@toon-protocol/sdk 2.1.0 → 3.0.0

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 import { ToonError, HandlePacketAcceptResponse, HandlePacketRejectResponse, ReputationScore, SkillDescriptor, EmbeddableConnectorLike, KnownPeer, SettlementConfig, ChainProviderConfigEntry, ConnectorChannelClient, BootstrapEventListener, BootstrapResult, DvmJobStatus, IlpSendResult, ParsedWorkflowDefinition, SwapPair } from '@toon-protocol/core';
-export { BootstrapEvent, BootstrapEventListener, HandlePacketAcceptResponse, HandlePacketRejectResponse, SkillDescriptor, balanceProofFieldsMina, balanceProofHashEvm, balanceProofHashSolana, bigintToBytes32BE, concatBytes, hexToBytes, minaHashToField } from '@toon-protocol/core';
+export { BootstrapEvent, BootstrapEventListener, HandlePacketAcceptResponse, HandlePacketRejectResponse, SkillDescriptor, balanceProofFieldsMina, balanceProofHashEvm, balanceProofHashSolana, bigintToBytes32BE, concatBytes, coopCloseHashEvm, eip712DomainSeparatorEvm, hexToBytes, minaHashToField } from '@toon-protocol/core';
 import { NostrEvent, UnsignedEvent } from 'nostr-tools/pure';
 import { ToonRoutingMeta } from '@toon-protocol/core/toon';
 import { TransportConfig } from '@toon-protocol/connector';
 export { TransportConfig } from '@toon-protocol/connector';
-import { A as AccumulatedClaim } from './swap-Oub-0vqU.js';
-export { a as AdaptiveDeltaController, b as AdaptiveDeltaControllerConfig, D as DecryptFulfillClaimParams, E as EncryptFulfillClaimParams, c as EncryptFulfillClaimResult, I as InMemorySwapControllerStateStore, J as JsonFileSwapControllerStateStore, P as PacketObservation, d as PacketProgress, e as PacketResolution, R as RateMonitorCallback, S as StreamSwapAdaptiveController, f as StreamSwapController, g as StreamSwapParams, h as StreamSwapResult, i as SwapControllerError, j as SwapControllerState, k as SwapControllerStateStore, U as UnwrapSwapPacketFromToonParams, l as UnwrapSwapPacketParams, m as UnwrapSwapPacketResult, W as WrapSwapPacketParams, n as WrapSwapPacketResult, o as WrapSwapPacketToToonParams, p as WrapSwapPacketToToonResult, _ as __streamSwapTesting, q as decryptFulfillClaim, r as encryptFulfillClaim, s as isSwapControllerState, t as streamSwap, u as streamSwapControlled, v as swapControllerStateKey, w as unwrapSwapPacket, x as unwrapSwapPacketFromToon, y as wrapSwapPacket, z as wrapSwapPacketToToon } from './swap-Oub-0vqU.js';
+import { R as ReceiptSessionStoreLike, A as AccumulatedClaim } from './swap-PFQTJZA7.js';
+export { a as AdaptiveDeltaController, b as AdaptiveDeltaControllerConfig, B as BoundedReceiptSessions, D as DEFAULT_RECEIPT_SESSIONS_CAP, c as DecryptFulfillClaimParams, E as EncryptFulfillClaimParams, d as EncryptFulfillClaimResult, I as InMemorySwapControllerStateStore, J as JsonFileSwapControllerStateStore, P as PacketObservation, e as PacketProgress, f as PacketResolution, g as RateMonitorCallback, h as ReceiptAddResult, i as ReceiptChainTracker, j as ReceiptSessionState, S as STREAM_RECEIPT_SIGNING_TAG, k as STREAM_RECEIPT_VERSION, l as StreamReceipt, m as StreamReceiptChain, n as StreamReceiptFields, o as StreamSwapAdaptiveController, p as StreamSwapController, q as StreamSwapParams, r as StreamSwapResult, s as SwapControllerError, t as SwapControllerState, u as SwapControllerStateStore, U as UnwrapSwapPacketFromToonParams, v as UnwrapSwapPacketParams, w as UnwrapSwapPacketResult, W as WrapSwapPacketParams, x as WrapSwapPacketResult, y as WrapSwapPacketToToonParams, z as WrapSwapPacketToToonResult, _ as __streamSwapTesting, C as decryptFulfillClaim, F as encodeReceiptSigningPayload, G as encryptFulfillClaim, H as isSwapControllerState, K as isValidStreamNonce, L as issueSessionReceipt, M as parseStreamReceipt, N as serializeReceiptChain, O as signStreamReceipt, Q as streamSwap, T as streamSwapControlled, V as swapControllerStateKey, X as unwrapSwapPacket, Y as unwrapSwapPacketFromToon, Z as verifyStreamReceipt, $ as wrapSwapPacket, a0 as wrapSwapPacketToToon } from './swap-PFQTJZA7.js';
 
 /**
  * Unified identity module for @toon-protocol/sdk.
@@ -1527,6 +1527,27 @@ interface CreateSwapHandlerConfig {
      * satisfies the contract.
      */
     seenPacketIds?: SeenPacketIdsLike;
+    /**
+     * Optional dedicated receipt signing key (issue #84, rfc-0039 stream
+     * receipts; rolling-swap spec §7.2). 32-byte secp256k1 secret key used to
+     * BIP-340-sign the per-fulfill {@link StreamReceipt}. When OMITTED,
+     * receipts are signed with `recipientSecretKey` — the maker's Nostr
+     * identity key — so senders verify against the `swapPubkey` they already
+     * discovered via kind:10032. Provide a separate key when the receipt
+     * signer should be provisioned independently of the identity key (e.g.
+     * the swap#47 coupled engine binding receipts to the chain-B claim
+     * signer); senders then verify via `StreamSwapParams.receiptPubkey`.
+     */
+    receiptSecretKey?: Uint8Array;
+    /**
+     * Optional receipt session store (issue #84). Tracks per-`streamNonce`
+     * `{seq, cumulativeDelivered}` so receipt totals are monotone within a
+     * session. Defaults to a {@link BoundedReceiptSessions} in-memory LRU.
+     * Operators that persist claims should back this with the same storage so
+     * receipt state survives restarts alongside the claim stream (a lost
+     * session restarts at seq 1, which senders reject as a forked chain).
+     */
+    receiptSessions?: ReceiptSessionStoreLike;
     /** Optional pino-compatible logger. Defaults to a no-op logger. */
     logger?: SwapHandlerLogger;
 }
@@ -1767,7 +1788,10 @@ interface SwapSignerConfig {
      */
     address: string;
     /**
-     * On-chain payment-channel contract address (EVM-only).
+     * On-chain payment-channel contract address (EVM-only). Required for EVM
+     * claims: it is the RLP `to` field AND the EIP-712 `verifyingContract` of the
+     * v2 balance-proof digest (connector#324 finding #1), so it now binds the
+     * signature to this exact deployment.
      */
     contractAddress?: string;
     /**
@@ -1775,7 +1799,9 @@ interface SwapSignerConfig {
      */
     programId?: string;
     /**
-     * EVM chain-id (decimal). Required for EVM claims — baked into RLP per EIP-155.
+     * EVM chain-id (decimal). Required for EVM claims — baked into RLP per EIP-155
+     * AND into the EIP-712 domain `chainId` of the v2 balance-proof digest
+     * (connector#324 finding #1), so the signature is valid on this chain only.
      */
     chainId?: number;
 }
@@ -1980,4 +2006,4 @@ interface StoreHealthResponse {
     jobsRecent: StoreJobsRecent;
 }
 
-export { AccumulatedClaim, type AddChunkResult, type ApplyRateParams, type ArweaveDvmConfig, type ArweaveUploadAdapter, type BuildSettlementTxParams, type BuildSettlementTxResult, type BuildSkillDescriptorConfig, ChunkManager, type ChunkManagerConfig, type ClaimIssuer, type CreateHandlerContextOptions, type CreateSwapHandlerConfig, type FromMnemonicOptions, GiftWrapError, type Handler, type HandlerContext, HandlerError, HandlerRegistry, type HandlerResponse, IdentityError, type IssueClaimParams, type IssueClaimResult, type MinaIdentity, type MinaSignerClientLike, type NodeConfig, NodeError, type NodeIdentity, type PaymentHandlerBridgeConfig, type PaymentRequest, type PaymentResponse, type PrefixClaimHandlerOptions, PricingError, type PricingValidationResult, type PricingValidatorConfig, type PublishEventResult, type PublishableNode, type RateQuote, SWAP_HANDLER_REJECT_CODES, SWAP_HANDLER_REJECT_MESSAGES, type ServiceNode, type SettlementBundle, SettlementTxError, type SolanaIdentity, type StartResult, type StoreHealthResponse, type StoreJobsByKindEntry, type StoreJobsByStatus, type StoreJobsRecent, StreamSwapError, SwapHandlerError, type SwapHandlerLogger, type SwapSignerConfig, SwarmCoordinator, type SwarmCoordinatorOptions, type SwarmState, type ToonIdentity, TurboUploadAdapter, type UploadBlobChunkedOptions, type UploadBlobOptions, VerificationError, type VerificationPipelineConfig, type VerificationResult, type WorkflowEventStore, WorkflowOrchestrator, type WorkflowOrchestratorOptions, type WorkflowState, applyRate, base58Decode, base58Encode, buildSettlementTx, buildSkillDescriptor, createArweaveDvmHandler, createEventStorageHandler, createHandlerContext, createNode, createPaymentHandlerBridge, createPrefixClaimHandler, createPricingValidator, createSwapHandler, createVerificationPipeline, fillEvmSettlementTxGas, findSwapPair, fromMnemonic, fromMnemonicFull, fromSecretKey, generateMnemonic, generateSolanaKeypair, loadMinaSignerClient, uploadBlob, uploadBlobChunked, verifyAccumulatedClaim, verifyEd25519Signature, verifyMinaSignature };
+export { AccumulatedClaim, type AddChunkResult, type ApplyRateParams, type ArweaveDvmConfig, type ArweaveUploadAdapter, type BuildSettlementTxParams, type BuildSettlementTxResult, type BuildSkillDescriptorConfig, ChunkManager, type ChunkManagerConfig, type ClaimIssuer, type CreateHandlerContextOptions, type CreateSwapHandlerConfig, type FromMnemonicOptions, GiftWrapError, type Handler, type HandlerContext, HandlerError, HandlerRegistry, type HandlerResponse, IdentityError, type IssueClaimParams, type IssueClaimResult, type MinaIdentity, type MinaSignerClientLike, type NodeConfig, NodeError, type NodeIdentity, type PaymentHandlerBridgeConfig, type PaymentRequest, type PaymentResponse, type PrefixClaimHandlerOptions, PricingError, type PricingValidationResult, type PricingValidatorConfig, type PublishEventResult, type PublishableNode, type RateQuote, ReceiptSessionStoreLike, SWAP_HANDLER_REJECT_CODES, SWAP_HANDLER_REJECT_MESSAGES, type ServiceNode, type SettlementBundle, SettlementTxError, type SolanaIdentity, type StartResult, type StoreHealthResponse, type StoreJobsByKindEntry, type StoreJobsByStatus, type StoreJobsRecent, StreamSwapError, SwapHandlerError, type SwapHandlerLogger, type SwapSignerConfig, SwarmCoordinator, type SwarmCoordinatorOptions, type SwarmState, type ToonIdentity, TurboUploadAdapter, type UploadBlobChunkedOptions, type UploadBlobOptions, VerificationError, type VerificationPipelineConfig, type VerificationResult, type WorkflowEventStore, WorkflowOrchestrator, type WorkflowOrchestratorOptions, type WorkflowState, applyRate, base58Decode, base58Encode, buildSettlementTx, buildSkillDescriptor, createArweaveDvmHandler, createEventStorageHandler, createHandlerContext, createNode, createPaymentHandlerBridge, createPrefixClaimHandler, createPricingValidator, createSwapHandler, createVerificationPipeline, fillEvmSettlementTxGas, findSwapPair, fromMnemonic, fromMnemonicFull, fromSecretKey, generateMnemonic, generateSolanaKeypair, loadMinaSignerClient, uploadBlob, uploadBlobChunked, verifyAccumulatedClaim, verifyEd25519Signature, verifyMinaSignature };

package/dist/index.js

@@ -1,9 +1,14 @@
 import {
+  BoundedReceiptSessions,
+  DEFAULT_RECEIPT_SESSIONS_CAP,
   GiftWrapError,
   HandlerError,
   IdentityError,
   NodeError,
   PricingError,
+  ReceiptChainTracker,
+  STREAM_RECEIPT_SIGNING_TAG,
+  STREAM_RECEIPT_VERSION,
   SWAP_HANDLER_REJECT_CODES,
   SWAP_HANDLER_REJECT_MESSAGES,
   SettlementTxError,
@@ -16,6 +21,7 @@ import {
   base58Encode,
   createSwapHandler,
   decryptFulfillClaim,
+  encodeReceiptSigningPayload,
   encryptFulfillClaim,
   findSwapPair,
   fromMnemonic,
@@ -23,13 +29,19 @@ import {
   fromSecretKey,
   generateMnemonic,
   generateSolanaKeypair,
+  isValidStreamNonce,
+  issueSessionReceipt,
+  parseStreamReceipt,
+  serializeReceiptChain,
+  signStreamReceipt,
   streamSwap,
   streamSwapControlled,
   unwrapSwapPacket,
   unwrapSwapPacketFromToon,
+  verifyStreamReceipt,
   wrapSwapPacket,
   wrapSwapPacketToToon
-} from "./chunk-7LBYFU4L.js";
+} from "./chunk-RAZRWSJF.js";
 import "./chunk-UP2VWCW5.js";
 
 // src/handler-context.ts
@@ -2362,6 +2374,8 @@ import {
   bigintToBytes32BE,
   concatBytes,
   balanceProofHashEvm,
+  coopCloseHashEvm,
+  eip712DomainSeparatorEvm,
   balanceProofHashSolana,
   minaHashToField,
   balanceProofFieldsMina
@@ -2376,7 +2390,19 @@ var EVM_SETTLEMENT_FUNCTION_SELECTOR = keccak_256(
 var EVM_SETTLEMENT_EVENT_TOPIC = "0x" + bytesToHex(
   keccak_256(new TextEncoder().encode(EVM_SETTLEMENT_EVENT_SIGNATURE))
 );
-function recoverEvmSignerAddress(claim) {
+function recoverEvmSignerAddress(claim, chainId, verifyingContract) {
+  if (typeof chainId !== "number" || !Number.isInteger(chainId) || chainId <= 0) {
+    throw new SettlementTxError(
+      "INVALID_INPUT",
+      `EVM v2 digest requires a positive integer chainId, got ${chainId}`
+    );
+  }
+  if (!verifyingContract) {
+    throw new SettlementTxError(
+      "INVALID_INPUT",
+      "EVM v2 digest requires verifyingContract (RollingSwapChannel address)"
+    );
+  }
   if (claim.channelId === void 0 || claim.cumulativeAmount === void 0 || claim.nonce === void 0 || claim.recipient === void 0) {
     throw new SettlementTxError(
       "MISSING_SETTLEMENT_METADATA",
@@ -2403,6 +2429,7 @@ function recoverEvmSignerAddress(claim) {
   try {
     const channelIdBytes = hexToBytes2(claim.channelId);
     const recipientBytes = hexToBytes2(claim.recipient);
+    const verifyingContractBytes = hexToBytes2(verifyingContract);
     if (channelIdBytes.length !== 32) {
       throw new Error(
         `channelId must be 32 bytes (got ${channelIdBytes.length})`
@@ -2413,11 +2440,18 @@ function recoverEvmSignerAddress(claim) {
         `recipient must be 20 bytes (got ${recipientBytes.length})`
       );
     }
+    if (verifyingContractBytes.length !== 20) {
+      throw new Error(
+        `verifyingContract must be 20 bytes (got ${verifyingContractBytes.length})`
+      );
+    }
     msgHash = balanceProofHashEvm(
       channelIdBytes,
       BigInt(claim.cumulativeAmount),
       BigInt(claim.nonce),
-      recipientBytes
+      recipientBytes,
+      BigInt(chainId),
+      verifyingContractBytes
     );
     const sig = secp256k1.Signature.fromBytes(
       compactRS,
@@ -2719,8 +2753,8 @@ function rlpDecodeList(buf) {
   }
   return items;
 }
-function verifyEvmClaimSignature(claim, expectedAddress) {
-  const recovered = recoverEvmSignerAddress(claim);
+function verifyEvmClaimSignature(claim, expectedAddress, chainId, verifyingContract) {
+  const recovered = recoverEvmSignerAddress(claim, chainId, verifyingContract);
   const expected = expectedAddress.toLowerCase();
   return {
     valid: recovered.toLowerCase() === expected,
@@ -3086,7 +3120,9 @@ function buildSettlementTx(params) {
       try {
         const { valid, recovered } = verifyEvmClaimSignature(
           claim,
-          signer.address
+          signer.address,
+          signer.chainId,
+          signer.contractAddress
         );
         if (!valid) {
           rejected.push({
@@ -3336,10 +3372,18 @@ function buildSettlementTx(params) {
 function verifyAccumulatedClaim(claim, signer, minaSignerClient) {
   const kind = chainKindOf(claim.pair.to.chain);
   if (kind === "evm") {
+    if (typeof signer.chainId !== "number" || !Number.isInteger(signer.chainId) || signer.chainId <= 0 || !signer.contractAddress) {
+      return {
+        valid: false,
+        reason: "INVALID_INPUT: EVM signer requires chainId (positive integer) + contractAddress for the v2 EIP-712 digest (connector#324 finding #1)"
+      };
+    }
     try {
       const { valid, recovered } = verifyEvmClaimSignature(
         claim,
-        signer.address
+        signer.address,
+        signer.chainId,
+        signer.contractAddress
       );
       if (valid) return { valid: true };
       return {
@@ -3394,7 +3438,9 @@ function verifyAccumulatedClaim(claim, signer, minaSignerClient) {
 }
 export {
   AdaptiveDeltaController,
+  BoundedReceiptSessions,
   ChunkManager,
+  DEFAULT_RECEIPT_SESSIONS_CAP,
   GiftWrapError,
   HandlerError,
   HandlerRegistry,
@@ -3403,6 +3449,9 @@ export {
   JsonFileSwapControllerStateStore,
   NodeError,
   PricingError,
+  ReceiptChainTracker,
+  STREAM_RECEIPT_SIGNING_TAG,
+  STREAM_RECEIPT_VERSION,
   SWAP_HANDLER_REJECT_CODES,
   SWAP_HANDLER_REJECT_MESSAGES,
   SettlementTxError,
@@ -3424,6 +3473,7 @@ export {
   buildSettlementTx,
   buildSkillDescriptor,
   concatBytes,
+  coopCloseHashEvm,
   createArweaveDvmHandler,
   createEventStorageHandler,
   createHandlerContext,
@@ -3434,6 +3484,8 @@ export {
   createSwapHandler,
   createVerificationPipeline,
   decryptFulfillClaim,
+  eip712DomainSeparatorEvm,
+  encodeReceiptSigningPayload,
   encryptFulfillClaim,
   fillEvmSettlementTxGas,
   findSwapPair,
@@ -3444,8 +3496,13 @@ export {
   generateSolanaKeypair,
   hexToBytes2 as hexToBytes,
   isSwapControllerState,
+  isValidStreamNonce,
+  issueSessionReceipt,
   loadMinaSignerClient,
   minaHashToField,
+  parseStreamReceipt,
+  serializeReceiptChain,
+  signStreamReceipt,
   streamSwap,
   streamSwapControlled,
   swapControllerStateKey,
@@ -3456,6 +3513,7 @@ export {
   verifyAccumulatedClaim,
   verifyEd25519Signature,
   verifyMinaSignature,
+  verifyStreamReceipt,
   wrapSwapPacket,
   wrapSwapPacketToToon
 };