA_TYPES: {
     readonly AddData: readonly [{
         readonly name: "ownerAddress";
@@ -175,6 +208,43 @@ export interface GenericPaymentMessage {
     amount: bigint;
     paymentNonce: bigint;
 }
+/** EIP-712 message authorizing a withdrawal of an account's escrow balance. */
+export interface WithdrawAuthorizationMessage {
+    /** The escrow account to debit and the withdrawal recipient. */
+    account: `0x${string}`;
+    /** Native VANA sentinel or the ERC-20 asset contract. */
+    asset: `0x${string}`;
+    /** Base-unit amount. */
+    amount: bigint;
+    /** Caller-managed, strictly increasing nonce for newly accepted intents. */
+    withdrawNonce: bigint;
+    /** Unix seconds. Bounds first acceptance; exact accepted retries remain valid. */
+    deadline: bigint;
+}
+/** Builds the typed data a wallet must sign before calling the withdraw API. */
+export declare function buildWithdrawAuthorizationTypedData(config: DataPortabilityGatewayConfig, message: WithdrawAuthorizationMessage): {
+    domain: TypedDataDomain;
+    types: {
+        readonly WithdrawAuthorization: readonly [{
+            readonly name: "account";
+            readonly type: "address";
+        }, {
+            readonly name: "asset";
+            readonly type: "address";
+        }, {
+            readonly name: "amount";
+            readonly type: "uint256";
+        }, {
+            readonly name: "withdrawNonce";
+            readonly type: "uint256";
+        }, {
+            readonly name: "deadline";
+            readonly type: "uint256";
+        }];
+    };
+    primaryType: "WithdrawAuthorization";
+    message: WithdrawAuthorizationMessage;
+};
 export interface AddDataMessage {
     ownerAddress: `0x${string}`;
     scope: string;

package/dist/protocol/eip712.js

@@ -45,6 +45,9 @@ function escrowPaymentDomain(config) {
     config.contracts.dataPortabilityEscrow
   );
 }
+function withdrawAuthorizationDomain(config) {
+  return escrowPaymentDomain(config);
+}
 const GRANT_REGISTRATION_TYPES = {
   GrantRegistration: [
     { name: "grantorAddress", type: "address" },
@@ -87,6 +90,15 @@ const GENERIC_PAYMENT_TYPES = {
     { name: "paymentNonce", type: "uint256" }
   ]
 };
+const WITHDRAW_AUTHORIZATION_TYPES = {
+  WithdrawAuthorization: [
+    { name: "account", type: "address" },
+    { name: "asset", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "withdrawNonce", type: "uint256" },
+    { name: "deadline", type: "uint256" }
+  ]
+};
 const ADD_DATA_TYPES = {
   AddData: [
     { name: "ownerAddress", type: "address" },
@@ -105,6 +117,14 @@ const RECORD_DATA_ACCESS_TYPES = {
     { name: "recordId", type: "bytes32" }
   ]
 };
+function buildWithdrawAuthorizationTypedData(config, message) {
+  return {
+    domain: withdrawAuthorizationDomain(config),
+    types: WITHDRAW_AUTHORIZATION_TYPES,
+    primaryType: "WithdrawAuthorization",
+    message
+  };
+}
 export {
   ADD_DATA_TYPES,
   BUILDER_REGISTRATION_TYPES,
@@ -114,11 +134,14 @@ export {
   NATIVE_VANA_ASSET,
   RECORD_DATA_ACCESS_TYPES,
   SERVER_REGISTRATION_TYPES,
+  WITHDRAW_AUTHORIZATION_TYPES,
+  buildWithdrawAuthorizationTypedData,
   builderRegistrationDomain,
   dataRegistryDomain,
   escrowPaymentDomain,
   grantRegistrationDomain,
   grantRevocationDomain,
-  serverRegistrationDomain
+  serverRegistrationDomain,
+  withdrawAuthorizationDomain
 };
 //# sourceMappingURL=eip712.js.map

package/dist/protocol/eip712.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/eip712.ts"],"sourcesContent":["/**\n * EIP-712 domain and type builders for Data Portability protocol writes.\n *\n * These helpers are shared primitives only. Personal Server runtimes own when\n * to sign and submit these payloads.\n *\n * @category Protocol\n */\n\nimport type { TypedDataDomain } from \"viem\";\n\nconst DOMAIN_NAME = \"Vana Data Portability\";\nconst DOMAIN_VERSION = \"1\";\n\nexport interface DataPortabilityContracts {\n  dataRegistry: string;\n  dataPortabilityPermissions: string;\n  dataPortabilityServer: string;\n  dataPortabilityGrantees: string;\n  // DataPortabilityEscrow — verifies GENERIC_PAYMENT_TYPES signatures backing\n  // /v1/escrow/pay (the data-access payment path).\n  dataPortabilityEscrow: string;\n  // FeeRegistry — per-operation `{amount, asset, payee, enabled}` records\n  // keyed on `keccak256(name)`. The gateway re-resolves fees against this\n  // contract on every /v1/escrow/pay so the SDK has to read the same\n  // source of truth to size payment amounts.\n  feeRegistry: string;\n}\n\n// Native VANA asset sentinel used by /v1/escrow/pay's `asset` field — pay any\n// other ERC-20 by passing its contract address instead.\nexport const NATIVE_VANA_ASSET =\n  \"0x0000000000000000000000000000000000000000\" as const;\n\nexport interface DataPortabilityGatewayConfig {\n  chainId: number;\n  contracts: DataPortabilityContracts;\n}\n\nfunction buildDomain(\n  chainId: number,\n  verifyingContract: `0x${string}`,\n): TypedDataDomain {\n  return {\n    name: DOMAIN_NAME,\n    version: DOMAIN_VERSION,\n    chainId,\n    verifyingContract,\n  };\n}\n\n// Domain for the DataRegistryV2 contract — verifies the AddData and\n// RecordDataAccess EIP-712 signatures. The v2 contract dropped the file\n// concept entirely in favor of versioned data points keyed on (owner,\n// scope); the primaryType distinguishes the two flows.\nexport function dataRegistryDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataRegistry as `0x${string}`,\n  );\n}\n\nexport function grantRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function grantRevocationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function serverRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityServer as `0x${string}`,\n  );\n}\n\nexport function builderRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityGrantees as `0x${string}`,\n  );\n}\n\n// Domain for the generic-payment EIP-712 signature consumed by\n// /v1/escrow/pay. The verifyingContract is the escrow itself (not the per-op\n// contract), so a single signature debits the payer's escrow balance for any\n// supported op — `grant` today; file/builder/schema in the future.\nexport function escrowPaymentDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityEscrow as `0x${string}`,\n  );\n}\n\n// grantVersion is a monotonic uint256 nonce per (grantor, grantee) pair. The\n// gateway rejects any registration whose version is <= the stored value,\n// which is the replay-attack defence now that re-registering the same pair\n// is a permitted override. expiresAt is unix seconds; 0 = no expiry.\nexport const GRANT_REGISTRATION_TYPES = {\n  GrantRegistration: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"granteeId\", type: \"bytes32\" },\n    { name: \"scopes\", type: \"string[]\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n    { name: \"expiresAt\", type: \"uint256\" },\n  ],\n} as const;\n\n// Revocation shares the (grantor, grantee) monotonic nonce with registration —\n// both events advance the same grantVersion counter so an old revocation sig\n// can't be replayed across a revoke → re-register cycle.\nexport const GRANT_REVOCATION_TYPES = {\n  GrantRevocation: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"grantId\", type: \"bytes32\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n  ],\n} as const;\n\nexport const SERVER_REGISTRATION_TYPES = {\n  ServerRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"serverAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"serverUrl\", type: \"string\" },\n  ],\n} as const;\n\nexport const BUILDER_REGISTRATION_TYPES = {\n  BuilderRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"granteeAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"appUrl\", type: \"string\" },\n  ],\n} as const;\n\n// Generic payment for the escrow flow. The (opType, opId) pair routes the\n// debit to the right op-row; paymentNonce is per-payer monotonic so the same\n// signed message can't be replayed after a revoke + re-register cycle.\n//\n// Legacy grant payments bind opId to grantId; standalone data_access payments\n// bind opId to the accompanying accessRecord.recordId.\nexport const GENERIC_PAYMENT_TYPES = {\n  GenericPayment: [\n    { name: \"payerAddress\", type: \"address\" },\n    { name: \"opType\", type: \"string\" },\n    { name: \"opId\", type: \"bytes32\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"paymentNonce\", type: \"uint256\" },\n  ],\n} as const;\n\n// AddData is signed by the data point's owner — registers (scope, dataHash,\n// metadataHash) on DataRegistryV2. expectedVersion is the version the caller\n// believes is current; the contract rejects with a CAS error if it isn't.\n// Used at POST /v1/data.\nexport const ADD_DATA_TYPES = {\n  AddData: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"dataHash\", type: \"bytes32\" },\n    { name: \"metadataHash\", type: \"bytes32\" },\n    { name: \"expectedVersion\", type: \"uint256\" },\n  ],\n} as const;\n\n// RecordDataAccess is signed by a *trusted personal server* of `ownerAddress`\n// — attests that (scope, version) was served to `accessor`. recordId is a\n// per-event bytes32 the contract pins in `_usedRecordIds` to prevent replay.\n// Used as the optional `accessRecord` on POST /v1/escrow/pay.\nexport const RECORD_DATA_ACCESS_TYPES = {\n  RecordDataAccess: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"version\", type: \"uint256\" },\n    { name: \"accessor\", type: \"address\" },\n    { name: \"recordId\", type: \"bytes32\" },\n  ],\n} as const;\n\nexport interface GrantRegistrationMessage {\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  grantVersion: bigint;\n  expiresAt: bigint;\n}\n\nexport interface GrantRevocationMessage {\n  grantorAddress: `0x${string}`;\n  grantId: `0x${string}`;\n  grantVersion: bigint;\n}\n\nexport interface ServerRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  serverAddress: `0x${string}`;\n  publicKey: string;\n  serverUrl: string;\n}\n\nexport interface BuilderRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  granteeAddress: `0x${string}`;\n  publicKey: string;\n  appUrl: string;\n}\n\nexport interface GenericPaymentMessage {\n  payerAddress: `0x${string}`;\n  // 'grant' today — extensible to 'file' | 'builder' | 'schema' as those\n  // op-types become payable. Sent verbatim over the wire and into the\n  // typed-data string field, so callers must match the gateway's spelling.\n  opType: string;\n  opId: `0x${string}`;\n  // NATIVE_VANA_ASSET for native VANA; an ERC-20 contract address otherwise.\n  asset: `0x${string}`;\n  amount: bigint;\n  paymentNonce: bigint;\n}\n\nexport interface AddDataMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  dataHash: `0x${string}`;\n  metadataHash: `0x${string}`;\n  expectedVersion: bigint;\n}\n\nexport interface RecordDataAccessMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  version: bigint;\n  accessor: `0x${string}`;\n  recordId: `0x${string}`;\n}\n"],"mappings":"AAWA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AAmBhB,MAAM,oBACX;AAOF,SAAS,YACP,SACA,mBACiB;AACjB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,mBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,wBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,sBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,yBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,0BACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,SAAS,oBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,mBAAmB;AAAA,IACjB,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,WAAW;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,EACvC;AACF;AAKO,MAAM,yBAAyB;AAAA,EACpC,iBAAiB;AAAA,IACf,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAEO,MAAM,4BAA4B;AAAA,EACvC,oBAAoB;AAAA,IAClB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,EACtC;AACF;AAEO,MAAM,6BAA6B;AAAA,EACxC,qBAAqB;AAAA,IACnB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,EACnC;AACF;AAQO,MAAM,wBAAwB;AAAA,EACnC,gBAAgB;AAAA,IACd,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,IACjC,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAMO,MAAM,iBAAiB;AAAA,EAC5B,SAAS;AAAA,IACP,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,mBAAmB,MAAM,UAAU;AAAA,EAC7C;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,kBAAkB;AAAA,IAChB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;","names":[]}
+{"version":3,"sources":["../../src/protocol/eip712.ts"],"sourcesContent":["/**\n * EIP-712 domain and type builders for Data Portability protocol writes.\n *\n * These helpers are shared primitives only. Personal Server runtimes own when\n * to sign and submit these payloads.\n *\n * @category Protocol\n */\n\nimport type { TypedDataDomain } from \"viem\";\n\nconst DOMAIN_NAME = \"Vana Data Portability\";\nconst DOMAIN_VERSION = \"1\";\n\nexport interface DataPortabilityContracts {\n  dataRegistry: string;\n  dataPortabilityPermissions: string;\n  dataPortabilityServer: string;\n  dataPortabilityGrantees: string;\n  // DataPortabilityEscrow — verifies GENERIC_PAYMENT_TYPES signatures backing\n  // /v1/escrow/pay (the data-access payment path).\n  dataPortabilityEscrow: string;\n  // FeeRegistry — per-operation `{amount, asset, payee, enabled}` records\n  // keyed on `keccak256(name)`. The gateway re-resolves fees against this\n  // contract on every /v1/escrow/pay so the SDK has to read the same\n  // source of truth to size payment amounts.\n  feeRegistry: string;\n}\n\n// Native VANA asset sentinel used by /v1/escrow/pay's `asset` field — pay any\n// other ERC-20 by passing its contract address instead.\nexport const NATIVE_VANA_ASSET =\n  \"0x0000000000000000000000000000000000000000\" as const;\n\nexport interface DataPortabilityGatewayConfig {\n  chainId: number;\n  contracts: DataPortabilityContracts;\n}\n\nfunction buildDomain(\n  chainId: number,\n  verifyingContract: `0x${string}`,\n): TypedDataDomain {\n  return {\n    name: DOMAIN_NAME,\n    version: DOMAIN_VERSION,\n    chainId,\n    verifyingContract,\n  };\n}\n\n// Domain for the DataRegistryV2 contract — verifies the AddData and\n// RecordDataAccess EIP-712 signatures. The v2 contract dropped the file\n// concept entirely in favor of versioned data points keyed on (owner,\n// scope); the primaryType distinguishes the two flows.\nexport function dataRegistryDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataRegistry as `0x${string}`,\n  );\n}\n\nexport function grantRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function grantRevocationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityPermissions as `0x${string}`,\n  );\n}\n\nexport function serverRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityServer as `0x${string}`,\n  );\n}\n\nexport function builderRegistrationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityGrantees as `0x${string}`,\n  );\n}\n\n// Domain for the generic-payment EIP-712 signature consumed by\n// /v1/escrow/pay. The verifyingContract is the escrow itself (not the per-op\n// contract), so a single signature debits the payer's escrow balance for any\n// supported op — `grant` today; file/builder/schema in the future.\nexport function escrowPaymentDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return buildDomain(\n    config.chainId,\n    config.contracts.dataPortabilityEscrow as `0x${string}`,\n  );\n}\n\n/**\n * Domain for a gateway-authorized escrow withdrawal.\n *\n * Withdrawals use the escrow contract as their verifying contract, just like\n * generic payments. The distinct primary type prevents a payment signature\n * from authorizing a withdrawal.\n */\nexport function withdrawAuthorizationDomain(\n  config: DataPortabilityGatewayConfig,\n): TypedDataDomain {\n  return escrowPaymentDomain(config);\n}\n\n// grantVersion is a monotonic uint256 nonce per (grantor, grantee) pair. The\n// gateway rejects any registration whose version is <= the stored value,\n// which is the replay-attack defence now that re-registering the same pair\n// is a permitted override. expiresAt is unix seconds; 0 = no expiry.\nexport const GRANT_REGISTRATION_TYPES = {\n  GrantRegistration: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"granteeId\", type: \"bytes32\" },\n    { name: \"scopes\", type: \"string[]\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n    { name: \"expiresAt\", type: \"uint256\" },\n  ],\n} as const;\n\n// Revocation shares the (grantor, grantee) monotonic nonce with registration —\n// both events advance the same grantVersion counter so an old revocation sig\n// can't be replayed across a revoke → re-register cycle.\nexport const GRANT_REVOCATION_TYPES = {\n  GrantRevocation: [\n    { name: \"grantorAddress\", type: \"address\" },\n    { name: \"grantId\", type: \"bytes32\" },\n    { name: \"grantVersion\", type: \"uint256\" },\n  ],\n} as const;\n\nexport const SERVER_REGISTRATION_TYPES = {\n  ServerRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"serverAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"serverUrl\", type: \"string\" },\n  ],\n} as const;\n\nexport const BUILDER_REGISTRATION_TYPES = {\n  BuilderRegistration: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"granteeAddress\", type: \"address\" },\n    { name: \"publicKey\", type: \"string\" },\n    { name: \"appUrl\", type: \"string\" },\n  ],\n} as const;\n\n// Generic payment for the escrow flow. The (opType, opId) pair routes the\n// debit to the right op-row; paymentNonce is per-payer monotonic so the same\n// signed message can't be replayed after a revoke + re-register cycle.\n//\n// Legacy grant payments bind opId to grantId; standalone data_access payments\n// bind opId to the accompanying accessRecord.recordId.\nexport const GENERIC_PAYMENT_TYPES = {\n  GenericPayment: [\n    { name: \"payerAddress\", type: \"address\" },\n    { name: \"opType\", type: \"string\" },\n    { name: \"opId\", type: \"bytes32\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"paymentNonce\", type: \"uint256\" },\n  ],\n} as const;\n\n/**\n * Authorization consumed by `POST /v1/escrow/withdraw`.\n *\n * The current escrow contract always pays `account` itself. Do not add an\n * unsigned recipient field: a future recipient capability must be introduced\n * as a new, signed protocol type after the contract and gateway support it.\n */\nexport const WITHDRAW_AUTHORIZATION_TYPES = {\n  WithdrawAuthorization: [\n    { name: \"account\", type: \"address\" },\n    { name: \"asset\", type: \"address\" },\n    { name: \"amount\", type: \"uint256\" },\n    { name: \"withdrawNonce\", type: \"uint256\" },\n    { name: \"deadline\", type: \"uint256\" },\n  ],\n} as const;\n\n// AddData is signed by the data point's owner — registers (scope, dataHash,\n// metadataHash) on DataRegistryV2. expectedVersion is the version the caller\n// believes is current; the contract rejects with a CAS error if it isn't.\n// Used at POST /v1/data.\nexport const ADD_DATA_TYPES = {\n  AddData: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"dataHash\", type: \"bytes32\" },\n    { name: \"metadataHash\", type: \"bytes32\" },\n    { name: \"expectedVersion\", type: \"uint256\" },\n  ],\n} as const;\n\n// RecordDataAccess is signed by a *trusted personal server* of `ownerAddress`\n// — attests that (scope, version) was served to `accessor`. recordId is a\n// per-event bytes32 the contract pins in `_usedRecordIds` to prevent replay.\n// Used as the optional `accessRecord` on POST /v1/escrow/pay.\nexport const RECORD_DATA_ACCESS_TYPES = {\n  RecordDataAccess: [\n    { name: \"ownerAddress\", type: \"address\" },\n    { name: \"scope\", type: \"string\" },\n    { name: \"version\", type: \"uint256\" },\n    { name: \"accessor\", type: \"address\" },\n    { name: \"recordId\", type: \"bytes32\" },\n  ],\n} as const;\n\nexport interface GrantRegistrationMessage {\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  grantVersion: bigint;\n  expiresAt: bigint;\n}\n\nexport interface GrantRevocationMessage {\n  grantorAddress: `0x${string}`;\n  grantId: `0x${string}`;\n  grantVersion: bigint;\n}\n\nexport interface ServerRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  serverAddress: `0x${string}`;\n  publicKey: string;\n  serverUrl: string;\n}\n\nexport interface BuilderRegistrationMessage {\n  ownerAddress: `0x${string}`;\n  granteeAddress: `0x${string}`;\n  publicKey: string;\n  appUrl: string;\n}\n\nexport interface GenericPaymentMessage {\n  payerAddress: `0x${string}`;\n  // 'grant' today — extensible to 'file' | 'builder' | 'schema' as those\n  // op-types become payable. Sent verbatim over the wire and into the\n  // typed-data string field, so callers must match the gateway's spelling.\n  opType: string;\n  opId: `0x${string}`;\n  // NATIVE_VANA_ASSET for native VANA; an ERC-20 contract address otherwise.\n  asset: `0x${string}`;\n  amount: bigint;\n  paymentNonce: bigint;\n}\n\n/** EIP-712 message authorizing a withdrawal of an account's escrow balance. */\nexport interface WithdrawAuthorizationMessage {\n  /** The escrow account to debit and the withdrawal recipient. */\n  account: `0x${string}`;\n  /** Native VANA sentinel or the ERC-20 asset contract. */\n  asset: `0x${string}`;\n  /** Base-unit amount. */\n  amount: bigint;\n  /** Caller-managed, strictly increasing nonce for newly accepted intents. */\n  withdrawNonce: bigint;\n  /** Unix seconds. Bounds first acceptance; exact accepted retries remain valid. */\n  deadline: bigint;\n}\n\n/** Builds the typed data a wallet must sign before calling the withdraw API. */\nexport function buildWithdrawAuthorizationTypedData(\n  config: DataPortabilityGatewayConfig,\n  message: WithdrawAuthorizationMessage,\n) {\n  return {\n    domain: withdrawAuthorizationDomain(config),\n    types: WITHDRAW_AUTHORIZATION_TYPES,\n    primaryType: \"WithdrawAuthorization\" as const,\n    message,\n  };\n}\n\nexport interface AddDataMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  dataHash: `0x${string}`;\n  metadataHash: `0x${string}`;\n  expectedVersion: bigint;\n}\n\nexport interface RecordDataAccessMessage {\n  ownerAddress: `0x${string}`;\n  scope: string;\n  version: bigint;\n  accessor: `0x${string}`;\n  recordId: `0x${string}`;\n}\n"],"mappings":"AAWA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AAmBhB,MAAM,oBACX;AAOF,SAAS,YACP,SACA,mBACiB;AACjB,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,mBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,wBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,sBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,yBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAEO,SAAS,0BACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AAMO,SAAS,oBACd,QACiB;AACjB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO,UAAU;AAAA,EACnB;AACF;AASO,SAAS,4BACd,QACiB;AACjB,SAAO,oBAAoB,MAAM;AACnC;AAMO,MAAM,2BAA2B;AAAA,EACtC,mBAAmB;AAAA,IACjB,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,WAAW;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,EACvC;AACF;AAKO,MAAM,yBAAyB;AAAA,EACpC,iBAAiB;AAAA,IACf,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AAEO,MAAM,4BAA4B;AAAA,EACvC,oBAAoB;AAAA,IAClB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,EACtC;AACF;AAEO,MAAM,6BAA6B;AAAA,EACxC,qBAAqB;AAAA,IACnB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C,EAAE,MAAM,aAAa,MAAM,SAAS;AAAA,IACpC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,EACnC;AACF;AAQO,MAAM,wBAAwB;AAAA,EACnC,gBAAgB;AAAA,IACd,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,IACjC,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,EAC1C;AACF;AASO,MAAM,+BAA+B;AAAA,EAC1C,uBAAuB;AAAA,IACrB,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,iBAAiB,MAAM,UAAU;AAAA,IACzC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;AAMO,MAAM,iBAAiB;AAAA,EAC5B,SAAS;AAAA,IACP,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,mBAAmB,MAAM,UAAU;AAAA,EAC7C;AACF;AAMO,MAAM,2BAA2B;AAAA,EACtC,kBAAkB;AAAA,IAChB,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,SAAS;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,IACpC,EAAE,MAAM,YAAY,MAAM,UAAU;AAAA,EACtC;AACF;AA0DO,SAAS,oCACd,QACA,SACA;AACA,SAAO;AAAA,IACL,QAAQ,4BAA4B,MAAM;AAAA,IAC1C,OAAO;AAAA,IACP,aAAa;AAAA,IACb;AAAA,EACF;AACF;","names":[]}

package/dist/protocol/escrow.cjs

@@ -19,12 +19,19 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var escrow_exports = {};
 __export(escrow_exports, {
   ESCROW_DEPOSIT_ABI: () => ESCROW_DEPOSIT_ABI,
+  EscrowWithdrawalLifecycleError: () => EscrowWithdrawalLifecycleError,
+  EscrowWithdrawalRejectionError: () => EscrowWithdrawalRejectionError,
   GENERIC_PAYMENT_TYPES: () => GENERIC_PAYMENT_TYPES,
   NATIVE_ASSET_ADDRESS: () => NATIVE_ASSET_ADDRESS,
+  WITHDRAW_AUTHORIZATION_TYPES: () => import_eip712.WITHDRAW_AUTHORIZATION_TYPES,
+  buildWithdrawAuthorizationTypedData: () => import_eip712.buildWithdrawAuthorizationTypedData,
   createEscrowGatewayClient: () => createEscrowGatewayClient,
-  genericPaymentDomain: () => genericPaymentDomain
+  genericPaymentDomain: () => genericPaymentDomain,
+  withdrawAuthorizationDomain: () => import_eip712.withdrawAuthorizationDomain
 });
 module.exports = __toCommonJS(escrow_exports);
+var import_eip712 = require("./eip712");
+var import_viem = require("viem");
 const GENERIC_PAYMENT_TYPES = {
   GenericPayment: [
     { name: "payerAddress", type: "address" },
@@ -64,6 +71,26 @@ const ESCROW_DEPOSIT_ABI = [
   }
 ];
 const NATIVE_ASSET_ADDRESS = "0x0000000000000000000000000000000000000000";
+class EscrowWithdrawalLifecycleError extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalLifecycleError";
+}
+class EscrowWithdrawalRejectionError extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalRejectionError";
+}
 function createEscrowGatewayClient(baseUrl) {
   const base = baseUrl.replace(/\/+$/, "");
   async function throwOnError(res, context) {
@@ -79,6 +106,27 @@ function createEscrowGatewayClient(baseUrl) {
       );
     }
   }
+  async function throwOnWithdrawError(res) {
+    if (res.ok) return;
+    let body;
+    try {
+      body = await res.json();
+    } catch {
+      throw new Error(
+        `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}`
+      );
+    }
+    if (isEscrowWithdrawalFailureResult(body)) {
+      throw new EscrowWithdrawalLifecycleError(res.status, body);
+    }
+    if (isEscrowWithdrawalRejectedResult(body)) {
+      throw new EscrowWithdrawalRejectionError(res.status, body);
+    }
+    const error = getGatewayErrorMessage(body);
+    throw new Error(
+      `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}${error ? `: ${error}` : ""}`
+    );
+  }
   return {
     async submitDeposit({ txHash }) {
       const res = await fetch(`${base}/v1/escrow/deposit`, {
@@ -134,15 +182,119 @@ function createEscrowGatewayClient(baseUrl) {
       });
       await throwOnError(res, "POST /v1/escrow/pay");
       return res.json();
+    },
+    async withdraw({
+      account,
+      asset,
+      amount,
+      withdrawNonce,
+      deadline,
+      signature
+    }) {
+      const res = await fetch(`${base}/v1/escrow/withdraw`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Web3Signed ${signature}`
+        },
+        body: JSON.stringify({
+          account,
+          asset,
+          amount,
+          withdrawNonce,
+          deadline
+        })
+      });
+      await throwOnWithdrawError(res);
+      return res.json();
+    },
+    async getWithdrawNonce(account) {
+      const res = await fetch(
+        `${base}/v1/escrow/withdraw/nonce?account=${encodeURIComponent(account)}`,
+        { cache: "no-store" }
+      );
+      await throwOnError(res, "GET /v1/escrow/withdraw/nonce");
+      const body = await res.json();
+      if (!isWithdrawNonceResponse(body, account)) {
+        throw new Error(
+          "GET /v1/escrow/withdraw/nonce: invalid response structure"
+        );
+      }
+      return body;
     }
   };
 }
+function getGatewayErrorMessage(body) {
+  if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string") {
+    return body.error;
+  }
+  return void 0;
+}
+function isEscrowWithdrawalFailureResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && (value.status === "retryable" || value.status === "reorged" || value.status === "failed") && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && (isHash(value.txHash) || value.txHash === null) && (!("blockNumber" in value) || isBlockNumber(value.blockNumber));
+}
+function isEscrowWithdrawalRejectedResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && value.status === "rejected" && isWithdrawalRejectionCode(value.code) && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && optionalUint256Decimal(value.balance) && optionalUint256Decimal(value.authorizedAmount) && optionalUint256Decimal(value.withdrawingAmount) && optionalUint256Decimal(value.availableAmount) && optionalUint256Decimal(value.requestedAmount) && optionalUint256Decimal(value.minimumAmount);
+}
+function isWithdrawalRejectionCode(value) {
+  return value === "below_minimum" || value === "deadline_too_far" || value === "expired" || value === "insufficient_available" || value === "stale_nonce";
+}
+function optionalUint256Decimal(value) {
+  return value === void 0 || isUint256Decimal(value);
+}
+function isAddressHex(value) {
+  return typeof value === "string" && (0, import_viem.isHex)(value, { strict: true }) && value.length === 42;
+}
+function isHash(value) {
+  return typeof value === "string" && (0, import_viem.isHex)(value, { strict: true }) && value.length === 66;
+}
+function isUint256Decimal(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 78) {
+    return false;
+  }
+  if (!/^(0|[1-9]\d*)$/.test(value)) return false;
+  return BigInt(value) <= 2n ** 256n - 1n;
+}
+function isBlockNumber(value) {
+  return value === null || isUint256Decimal(value);
+}
+function isWithdrawNonceResponse(body, requestedAccount) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  if (value.success !== true) return false;
+  if (!isAddressHex(value.account)) return false;
+  if (value.account.toLowerCase() !== requestedAccount.toLowerCase())
+    return false;
+  if (typeof value.chainId !== "string") return false;
+  if (!/^(0|[1-9]\d*)$/.test(value.chainId)) return false;
+  const isLastNull = value.lastWithdrawNonce === null;
+  const lastNonceValid = isLastNull || isUint256Decimal(value.lastWithdrawNonce);
+  if (!lastNonceValid) return false;
+  if (!isUint256Decimal(value.nextWithdrawNonce)) return false;
+  if (isLastNull) {
+    return value.nextWithdrawNonce === "1";
+  }
+  const lastNonce = BigInt(value.lastWithdrawNonce);
+  const nextNonce = BigInt(value.nextWithdrawNonce);
+  const expectedNextNonce = lastNonce + 1n;
+  if (expectedNextNonce > 2n ** 256n - 1n) return false;
+  return nextNonce === expectedNextNonce;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ESCROW_DEPOSIT_ABI,
+  EscrowWithdrawalLifecycleError,
+  EscrowWithdrawalRejectionError,
   GENERIC_PAYMENT_TYPES,
   NATIVE_ASSET_ADDRESS,
+  WITHDRAW_AUTHORIZATION_TYPES,
+  buildWithdrawAuthorizationTypedData,
   createEscrowGatewayClient,
-  genericPaymentDomain
+  genericPaymentDomain,
+  withdrawAuthorizationDomain
 });
 //# sourceMappingURL=escrow.cjs.map