@opendatalabs/vana-sdk 4.0.0 → 4.2.0

package/dist/index.node.js

@@ -32117,15 +32117,14 @@ var PREIMAGE_SEPARATOR = ":";
 var UNCOMPRESSED_PUBLIC_KEY_BYTES = 65;
 var UNCOMPRESSED_PUBLIC_KEY_PREFIX = "04";
 var EMPTY_HEX = "0x";
-function emptyAnchor() {
-  return Object.freeze({
-    kmsRootPubkey: EMPTY_HEX,
-    appIds: Object.freeze([])
-  });
-}
+var MAINNET_ANCHOR = Object.freeze({
+  kmsRootPubkey: "0x0434c76e0c3f52ec64cbf9bbf5c910c272330166fd656c0a86bb330963e46910e1a0e6fa51bec74be2f9129342707636060d85856d102cee8290185409ecf7422f",
+  appIds: Object.freeze([
+    "0x01bb1b6dcaf1ea170f1480c5e53b093f384d939a"
+  ])
+});
 var ENCLAVE_TRUST_ANCHORS = Object.freeze({
-  // filled at fleet provisioning; verify fails closed while empty
-  [VANA_MAINNET_CHAIN_ID]: emptyAnchor(),
+  [VANA_MAINNET_CHAIN_ID]: MAINNET_ANCHOR,
   // Moksha workers share this dstack app and KMS root; the controller does not derive owner keys.
   [MOKSHA_CHAIN_ID]: Object.freeze({
     kmsRootPubkey: "0x0434c76e0c3f52ec64cbf9bbf5c910c272330166fd656c0a86bb330963e46910e1a0e6fa51bec74be2f9129342707636060d85856d102cee8290185409ecf7422f",
@@ -32289,7 +32288,9 @@ import {
   bytesToHex as bytesToHex3,
   isAddress as isAddress2,
   isAddressEqual as isAddressEqual2,
-  isHex as isHex2
+  isHex as isHex3,
+  keccak256 as keccak2562,
+  toHex as toHex9
 } from "viem";
 import { privateKeyToAccount, publicKeyToAddress as publicKeyToAddress2 } from "viem/accounts";
 
@@ -33078,208 +33079,731 @@ import {
   JobTransportError,
   OwnerNotReadyError
 } from "./errors.js";
+import { PaymentRequiredError } from "./direct/errors.js";
 
-// src/protocol/write-signer.ts
-import { WriteRequestError } from "./errors.js";
-function isRecord(value) {
-  return value !== null && typeof value === "object";
-}
-function isViemWriteAccount(source) {
-  return isRecord(source) && source.type === "local" && typeof source.address === "string" && typeof source.signMessage === "function";
-}
-function isViemWriteWalletClient(source) {
-  return isRecord(source) && typeof source.signMessage === "function" && source.type !== "local" && (source.type === "walletClient" || "transport" in source);
-}
-function accountAddress(account) {
-  return typeof account === "string" ? account : account.address;
-}
-function resolveWriteSigner(source, options = {}) {
-  if (isViemWriteWalletClient(source)) {
-    const account = options.account ?? source.account;
-    if (account === void 0) {
-      throw new WriteRequestError(
-        "Viem wallet client requires an account option or account property"
-      );
+// src/config/contracts.config.ts
+var CONTRACTS2 = {
+  // ========================================
+  // DATA PORTABILITY CONTRACTS
+  // ========================================
+  DataPortabilityEscrow: {
+    addresses: {
+      14800: "0x07d7769081adc3a3DBe91f5E4B98E9A5a6B292e3",
+      1480: "0x07d7769081adc3a3DBe91f5E4B98E9A5a6B292e3"
     }
-    return {
-      address: accountAddress(account),
-      signMessage: (message) => source.signMessage({ account, message })
-    };
-  }
-  if (isViemWriteAccount(source)) {
-    return {
-      address: source.address,
-      signMessage: (message) => source.signMessage({ message })
-    };
-  }
-  if (!isRecord(source) || typeof source.signMessage !== "function") {
-    throw new WriteRequestError(
-      "signer must be a viem LocalAccount, a viem WalletClient, or a { signMessage } object"
-    );
-  }
-  return source;
-}
-
-// src/protocol/jobs-client.ts
-var IDENTITY_PATH = "/v1/identity";
-var JOBS_PATH = "/v1/jobs";
-var JOB_EXECUTE_PATH = "/v1/jobs/execute";
-var AUTHORIZATION_HEADER = "Authorization";
-var CONTENT_TYPE_HEADER = "Content-Type";
-var JSON_CONTENT_TYPE = "application/json";
-var GET_METHOD = "GET";
-var POST_METHOD = "POST";
-var RAW_READ_OPERATION = "raw_read";
-var SEALED_IDENTITY_STATE = "sealed";
-var HTTP_OK = 200;
-var HTTP_ACCEPTED = 202;
-var HTTP_UNAUTHORIZED = 401;
-var HTTP_FORBIDDEN = 403;
-var HTTP_NOT_FOUND = 404;
-var HTTP_CONFLICT = 409;
-var HTTP_PAYLOAD_TOO_LARGE = 413;
-var MILLISECONDS_PER_SECOND = 1e3;
-var DEFAULT_JOB_TIMEOUT_MS = 12e4;
-var DEFAULT_JOB_POLL_MS = CLAIM_POLL_FLOOR_MS;
-var TERMINAL_JOB_STATES = /* @__PURE__ */ new Set([
-  "completed",
-  "failed",
-  "expired",
-  "cancelled"
-]);
-function isRecord2(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function normalizeGateway(gatewayUrl) {
-  try {
-    const url = new URL(gatewayUrl);
-    if (url.pathname !== "/" || url.search !== "" || url.hash !== "") {
-      throw new JobRejectedError(
-        "gatewayUrl must be an origin without a path, query, or fragment"
-      );
+  },
+  FeeRegistry: {
+    addresses: {
+      14800: "0xb4FA18443E0FA6cdC0280D20b8cCDB2377D13Bf2",
+      1480: "0xb4FA18443E0FA6cdC0280D20b8cCDB2377D13Bf2"
     }
-    return {
-      baseUrl: url.origin,
-      audience: url.origin
-    };
-  } catch (error) {
-    if (error instanceof JobRejectedError) throw error;
-    throw new JobRejectedError(
-      "gatewayUrl must be an absolute URL",
-      void 0,
-      null,
-      {
-        cause: error instanceof Error ? error.message : String(error)
-      }
-    );
-  }
-}
-function resolveFetch(fetchFn) {
-  const resolved = fetchFn ?? globalThis.fetch;
-  if (resolved === void 0) {
-    throw new JobRejectedError("No fetch implementation available");
-  }
-  return resolved;
-}
-function sourcePublicKey(source) {
-  if (isRecord2(source) && typeof source["publicKey"] === "string") {
-    return source["publicKey"];
-  }
-  return void 0;
-}
-function resolveBuilder(options) {
-  if (options.builderPrivateKey && options.builderAccount) {
-    throw new JobRejectedError(
-      "Provide builderPrivateKey or builderAccount, not both"
-    );
-  }
-  let source;
-  try {
-    source = options.builderPrivateKey ? privateKeyToAccount(options.builderPrivateKey) : options.builderAccount;
-  } catch (error) {
-    throw new JobRejectedError("Invalid builder private key", void 0, null, {
-      cause: error instanceof Error ? error.message : String(error)
-    });
-  }
-  if (!source) {
-    throw new JobRejectedError(
-      "builderPrivateKey or builderAccount is required"
-    );
-  }
-  let signer;
-  try {
-    signer = resolveWriteSigner(source);
-  } catch (error) {
-    throw new JobRejectedError("Invalid builder signer", void 0, null, {
-      cause: error instanceof Error ? error.message : String(error)
-    });
-  }
-  const publicKey = sourcePublicKey(source);
-  if (!signer.address || !publicKey) {
-    throw new JobRejectedError(
-      "Builder signer must expose both address and publicKey"
-    );
-  }
-  return {
-    builder: {
-      address: signer.address,
-      publicKey,
-      signMessage: signer.signMessage
+  },
+  // V2 deployment (DataPortabilityPermissionsV2Proxy). The gateway is the source
+  // of truth for which deployment is live; verify with
+  // `cast call <address> "eip712Domain()(bytes1,string,string,uint256,address,bytes32,uint256[])"`
+  // which must return the domain name "Vana Data Portability".
+  DataPortabilityPermissions: {
+    addresses: {
+      14800: "0x4d3FA76064D88e0454cFc4CaD7e5FeC3e3124011",
+      1480: "0x4d3FA76064D88e0454cFc4CaD7e5FeC3e3124011"
+    }
+  },
+  // V2 deployment (DataPortabilityServersV2Proxy) on both chains.
+  DataPortabilityServers: {
+    addresses: {
+      14800: "0xCae2CE0e9caa6643ed28186cF57bd40Bd9E17Eab",
+      1480: "0xCae2CE0e9caa6643ed28186cF57bd40Bd9E17Eab"
+    }
+  },
+  DataPortabilityGrantees: {
+    addresses: {
+      14800: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234",
+      1480: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234"
+    }
+  },
+  DataRegistry: {
+    addresses: {
+      14800: "0x8C8788f98385F6ba1adD4234e551ABba0f82Cb7C",
+      1480: "0x8C8788f98385F6ba1adD4234e551ABba0f82Cb7C"
+    }
+  },
+  // ========================================
+  // COMPUTING INFRASTRUCTURE
+  // ========================================
+  ComputeEngine: {
+    addresses: {
+      14800: "0xb2BFe33FA420c45F1Cf1287542ad81ae935447bd",
+      1480: "0xb2BFe33FA420c45F1Cf1287542ad81ae935447bd"
+    }
+  },
+  ComputeEngineTreasury: {
+    addresses: {
+      14800: "0xceB33C501B624D984bD1Ed3298f6D1d8F7CE03d1",
+      1480: "0xceB33C501B624D984bD1Ed3298f6D1d8F7CE03d1"
     },
-    ...options.builderPrivateKey ? { privateKey: options.builderPrivateKey } : {}
-  };
-}
-function clampInteger(value, fallback, minimum, maximum, field) {
-  const resolved = value ?? fallback;
-  if (!Number.isFinite(resolved)) {
-    throw new JobRejectedError(`${field} must be a finite number`);
-  }
-  return Math.min(maximum, Math.max(minimum, Math.trunc(resolved)));
-}
-async function responseBody(response) {
-  try {
-    return await response.json();
-  } catch {
-    return null;
-  }
-}
-function gatewayErrorBody(body, fallback) {
-  if (!isRecord2(body)) return { code: null, message: fallback };
-  const code = typeof body["code"] === "string" ? body["code"] : null;
-  const message = typeof body["error"] === "string" ? body["error"] : typeof body["message"] === "string" ? body["message"] : fallback;
-  const reason = typeof body["reason"] === "string" ? body["reason"] : void 0;
-  const details = isRecord2(body["details"]) ? body["details"] : void 0;
-  return {
-    code,
-    message,
-    ...reason ? { reason } : {},
-    ...details ? { details } : {}
-  };
-}
-async function rejectedResponse(response, fallback) {
-  const parsed = gatewayErrorBody(await responseBody(response), fallback);
-  const details = response.status === HTTP_UNAUTHORIZED && parsed.reason ? { ...parsed.details, reason: parsed.reason } : parsed.details;
-  const message = response.status === HTTP_UNAUTHORIZED && parsed.reason ? `${parsed.message}: ${parsed.reason}` : parsed.message;
-  if (response.status === HTTP_FORBIDDEN) {
-    if (parsed.code === "BUILDER_UNKNOWN") {
-      return new BuilderUnknownError(parsed.message, details);
+    discovery: {
+      parent: "ComputeEngine",
+      getter: "computeEngineTreasury"
     }
-    if (parsed.code === "GRANT_INVALID") {
-      return new GrantInvalidError(parsed.message, details);
+  },
+  QueryEngine: {
+    addresses: {
+      14800: "0xd25Eb66EA2452cf3238A2eC6C1FD1B7F5B320490",
+      1480: "0xd25Eb66EA2452cf3238A2eC6C1FD1B7F5B320490"
     }
-    if (parsed.code === "OWNER_NOT_READY") {
-      return new OwnerNotReadyError(parsed.message, details);
+  },
+  VanaTreasury: {
+    addresses: {
+      14800: "0x8B32Ef32f22e72cc25D53f6E858f57cAe7E198f9",
+      1480: "0x8B32Ef32f22e72cc25D53f6E858f57cAe7E198f9"
+    },
+    discovery: {
+      parent: "QueryEngine",
+      getter: "queryEngineTreasury"
     }
-  }
-  if (response.status === HTTP_NOT_FOUND) {
-    return new JobNotFoundError(parsed.message, details);
-  }
-  if (response.status === HTTP_CONFLICT && parsed.code === "JOB_ID_TAKEN") {
-    return new JobIdTakenError(parsed.message, details);
-  }
-  if (response.status === HTTP_PAYLOAD_TOO_LARGE) {
-    return new JobRequestTooLargeError(parsed.message, parsed.code, details);
-  }
+  },
+  DataRefinerRegistry: {
+    addresses: {
+      14800: "0x93c3EF89369fDcf08Be159D9DeF0F18AB6Be008c",
+      1480: "0x93c3EF89369fDcf08Be159D9DeF0F18AB6Be008c"
+    }
+  },
+  ComputeInstructionRegistry: {
+    addresses: {
+      14800: "0x5786B12b4c6Ba2bFAF0e77Ed30Bf6d32805563A5",
+      1480: "0x5786B12b4c6Ba2bFAF0e77Ed30Bf6d32805563A5"
+    }
+  },
+  // ========================================
+  // TEE POOLS (Canonical Deployments)
+  // ========================================
+  TeePoolPhala: {
+    addresses: {
+      14800: "0xE8EC6BD73b23Ad40E6B9a6f4bD343FAc411bD99A",
+      1480: "0xE8EC6BD73b23Ad40E6B9a6f4bD343FAc411bD99A"
+    }
+  },
+  TeePoolEphemeralStandard: {
+    addresses: {
+      14800: "0xe124bae846D5ec157f75Bd9e68ca87C4d2AB835A",
+      1480: "0xe124bae846D5ec157f75Bd9e68ca87C4d2AB835A"
+    }
+  },
+  TeePoolPersistentStandard: {
+    addresses: {
+      14800: "0xe8bB8d0629651Cf33e0845d743976Dc1f0971d76",
+      1480: "0xe8bB8d0629651Cf33e0845d743976Dc1f0971d76"
+    }
+  },
+  TeePoolPersistentGpu: {
+    addresses: {
+      14800: "0x1c346Cd74f8551f8fa13f3F4b6b8dAE22338E6a9",
+      1480: "0x1c346Cd74f8551f8fa13f3F4b6b8dAE22338E6a9"
+    }
+  },
+  TeePoolDedicatedStandard: {
+    addresses: {
+      14800: "0xf024b7ac5E8417416f53B41ecfa58C8e9396687d",
+      1480: "0xf024b7ac5E8417416f53B41ecfa58C8e9396687d"
+    }
+  },
+  TeePoolDedicatedGpu: {
+    addresses: {
+      14800: "0xB1686FA9620bBf851714d1cB47b8a4Bf4664644E",
+      1480: "0xB1686FA9620bBf851714d1cB47b8a4Bf4664644E"
+    }
+  },
+  // ========================================
+  // VANA EPOCH / DLP REGISTRY
+  // ========================================
+  // Note: DLP rewards-specific contracts (DLPPerformance, DLPRewardDeployer,
+  // DLPRewardDeployerTreasury, DLPRewardSwap, SwapHelper) were removed in the
+  // protocol unification cleanup. VanaEpoch, DLPRegistry, and DLPRegistryTreasury
+  // are kept because they may be referenced beyond the rewards system.
+  VanaEpoch: {
+    addresses: {
+      14800: "0x2063cFF0609D59bCCc196E20Eb58A8696a6b15A0",
+      1480: "0x2063cFF0609D59bCCc196E20Eb58A8696a6b15A0"
+    }
+  },
+  DLPRegistry: {
+    addresses: {
+      14800: "0x4D59880a924526d1dD33260552Ff4328b1E18a43",
+      1480: "0x4D59880a924526d1dD33260552Ff4328b1E18a43"
+    }
+  },
+  DLPRegistryTreasury: {
+    addresses: {
+      14800: "0xb12ce1d27bEeFe39b6F0110b1AB77C21Aa0c9F9a",
+      1480: "0xb12ce1d27bEeFe39b6F0110b1AB77C21Aa0c9F9a"
+    },
+    discovery: {
+      parent: "DLPRegistry",
+      getter: "treasury"
+    }
+  },
+  // ========================================
+  // VANA POOL (STAKING)
+  // ========================================
+  VanaPoolStaking: {
+    addresses: {
+      14800: "0x641C18E2F286c86f96CE95C8ec1EB9fC0415Ca0e",
+      1480: "0x641C18E2F286c86f96CE95C8ec1EB9fC0415Ca0e"
+    }
+  },
+  VanaPoolTreasury: {
+    addresses: {
+      14800: "0x143BE72CF2541604A7691933CAccd6D9cC17c003",
+      1480: "0x143BE72CF2541604A7691933CAccd6D9cC17c003"
+    },
+    discovery: {
+      parent: "VanaPoolStaking",
+      getter: "vanaPoolTreasury"
+    }
+  },
+  VanaPoolEntity: {
+    addresses: {
+      14800: "0x44f20490A82e1f1F1cC25Dd3BA8647034eDdce30",
+      1480: "0x44f20490A82e1f1F1cC25Dd3BA8647034eDdce30"
+    },
+    discovery: {
+      parent: "VanaPoolStaking",
+      getter: "vanaPoolEntity"
+    }
+  },
+  // ========================================
+  // DLP DEPLOYMENT & TOKEN SYSTEM
+  // ========================================
+  DATFactory: {
+    addresses: {
+      14800: "0x40f8bccF35a75ecef63BC3B1B3E06ffEB9220644",
+      1480: "0x40f8bccF35a75ecef63BC3B1B3E06ffEB9220644"
+    }
+  },
+  DAT: {
+    addresses: {
+      14800: "0xA706b93ccED89f13340673889e29F0a5cd84212d",
+      1480: "0xA706b93ccED89f13340673889e29F0a5cd84212d"
+    }
+  },
+  DATPausable: {
+    addresses: {
+      14800: "0xe69FE86f0B95cC2f8416Fe22815c85DC8887e76e",
+      1480: "0xe69FE86f0B95cC2f8416Fe22815c85DC8887e76e"
+    }
+  },
+  DATVotes: {
+    addresses: {
+      14800: "0xaE04c8A77E9B27869eb563720524A9aE0baf1831",
+      1480: "0xaE04c8A77E9B27869eb563720524A9aE0baf1831"
+    }
+  },
+  // ========================================
+  // EXTERNAL DEPENDENCIES (DeFi)
+  // ========================================
+  WVANA: {
+    addresses: {
+      14800: "0xbccc4b4c6530F82FE309c5E845E50b5E9C89f2AD",
+      1480: "0x00EDdD9621Fb08436d0331c149D1690909a5906d"
+    }
+  },
+  UniswapV3NonfungiblePositionManager: {
+    addresses: {
+      14800: "0x48Bd633f4B9128a38Ebb4a48b6975EB3Eaf1931b",
+      1480: "0x45a2992e1bFdCF9b9AcE0a84A238f2E56F481816"
+    }
+  },
+  UniswapV3QuoterV2: {
+    addresses: {
+      14800: "0x3152246f3CD4dD465292Dd4Ffd792E2Cf602e332",
+      1480: "0x1b13728ea3C90863990aC0e05987CfeC1888908c"
+    }
+  },
+  // ========================================
+  // UTILITY CONTRACTS
+  // ========================================
+  Multicall3: {
+    addresses: {
+      14800: "0xD8d2dFca27E8797fd779F8547166A2d3B29d360E",
+      1480: "0xD8d2dFca27E8797fd779F8547166A2d3B29d360E"
+    }
+  },
+  Multisend: {
+    addresses: {
+      14800: "0x8807e8BCDFbaA8c2761760f3FBA37F6f7F2C5b2d",
+      1480: "0x8807e8BCDFbaA8c2761760f3FBA37F6f7F2C5b2d"
+    }
+  }
+};
+
+// src/protocol/escrow.ts
+import { isHex as isHex2 } from "viem";
+var GENERIC_PAYMENT_TYPES = {
+  GenericPayment: [
+    { name: "payerAddress", type: "address" },
+    { name: "opType", type: "string" },
+    { name: "opId", type: "bytes32" },
+    { name: "asset", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "paymentNonce", type: "uint256" }
+  ]
+};
+function genericPaymentDomain(chainId, escrowContract) {
+  return {
+    name: "Vana Data Portability",
+    version: "1",
+    chainId,
+    verifyingContract: escrowContract
+  };
+}
+var ESCROW_DEPOSIT_ABI = [
+  {
+    type: "function",
+    name: "depositNative",
+    stateMutability: "payable",
+    inputs: [{ name: "account", type: "address" }],
+    outputs: []
+  },
+  {
+    type: "function",
+    name: "depositToken",
+    stateMutability: "nonpayable",
+    inputs: [
+      { name: "account", type: "address" },
+      { name: "token", type: "address" },
+      { name: "amount", type: "uint256" }
+    ],
+    outputs: []
+  }
+];
+var NATIVE_ASSET_ADDRESS = "0x0000000000000000000000000000000000000000";
+var EscrowWithdrawalLifecycleError = class extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalLifecycleError";
+};
+var EscrowWithdrawalRejectionError = class extends Error {
+  constructor(httpStatus, result) {
+    super(result.error);
+    this.httpStatus = httpStatus;
+    this.result = result;
+  }
+  httpStatus;
+  result;
+  name = "EscrowWithdrawalRejectionError";
+};
+function createEscrowGatewayClient(baseUrl) {
+  const base = baseUrl.replace(/\/+$/, "");
+  async function throwOnError(res, context) {
+    if (!res.ok) {
+      let detail = "";
+      try {
+        const body = await res.json();
+        if (body.error) detail = `: ${body.error}`;
+      } catch {
+      }
+      throw new Error(
+        `Escrow gateway error (${context}): ${res.status} ${res.statusText}${detail}`
+      );
+    }
+  }
+  async function throwOnWithdrawError(res) {
+    if (res.ok) return;
+    let body;
+    try {
+      body = await res.json();
+    } catch {
+      throw new Error(
+        `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}`
+      );
+    }
+    if (isEscrowWithdrawalFailureResult(body)) {
+      throw new EscrowWithdrawalLifecycleError(res.status, body);
+    }
+    if (isEscrowWithdrawalRejectedResult(body)) {
+      throw new EscrowWithdrawalRejectionError(res.status, body);
+    }
+    const error = getGatewayErrorMessage(body);
+    throw new Error(
+      `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}${error ? `: ${error}` : ""}`
+    );
+  }
+  return {
+    async submitDeposit({ txHash }) {
+      const res = await fetch(`${base}/v1/escrow/deposit`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ txHash })
+      });
+      if (res.status !== 200 && res.status !== 202) {
+        await throwOnError(res, "POST /v1/escrow/deposit");
+      }
+      return res.json();
+    },
+    async getEscrowBalance(account) {
+      const res = await fetch(
+        `${base}/v1/escrow/balance?account=${encodeURIComponent(account)}`
+      );
+      await throwOnError(res, "GET /v1/escrow/balance");
+      return res.json();
+    },
+    async syncEscrowBalance(account) {
+      const res = await fetch(
+        `${base}/v1/escrow/balance/sync?account=${encodeURIComponent(account)}`,
+        { method: "POST" }
+      );
+      await throwOnError(res, "POST /v1/escrow/balance/sync");
+      return res.json();
+    },
+    async payForOp({
+      payerAddress,
+      opType,
+      opId,
+      asset,
+      amount,
+      paymentNonce,
+      signature,
+      accessRecord
+    }) {
+      const res = await fetch(`${base}/v1/escrow/pay`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Web3Signed ${signature}`
+        },
+        body: JSON.stringify({
+          payerAddress,
+          opType,
+          opId,
+          asset,
+          amount,
+          paymentNonce,
+          ...accessRecord ? { accessRecord } : {}
+        })
+      });
+      await throwOnError(res, "POST /v1/escrow/pay");
+      return res.json();
+    },
+    async withdraw({
+      account,
+      asset,
+      amount,
+      withdrawNonce,
+      deadline,
+      signature
+    }) {
+      const res = await fetch(`${base}/v1/escrow/withdraw`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Web3Signed ${signature}`
+        },
+        body: JSON.stringify({
+          account,
+          asset,
+          amount,
+          withdrawNonce,
+          deadline
+        })
+      });
+      await throwOnWithdrawError(res);
+      return res.json();
+    },
+    async getWithdrawNonce(account) {
+      const res = await fetch(
+        `${base}/v1/escrow/withdraw/nonce?account=${encodeURIComponent(account)}`,
+        { cache: "no-store" }
+      );
+      await throwOnError(res, "GET /v1/escrow/withdraw/nonce");
+      const body = await res.json();
+      if (!isWithdrawNonceResponse(body, account)) {
+        throw new Error(
+          "GET /v1/escrow/withdraw/nonce: invalid response structure"
+        );
+      }
+      return body;
+    }
+  };
+}
+function getGatewayErrorMessage(body) {
+  if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string") {
+    return body.error;
+  }
+  return void 0;
+}
+function isEscrowWithdrawalFailureResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && (value.status === "retryable" || value.status === "reorged" || value.status === "failed") && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && (isHash(value.txHash) || value.txHash === null) && (!("blockNumber" in value) || isBlockNumber(value.blockNumber));
+}
+function isEscrowWithdrawalRejectedResult(body) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  return value.success === false && value.status === "rejected" && isWithdrawalRejectionCode(value.code) && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && optionalUint256Decimal(value.balance) && optionalUint256Decimal(value.authorizedAmount) && optionalUint256Decimal(value.withdrawingAmount) && optionalUint256Decimal(value.availableAmount) && optionalUint256Decimal(value.requestedAmount) && optionalUint256Decimal(value.minimumAmount);
+}
+function isWithdrawalRejectionCode(value) {
+  return value === "below_minimum" || value === "deadline_too_far" || value === "expired" || value === "insufficient_available" || value === "stale_nonce";
+}
+function optionalUint256Decimal(value) {
+  return value === void 0 || isUint256Decimal(value);
+}
+function isAddressHex(value) {
+  return typeof value === "string" && isHex2(value, { strict: true }) && value.length === 42;
+}
+function isHash(value) {
+  return typeof value === "string" && isHex2(value, { strict: true }) && value.length === 66;
+}
+function isUint256Decimal(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 78) {
+    return false;
+  }
+  if (!/^(0|[1-9]\d*)$/.test(value)) return false;
+  return BigInt(value) <= 2n ** 256n - 1n;
+}
+function isBlockNumber(value) {
+  return value === null || isUint256Decimal(value);
+}
+function isWithdrawNonceResponse(body, requestedAccount) {
+  if (typeof body !== "object" || body === null) return false;
+  const value = body;
+  if (value.success !== true) return false;
+  if (!isAddressHex(value.account)) return false;
+  if (value.account.toLowerCase() !== requestedAccount.toLowerCase())
+    return false;
+  if (typeof value.chainId !== "string") return false;
+  if (!/^(0|[1-9]\d*)$/.test(value.chainId)) return false;
+  const isLastNull = value.lastWithdrawNonce === null;
+  const lastNonceValid = isLastNull || isUint256Decimal(value.lastWithdrawNonce);
+  if (!lastNonceValid) return false;
+  if (!isUint256Decimal(value.nextWithdrawNonce)) return false;
+  if (isLastNull) {
+    return value.nextWithdrawNonce === "1";
+  }
+  const lastNonce = BigInt(value.lastWithdrawNonce);
+  const nextNonce = BigInt(value.nextWithdrawNonce);
+  const expectedNextNonce = lastNonce + 1n;
+  if (expectedNextNonce > 2n ** 256n - 1n) return false;
+  return nextNonce === expectedNextNonce;
+}
+
+// src/protocol/write-signer.ts
+import { WriteRequestError } from "./errors.js";
+function isRecord(value) {
+  return value !== null && typeof value === "object";
+}
+function isViemWriteAccount(source) {
+  return isRecord(source) && source.type === "local" && typeof source.address === "string" && typeof source.signMessage === "function";
+}
+function isViemWriteWalletClient(source) {
+  return isRecord(source) && typeof source.signMessage === "function" && source.type !== "local" && (source.type === "walletClient" || "transport" in source);
+}
+function accountAddress(account) {
+  return typeof account === "string" ? account : account.address;
+}
+function resolveWriteSigner(source, options = {}) {
+  if (isViemWriteWalletClient(source)) {
+    const account = options.account ?? source.account;
+    if (account === void 0) {
+      throw new WriteRequestError(
+        "Viem wallet client requires an account option or account property"
+      );
+    }
+    return {
+      address: accountAddress(account),
+      signMessage: (message) => source.signMessage({ account, message })
+    };
+  }
+  if (isViemWriteAccount(source)) {
+    return {
+      address: source.address,
+      signMessage: (message) => source.signMessage({ message })
+    };
+  }
+  if (!isRecord(source) || typeof source.signMessage !== "function") {
+    throw new WriteRequestError(
+      "signer must be a viem LocalAccount, a viem WalletClient, or a { signMessage } object"
+    );
+  }
+  return source;
+}
+
+// src/protocol/jobs-client.ts
+var IDENTITY_PATH = "/v1/identity";
+var JOBS_PATH = "/v1/jobs";
+var JOB_QUOTE_PATH = "/v1/jobs/quote";
+var JOB_EXECUTE_PATH = "/v1/jobs/execute";
+var JOB_ACCESS_OP_TYPE = "job_access";
+var AUTHORIZATION_HEADER = "Authorization";
+var CONTENT_TYPE_HEADER = "Content-Type";
+var JSON_CONTENT_TYPE = "application/json";
+var GET_METHOD = "GET";
+var POST_METHOD = "POST";
+var RAW_READ_OPERATION = "raw_read";
+var SEALED_IDENTITY_STATE = "sealed";
+var HTTP_OK = 200;
+var HTTP_ACCEPTED = 202;
+var HTTP_UNAUTHORIZED = 401;
+var HTTP_FORBIDDEN = 403;
+var HTTP_NOT_FOUND = 404;
+var HTTP_CONFLICT = 409;
+var HTTP_PAYMENT_REQUIRED = 402;
+var HTTP_PAYLOAD_TOO_LARGE = 413;
+var NONCE_TIMESTAMP_SHIFT = 32n;
+var UINT256_DECIMAL = /^(0|[1-9]\d*)$/;
+var POSITIVE_UINT256_DECIMAL = /^[1-9]\d*$/;
+var MILLISECONDS_PER_SECOND = 1e3;
+var DEFAULT_JOB_TIMEOUT_MS = 12e4;
+var DEFAULT_JOB_POLL_MS = CLAIM_POLL_FLOOR_MS;
+var TERMINAL_JOB_STATES = /* @__PURE__ */ new Set([
+  "completed",
+  "failed",
+  "expired",
+  "cancelled"
+]);
+function isRecord2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeGateway(gatewayUrl) {
+  try {
+    const url = new URL(gatewayUrl);
+    if (url.pathname !== "/" || url.search !== "" || url.hash !== "") {
+      throw new JobRejectedError(
+        "gatewayUrl must be an origin without a path, query, or fragment"
+      );
+    }
+    return {
+      baseUrl: url.origin,
+      audience: url.origin
+    };
+  } catch (error) {
+    if (error instanceof JobRejectedError) throw error;
+    throw new JobRejectedError(
+      "gatewayUrl must be an absolute URL",
+      void 0,
+      null,
+      {
+        cause: error instanceof Error ? error.message : String(error)
+      }
+    );
+  }
+}
+function resolveFetch(fetchFn) {
+  const resolved = fetchFn ?? globalThis.fetch;
+  if (resolved === void 0) {
+    throw new JobRejectedError("No fetch implementation available");
+  }
+  return resolved;
+}
+function sourcePublicKey(source) {
+  if (isRecord2(source) && typeof source["publicKey"] === "string") {
+    return source["publicKey"];
+  }
+  return void 0;
+}
+function resolveBuilder(options) {
+  if (options.builderPrivateKey && options.builderAccount) {
+    throw new JobRejectedError(
+      "Provide builderPrivateKey or builderAccount, not both"
+    );
+  }
+  let source;
+  try {
+    source = options.builderPrivateKey ? privateKeyToAccount(options.builderPrivateKey) : options.builderAccount;
+  } catch (error) {
+    throw new JobRejectedError("Invalid builder private key", void 0, null, {
+      cause: error instanceof Error ? error.message : String(error)
+    });
+  }
+  if (!source) {
+    throw new JobRejectedError(
+      "builderPrivateKey or builderAccount is required"
+    );
+  }
+  let signer;
+  try {
+    signer = resolveWriteSigner(source);
+  } catch (error) {
+    throw new JobRejectedError("Invalid builder signer", void 0, null, {
+      cause: error instanceof Error ? error.message : String(error)
+    });
+  }
+  const publicKey = sourcePublicKey(source);
+  if (!signer.address || !publicKey) {
+    throw new JobRejectedError(
+      "Builder signer must expose both address and publicKey"
+    );
+  }
+  const typedDataSigner = source.signTypedData;
+  return {
+    builder: {
+      address: signer.address,
+      publicKey,
+      signMessage: signer.signMessage,
+      ...typedDataSigner ? {
+        signTypedData: typedDataSigner.bind(
+          source
+        )
+      } : {}
+    },
+    ...options.builderPrivateKey ? { privateKey: options.builderPrivateKey } : {}
+  };
+}
+function clampInteger(value, fallback, minimum, maximum, field) {
+  const resolved = value ?? fallback;
+  if (!Number.isFinite(resolved)) {
+    throw new JobRejectedError(`${field} must be a finite number`);
+  }
+  return Math.min(maximum, Math.max(minimum, Math.trunc(resolved)));
+}
+async function responseBody(response) {
+  try {
+    return await response.json();
+  } catch {
+    return null;
+  }
+}
+function gatewayErrorBody(body, fallback) {
+  if (!isRecord2(body)) return { code: null, message: fallback };
+  const code = typeof body["code"] === "string" ? body["code"] : null;
+  const message = typeof body["error"] === "string" ? body["error"] : typeof body["message"] === "string" ? body["message"] : fallback;
+  const reason = typeof body["reason"] === "string" ? body["reason"] : void 0;
+  const details = isRecord2(body["details"]) ? body["details"] : void 0;
+  return {
+    code,
+    message,
+    ...reason ? { reason } : {},
+    ...details ? { details } : {}
+  };
+}
+async function rejectedResponse(response, fallback) {
+  const parsed = gatewayErrorBody(await responseBody(response), fallback);
+  const details = response.status === HTTP_UNAUTHORIZED && parsed.reason ? { ...parsed.details, reason: parsed.reason } : parsed.details;
+  const message = response.status === HTTP_UNAUTHORIZED && parsed.reason ? `${parsed.message}: ${parsed.reason}` : parsed.message;
+  if (response.status === HTTP_FORBIDDEN) {
+    if (parsed.code === "BUILDER_UNKNOWN") {
+      return new BuilderUnknownError(parsed.message, details);
+    }
+    if (parsed.code === "GRANT_INVALID") {
+      return new GrantInvalidError(parsed.message, details);
+    }
+    if (parsed.code === "OWNER_NOT_READY") {
+      return new OwnerNotReadyError(parsed.message, details);
+    }
+  }
+  if (response.status === HTTP_NOT_FOUND) {
+    return new JobNotFoundError(parsed.message, details);
+  }
+  if (response.status === HTTP_CONFLICT && parsed.code === "JOB_ID_TAKEN") {
+    return new JobIdTakenError(parsed.message, details);
+  }
+  if (response.status === HTTP_PAYLOAD_TOO_LARGE) {
+    return new JobRequestTooLargeError(parsed.message, parsed.code, details);
+  }
   return new JobRejectedError(message, response.status, parsed.code, details);
 }
 function requireStatus(value, status) {
@@ -33308,7 +33832,7 @@ function isResultHandle(value) {
 function hasMatchingIdentityKey(value) {
   const address = value["address"];
   const publicKey = value["publicKey"];
-  if (typeof address !== "string" || !isAddress2(address) || typeof publicKey !== "string" || !isHex2(publicKey)) {
+  if (typeof address !== "string" || !isAddress2(address) || typeof publicKey !== "string" || !isHex3(publicKey)) {
     return false;
   }
   try {
@@ -33321,7 +33845,7 @@ function hasExpectedIdentity(value, owner, chainId) {
   const identityOwner = value["ownerAddress"];
   const identityChainId = value["chainId"];
   const identityUserPsId = value["userPsId"];
-  if (!hasMatchingIdentityKey(value) || typeof identityOwner !== "string" || !isAddress2(identityOwner) || typeof identityChainId !== "number" || typeof identityUserPsId !== "string" || !isHex2(identityUserPsId)) {
+  if (!hasMatchingIdentityKey(value) || typeof identityOwner !== "string" || !isAddress2(identityOwner) || typeof identityChainId !== "number" || typeof identityUserPsId !== "string" || !isHex3(identityUserPsId)) {
     return false;
   }
   return isAddressEqual2(identityOwner, owner) && identityChainId === chainId && identityUserPsId.toLowerCase() === userPsId(chainId, owner).toLowerCase();
@@ -33329,6 +33853,51 @@ function hasExpectedIdentity(value, owner, chainId) {
 function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function resolveEscrowContract(options) {
+  if (options.escrowContract) return options.escrowContract;
+  const addresses = CONTRACTS2["DataPortabilityEscrow"]?.addresses;
+  const address = addresses?.[options.chainId];
+  if (!address || !isAddress2(address)) {
+    throw new JobRejectedError(
+      `No DataPortabilityEscrow address for chain ${options.chainId}; pass escrowContract`
+    );
+  }
+  return address;
+}
+function nextPaymentNonce() {
+  const random = new Uint32Array(1);
+  globalThis.crypto.getRandomValues(random);
+  return (BigInt(Date.now()) << NONCE_TIMESTAMP_SHIFT) + BigInt(random[0] ?? 0);
+}
+function parseJobQuote(body) {
+  if (!isRecord2(body)) return null;
+  const { chainId, price, asset, payable, enforced } = body;
+  if (typeof chainId !== "number" || !Number.isSafeInteger(chainId))
+    return null;
+  if (typeof price !== "string" || !UINT256_DECIMAL.test(price)) return null;
+  if (typeof asset !== "string" || !isAddress2(asset)) return null;
+  if (typeof payable !== "boolean" || typeof enforced !== "boolean")
+    return null;
+  return { chainId, price, asset, payable, enforced };
+}
+async function paymentQuote(response) {
+  const body = await responseBody(response);
+  const asset = isRecord2(body) ? body["asset"] : void 0;
+  const amount = isRecord2(body) ? body["amount"] : void 0;
+  if (typeof asset !== "string" || !isAddress2(asset) || typeof amount !== "string" || !POSITIVE_UINT256_DECIMAL.test(amount)) {
+    throw new JobRejectedError(
+      "Gateway asked for payment without a usable quote",
+      response.status
+    );
+  }
+  return { asset, amount };
+}
+async function paymentRefusal(response) {
+  const body = await responseBody(response);
+  const parsed = isRecord2(body) ? body : {};
+  const message = typeof parsed["error"] === "string" ? parsed["error"] : "This read requires payment the builder escrow cannot back";
+  return { message, details: parsed };
+}
 function requireFiniteDuration(value, field) {
   if (!Number.isFinite(value)) {
     throw new JobRejectedError(`${field} must be a finite number`);
@@ -33341,6 +33910,73 @@ function createJobsClient(options) {
   const { builder, privateKey } = resolveBuilder(options);
   const ecies = options.ecies ?? new NodeECIESUint8Provider();
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  async function signQuote(jobId, quote) {
+    if (!builder.signTypedData) {
+      throw new JobRejectedError(
+        "This read is charged, but the builder signer cannot sign typed data"
+      );
+    }
+    const paymentNonce = nextPaymentNonce();
+    const signature = await builder.signTypedData({
+      domain: genericPaymentDomain(
+        options.chainId,
+        resolveEscrowContract(options)
+      ),
+      types: GENERIC_PAYMENT_TYPES,
+      primaryType: "GenericPayment",
+      message: {
+        payerAddress: builder.address,
+        opType: JOB_ACCESS_OP_TYPE,
+        opId: keccak2562(toHex9(jobId.toLowerCase())),
+        asset: quote.asset,
+        amount: BigInt(quote.amount),
+        paymentNonce
+      }
+    });
+    return {
+      signature,
+      amount: quote.amount,
+      asset: quote.asset,
+      paymentNonce: paymentNonce.toString()
+    };
+  }
+  async function postSubmission(submission, wait) {
+    const identifiers = {
+      jobId: submission.jobId,
+      idempotencyKey: submission.idempotencyKey
+    };
+    const bodyBytes = new TextEncoder().encode(JSON.stringify(submission));
+    const authorization = await buildWeb3SignedHeader({
+      signMessage: builder.signMessage,
+      aud: audience,
+      method: POST_METHOD,
+      uri: JOBS_PATH,
+      body: bodyBytes,
+      nonce: randomUUID()
+    });
+    try {
+      return await request(
+        `${baseUrl}${JOBS_PATH}?wait=${wait}`,
+        {
+          method: POST_METHOD,
+          headers: {
+            [AUTHORIZATION_HEADER]: authorization,
+            [CONTENT_TYPE_HEADER]: JSON_CONTENT_TYPE
+          },
+          body: bodyBytes
+        },
+        "Job submission"
+      );
+    } catch (error) {
+      if (error instanceof JobTransportError) {
+        throw new JobTransportError(error.message, error.cause, {
+          ...error.details,
+          ...identifiers
+        });
+      }
+      throw error;
+    }
+  }
   async function request(url, init, description) {
     try {
       return await fetchFn(url, init);
@@ -33396,7 +34032,8 @@ function createJobsClient(options) {
         "deadlineSeconds"
       );
       const wait = clampInteger(params.wait, 0, 0, MAX_WAIT_SECONDS, "wait");
-      const jobId = randomUUID();
+      const jobId = params.jobId ?? randomUUID();
+      const idempotencyKey = params.idempotencyKey ?? randomUUID();
       const nowMs = now().getTime();
       if (!Number.isFinite(nowMs)) {
         throw new JobRejectedError("now must return a valid Date");
@@ -33434,32 +34071,41 @@ function createJobsClient(options) {
         grantId: requestBody.grantId,
         scope: requestBody.scope,
         operation: requestBody.operation,
-        idempotencyKey: randomUUID(),
+        idempotencyKey,
         jobId,
         deadline,
-        requestCiphertext
+        requestCiphertext,
+        ...params.maxPrice === void 0 ? {} : { maxPrice: params.maxPrice }
       };
-      const bodyBytes = new TextEncoder().encode(JSON.stringify(submission));
-      const authorization = await buildWeb3SignedHeader({
-        signMessage: builder.signMessage,
-        aud: audience,
-        method: POST_METHOD,
-        uri: JOBS_PATH,
-        body: bodyBytes,
-        nonce: randomUUID()
-      });
-      const response = await request(
-        `${baseUrl}${JOBS_PATH}?wait=${wait}`,
-        {
-          method: POST_METHOD,
-          headers: {
-            [AUTHORIZATION_HEADER]: authorization,
-            [CONTENT_TYPE_HEADER]: JSON_CONTENT_TYPE
-          },
-          body: bodyBytes
-        },
-        "Job submission"
-      );
+      let response = await postSubmission(submission, wait);
+      if (response.status === HTTP_PAYMENT_REQUIRED) {
+        const quote = await paymentQuote(response);
+        if (params.maxPrice !== void 0 && BigInt(quote.amount) > BigInt(params.maxPrice)) {
+          throw new PaymentRequiredError(
+            "The quoted price is above the maxPrice you set for this read",
+            {
+              jobId,
+              scope: params.scope,
+              grantId: params.grantId,
+              asset: quote.asset,
+              amount: quote.amount,
+              maxPrice: params.maxPrice
+            }
+          );
+        }
+        submission.payment = await signQuote(jobId, quote);
+        submission.priceAsset = quote.asset;
+        response = await postSubmission(submission, wait);
+        if (response.status === HTTP_PAYMENT_REQUIRED) {
+          const refusal = await paymentRefusal(response);
+          throw new PaymentRequiredError(refusal.message, {
+            jobId,
+            scope: params.scope,
+            grantId: params.grantId,
+            ...refusal.details
+          });
+        }
+      }
       if (!response.ok) {
         throw await rejectedResponse(response, "Job submission rejected");
       }
@@ -33482,6 +34128,40 @@ function createJobsClient(options) {
         response.status
       );
     },
+    async quoteJob() {
+      const authorization = await buildWeb3SignedHeader({
+        signMessage: builder.signMessage,
+        aud: audience,
+        method: GET_METHOD,
+        uri: JOB_QUOTE_PATH,
+        nonce: randomUUID()
+      });
+      const response = await request(
+        `${baseUrl}${JOB_QUOTE_PATH}`,
+        {
+          method: GET_METHOD,
+          headers: { [AUTHORIZATION_HEADER]: authorization }
+        },
+        "Job quote"
+      );
+      if (!response.ok) {
+        throw await rejectedResponse(response, "Job quote rejected");
+      }
+      const quote = parseJobQuote(await responseBody(response));
+      if (!quote) {
+        throw new JobRejectedError(
+          "Gateway returned an undocumented job quote",
+          response.status
+        );
+      }
+      if (quote.chainId !== options.chainId) {
+        throw new JobRejectedError(
+          `Gateway quoted chain ${quote.chainId}, not the configured ${options.chainId}`,
+          response.status
+        );
+      }
+      return quote;
+    },
     async getJob(jobId) {
       const path = `${JOBS_PATH}/${encodeURIComponent(jobId)}`;
       const authorization = await buildWeb3SignedHeader({
@@ -34235,7 +34915,7 @@ async function getOpFee(client, config, opType, opts) {
 
 // src/protocol/escrow-deposit.ts
 import { encodeFunctionData } from "viem";
-var ESCROW_DEPOSIT_ABI = [
+var ESCROW_DEPOSIT_ABI2 = [
   {
     type: "function",
     name: "depositNative",
@@ -34260,14 +34940,14 @@ function escrowContractAddress(config) {
 }
 function encodeDepositNativeData(input) {
   return encodeFunctionData({
-    abi: ESCROW_DEPOSIT_ABI,
+    abi: ESCROW_DEPOSIT_ABI2,
     functionName: "depositNative",
     args: [input.account]
   });
 }
 function encodeDepositTokenData(input) {
   return encodeFunctionData({
-    abi: ESCROW_DEPOSIT_ABI,
+    abi: ESCROW_DEPOSIT_ABI2,
     functionName: "depositToken",
     args: [input.account, input.token, input.amount]
   });
@@ -34333,7 +35013,7 @@ function buildMarkDataPointUnavailableRequest(config, input) {
 // src/protocol/data-point-deletion.ts
 import {
   isAddress as isAddress7,
-  keccak256 as keccak2563,
+  keccak256 as keccak2564,
   maxUint256,
   stringToBytes as stringToBytes3
 } from "viem";
@@ -34343,7 +35023,7 @@ import { DataPointDeletedError, DataPointNotFoundError } from "./errors.js";
 import {
   encodeAbiParameters,
   isAddress as isAddress6,
-  keccak256 as keccak2562
+  keccak256 as keccak2563
 } from "viem";
 import { z } from "zod";
 import { LineageReadError, WriteRequestError as WriteRequestError2 } from "./errors.js";
@@ -34388,7 +35068,7 @@ function deriveDataPointId(ownerAddress, scope) {
       `ownerAddress is not an EVM address: ${String(ownerAddress)}`
     );
   }
-  return keccak2562(
+  return keccak2563(
     encodeAbiParameters(
       [
         { name: "ownerAddress", type: "address" },
@@ -34615,7 +35295,7 @@ var TOMBSTONE_METADATA_HASH_PREIMAGE = "vana.data-point.tombstone.metadata.v1";
 var TOMBSTONE_DATA_HASH = "0x30c45ee72fe56d1927701316925ab7ceacd3b6f9267061735d59396f075c6222";
 var TOMBSTONE_METADATA_HASH = "0xc5255a141acd6a2ae55971b62c0a85977c2511989dc114ad2abc2b7644f57d90";
 function computeTombstoneHash(preimage) {
-  return keccak2563(stringToBytes3(preimage));
+  return keccak2564(stringToBytes3(preimage));
 }
 function isTombstoneHashes(dataHash, metadataHash) {
   return typeof dataHash === "string" && typeof metadataHash === "string" && dataHash.toLowerCase() === TOMBSTONE_DATA_HASH && metadataHash.toLowerCase() === TOMBSTONE_METADATA_HASH;
@@ -36707,261 +37387,6 @@ function createGatewayClient(baseUrl) {
   };
 }
 
-// src/protocol/escrow.ts
-import { isHex as isHex3 } from "viem";
-var GENERIC_PAYMENT_TYPES = {
-  GenericPayment: [
-    { name: "payerAddress", type: "address" },
-    { name: "opType", type: "string" },
-    { name: "opId", type: "bytes32" },
-    { name: "asset", type: "address" },
-    { name: "amount", type: "uint256" },
-    { name: "paymentNonce", type: "uint256" }
-  ]
-};
-function genericPaymentDomain(chainId, escrowContract) {
-  return {
-    name: "Vana Data Portability",
-    version: "1",
-    chainId,
-    verifyingContract: escrowContract
-  };
-}
-var ESCROW_DEPOSIT_ABI2 = [
-  {
-    type: "function",
-    name: "depositNative",
-    stateMutability: "payable",
-    inputs: [{ name: "account", type: "address" }],
-    outputs: []
-  },
-  {
-    type: "function",
-    name: "depositToken",
-    stateMutability: "nonpayable",
-    inputs: [
-      { name: "account", type: "address" },
-      { name: "token", type: "address" },
-      { name: "amount", type: "uint256" }
-    ],
-    outputs: []
-  }
-];
-var NATIVE_ASSET_ADDRESS = "0x0000000000000000000000000000000000000000";
-var EscrowWithdrawalLifecycleError = class extends Error {
-  constructor(httpStatus, result) {
-    super(result.error);
-    this.httpStatus = httpStatus;
-    this.result = result;
-  }
-  httpStatus;
-  result;
-  name = "EscrowWithdrawalLifecycleError";
-};
-var EscrowWithdrawalRejectionError = class extends Error {
-  constructor(httpStatus, result) {
-    super(result.error);
-    this.httpStatus = httpStatus;
-    this.result = result;
-  }
-  httpStatus;
-  result;
-  name = "EscrowWithdrawalRejectionError";
-};
-function createEscrowGatewayClient(baseUrl) {
-  const base = baseUrl.replace(/\/+$/, "");
-  async function throwOnError(res, context) {
-    if (!res.ok) {
-      let detail = "";
-      try {
-        const body = await res.json();
-        if (body.error) detail = `: ${body.error}`;
-      } catch {
-      }
-      throw new Error(
-        `Escrow gateway error (${context}): ${res.status} ${res.statusText}${detail}`
-      );
-    }
-  }
-  async function throwOnWithdrawError(res) {
-    if (res.ok) return;
-    let body;
-    try {
-      body = await res.json();
-    } catch {
-      throw new Error(
-        `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}`
-      );
-    }
-    if (isEscrowWithdrawalFailureResult(body)) {
-      throw new EscrowWithdrawalLifecycleError(res.status, body);
-    }
-    if (isEscrowWithdrawalRejectedResult(body)) {
-      throw new EscrowWithdrawalRejectionError(res.status, body);
-    }
-    const error = getGatewayErrorMessage(body);
-    throw new Error(
-      `Escrow gateway error (POST /v1/escrow/withdraw): ${res.status} ${res.statusText}${error ? `: ${error}` : ""}`
-    );
-  }
-  return {
-    async submitDeposit({ txHash }) {
-      const res = await fetch(`${base}/v1/escrow/deposit`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ txHash })
-      });
-      if (res.status !== 200 && res.status !== 202) {
-        await throwOnError(res, "POST /v1/escrow/deposit");
-      }
-      return res.json();
-    },
-    async getEscrowBalance(account) {
-      const res = await fetch(
-        `${base}/v1/escrow/balance?account=${encodeURIComponent(account)}`
-      );
-      await throwOnError(res, "GET /v1/escrow/balance");
-      return res.json();
-    },
-    async syncEscrowBalance(account) {
-      const res = await fetch(
-        `${base}/v1/escrow/balance/sync?account=${encodeURIComponent(account)}`,
-        { method: "POST" }
-      );
-      await throwOnError(res, "POST /v1/escrow/balance/sync");
-      return res.json();
-    },
-    async payForOp({
-      payerAddress,
-      opType,
-      opId,
-      asset,
-      amount,
-      paymentNonce,
-      signature,
-      accessRecord
-    }) {
-      const res = await fetch(`${base}/v1/escrow/pay`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Web3Signed ${signature}`
-        },
-        body: JSON.stringify({
-          payerAddress,
-          opType,
-          opId,
-          asset,
-          amount,
-          paymentNonce,
-          ...accessRecord ? { accessRecord } : {}
-        })
-      });
-      await throwOnError(res, "POST /v1/escrow/pay");
-      return res.json();
-    },
-    async withdraw({
-      account,
-      asset,
-      amount,
-      withdrawNonce,
-      deadline,
-      signature
-    }) {
-      const res = await fetch(`${base}/v1/escrow/withdraw`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Web3Signed ${signature}`
-        },
-        body: JSON.stringify({
-          account,
-          asset,
-          amount,
-          withdrawNonce,
-          deadline
-        })
-      });
-      await throwOnWithdrawError(res);
-      return res.json();
-    },
-    async getWithdrawNonce(account) {
-      const res = await fetch(
-        `${base}/v1/escrow/withdraw/nonce?account=${encodeURIComponent(account)}`,
-        { cache: "no-store" }
-      );
-      await throwOnError(res, "GET /v1/escrow/withdraw/nonce");
-      const body = await res.json();
-      if (!isWithdrawNonceResponse(body, account)) {
-        throw new Error(
-          "GET /v1/escrow/withdraw/nonce: invalid response structure"
-        );
-      }
-      return body;
-    }
-  };
-}
-function getGatewayErrorMessage(body) {
-  if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string") {
-    return body.error;
-  }
-  return void 0;
-}
-function isEscrowWithdrawalFailureResult(body) {
-  if (typeof body !== "object" || body === null) return false;
-  const value = body;
-  return value.success === false && (value.status === "retryable" || value.status === "reorged" || value.status === "failed") && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && (isHash(value.txHash) || value.txHash === null) && (!("blockNumber" in value) || isBlockNumber(value.blockNumber));
-}
-function isEscrowWithdrawalRejectedResult(body) {
-  if (typeof body !== "object" || body === null) return false;
-  const value = body;
-  return value.success === false && value.status === "rejected" && isWithdrawalRejectionCode(value.code) && typeof value.error === "string" && isAddressHex(value.account) && isAddressHex(value.asset) && isUint256Decimal(value.amount) && isUint256Decimal(value.withdrawNonce) && isUint256Decimal(value.deadline) && optionalUint256Decimal(value.balance) && optionalUint256Decimal(value.authorizedAmount) && optionalUint256Decimal(value.withdrawingAmount) && optionalUint256Decimal(value.availableAmount) && optionalUint256Decimal(value.requestedAmount) && optionalUint256Decimal(value.minimumAmount);
-}
-function isWithdrawalRejectionCode(value) {
-  return value === "below_minimum" || value === "deadline_too_far" || value === "expired" || value === "insufficient_available" || value === "stale_nonce";
-}
-function optionalUint256Decimal(value) {
-  return value === void 0 || isUint256Decimal(value);
-}
-function isAddressHex(value) {
-  return typeof value === "string" && isHex3(value, { strict: true }) && value.length === 42;
-}
-function isHash(value) {
-  return typeof value === "string" && isHex3(value, { strict: true }) && value.length === 66;
-}
-function isUint256Decimal(value) {
-  if (typeof value !== "string" || value.length === 0 || value.length > 78) {
-    return false;
-  }
-  if (!/^(0|[1-9]\d*)$/.test(value)) return false;
-  return BigInt(value) <= 2n ** 256n - 1n;
-}
-function isBlockNumber(value) {
-  return value === null || isUint256Decimal(value);
-}
-function isWithdrawNonceResponse(body, requestedAccount) {
-  if (typeof body !== "object" || body === null) return false;
-  const value = body;
-  if (value.success !== true) return false;
-  if (!isAddressHex(value.account)) return false;
-  if (value.account.toLowerCase() !== requestedAccount.toLowerCase())
-    return false;
-  if (typeof value.chainId !== "string") return false;
-  if (!/^(0|[1-9]\d*)$/.test(value.chainId)) return false;
-  const isLastNull = value.lastWithdrawNonce === null;
-  const lastNonceValid = isLastNull || isUint256Decimal(value.lastWithdrawNonce);
-  if (!lastNonceValid) return false;
-  if (!isUint256Decimal(value.nextWithdrawNonce)) return false;
-  if (isLastNull) {
-    return value.nextWithdrawNonce === "1";
-  }
-  const lastNonce = BigInt(value.lastWithdrawNonce);
-  const nextNonce = BigInt(value.nextWithdrawNonce);
-  const expectedNextNonce = lastNonce + 1n;
-  if (expectedNextNonce > 2n ** 256n - 1n) return false;
-  return nextNonce === expectedNextNonce;
-}
-
 // src/direct/escrow-payment.ts
 var GRANT_OP_TYPE = "grant";
 var DATA_ACCESS_OP_TYPE = "data_access";
@@ -37198,7 +37623,7 @@ async function authorizeEscrowPayment(params) {
 }
 
 // src/direct/personal-server-read.ts
-import { PaymentRequiredError, PersonalServerReadError } from "./direct/errors.js";
+import { PaymentRequiredError as PaymentRequiredError2, PersonalServerReadError } from "./direct/errors.js";
 import { DataPointDeletedError as DataPointDeletedError4 } from "./errors.js";
 function asRecord2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
@@ -37515,7 +37940,7 @@ export {
   ENCLAVE_IDENTITY_EVIDENCE_VERSION,
   ENCLAVE_TRUST_ANCHORS,
   ENCLAVE_WALLET_PURPOSE,
-  ESCROW_DEPOSIT_ABI2 as ESCROW_DEPOSIT_ABI,
+  ESCROW_DEPOSIT_ABI,
   EscrowWithdrawalLifecycleError,
   EscrowWithdrawalRejectionError,
   ExpiredTokenError2 as ExpiredTokenError,