@t2000/cli 9.5.0 → 9.7.0

package/dist/{chunk-HP5E2AUH.js → chunk-HCEFAB2I.js}

@@ -9890,6 +9890,7 @@ var KeypairSigner = class {
   constructor(keypair) {
     this.keypair = keypair;
   }
+  kind = "keypair";
   getAddress() {
     return this.keypair.getPublicKey().toSuiAddress();
   }
@@ -9988,6 +9989,13 @@ async function payWithMpp(args) {
   }
   const headerChallenge = await parseMppSuiChallenge(probe);
   if (headerChallenge) {
+    if (signer.kind === "zklogin") {
+      throw new T2000Error(
+        "DIALECT_UNSUPPORTED",
+        "This seller only offers the MPP header dialect, which zkLogin (Passport) wallets cannot safely pay: the seller cannot verify zkLogin signatures, so the payment would settle on-chain without the service delivering. No payment was made. Use an x402-capable service, or pay from a keypair wallet (t2 CLI / MCP).",
+        { dialect: "mpp-header", signerKind: "zklogin" }
+      );
+    }
     const result = await payViaMppHeader({ signer, client, options });
     await reportDirectPayment(result, options.url);
     return result;
@@ -10223,6 +10231,7 @@ var ZkLoginSigner = class {
     this.userAddress = userAddress;
     this.maxEpoch = maxEpoch;
   }
+  kind = "zklogin";
   getAddress() {
     return this.userAddress;
   }
@@ -11929,6 +11938,205 @@ var T2000 = class _T2000 extends import_index.default {
   }
 };
 init_errors();
+init_errors();
+init_token_registry();
+init_preflight();
+init_coinSelection();
+var A2A_ESCROW_PACKAGE_ID = process.env.A2A_ESCROW_PACKAGE_ID ?? "0x9e67c380fb7079d793d6d15ff916b24d82779d7119bfa4631863102ed485c0a0";
+var CLOCK_ID2 = "0x6";
+var MODULE = "escrow";
+var MAX_JOB_USDC = 50;
+var JOB_STATES = [
+  "funded",
+  "delivered",
+  "released",
+  "refunded",
+  "rejected"
+];
+function hexToBytes22(hex) {
+  const clean3 = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (clean3.length === 0 || clean3.length % 2 !== 0 || /[^0-9a-fA-F]/.test(clean3)) {
+    throw new T2000Error(
+      "INVALID_AMOUNT",
+      `Expected a hex hash (0x\u2026), got "${hex.slice(0, 32)}"`
+    );
+  }
+  const out = [];
+  for (let i = 0; i < clean3.length; i += 2) {
+    out.push(Number.parseInt(clean3.slice(i, i + 2), 16));
+  }
+  return out;
+}
+function bytesToHex22(bytes) {
+  let s = "0x";
+  for (const b of bytes) s += b.toString(16).padStart(2, "0");
+  return s;
+}
+function preflightCreateJob(terms) {
+  const addressCheck = checkSuiAddress(terms.seller);
+  if (!addressCheck.valid) return addressCheck;
+  if (!Number.isFinite(terms.amountUsdc) || terms.amountUsdc <= 0) {
+    return preflightFail("INVALID_AMOUNT", `Amount must be positive. Got ${terms.amountUsdc}.`);
+  }
+  if (terms.amountUsdc > MAX_JOB_USDC) {
+    return preflightFail(
+      "INVALID_AMOUNT",
+      `v1 caps escrow jobs at ${MAX_JOB_USDC} USDC (no-arbitration split only stays fair at small sizes). Got ${terms.amountUsdc}.`
+    );
+  }
+  if (terms.deliverByMs <= Date.now()) {
+    return preflightFail("INVALID_AMOUNT", "deliverByMs must be in the future.");
+  }
+  if (terms.reviewWindowMs < 0) {
+    return preflightFail("INVALID_AMOUNT", "reviewWindowMs must be \u2265 0.");
+  }
+  if (!Number.isInteger(terms.rejectSplitBps) || terms.rejectSplitBps < 0 || terms.rejectSplitBps > 1e4) {
+    return preflightFail("INVALID_AMOUNT", "rejectSplitBps must be an integer 0\u201310000.");
+  }
+  try {
+    hexToBytes22(terms.specHash);
+  } catch (e) {
+    return preflightFail("INVALID_AMOUNT", e.message);
+  }
+  return PREFLIGHT_OK;
+}
+async function buildCreateJobTx({
+  client,
+  buyer,
+  terms
+}) {
+  const pf = preflightCreateJob(terms);
+  if (!pf.valid) throw new T2000Error(pf.code, pf.error);
+  const seller = validateAddress(terms.seller);
+  if (seller === validateAddress(buyer)) {
+    throw new T2000Error("INVALID_ADDRESS", "Buyer and seller must be different wallets.");
+  }
+  const rawAmount = BigInt(Math.floor(terms.amountUsdc * 10 ** USDC_DECIMALS));
+  const tx = new Transaction();
+  const { coin } = await selectAndSplitCoin(tx, client, buyer, USDC_TYPE, rawAmount, {
+    allowSwapAll: false
+  });
+  tx.moveCall({
+    target: `${A2A_ESCROW_PACKAGE_ID}::${MODULE}::create`,
+    typeArguments: [USDC_TYPE],
+    arguments: [
+      tx.pure.address(seller),
+      coin,
+      tx.pure.vector("u8", hexToBytes22(terms.specHash)),
+      tx.pure.u64(terms.deliverByMs),
+      tx.pure.u64(terms.reviewWindowMs),
+      tx.pure.u64(terms.rejectSplitBps),
+      tx.object(CLOCK_ID2)
+    ]
+  });
+  return tx;
+}
+function jobCall(jobId, fn) {
+  const tx = new Transaction();
+  tx.moveCall({
+    target: `${A2A_ESCROW_PACKAGE_ID}::${MODULE}::${fn}`,
+    typeArguments: [USDC_TYPE],
+    arguments: [tx.object(jobId), tx.object(CLOCK_ID2)]
+  });
+  return tx;
+}
+function buildDeliverJobTx(jobId, deliveryHash) {
+  const tx = new Transaction();
+  tx.moveCall({
+    target: `${A2A_ESCROW_PACKAGE_ID}::${MODULE}::deliver`,
+    typeArguments: [USDC_TYPE],
+    arguments: [
+      tx.object(jobId),
+      tx.pure.vector("u8", hexToBytes22(deliveryHash)),
+      tx.object(CLOCK_ID2)
+    ]
+  });
+  return tx;
+}
+function buildReleaseJobTx(jobId) {
+  return jobCall(jobId, "release");
+}
+function buildRejectJobTx(jobId) {
+  return jobCall(jobId, "reject");
+}
+function buildRefundJobTx(jobId) {
+  return jobCall(jobId, "refund");
+}
+async function getJob(client, jobId) {
+  const resp = await client.core.getObject({ objectId: jobId, include: { json: true } }).catch((e) => {
+    throw new T2000Error(
+      "RPC_ERROR",
+      `Job ${jobId} not found: ${e instanceof Error ? e.message : String(e)}`
+    );
+  });
+  const objType = resp.object?.type ?? "";
+  const json = resp.object?.json;
+  if (!json || !objType.includes(`::${MODULE}::Job<`)) {
+    throw new T2000Error("RPC_ERROR", `Object ${jobId} is not an a2a_escrow Job.`);
+  }
+  const stateNum = Number(json.state ?? -1);
+  const state = JOB_STATES[stateNum];
+  if (!state) {
+    throw new T2000Error("RPC_ERROR", `Job ${jobId} has unknown state ${stateNum}.`);
+  }
+  const deliveredAtMs = Number(json.delivered_at_ms ?? 0);
+  const deliveryBytes = json.delivery_hash ?? [];
+  const hasDelivery = deliveredAtMs > 0;
+  return {
+    id: jobId,
+    buyer: String(json.buyer),
+    seller: String(json.seller),
+    amountUsdc: Number(json.amount) / 10 ** USDC_DECIMALS,
+    escrowUsdc: Number(json.escrow) / 10 ** USDC_DECIMALS,
+    specHash: bytesToHex22(json.spec_hash ?? []),
+    deliverByMs: Number(json.deliver_by_ms),
+    reviewWindowMs: Number(json.review_window_ms),
+    rejectSplitBps: Number(json.reject_split_bps),
+    state,
+    deliveryHash: hasDelivery ? bytesToHex22(deliveryBytes) : null,
+    deliveredAtMs: hasDelivery ? deliveredAtMs : null,
+    createdAtMs: Number(json.created_at_ms)
+  };
+}
+function jobActionsFor(job, caller, nowMs = Date.now()) {
+  const me = validateAddress(caller);
+  const isBuyer = me === job.buyer;
+  const isSeller = me === job.seller;
+  const actions = [];
+  if (job.state === "funded") {
+    if (isSeller && nowMs <= job.deliverByMs) actions.push("deliver");
+    if (isBuyer) actions.push("release");
+    if (nowMs > job.deliverByMs) actions.push("refund");
+  } else if (job.state === "delivered") {
+    const windowClosesMs = (job.deliveredAtMs ?? 0) + job.reviewWindowMs;
+    if (isBuyer && nowMs <= windowClosesMs) actions.push("release", "reject");
+    if (nowMs > windowClosesMs) actions.push("release");
+  }
+  return actions;
+}
+async function verifyJobForSeller({
+  client,
+  jobId,
+  seller,
+  minAmountUsdc,
+  minRunwayMs = 6e4
+}) {
+  const job = await getJob(client, jobId);
+  const problems = [];
+  if (job.state !== "funded") {
+    problems.push(`state is "${job.state}", expected "funded"`);
+  }
+  if (job.seller !== validateAddress(seller)) {
+    problems.push(`job pays ${job.seller}, not this seller`);
+  }
+  if (job.escrowUsdc < minAmountUsdc) {
+    problems.push(`escrow holds ${job.escrowUsdc} USDC, price is ${minAmountUsdc}`);
+  }
+  if (job.deliverByMs - Date.now() < minRunwayMs) {
+    problems.push("deadline too close to accept");
+  }
+  return { ok: problems.length === 0, job, problems };
+}
 init_coinSelection();
 init_cetus_swap();
 init_coinSelection();
@@ -12478,6 +12686,18 @@ export {
   assertLimitConfig,
   LimitEnforcer,
   T2000,
+  A2A_ESCROW_PACKAGE_ID,
+  MAX_JOB_USDC,
+  JOB_STATES,
+  preflightCreateJob,
+  buildCreateJobTx,
+  buildDeliverJobTx,
+  buildReleaseJobTx,
+  buildRejectJobTx,
+  buildRefundJobTx,
+  getJob,
+  jobActionsFor,
+  verifyJobForSeller,
   SPONSORED_PYTH_DEPENDENT_PROVIDERS,
   getSponsoredSwapProviders,
   WRITE_APPENDER_REGISTRY,
@@ -12517,4 +12737,4 @@ export {
 @scure/bip39/index.js:
   (*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=chunk-HP5E2AUH.js.map
+//# sourceMappingURL=chunk-HCEFAB2I.js.map