@strimz/sdk 0.1.1 → 0.2.0

package/dist/eip712.cjs

@@ -62,9 +62,79 @@ function buildPermitTypedData(params) {
   };
 }
 
+// src/eip712/pay-intent.ts
+var PAY_INTENT_TYPES = {
+  PayIntent: [
+    { name: "merchantId", type: "uint256" },
+    { name: "token", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "nonce", type: "bytes32" },
+    { name: "validBefore", type: "uint256" },
+    { name: "ref", type: "bytes32" }
+  ]
+};
+function buildPayIntentTypedData(params) {
+  return {
+    domain: {
+      name: "StrimzPayments",
+      version: "1",
+      chainId: params.chainId,
+      verifyingContract: params.verifyingContract
+    },
+    types: PAY_INTENT_TYPES,
+    primaryType: "PayIntent",
+    message: {
+      merchantId: params.merchantId,
+      token: params.token,
+      amount: params.amount,
+      nonce: params.nonce,
+      validBefore: params.validBefore,
+      ref: params.ref
+    }
+  };
+}
+
+// src/eip712/subscription-intent.ts
+var SUBSCRIPTION_INTENT_TYPES = {
+  SubscriptionIntent: [
+    { name: "merchantId", type: "uint256" },
+    { name: "token", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "interval", type: "uint32" },
+    { name: "startAt", type: "uint64" },
+    { name: "endAt", type: "uint64" },
+    { name: "permitDeadline", type: "uint256" }
+  ]
+};
+function buildSubscriptionIntentTypedData(params) {
+  return {
+    domain: {
+      name: "StrimzSubscriptions",
+      version: "1",
+      chainId: params.chainId,
+      verifyingContract: params.verifyingContract
+    },
+    types: SUBSCRIPTION_INTENT_TYPES,
+    primaryType: "SubscriptionIntent",
+    message: {
+      merchantId: params.merchantId,
+      token: params.token,
+      amount: params.amount,
+      interval: params.interval,
+      startAt: params.startAt,
+      endAt: params.endAt,
+      permitDeadline: params.permitDeadline
+    }
+  };
+}
+
+exports.PAY_INTENT_TYPES = PAY_INTENT_TYPES;
 exports.PERMIT_TYPES = PERMIT_TYPES;
 exports.RECEIVE_WITH_AUTHORIZATION_TYPES = RECEIVE_WITH_AUTHORIZATION_TYPES;
+exports.SUBSCRIPTION_INTENT_TYPES = SUBSCRIPTION_INTENT_TYPES;
+exports.buildPayIntentTypedData = buildPayIntentTypedData;
 exports.buildPermitTypedData = buildPermitTypedData;
 exports.buildReceiveWithAuthorizationTypedData = buildReceiveWithAuthorizationTypedData;
+exports.buildSubscriptionIntentTypedData = buildSubscriptionIntentTypedData;
 //# sourceMappingURL=eip712.cjs.map
 //# sourceMappingURL=eip712.cjs.map

package/dist/eip712.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/eip712/receive-with-authorization.ts","../src/eip712/permit.ts"],"names":[],"mappings":";;;AA8CO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,wBAAA,EAA0B;AAAA,IACxB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC;AAWO,SAAS,uCACd,MAAA,EAC6C;AAC7C,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAChB,GACF;AACF;;;AC/CO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA;AAAU;AAExC;AAOO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,YAAA;AAAA,IACP,WAAA,EAAa,QAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAU,MAAA,CAAO;AAAA;AACnB,GACF;AACF","file":"eip712.cjs","sourcesContent":["import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-3009 ReceiveWithAuthorization typed-data.\n *\n *  - `chainId` is the EVM chain id (Arc Testnet = 5042002).\n *  - `token` is the ERC-20 contract whose `receiveWithAuthorization` is\n *    being invoked. Usually USDC at `0x36...` on Arc.\n *  - `tokenName` and `tokenVersion` form the EIP-712 domain. Real USDC\n *    on most chains uses `name=\"USD Coin\"` and `version=\"2\"`; tests\n *    use whatever the mock token reports. Always read these from the\n *    token contract at runtime to avoid drift.\n *  - `from` is the payer. The wallet that produces the signature must\n *    match this address.\n *  - `to` is the recipient of the funds. For Strimz this is the\n *    StrimzPayments contract address (the contract pulls funds into\n *    itself, then forwards the fee and net split).\n *  - `value` is the gross amount in token base units.\n *  - `validAfter` / `validBefore` are unix-second timestamps bounding\n *    the signature's validity. Strimz's default checkout window is\n *    5 minutes; integrators may widen this for usage-based billing.\n *  - `nonce` is a single-use 32-byte value. Generate with crypto.randomBytes\n *    (server) or crypto.getRandomValues (browser). The token contract\n *    tracks `(authorizer, nonce) -> used` and rejects replays.\n */\nexport interface ReceiveWithAuthorizationParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  from: `0x${string}`\n  to: `0x${string}`\n  value: bigint\n  validAfter: bigint\n  validBefore: bigint\n  nonce: `0x${string}`\n}\n\n/**\n * EIP-712 type definition for `ReceiveWithAuthorization`. Stable, and\n * shared by every EIP-3009 implementation (USDC, EURC, etc.).\n *\n * Exported so consumers can introspect or extend with sibling\n * primitive types (e.g. for x402 batched signing schemes that wrap\n * multiple authorizations in one signature).\n */\nexport const RECEIVE_WITH_AUTHORIZATION_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-3009\n * `ReceiveWithAuthorization` signature. Returns the canonical shape\n * compatible with viem, ethers, Privy, and Reown.\n *\n * Pass the result to `walletClient.signTypedData(typedData)` (viem)\n * or `signer._signTypedData(domain, types, message)` (ethers). The\n * SDK does not bind to a specific signer.\n */\nexport function buildReceiveWithAuthorizationTypedData(\n  params: ReceiveWithAuthorizationParams,\n): Eip712TypedData<'ReceiveWithAuthorization'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: RECEIVE_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: params.from,\n      to: params.to,\n      value: params.value,\n      validAfter: params.validAfter,\n      validBefore: params.validBefore,\n      nonce: params.nonce,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-2612 Permit typed-data.\n *\n *  - `chainId`, `token`, `tokenName`, `tokenVersion` form the EIP-712\n *    domain (same shape as the EIP-3009 builder).\n *  - `owner` is the token holder authorising the allowance. Must match\n *    the signing wallet.\n *  - `spender` is the contract that will pull funds. For Strimz\n *    subscriptions this is the StrimzSubscriptions contract.\n *  - `value` is the allowance to grant in token base units.\n *    `type(uint256).max` produces an unlimited allowance and is the\n *    common case for subscription enrolment.\n *  - `nonce` is the owner's *current* `nonces(owner)` reading from the\n *    token contract. The SDK does not fetch this. The caller is\n *    expected to have just queried it. Race-free: the token rejects\n *    stale nonces, so a concurrent permit on the same owner causes one\n *    to fail predictably.\n *  - `deadline` is the unix-second timestamp after which the permit\n *    expires. Strimz default for subscription enrolment is 24h. Enough\n *    headroom for a slow merchant submit pipeline without leaving an\n *    indefinite signature window.\n */\nexport interface PermitParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  owner: `0x${string}`\n  spender: `0x${string}`\n  value: bigint\n  nonce: bigint\n  deadline: bigint\n}\n\n/**\n * EIP-712 type definition for `Permit`. Stable across every EIP-2612\n * implementation (USDC, EURC, DAI v2, etc.).\n */\nexport const PERMIT_TYPES = {\n  Permit: [\n    { name: 'owner', type: 'address' },\n    { name: 'spender', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'nonce', type: 'uint256' },\n    { name: 'deadline', type: 'uint256' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-2612 `Permit` signature.\n * Returns the canonical shape compatible with viem, ethers, Privy,\n * and Reown.\n */\nexport function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: PERMIT_TYPES,\n    primaryType: 'Permit',\n    message: {\n      owner: params.owner,\n      spender: params.spender,\n      value: params.value,\n      nonce: params.nonce,\n      deadline: params.deadline,\n    },\n  }\n}\n"]}
+{"version":3,"sources":["../src/eip712/receive-with-authorization.ts","../src/eip712/permit.ts","../src/eip712/pay-intent.ts","../src/eip712/subscription-intent.ts"],"names":[],"mappings":";;;AA8CO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,wBAAA,EAA0B;AAAA,IACxB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC;AAWO,SAAS,uCACd,MAAA,EAC6C;AAC7C,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAChB,GACF;AACF;;;AC/CO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA;AAAU;AAExC;AAOO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,YAAA;AAAA,IACP,WAAA,EAAa,QAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAU,MAAA,CAAO;AAAA;AACnB,GACF;AACF;;;ACnDO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,SAAA,EAAW;AAAA,IACT,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,SAAA;AAAU;AAEnC;AAGO,SAAS,wBAAwB,MAAA,EAAuD;AAC7F,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,gBAAA;AAAA,MACN,OAAA,EAAS,GAAA;AAAA,MACT,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,WAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,KAAK,MAAA,CAAO;AAAA;AACd,GACF;AACF;;;AC9BO,IAAM,yBAAA,GAA4B;AAAA,EACvC,kBAAA,EAAoB;AAAA,IAClB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,QAAA,EAAS;AAAA,IACnC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,QAAA,EAAS;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,QAAA,EAAS;AAAA,IAChC,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,SAAA;AAAU;AAE9C;AAGO,SAAS,iCACd,MAAA,EACuC;AACvC,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,qBAAA;AAAA,MACN,OAAA,EAAS,GAAA;AAAA,MACT,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,yBAAA;AAAA,IACP,WAAA,EAAa,oBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,gBAAgB,MAAA,CAAO;AAAA;AACzB,GACF;AACF","file":"eip712.cjs","sourcesContent":["import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-3009 ReceiveWithAuthorization typed-data.\n *\n *  - `chainId` is the EVM chain id (Arc Testnet = 5042002).\n *  - `token` is the ERC-20 contract whose `receiveWithAuthorization` is\n *    being invoked. Usually USDC at `0x36...` on Arc.\n *  - `tokenName` and `tokenVersion` form the EIP-712 domain. Real USDC\n *    on most chains uses `name=\"USD Coin\"` and `version=\"2\"`; tests\n *    use whatever the mock token reports. Always read these from the\n *    token contract at runtime to avoid drift.\n *  - `from` is the payer. The wallet that produces the signature must\n *    match this address.\n *  - `to` is the recipient of the funds. For Strimz this is the\n *    StrimzPayments contract address (the contract pulls funds into\n *    itself, then forwards the fee and net split).\n *  - `value` is the gross amount in token base units.\n *  - `validAfter` / `validBefore` are unix-second timestamps bounding\n *    the signature's validity. Strimz's default checkout window is\n *    5 minutes; integrators may widen this for usage-based billing.\n *  - `nonce` is a single-use 32-byte value. Generate with crypto.randomBytes\n *    (server) or crypto.getRandomValues (browser). The token contract\n *    tracks `(authorizer, nonce) -> used` and rejects replays.\n */\nexport interface ReceiveWithAuthorizationParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  from: `0x${string}`\n  to: `0x${string}`\n  value: bigint\n  validAfter: bigint\n  validBefore: bigint\n  nonce: `0x${string}`\n}\n\n/**\n * EIP-712 type definition for `ReceiveWithAuthorization`. Stable, and\n * shared by every EIP-3009 implementation (USDC, EURC, etc.).\n *\n * Exported so consumers can introspect or extend with sibling\n * primitive types (e.g. for x402 batched signing schemes that wrap\n * multiple authorizations in one signature).\n */\nexport const RECEIVE_WITH_AUTHORIZATION_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-3009\n * `ReceiveWithAuthorization` signature. Returns the canonical shape\n * compatible with viem, ethers, Privy, and Reown.\n *\n * Pass the result to `walletClient.signTypedData(typedData)` (viem)\n * or `signer._signTypedData(domain, types, message)` (ethers). The\n * SDK does not bind to a specific signer.\n */\nexport function buildReceiveWithAuthorizationTypedData(\n  params: ReceiveWithAuthorizationParams,\n): Eip712TypedData<'ReceiveWithAuthorization'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: RECEIVE_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: params.from,\n      to: params.to,\n      value: params.value,\n      validAfter: params.validAfter,\n      validBefore: params.validBefore,\n      nonce: params.nonce,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-2612 Permit typed-data.\n *\n *  - `chainId`, `token`, `tokenName`, `tokenVersion` form the EIP-712\n *    domain (same shape as the EIP-3009 builder).\n *  - `owner` is the token holder authorising the allowance. Must match\n *    the signing wallet.\n *  - `spender` is the contract that will pull funds. For Strimz\n *    subscriptions this is the StrimzSubscriptions contract.\n *  - `value` is the allowance to grant in token base units.\n *    `type(uint256).max` produces an unlimited allowance and is the\n *    common case for subscription enrolment.\n *  - `nonce` is the owner's *current* `nonces(owner)` reading from the\n *    token contract. The SDK does not fetch this. The caller is\n *    expected to have just queried it. Race-free: the token rejects\n *    stale nonces, so a concurrent permit on the same owner causes one\n *    to fail predictably.\n *  - `deadline` is the unix-second timestamp after which the permit\n *    expires. Strimz default for subscription enrolment is 24h. Enough\n *    headroom for a slow merchant submit pipeline without leaving an\n *    indefinite signature window.\n */\nexport interface PermitParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  owner: `0x${string}`\n  spender: `0x${string}`\n  value: bigint\n  nonce: bigint\n  deadline: bigint\n}\n\n/**\n * EIP-712 type definition for `Permit`. Stable across every EIP-2612\n * implementation (USDC, EURC, DAI v2, etc.).\n */\nexport const PERMIT_TYPES = {\n  Permit: [\n    { name: 'owner', type: 'address' },\n    { name: 'spender', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'nonce', type: 'uint256' },\n    { name: 'deadline', type: 'uint256' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-2612 `Permit` signature.\n * Returns the canonical shape compatible with viem, ethers, Privy,\n * and Reown.\n */\nexport function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: PERMIT_TYPES,\n    primaryType: 'Permit',\n    message: {\n      owner: params.owner,\n      spender: params.spender,\n      value: params.value,\n      nonce: params.nonce,\n      deadline: params.deadline,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the Strimz PayIntent. Payer signs this alongside the\n * EIP-3009 auth. Without it, a valid auth sig can be redirected to\n * pay a different merchant.\n *\n * Every field must match the corresponding argument the API will\n * submit on-chain — the contract compares them via ecrecover.\n */\nexport interface PayIntentParams {\n  chainId: number\n  verifyingContract: `0x${string}`\n  merchantId: bigint\n  token: `0x${string}`\n  amount: bigint\n  nonce: `0x${string}`\n  validBefore: bigint\n  ref: `0x${string}`\n}\n\n/** Field order matches `PAY_INTENT_TYPEHASH` in `StrimzPayments.sol`. */\nexport const PAY_INTENT_TYPES = {\n  PayIntent: [\n    { name: 'merchantId', type: 'uint256' },\n    { name: 'token', type: 'address' },\n    { name: 'amount', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'ref', type: 'bytes32' },\n  ],\n} as const\n\n/** Domain name + version mirror `EIP712(\"StrimzPayments\", \"1\")`. */\nexport function buildPayIntentTypedData(params: PayIntentParams): Eip712TypedData<'PayIntent'> {\n  return {\n    domain: {\n      name: 'StrimzPayments',\n      version: '1',\n      chainId: params.chainId,\n      verifyingContract: params.verifyingContract,\n    },\n    types: PAY_INTENT_TYPES,\n    primaryType: 'PayIntent',\n    message: {\n      merchantId: params.merchantId,\n      token: params.token,\n      amount: params.amount,\n      nonce: params.nonce,\n      validBefore: params.validBefore,\n      ref: params.ref,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the Strimz SubscriptionIntent. Payer signs this\n * alongside the ERC-2612 permit. Without it, a valid permit can be\n * used to enrol the payer in a plan they never picked.\n *\n * `permitDeadline` ties this intent to the accompanying permit —\n * they expire together.\n */\nexport interface SubscriptionIntentParams {\n  chainId: number\n  verifyingContract: `0x${string}`\n  merchantId: bigint\n  token: `0x${string}`\n  amount: bigint\n  interval: number\n  startAt: bigint\n  endAt: bigint\n  permitDeadline: bigint\n}\n\n/** Field order matches `SUBSCRIPTION_INTENT_TYPEHASH` in the contract. */\nexport const SUBSCRIPTION_INTENT_TYPES = {\n  SubscriptionIntent: [\n    { name: 'merchantId', type: 'uint256' },\n    { name: 'token', type: 'address' },\n    { name: 'amount', type: 'uint256' },\n    { name: 'interval', type: 'uint32' },\n    { name: 'startAt', type: 'uint64' },\n    { name: 'endAt', type: 'uint64' },\n    { name: 'permitDeadline', type: 'uint256' },\n  ],\n} as const\n\n/** Domain mirrors `EIP712(\"StrimzSubscriptions\", \"1\")`. */\nexport function buildSubscriptionIntentTypedData(\n  params: SubscriptionIntentParams,\n): Eip712TypedData<'SubscriptionIntent'> {\n  return {\n    domain: {\n      name: 'StrimzSubscriptions',\n      version: '1',\n      chainId: params.chainId,\n      verifyingContract: params.verifyingContract,\n    },\n    types: SUBSCRIPTION_INTENT_TYPES,\n    primaryType: 'SubscriptionIntent',\n    message: {\n      merchantId: params.merchantId,\n      token: params.token,\n      amount: params.amount,\n      interval: params.interval,\n      startAt: params.startAt,\n      endAt: params.endAt,\n      permitDeadline: params.permitDeadline,\n    },\n  }\n}\n"]}

package/dist/eip712.d.cts

@@ -179,4 +179,94 @@ declare const PERMIT_TYPES: {
  */
 declare function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'>;
 
-export { type Eip712Domain, type Eip712Field, type Eip712TypedData, type Eip712Types, PERMIT_TYPES, type PermitParams, RECEIVE_WITH_AUTHORIZATION_TYPES, type ReceiveWithAuthorizationParams, buildPermitTypedData, buildReceiveWithAuthorizationTypedData };
+/**
+ * Inputs for the Strimz PayIntent. Payer signs this alongside the
+ * EIP-3009 auth. Without it, a valid auth sig can be redirected to
+ * pay a different merchant.
+ *
+ * Every field must match the corresponding argument the API will
+ * submit on-chain — the contract compares them via ecrecover.
+ */
+interface PayIntentParams {
+    chainId: number;
+    verifyingContract: `0x${string}`;
+    merchantId: bigint;
+    token: `0x${string}`;
+    amount: bigint;
+    nonce: `0x${string}`;
+    validBefore: bigint;
+    ref: `0x${string}`;
+}
+/** Field order matches `PAY_INTENT_TYPEHASH` in `StrimzPayments.sol`. */
+declare const PAY_INTENT_TYPES: {
+    readonly PayIntent: readonly [{
+        readonly name: "merchantId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "token";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "validBefore";
+        readonly type: "uint256";
+    }, {
+        readonly name: "ref";
+        readonly type: "bytes32";
+    }];
+};
+/** Domain name + version mirror `EIP712("StrimzPayments", "1")`. */
+declare function buildPayIntentTypedData(params: PayIntentParams): Eip712TypedData<'PayIntent'>;
+
+/**
+ * Inputs for the Strimz SubscriptionIntent. Payer signs this
+ * alongside the ERC-2612 permit. Without it, a valid permit can be
+ * used to enrol the payer in a plan they never picked.
+ *
+ * `permitDeadline` ties this intent to the accompanying permit —
+ * they expire together.
+ */
+interface SubscriptionIntentParams {
+    chainId: number;
+    verifyingContract: `0x${string}`;
+    merchantId: bigint;
+    token: `0x${string}`;
+    amount: bigint;
+    interval: number;
+    startAt: bigint;
+    endAt: bigint;
+    permitDeadline: bigint;
+}
+/** Field order matches `SUBSCRIPTION_INTENT_TYPEHASH` in the contract. */
+declare const SUBSCRIPTION_INTENT_TYPES: {
+    readonly SubscriptionIntent: readonly [{
+        readonly name: "merchantId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "token";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "interval";
+        readonly type: "uint32";
+    }, {
+        readonly name: "startAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "endAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "permitDeadline";
+        readonly type: "uint256";
+    }];
+};
+/** Domain mirrors `EIP712("StrimzSubscriptions", "1")`. */
+declare function buildSubscriptionIntentTypedData(params: SubscriptionIntentParams): Eip712TypedData<'SubscriptionIntent'>;
+
+export { type Eip712Domain, type Eip712Field, type Eip712TypedData, type Eip712Types, PAY_INTENT_TYPES, PERMIT_TYPES, type PayIntentParams, type PermitParams, RECEIVE_WITH_AUTHORIZATION_TYPES, type ReceiveWithAuthorizationParams, SUBSCRIPTION_INTENT_TYPES, type SubscriptionIntentParams, buildPayIntentTypedData, buildPermitTypedData, buildReceiveWithAuthorizationTypedData, buildSubscriptionIntentTypedData };

package/dist/eip712.d.ts

@@ -179,4 +179,94 @@ declare const PERMIT_TYPES: {
  */
 declare function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'>;
 
-export { type Eip712Domain, type Eip712Field, type Eip712TypedData, type Eip712Types, PERMIT_TYPES, type PermitParams, RECEIVE_WITH_AUTHORIZATION_TYPES, type ReceiveWithAuthorizationParams, buildPermitTypedData, buildReceiveWithAuthorizationTypedData };
+/**
+ * Inputs for the Strimz PayIntent. Payer signs this alongside the
+ * EIP-3009 auth. Without it, a valid auth sig can be redirected to
+ * pay a different merchant.
+ *
+ * Every field must match the corresponding argument the API will
+ * submit on-chain — the contract compares them via ecrecover.
+ */
+interface PayIntentParams {
+    chainId: number;
+    verifyingContract: `0x${string}`;
+    merchantId: bigint;
+    token: `0x${string}`;
+    amount: bigint;
+    nonce: `0x${string}`;
+    validBefore: bigint;
+    ref: `0x${string}`;
+}
+/** Field order matches `PAY_INTENT_TYPEHASH` in `StrimzPayments.sol`. */
+declare const PAY_INTENT_TYPES: {
+    readonly PayIntent: readonly [{
+        readonly name: "merchantId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "token";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "validBefore";
+        readonly type: "uint256";
+    }, {
+        readonly name: "ref";
+        readonly type: "bytes32";
+    }];
+};
+/** Domain name + version mirror `EIP712("StrimzPayments", "1")`. */
+declare function buildPayIntentTypedData(params: PayIntentParams): Eip712TypedData<'PayIntent'>;
+
+/**
+ * Inputs for the Strimz SubscriptionIntent. Payer signs this
+ * alongside the ERC-2612 permit. Without it, a valid permit can be
+ * used to enrol the payer in a plan they never picked.
+ *
+ * `permitDeadline` ties this intent to the accompanying permit —
+ * they expire together.
+ */
+interface SubscriptionIntentParams {
+    chainId: number;
+    verifyingContract: `0x${string}`;
+    merchantId: bigint;
+    token: `0x${string}`;
+    amount: bigint;
+    interval: number;
+    startAt: bigint;
+    endAt: bigint;
+    permitDeadline: bigint;
+}
+/** Field order matches `SUBSCRIPTION_INTENT_TYPEHASH` in the contract. */
+declare const SUBSCRIPTION_INTENT_TYPES: {
+    readonly SubscriptionIntent: readonly [{
+        readonly name: "merchantId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "token";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "interval";
+        readonly type: "uint32";
+    }, {
+        readonly name: "startAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "endAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "permitDeadline";
+        readonly type: "uint256";
+    }];
+};
+/** Domain mirrors `EIP712("StrimzSubscriptions", "1")`. */
+declare function buildSubscriptionIntentTypedData(params: SubscriptionIntentParams): Eip712TypedData<'SubscriptionIntent'>;
+
+export { type Eip712Domain, type Eip712Field, type Eip712TypedData, type Eip712Types, PAY_INTENT_TYPES, PERMIT_TYPES, type PayIntentParams, type PermitParams, RECEIVE_WITH_AUTHORIZATION_TYPES, type ReceiveWithAuthorizationParams, SUBSCRIPTION_INTENT_TYPES, type SubscriptionIntentParams, buildPayIntentTypedData, buildPermitTypedData, buildReceiveWithAuthorizationTypedData, buildSubscriptionIntentTypedData };

package/dist/eip712.js

@@ -60,6 +60,72 @@ function buildPermitTypedData(params) {
   };
 }
 
-export { PERMIT_TYPES, RECEIVE_WITH_AUTHORIZATION_TYPES, buildPermitTypedData, buildReceiveWithAuthorizationTypedData };
+// src/eip712/pay-intent.ts
+var PAY_INTENT_TYPES = {
+  PayIntent: [
+    { name: "merchantId", type: "uint256" },
+    { name: "token", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "nonce", type: "bytes32" },
+    { name: "validBefore", type: "uint256" },
+    { name: "ref", type: "bytes32" }
+  ]
+};
+function buildPayIntentTypedData(params) {
+  return {
+    domain: {
+      name: "StrimzPayments",
+      version: "1",
+      chainId: params.chainId,
+      verifyingContract: params.verifyingContract
+    },
+    types: PAY_INTENT_TYPES,
+    primaryType: "PayIntent",
+    message: {
+      merchantId: params.merchantId,
+      token: params.token,
+      amount: params.amount,
+      nonce: params.nonce,
+      validBefore: params.validBefore,
+      ref: params.ref
+    }
+  };
+}
+
+// src/eip712/subscription-intent.ts
+var SUBSCRIPTION_INTENT_TYPES = {
+  SubscriptionIntent: [
+    { name: "merchantId", type: "uint256" },
+    { name: "token", type: "address" },
+    { name: "amount", type: "uint256" },
+    { name: "interval", type: "uint32" },
+    { name: "startAt", type: "uint64" },
+    { name: "endAt", type: "uint64" },
+    { name: "permitDeadline", type: "uint256" }
+  ]
+};
+function buildSubscriptionIntentTypedData(params) {
+  return {
+    domain: {
+      name: "StrimzSubscriptions",
+      version: "1",
+      chainId: params.chainId,
+      verifyingContract: params.verifyingContract
+    },
+    types: SUBSCRIPTION_INTENT_TYPES,
+    primaryType: "SubscriptionIntent",
+    message: {
+      merchantId: params.merchantId,
+      token: params.token,
+      amount: params.amount,
+      interval: params.interval,
+      startAt: params.startAt,
+      endAt: params.endAt,
+      permitDeadline: params.permitDeadline
+    }
+  };
+}
+
+export { PAY_INTENT_TYPES, PERMIT_TYPES, RECEIVE_WITH_AUTHORIZATION_TYPES, SUBSCRIPTION_INTENT_TYPES, buildPayIntentTypedData, buildPermitTypedData, buildReceiveWithAuthorizationTypedData, buildSubscriptionIntentTypedData };
 //# sourceMappingURL=eip712.js.map
 //# sourceMappingURL=eip712.js.map

package/dist/eip712.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/eip712/receive-with-authorization.ts","../src/eip712/permit.ts"],"names":[],"mappings":";AA8CO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,wBAAA,EAA0B;AAAA,IACxB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC;AAWO,SAAS,uCACd,MAAA,EAC6C;AAC7C,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAChB,GACF;AACF;;;AC/CO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA;AAAU;AAExC;AAOO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,YAAA;AAAA,IACP,WAAA,EAAa,QAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAU,MAAA,CAAO;AAAA;AACnB,GACF;AACF","file":"eip712.js","sourcesContent":["import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-3009 ReceiveWithAuthorization typed-data.\n *\n *  - `chainId` is the EVM chain id (Arc Testnet = 5042002).\n *  - `token` is the ERC-20 contract whose `receiveWithAuthorization` is\n *    being invoked. Usually USDC at `0x36...` on Arc.\n *  - `tokenName` and `tokenVersion` form the EIP-712 domain. Real USDC\n *    on most chains uses `name=\"USD Coin\"` and `version=\"2\"`; tests\n *    use whatever the mock token reports. Always read these from the\n *    token contract at runtime to avoid drift.\n *  - `from` is the payer. The wallet that produces the signature must\n *    match this address.\n *  - `to` is the recipient of the funds. For Strimz this is the\n *    StrimzPayments contract address (the contract pulls funds into\n *    itself, then forwards the fee and net split).\n *  - `value` is the gross amount in token base units.\n *  - `validAfter` / `validBefore` are unix-second timestamps bounding\n *    the signature's validity. Strimz's default checkout window is\n *    5 minutes; integrators may widen this for usage-based billing.\n *  - `nonce` is a single-use 32-byte value. Generate with crypto.randomBytes\n *    (server) or crypto.getRandomValues (browser). The token contract\n *    tracks `(authorizer, nonce) -> used` and rejects replays.\n */\nexport interface ReceiveWithAuthorizationParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  from: `0x${string}`\n  to: `0x${string}`\n  value: bigint\n  validAfter: bigint\n  validBefore: bigint\n  nonce: `0x${string}`\n}\n\n/**\n * EIP-712 type definition for `ReceiveWithAuthorization`. Stable, and\n * shared by every EIP-3009 implementation (USDC, EURC, etc.).\n *\n * Exported so consumers can introspect or extend with sibling\n * primitive types (e.g. for x402 batched signing schemes that wrap\n * multiple authorizations in one signature).\n */\nexport const RECEIVE_WITH_AUTHORIZATION_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-3009\n * `ReceiveWithAuthorization` signature. Returns the canonical shape\n * compatible with viem, ethers, Privy, and Reown.\n *\n * Pass the result to `walletClient.signTypedData(typedData)` (viem)\n * or `signer._signTypedData(domain, types, message)` (ethers). The\n * SDK does not bind to a specific signer.\n */\nexport function buildReceiveWithAuthorizationTypedData(\n  params: ReceiveWithAuthorizationParams,\n): Eip712TypedData<'ReceiveWithAuthorization'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: RECEIVE_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: params.from,\n      to: params.to,\n      value: params.value,\n      validAfter: params.validAfter,\n      validBefore: params.validBefore,\n      nonce: params.nonce,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-2612 Permit typed-data.\n *\n *  - `chainId`, `token`, `tokenName`, `tokenVersion` form the EIP-712\n *    domain (same shape as the EIP-3009 builder).\n *  - `owner` is the token holder authorising the allowance. Must match\n *    the signing wallet.\n *  - `spender` is the contract that will pull funds. For Strimz\n *    subscriptions this is the StrimzSubscriptions contract.\n *  - `value` is the allowance to grant in token base units.\n *    `type(uint256).max` produces an unlimited allowance and is the\n *    common case for subscription enrolment.\n *  - `nonce` is the owner's *current* `nonces(owner)` reading from the\n *    token contract. The SDK does not fetch this. The caller is\n *    expected to have just queried it. Race-free: the token rejects\n *    stale nonces, so a concurrent permit on the same owner causes one\n *    to fail predictably.\n *  - `deadline` is the unix-second timestamp after which the permit\n *    expires. Strimz default for subscription enrolment is 24h. Enough\n *    headroom for a slow merchant submit pipeline without leaving an\n *    indefinite signature window.\n */\nexport interface PermitParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  owner: `0x${string}`\n  spender: `0x${string}`\n  value: bigint\n  nonce: bigint\n  deadline: bigint\n}\n\n/**\n * EIP-712 type definition for `Permit`. Stable across every EIP-2612\n * implementation (USDC, EURC, DAI v2, etc.).\n */\nexport const PERMIT_TYPES = {\n  Permit: [\n    { name: 'owner', type: 'address' },\n    { name: 'spender', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'nonce', type: 'uint256' },\n    { name: 'deadline', type: 'uint256' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-2612 `Permit` signature.\n * Returns the canonical shape compatible with viem, ethers, Privy,\n * and Reown.\n */\nexport function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: PERMIT_TYPES,\n    primaryType: 'Permit',\n    message: {\n      owner: params.owner,\n      spender: params.spender,\n      value: params.value,\n      nonce: params.nonce,\n      deadline: params.deadline,\n    },\n  }\n}\n"]}
+{"version":3,"sources":["../src/eip712/receive-with-authorization.ts","../src/eip712/permit.ts","../src/eip712/pay-intent.ts","../src/eip712/subscription-intent.ts"],"names":[],"mappings":";AA8CO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,wBAAA,EAA0B;AAAA,IACxB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC;AAWO,SAAS,uCACd,MAAA,EAC6C;AAC7C,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAChB,GACF;AACF;;;AC/CO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA;AAAU;AAExC;AAOO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,YAAA;AAAA,IACP,WAAA,EAAa,QAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAU,MAAA,CAAO;AAAA;AACnB,GACF;AACF;;;ACnDO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,SAAA,EAAW;AAAA,IACT,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,SAAA;AAAU;AAEnC;AAGO,SAAS,wBAAwB,MAAA,EAAuD;AAC7F,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,gBAAA;AAAA,MACN,OAAA,EAAS,GAAA;AAAA,MACT,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,WAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,KAAK,MAAA,CAAO;AAAA;AACd,GACF;AACF;;;AC9BO,IAAM,yBAAA,GAA4B;AAAA,EACvC,kBAAA,EAAoB;AAAA,IAClB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,QAAA,EAAS;AAAA,IACnC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,QAAA,EAAS;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,QAAA,EAAS;AAAA,IAChC,EAAE,IAAA,EAAM,gBAAA,EAAkB,IAAA,EAAM,SAAA;AAAU;AAE9C;AAGO,SAAS,iCACd,MAAA,EACuC;AACvC,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,qBAAA;AAAA,MACN,OAAA,EAAS,GAAA;AAAA,MACT,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,yBAAA;AAAA,IACP,WAAA,EAAa,oBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,gBAAgB,MAAA,CAAO;AAAA;AACzB,GACF;AACF","file":"eip712.js","sourcesContent":["import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-3009 ReceiveWithAuthorization typed-data.\n *\n *  - `chainId` is the EVM chain id (Arc Testnet = 5042002).\n *  - `token` is the ERC-20 contract whose `receiveWithAuthorization` is\n *    being invoked. Usually USDC at `0x36...` on Arc.\n *  - `tokenName` and `tokenVersion` form the EIP-712 domain. Real USDC\n *    on most chains uses `name=\"USD Coin\"` and `version=\"2\"`; tests\n *    use whatever the mock token reports. Always read these from the\n *    token contract at runtime to avoid drift.\n *  - `from` is the payer. The wallet that produces the signature must\n *    match this address.\n *  - `to` is the recipient of the funds. For Strimz this is the\n *    StrimzPayments contract address (the contract pulls funds into\n *    itself, then forwards the fee and net split).\n *  - `value` is the gross amount in token base units.\n *  - `validAfter` / `validBefore` are unix-second timestamps bounding\n *    the signature's validity. Strimz's default checkout window is\n *    5 minutes; integrators may widen this for usage-based billing.\n *  - `nonce` is a single-use 32-byte value. Generate with crypto.randomBytes\n *    (server) or crypto.getRandomValues (browser). The token contract\n *    tracks `(authorizer, nonce) -> used` and rejects replays.\n */\nexport interface ReceiveWithAuthorizationParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  from: `0x${string}`\n  to: `0x${string}`\n  value: bigint\n  validAfter: bigint\n  validBefore: bigint\n  nonce: `0x${string}`\n}\n\n/**\n * EIP-712 type definition for `ReceiveWithAuthorization`. Stable, and\n * shared by every EIP-3009 implementation (USDC, EURC, etc.).\n *\n * Exported so consumers can introspect or extend with sibling\n * primitive types (e.g. for x402 batched signing schemes that wrap\n * multiple authorizations in one signature).\n */\nexport const RECEIVE_WITH_AUTHORIZATION_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-3009\n * `ReceiveWithAuthorization` signature. Returns the canonical shape\n * compatible with viem, ethers, Privy, and Reown.\n *\n * Pass the result to `walletClient.signTypedData(typedData)` (viem)\n * or `signer._signTypedData(domain, types, message)` (ethers). The\n * SDK does not bind to a specific signer.\n */\nexport function buildReceiveWithAuthorizationTypedData(\n  params: ReceiveWithAuthorizationParams,\n): Eip712TypedData<'ReceiveWithAuthorization'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: RECEIVE_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: params.from,\n      to: params.to,\n      value: params.value,\n      validAfter: params.validAfter,\n      validBefore: params.validBefore,\n      nonce: params.nonce,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-2612 Permit typed-data.\n *\n *  - `chainId`, `token`, `tokenName`, `tokenVersion` form the EIP-712\n *    domain (same shape as the EIP-3009 builder).\n *  - `owner` is the token holder authorising the allowance. Must match\n *    the signing wallet.\n *  - `spender` is the contract that will pull funds. For Strimz\n *    subscriptions this is the StrimzSubscriptions contract.\n *  - `value` is the allowance to grant in token base units.\n *    `type(uint256).max` produces an unlimited allowance and is the\n *    common case for subscription enrolment.\n *  - `nonce` is the owner's *current* `nonces(owner)` reading from the\n *    token contract. The SDK does not fetch this. The caller is\n *    expected to have just queried it. Race-free: the token rejects\n *    stale nonces, so a concurrent permit on the same owner causes one\n *    to fail predictably.\n *  - `deadline` is the unix-second timestamp after which the permit\n *    expires. Strimz default for subscription enrolment is 24h. Enough\n *    headroom for a slow merchant submit pipeline without leaving an\n *    indefinite signature window.\n */\nexport interface PermitParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  owner: `0x${string}`\n  spender: `0x${string}`\n  value: bigint\n  nonce: bigint\n  deadline: bigint\n}\n\n/**\n * EIP-712 type definition for `Permit`. Stable across every EIP-2612\n * implementation (USDC, EURC, DAI v2, etc.).\n */\nexport const PERMIT_TYPES = {\n  Permit: [\n    { name: 'owner', type: 'address' },\n    { name: 'spender', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'nonce', type: 'uint256' },\n    { name: 'deadline', type: 'uint256' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-2612 `Permit` signature.\n * Returns the canonical shape compatible with viem, ethers, Privy,\n * and Reown.\n */\nexport function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: PERMIT_TYPES,\n    primaryType: 'Permit',\n    message: {\n      owner: params.owner,\n      spender: params.spender,\n      value: params.value,\n      nonce: params.nonce,\n      deadline: params.deadline,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the Strimz PayIntent. Payer signs this alongside the\n * EIP-3009 auth. Without it, a valid auth sig can be redirected to\n * pay a different merchant.\n *\n * Every field must match the corresponding argument the API will\n * submit on-chain — the contract compares them via ecrecover.\n */\nexport interface PayIntentParams {\n  chainId: number\n  verifyingContract: `0x${string}`\n  merchantId: bigint\n  token: `0x${string}`\n  amount: bigint\n  nonce: `0x${string}`\n  validBefore: bigint\n  ref: `0x${string}`\n}\n\n/** Field order matches `PAY_INTENT_TYPEHASH` in `StrimzPayments.sol`. */\nexport const PAY_INTENT_TYPES = {\n  PayIntent: [\n    { name: 'merchantId', type: 'uint256' },\n    { name: 'token', type: 'address' },\n    { name: 'amount', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'ref', type: 'bytes32' },\n  ],\n} as const\n\n/** Domain name + version mirror `EIP712(\"StrimzPayments\", \"1\")`. */\nexport function buildPayIntentTypedData(params: PayIntentParams): Eip712TypedData<'PayIntent'> {\n  return {\n    domain: {\n      name: 'StrimzPayments',\n      version: '1',\n      chainId: params.chainId,\n      verifyingContract: params.verifyingContract,\n    },\n    types: PAY_INTENT_TYPES,\n    primaryType: 'PayIntent',\n    message: {\n      merchantId: params.merchantId,\n      token: params.token,\n      amount: params.amount,\n      nonce: params.nonce,\n      validBefore: params.validBefore,\n      ref: params.ref,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the Strimz SubscriptionIntent. Payer signs this\n * alongside the ERC-2612 permit. Without it, a valid permit can be\n * used to enrol the payer in a plan they never picked.\n *\n * `permitDeadline` ties this intent to the accompanying permit —\n * they expire together.\n */\nexport interface SubscriptionIntentParams {\n  chainId: number\n  verifyingContract: `0x${string}`\n  merchantId: bigint\n  token: `0x${string}`\n  amount: bigint\n  interval: number\n  startAt: bigint\n  endAt: bigint\n  permitDeadline: bigint\n}\n\n/** Field order matches `SUBSCRIPTION_INTENT_TYPEHASH` in the contract. */\nexport const SUBSCRIPTION_INTENT_TYPES = {\n  SubscriptionIntent: [\n    { name: 'merchantId', type: 'uint256' },\n    { name: 'token', type: 'address' },\n    { name: 'amount', type: 'uint256' },\n    { name: 'interval', type: 'uint32' },\n    { name: 'startAt', type: 'uint64' },\n    { name: 'endAt', type: 'uint64' },\n    { name: 'permitDeadline', type: 'uint256' },\n  ],\n} as const\n\n/** Domain mirrors `EIP712(\"StrimzSubscriptions\", \"1\")`. */\nexport function buildSubscriptionIntentTypedData(\n  params: SubscriptionIntentParams,\n): Eip712TypedData<'SubscriptionIntent'> {\n  return {\n    domain: {\n      name: 'StrimzSubscriptions',\n      version: '1',\n      chainId: params.chainId,\n      verifyingContract: params.verifyingContract,\n    },\n    types: SUBSCRIPTION_INTENT_TYPES,\n    primaryType: 'SubscriptionIntent',\n    message: {\n      merchantId: params.merchantId,\n      token: params.token,\n      amount: params.amount,\n      interval: params.interval,\n      startAt: params.startAt,\n      endAt: params.endAt,\n      permitDeadline: params.permitDeadline,\n    },\n  }\n}\n"]}

package/dist/index.cjs

@@ -216,10 +216,18 @@ var Fetcher = class {
   }
   backoffFor(attempt) {
     const expo = this.initialBackoffMs * Math.pow(2, attempt);
-    const jitter = Math.random() * this.initialBackoffMs;
-    return Math.min(expo + jitter, 8e3);
+    return Math.min(expo + cryptoJitter(this.initialBackoffMs), 8e3);
   }
 };
+function cryptoJitter(maxMs) {
+  const g = globalThis;
+  if (g.crypto?.getRandomValues) {
+    const buf = new Uint32Array(1);
+    g.crypto.getRandomValues(buf);
+    return (buf[0] ?? 0) / 4294967295 * maxMs;
+  }
+  return Math.random() * maxMs;
+}
 function isIdempotent(spec) {
   if (spec.method === "GET" || spec.method === "DELETE") return true;
   return spec.idempotencyKey != null;
@@ -227,16 +235,29 @@ function isIdempotent(spec) {
 async function parseErrorBody(res) {
   try {
     const json = await res.json();
-    if (typeof json === "object" && json !== null && "error" in json && json.error) {
-      return json.error;
-    }
-    if (typeof json === "object" && json !== null && "code" in json && "message" in json) {
-      return json;
+    const raw = typeof json === "object" && json !== null && "error" in json ? json.error : json;
+    if (typeof raw === "object" && raw !== null && "code" in raw && "message" in raw) {
+      return sanitiseErrorBody(raw);
     }
   } catch {
   }
   return { code: "api_error", message: `HTTP ${res.status}` };
 }
+var ALLOWED_DETAIL_KEYS = /* @__PURE__ */ new Set(["issues", "field", "reason", "chargeAttemptId"]);
+function sanitiseErrorBody(raw) {
+  const details = typeof raw.details === "object" && raw.details !== null ? Object.fromEntries(
+    Object.entries(raw.details).filter(
+      ([k]) => ALLOWED_DETAIL_KEYS.has(k)
+    )
+  ) : void 0;
+  return {
+    code: typeof raw.code === "string" ? raw.code : "api_error",
+    message: typeof raw.message === "string" ? raw.message : "Request failed",
+    param: typeof raw.param === "string" ? raw.param : void 0,
+    requestId: typeof raw.requestId === "string" ? raw.requestId : void 0,
+    details: details && Object.keys(details).length > 0 ? details : void 0
+  };
+}
 function parseRetryAfter(res) {
   const v = res.headers.get("Retry-After");
   if (!v) return void 0;
@@ -728,6 +749,10 @@ var CheckoutResource = class extends BaseResource {
   plan(id) {
     return this.get(`/v1/checkout/plans/${encodeURIComponent(id)}`, sharedTypes.subscriptionPlanSchema);
   }
+  /** Load the merchant's public brand card by id. */
+  merchant(id) {
+    return this.get(`/v1/checkout/merchants/${encodeURIComponent(id)}`, sharedTypes.merchantPublicBrandSchema);
+  }
 };
 var TokensResource = class extends BaseResource {
   /**