@trust402/sdk 0.3.1 → 0.4.1

package/dist/create.d.ts

@@ -0,0 +1,15 @@
+import type { LemmaClient, LemmaClientConfig } from "@lemmaoracle/spec";
+import type { Signer } from "./pay-fetch.js";
+export type ClientConfig = LemmaClientConfig & Readonly<{
+    /** EIP-1193 signer provider (browser wallet or viem WalletClient). */
+    getSigner?: () => Promise<Signer>;
+    /** Called when a 402 payment is initiated. */
+    onPayment?: (info: Readonly<{
+        amount: string;
+        resource: string;
+    }>) => void;
+    /** Max payment in micro-USDC the fetcher will accept (default 5000 = $0.005). */
+    maxAmountMicroUsdc?: number;
+}>;
+export declare const create: (config: ClientConfig) => LemmaClient;
+//# sourceMappingURL=create.d.ts.map

package/dist/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../src/create.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAG7C,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAC1C,QAAQ,CAAC;IACP,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC;IAC3E,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAIL,eAAO,MAAM,MAAM,GAAI,QAAQ,YAAY,KAAG,WAkB7C,CAAC"}

package/dist/create.js

@@ -0,0 +1,18 @@
+/**
+ * Trust402 client factory — wraps @lemmaoracle/sdk's create() with:
+ *   - default apiBase = https://trust402.lemma.workers.dev
+ *   - automatic x402 payment handling when getSigner is provided
+ *
+ * When getSigner is omitted, the client uses plain fetch (no x402).
+ */
+import { create as lemmaCreate } from "@lemmaoracle/sdk";
+import { payFetch } from "./pay-fetch.js";
+const DEFAULT_API_BASE = "https://trust402.lemma.workers.dev";
+export const create = (config) => {
+    const { getSigner, onPayment, maxAmountMicroUsdc, apiBase, ...rest } = config;
+    const fetcher = getSigner !== undefined
+        ? payFetch({ getSigner, onPayment, maxAmountMicroUsdc })
+        : undefined;
+    return lemmaCreate({ ...rest, apiBase: apiBase ?? DEFAULT_API_BASE }, fetcher);
+};
+//# sourceMappingURL=create.js.map

package/dist/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../src/create.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAY1C,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAE9D,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAe,EAAE;IAC1D,MAAM,EACJ,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,OAAO,EACP,GAAG,IAAI,EACR,GAAG,MAAM,CAAC;IAEX,MAAM,OAAO,GACX,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,WAAW,CAChB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,EACjD,OAAO,CACR,CAAC;AACJ,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,4 @@
 export * from "./trust402.js";
+export { create } from "./create.js";
+export type { ClientConfig } from "./create.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,2 +1,3 @@
 export * from "./trust402.js";
+export { create } from "./create.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/pay-fetch.d.ts

@@ -0,0 +1,26 @@
+export type Eip1193Provider = Readonly<{
+    request: (args: Readonly<{
+        method: string;
+        params?: readonly unknown[];
+    }>) => Promise<unknown>;
+}>;
+export type Signer = Readonly<{
+    provider: Eip1193Provider;
+    address: string;
+}>;
+export type PayFetchOptions = Readonly<{
+    getSigner: () => Promise<Signer>;
+    maxAmountMicroUsdc?: number;
+    onPayment?: (info: Readonly<{
+        amount: string;
+        resource: string;
+    }>) => void;
+}>;
+export type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * Wrap fetch with x402 payment handling: on a 402 challenge that passes all
+ * guardrails, sign an EIP-3009 TransferWithAuthorization and retry exactly
+ * once with the X-PAYMENT header. Anything else passes through untouched.
+ */
+export declare const payFetch: (options: PayFetchOptions) => FetchLike;
+//# sourceMappingURL=pay-fetch.d.ts.map

package/dist/pay-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay-fetch.d.ts","sourceRoot":"","sources":["../src/pay-fetch.ts"],"names":[],"mappings":"AAmDA,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,OAAO,EAAE,CACP,IAAI,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;KAAE,CAAC,KAC5D,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB,CAAC,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9E,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AA+IvB;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GAAI,SAAS,eAAe,KAAG,SA8DjD,CAAC"}

package/dist/pay-fetch.js

@@ -0,0 +1,189 @@
+/* ------------------------------------------------------------------ */
+/*  Constants                                                          */
+/* ------------------------------------------------------------------ */
+const USDC_ADDRESSES = Object.freeze({
+    "base-sepolia": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    base: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+});
+const X402_CHAIN_IDS = Object.freeze({
+    "base-sepolia": 84532,
+    base: 8453,
+});
+const DEFAULT_MAX_AMOUNT_MICRO_USDC = 5000;
+const CHAIN_METADATA = Object.freeze({
+    "base-sepolia": {
+        chainName: "Base Sepolia",
+        nativeCurrency: { name: "Sepolia Ether", symbol: "ETH", decimals: 18 },
+        rpcUrls: ["https://sepolia.base.org"],
+        blockExplorerUrls: ["https://sepolia.basescan.org"],
+    },
+    base: {
+        chainName: "Base",
+        nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
+        rpcUrls: ["https://mainnet.base.org"],
+        blockExplorerUrls: ["https://basescan.org"],
+    },
+});
+/* ------------------------------------------------------------------ */
+/*  Helpers                                                            */
+/* ------------------------------------------------------------------ */
+const requestUrl = (input) => {
+    const raw = typeof input === "string"
+        ? input
+        : input instanceof URL
+            ? input.href
+            : input.url;
+    try {
+        return new URL(raw, typeof location !== "undefined" ? location.href : undefined);
+    }
+    catch {
+        return null;
+    }
+};
+const requestMethod = (input, init) => {
+    const method = init?.method ??
+        (typeof Request !== "undefined" && input instanceof Request
+            ? input.method
+            : "GET");
+    return method.toUpperCase();
+};
+/** Requirements come from the X-PAYMENT-REQUIREMENTS header, falling back to the body's accepts. */
+const parseRequirements = async (res) => {
+    const header = res.headers.get("X-PAYMENT-REQUIREMENTS");
+    if (header !== null) {
+        try {
+            return JSON.parse(header);
+        }
+        catch {
+            // fall through to the body
+        }
+    }
+    try {
+        const body = (await res.clone().json());
+        return body.accepts?.find((r) => r.scheme === "exact") ?? null;
+    }
+    catch {
+        return null;
+    }
+};
+const isKnownNetwork = (network) => network in X402_CHAIN_IDS;
+const isPayable = (url, method, body, reqs, maxAmountMicroUsdc) => typeof location !== "undefined" &&
+    url.origin === location.origin &&
+    url.pathname.startsWith("/v1/") &&
+    method === "POST" &&
+    (body === undefined || typeof body === "string") &&
+    Number(reqs.maxAmountRequired) <= maxAmountMicroUsdc &&
+    isKnownNetwork(reqs.network) &&
+    reqs.asset === USDC_ADDRESSES[reqs.network] &&
+    Boolean(reqs.extra?.name) &&
+    Boolean(reqs.extra?.version);
+const randomNonce = () => {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    return `0x${Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("")}`;
+};
+const ensureChain = async (provider, network) => {
+    const chainId = `0x${X402_CHAIN_IDS[network].toString(16)}`;
+    try {
+        await provider.request({
+            method: "wallet_switchEthereumChain",
+            params: [{ chainId }],
+        });
+    }
+    catch (e) {
+        const code = e?.code;
+        if (code === 4902 || code === -32603) {
+            const meta = CHAIN_METADATA[network];
+            await provider.request({
+                method: "wallet_addEthereumChain",
+                params: [{ chainId, ...meta }],
+            });
+        }
+        else {
+            throw e;
+        }
+    }
+};
+const transferWithAuthorizationTypedData = (reqs, network, authorization) => ({
+    types: {
+        EIP712Domain: [
+            { name: "name", type: "string" },
+            { name: "version", type: "string" },
+            { name: "chainId", type: "uint256" },
+            { name: "verifyingContract", type: "address" },
+        ],
+        TransferWithAuthorization: [
+            { name: "from", type: "address" },
+            { name: "to", type: "address" },
+            { name: "value", type: "uint256" },
+            { name: "validAfter", type: "uint256" },
+            { name: "validBefore", type: "uint256" },
+            { name: "nonce", type: "bytes32" },
+        ],
+    },
+    primaryType: "TransferWithAuthorization",
+    domain: {
+        name: reqs.extra.name,
+        version: reqs.extra.version,
+        chainId: X402_CHAIN_IDS[network],
+        verifyingContract: reqs.asset,
+    },
+    message: { ...authorization },
+});
+/* ------------------------------------------------------------------ */
+/*  payFetch                                                           */
+/* ------------------------------------------------------------------ */
+/**
+ * Wrap fetch with x402 payment handling: on a 402 challenge that passes all
+ * guardrails, sign an EIP-3009 TransferWithAuthorization and retry exactly
+ * once with the X-PAYMENT header. Anything else passes through untouched.
+ */
+export const payFetch = (options) => async (input, init) => {
+    const res = await fetch(input, init);
+    if (res.status !== 402)
+        return res;
+    const url = requestUrl(input);
+    if (url === null)
+        return res;
+    const reqs = await parseRequirements(res);
+    if (reqs === null)
+        return res;
+    const maxAmount = options.maxAmountMicroUsdc ?? DEFAULT_MAX_AMOUNT_MICRO_USDC;
+    if (!isPayable(url, requestMethod(input, init), init?.body, reqs, maxAmount)) {
+        return res;
+    }
+    const network = reqs.network;
+    options.onPayment?.({
+        amount: reqs.maxAmountRequired,
+        resource: reqs.resource,
+    });
+    const signer = await options.getSigner();
+    await ensureChain(signer.provider, network);
+    // Re-resolve signer after chain switch — wallet providers (MetaMask)
+    // may reset internal state during network transitions, making the
+    // pre-switch provider reference stale for eth_signTypedData_v4.
+    const freshSigner = await options.getSigner();
+    const authorization = {
+        from: freshSigner.address,
+        to: reqs.payTo,
+        value: reqs.maxAmountRequired,
+        validAfter: "0",
+        validBefore: String(Math.floor(Date.now() / 1000) + reqs.maxTimeoutSeconds),
+        nonce: randomNonce(),
+    };
+    const typedData = transferWithAuthorizationTypedData(reqs, network, authorization);
+    const signature = String(await freshSigner.provider.request({
+        method: "eth_signTypedData_v4",
+        params: [freshSigner.address, JSON.stringify(typedData)],
+    }));
+    const payment = {
+        x402Version: 1,
+        scheme: "exact",
+        network,
+        payload: { signature, authorization },
+    };
+    const headers = new Headers(init?.headers);
+    headers.set("X-PAYMENT", btoa(JSON.stringify(payment)));
+    return fetch(input, { ...init, headers });
+};
+//# sourceMappingURL=pay-fetch.js.map

package/dist/pay-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay-fetch.js","sourceRoot":"","sources":["../src/pay-fetch.ts"],"names":[],"mappings":"AAcA,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,MAAM,cAAc,GAA0C,MAAM,CAAC,MAAM,CAAC;IAC1E,cAAc,EAAE,4CAA4C;IAC5D,IAAI,EAAE,4CAA4C;CACnD,CAAC,CAAC;AAEH,MAAM,cAAc,GAA0C,MAAM,CAAC,MAAM,CAAC;IAC1E,cAAc,EAAE,KAAK;IACrB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAE3C,MAAM,cAAc,GAEhB,MAAM,CAAC,MAAM,CAAC;IAChB,cAAc,EAAE;QACd,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QACtE,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,iBAAiB,EAAE,CAAC,8BAA8B,CAAC;KACpD;IACD,IAAI,EAAE;QACJ,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC9D,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;KAC5C;CACF,CAAC,CAAC;AAyBH,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,MAAM,UAAU,GAAG,CAAC,KAAwB,EAAc,EAAE;IAC1D,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,YAAY,GAAG;YACpB,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CACZ,GAAG,EACH,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,KAAwB,EACxB,IAAkB,EACV,EAAE;IACV,MAAM,MAAM,GACV,IAAI,EAAE,MAAM;QACZ,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,KAAK,YAAY,OAAO;YACzD,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,KAAK,EAC7B,GAAa,EACwB,EAAE;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAwB,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAEpC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAe,EAA0B,EAAE,CACjE,OAAO,IAAI,cAAc,CAAC;AAE5B,MAAM,SAAS,GAAG,CAChB,GAAQ,EACR,MAAc,EACd,IAAiC,EACjC,IAAyB,EACzB,kBAA0B,EACjB,EAAE,CACX,OAAO,QAAQ,KAAK,WAAW;IAC/B,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;IAC9B,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;IAC/B,MAAM,KAAK,MAAM;IACjB,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;IAChD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,kBAAkB;IACpD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAE/B,MAAM,WAAW,GAAG,GAAW,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,KAAK,EACvB,QAAyB,EACzB,OAAoB,EACL,EAAE;IACjB,MAAM,OAAO,GAAG,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,4BAA4B;YACpC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,IAAI,GAAI,CAAyC,EAAE,IAAI,CAAC;QAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,yBAAyB;gBACjC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kCAAkC,GAAG,CACzC,IAAyB,EACzB,OAAoB,EACpB,aAAoC,EACD,EAAE,CAAC,CAAC;IACvC,KAAK,EAAE;QACL,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;YACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/C;QACD,yBAAyB,EAAE;YACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;YACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;YACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC;KACF;IACD,WAAW,EAAE,2BAA2B;IACxC,MAAM,EAAE;QACN,IAAI,EAAE,IAAI,CAAC,KAAM,CAAC,IAAI;QACtB,OAAO,EAAE,IAAI,CAAC,KAAM,CAAC,OAAO;QAC5B,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,iBAAiB,EAAE,IAAI,CAAC,KAAK;KAC9B;IACD,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE;CAC9B,CAAC,CAAC;AAEH,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAwB,EAAa,EAAE,CAC9D,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAEnC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAE7B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAE9B,MAAM,SAAS,GACb,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IAC9D,IACE,CAAC,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EACxE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,OAAO,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,EAAE,IAAI,CAAC,iBAAiB;QAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,qEAAqE;IACrE,kEAAkE;IAClE,gEAAgE;IAChE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,aAAa,GAA0B;QAC3C,IAAI,EAAE,WAAW,CAAC,OAAO;QACzB,EAAE,EAAE,IAAI,CAAC,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,iBAAiB;QAC7B,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,MAAM,CACjB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CACvD;QACD,KAAK,EAAE,WAAW,EAAE;KACrB,CAAC;IACF,MAAM,SAAS,GAAG,kCAAkC,CAClD,IAAI,EACJ,OAAO,EACP,aAAa,CACd,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CACtB,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,EAAE,sBAAsB;QAC9B,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;KACzD,CAAC,CACH,CAAC;IAEF,MAAM,OAAO,GAAmB;QAC9B,WAAW,EAAE,CAAC;QACd,MAAM,EAAE,OAAO;QACf,OAAO;QACP,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;KACtC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC"}

package/dist/pay-types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * x402 payment types — inlined to avoid a dependency on @lemmaoracle/workers-shared.
+ * Server-side x402 gate logic (facilitator, settle/verify) lives in workers-shared;
+ * the SDK only needs the client-side types for signing payments.
+ */
+export type X402Network = "base-sepolia" | "base";
+export type Eip712Domain = Readonly<{
+    name: string;
+    version: string;
+}>;
+export type ExactEvmAuthorization = Readonly<{
+    from: string;
+    to: string;
+    value: string;
+    validAfter: string;
+    validBefore: string;
+    nonce: string;
+}>;
+export type PaymentPayload = Readonly<{
+    x402Version: number;
+    scheme: string;
+    network: X402Network | string;
+    payload: Readonly<Record<string, unknown>>;
+}>;
+/** x402 v1 requirements (used by x402.org facilitator). */
+export type PaymentRequirements = Readonly<{
+    scheme: string;
+    network: X402Network;
+    maxAmountRequired: string;
+    payTo: string;
+    asset: string;
+    resource: string;
+    description: string;
+    mimeType: string;
+    maxTimeoutSeconds: number;
+    extra?: Eip712Domain;
+}>;
+//# sourceMappingURL=pay-types.d.ts.map

package/dist/pay-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay-types.d.ts","sourceRoot":"","sources":["../src/pay-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5C,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB,CAAC,CAAC"}

package/dist/pay-types.js

@@ -0,0 +1,7 @@
+/**
+ * x402 payment types — inlined to avoid a dependency on @lemmaoracle/workers-shared.
+ * Server-side x402 gate logic (facilitator, settle/verify) lives in workers-shared;
+ * the SDK only needs the client-side types for signing payments.
+ */
+export {};
+//# sourceMappingURL=pay-types.js.map

package/dist/pay-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay-types.js","sourceRoot":"","sources":["../src/pay-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trust402/sdk",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -24,11 +24,17 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "type-check": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint 'src/**/*.ts'",
+    "test": "vitest run"
+  },
   "dependencies": {
+    "@lemmaoracle/sdk": "^0.0.37",
+    "@lemmaoracle/spec": "^0.0.36",
     "@noble/hashes": "^1.7.0",
-    "poseidon-lite": "^0.2.0",
-    "@lemmaoracle/sdk": "0.0.36",
-    "@lemmaoracle/spec": "0.0.35"
+    "poseidon-lite": "^0.2.0"
   },
   "devDependencies": {
     "@typescript-eslint/eslint-plugin": "^8.56.1",
@@ -38,11 +44,5 @@
     "eslint-plugin-functional": "^9.0.4",
     "typescript": "^5.5.0",
     "vitest": "^2.1.0"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "type-check": "tsc -p tsconfig.json --noEmit",
-    "lint": "eslint 'src/**/*.ts'",
-    "test": "vitest run"
   }
-}
+}

package/LICENSE

@@ -1,80 +0,0 @@
-Business Source License 1.1
-
-License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
-"Business Source License" is a trademark of MariaDB Corporation Ab.
-
-Parameters
-
-Licensor:             FRAME00 Inc.
-Additional Use Grant: You may use the Licensed Work for non-production
-                      purposes, including but not limited to evaluation,
-                      testing, research, and learning, including in
-                      hackathons, academic settings, and personal projects,
-                      provided that such use does not constitute a
-                      competing commercial service.
-Licensed Work:        lemmaoracle/lemma
-                     (the software in this repository, excluding packages
-                      that contain their own LICENSE file)
-Change Date:          2030-05-01
-
-Change License:       Apache License, Version 2.0
-
-Notice:
-
-The Licensed Work is provided under the Business Source License 1.1
-(BSL 1.1). You may not use the Licensed Work except in compliance with
-the BSL 1.1.
-
-You may produce and distribute the Licensed Work, in whole or in part,
-in Source or Object form, subject to the following conditions:
-
-1. You must give any other recipients of the Licensed Work a copy of
-   this License; and
-
-2. You must cause any modified files to carry prominent notices stating
-   that You changed the files; and
-
-3. You must retain, in the Source form of any Licensed Work that You
-   distribute, all copyright, patent, trademark, and attribution
-   notices from the Source form of the Licensed Work, excluding those
-   notices that do not pertain to any part of the Licensed Work; and
-
-4. You may not use the Licensed Work to create a competing commercial
-   service. A "competing commercial service" is a product or service
-   that provides substantially the same functionality as the Licensed
-   Work to third parties for commercial gain.
-
-5. After the Change Date, the Licensed Work will be licensed under the
-   Change License indicated above, and You may exercise the rights
-   granted under the Change License without restriction.
-
-THE LICENSED WORK IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-LICENSED WORK OR THE USE OR OTHER DEALINGS IN THE LICENSED WORK.
-
----
-
-This repository contains multiple packages under the `packages/` directory.
-Each package may have its own LICENSE file. If a package contains its own
-LICENSE file, that license takes precedence over this root LICENSE for the
-contents of that package directory.
-
-Package-specific licenses:
-
-  BUSL-1.1 (this license, with the same Change Date and Change License):
-    - packages/contracts
-    - packages/relay
-    - packages/passthrough
-
-  Apache-2.0:
-    - packages/sdk
-    - packages/spec
-    - packages/mcp
-    - packages/parser
-    - packages/x402
-
-  (packages/web is private and not distributed; all rights reserved.)