@voidly/session 1.0.0

package/dist/index.d.ts

@@ -0,0 +1,1348 @@
+// @voidly/session — GENERATED by scripts/build-types.mjs. Do not edit.
+//
+// The transitive closure of what src/index.ts exports, flattened into one
+// module. Server declarations are absent because nothing here reaches them.
+
+export declare function acceptHire(input: {
+    grantHash: string;
+    providerDid: string;
+    sign: Signer;
+    nowMs: number;
+    ttlMs?: number;
+    entropy?: SessionEntropy;
+}): Promise<{
+    ok: true;
+    acceptance: TaskAcceptanceEnvelope;
+    signature_base64: string;
+} | {
+    ok: false;
+    reason: string;
+}>;
+type AccountSpellingRefuseDetail = "grant_payer_account_not_canonical" | "grant_payee_account_not_canonical";
+export type AssembleAuthorizationRefusal = HireRefuseDetail | SignRefusal | "grant_hash_mismatch" | "authorization_asset_not_frozen_usdc" | "valid_after_not_safe_integer" | "authorization_entry_point_mismatch";
+export declare function assembleSignedReceiveAuthorization(input: AssembleSignedTransferAuthorizationInput): Promise<AssembleSignedReceiveAuthorizationResult>;
+export type AssembleSignedReceiveAuthorizationResult = {
+    ok: true;
+    signed: SignedReceiveAuthorization;
+    grantHash: string;
+} | {
+    ok: false;
+    reason: AssembleAuthorizationRefusal;
+    detail: string;
+};
+export declare function assembleSignedTransferAuthorization(input: AssembleSignedTransferAuthorizationInput): Promise<AssembleSignedTransferAuthorizationResult>;
+export interface AssembleSignedTransferAuthorizationInput {
+    readonly authorization: unknown;
+    readonly grant: TaskGrantEnvelope;
+    readonly nowMs: number;
+    readonly expectedGrantHash?: string;
+}
+export type AssembleSignedTransferAuthorizationResult = {
+    ok: true;
+    signed: SignedTransferAuthorization;
+    grantHash: string;
+} | {
+    ok: false;
+    reason: AssembleAuthorizationRefusal;
+    detail: string;
+};
+export declare function authenticateHireAcceptance(input: {
+    readonly raw: unknown;
+    readonly grant: TaskGrantEnvelope;
+    readonly grantHash: string;
+    readonly nowMs: number;
+}): Promise<AuthenticateHireAcceptanceResult>;
+export type AuthenticateHireAcceptanceResult = {
+    ok: true;
+    accepted: SessionHireAccepted;
+} | {
+    ok: false;
+    reason: HireRefuseDetail | "grant_hash_mismatch";
+};
+export declare const AUTHORIZATION_ENTRY_POINTS: readonly AuthorizationEntryPoint[];
+export declare const AUTHORIZATION_KEYS: readonly [
+    "scheme",
+    "entry_point",
+    "chain",
+    "asset",
+    "from",
+    "to",
+    "value",
+    "valid_after",
+    "valid_before",
+    "nonce",
+    "signature"
+];
+export declare const AUTHORIZATION_USED_TOPIC0 = "0x98de503528ee59b575ef0c0a2576a82497bfc029a5685b209e9ec333479b10a5";
+export declare function authorizationEntryPoint(authorization: {
+    readonly entry_point?: AuthorizationEntryPoint;
+}): AuthorizationEntryPoint | "unstated";
+export type AuthorizationEntryPoint = "transfer_with_authorization" | "receive_with_authorization";
+export declare function authorizationValidBeforeFor(grant: TaskGrantEnvelope): string | null;
+export declare function bindAuthorizationToGrant(authorization: PaymentAuthorization, grant: TaskGrantEnvelope, grantHash: string): Promise<HireRefuseDetail | null>;
+export type BroadcastTx = (request: TransactionRequest) => Promise<string> | string;
+export interface BuildAuthorizationInput {
+    chain: string;
+    from: string;
+    to: string;
+    value: string;
+    validAfter: number;
+    validBefore: number;
+    grantHash: string;
+}
+export type BuildCalldataResult = {
+    ok: true;
+    request: TransactionRequest;
+} | {
+    ok: false;
+    reason: CalldataRefusal;
+    detail: string;
+};
+export declare function buildHire(input: {
+    hirer: {
+        did: string;
+        signingPublicKeyBase64: string;
+        sign: Signer;
+    };
+    provider: VerifiedProvider;
+    service: {
+        ref: string;
+    };
+    task: {
+        brief: string;
+    };
+    price: {
+        chain: string;
+        asset: string;
+        payerAccount: string;
+        payeeAccount: string;
+        minAmount: string;
+        maxAmount: string;
+    };
+    ttl: {
+        offerMs: number;
+        grantMs: number;
+    };
+    nowMs: number;
+    entropy?: SessionEntropy;
+}): Promise<BuildHireResult>;
+export declare function buildHireMessage(wire: HireWire, authorization: PaymentAuthorization, sign: Signer): Promise<Validated<SessionHireMessage, HireRefuseDetail>>;
+export type BuildHireResult = {
+    ok: true;
+    wire: HireWire;
+    keep: HireKeep;
+} | {
+    ok: false;
+    reason: RedeemRejectReason | AccountSpellingRefuseDetail | ProviderTermsRejectReason;
+};
+export type BuildReceiveAuthorizationResult = {
+    ok: true;
+    typedData: ReceiveAuthorizationTypedData;
+} | {
+    ok: false;
+    reason: TransferAuthorizationRefusal;
+};
+export declare function buildReceiveAuthorizationTypedData(input: BuildAuthorizationInput): Promise<BuildReceiveAuthorizationResult>;
+export declare function buildReceivePaymentAuthorization(input: {
+    grant: TaskGrantEnvelope;
+    grantHash: string;
+    nowMs: number;
+    sign: SignReceiveTypedData;
+}): Promise<BuildReceivePaymentResult>;
+export type BuildReceivePaymentResult = {
+    ok: true;
+    authorization: PaymentAuthorization;
+    signed: SignedReceiveAuthorization;
+    grantHash: string;
+} | {
+    ok: false;
+    reason: HirePaymentRefusal;
+    detail: string;
+};
+export declare function buildReceiveWithAuthorizationCalldata(signed: SignedReceiveAuthorization): BuildCalldataResult;
+export declare function buildRecoveryRequest(input: {
+    grantHash: string;
+    requesterDid: string;
+    actionNonce: string;
+    nowMs: number;
+    ttlMs: number;
+    sign: Signer;
+}): Promise<{
+    ok: true;
+    request: TaskRecoveryRequest;
+    signature_base64: string;
+} | {
+    ok: false;
+    reason: SessionResultRejectReason;
+}>;
+export declare function buildRedemptionProofHeader(input: {
+    providerDid: string;
+    grantHash: string;
+    sign: Signer;
+    nowMs: number;
+    entropy?: SessionEntropy;
+}): Promise<{
+    name: string;
+    value: string;
+}>;
+export declare function buildSettlementHint(input: {
+    grantHash: string;
+    providerDid: string;
+    evidence: unknown;
+    nowMs: number;
+}): Promise<SettlementHintEnvelope>;
+export type BuildTransferAuthorizationResult = {
+    ok: true;
+    typedData: TransferAuthorizationTypedData;
+} | {
+    ok: false;
+    reason: TransferAuthorizationRefusal;
+};
+export declare function buildTransferAuthorizationTypedData(input: BuildAuthorizationInput): Promise<BuildTransferAuthorizationResult>;
+export declare function buildTransferPaymentAuthorization(input: {
+    grant: TaskGrantEnvelope;
+    grantHash: string;
+    nowMs: number;
+    sign: SignTypedData;
+}): Promise<BuildTransferPaymentResult>;
+export type BuildTransferPaymentResult = {
+    ok: true;
+    authorization: PaymentAuthorization;
+    signed: SignedTransferAuthorization;
+    grantHash: string;
+} | {
+    ok: false;
+    reason: HirePaymentRefusal;
+    detail: string;
+};
+export declare function buildTransferWithAuthorizationCalldata(signed: SignedTransferAuthorization): BuildCalldataResult;
+export declare function buildX402PaymentPayload(signed: SignedTransferAuthorization, matched: {
+    readonly x402Version: number;
+    readonly network: string;
+}): X402PaymentPayload;
+export declare function buildX402PaymentRequirements(signed: SignedTransferAuthorization, matched: {
+    readonly x402Version: number;
+    readonly network: string;
+}): Record<string, unknown>;
+export declare function caip2Of(caip10OrCaip19: string): string | null;
+export type CalldataRefusal = "unsupported_chain" | "malformed_authorization" | "malformed_signature";
+export declare function canonicalBytes(value: unknown): Uint8Array;
+export declare function canonicalize(value: unknown): string;
+declare const CAPSULE_ALG = "x25519-xsalsa20-poly1305+xsalsa20-poly1305";
+export declare const CAPSULE_NONCE_LENGTH = 24;
+export declare function checkSingleAuthorizationRelay(request: TransactionRequest, context?: SingleAuthorizationRelayContext): SingleAuthorizationCheck;
+export declare function compareDecimalStrings(a: string, b: string): number | null;
+type CostRefusal = "estimate_unavailable" | "gas_price_unavailable" | "balance_unavailable" | "relayer_cannot_pay_gas";
+export declare function createFacilitatorSubmitter(input: FacilitatorSubmitterInput): PaymentSubmitter;
+export declare function createPayeeRelayBroadcaster(input: PayeeRelayBroadcasterInput): (request: TransactionRequest) => Promise<string>;
+export declare function createReadOnlyEvmRpc(input: ReadOnlyEvmRpcInput): ReadOnlyEvmRpc;
+export declare function createSelfSubmitter(input: SelfSubmitterInput): PaymentSubmitter;
+export declare function decideFromSupported(args: {
+    readonly body: unknown;
+    readonly chain: string;
+    readonly url: string;
+    readonly httpStatus: number | null;
+}): FacilitatorPreflightResult;
+export declare function decodeRevertReason(data: unknown): string | null;
+export declare function deriveDidFromSigningKey(signingPublicKey: Uint8Array): string;
+export declare function destroySessionKey(key: SessionKey): void;
+export type DiscoveryTransportReason = "manifest_unreachable" | "manifest_not_json";
+export declare function encodeSessionProviderProof(envelope: SessionProviderProofEnvelope, signatureBase64: string): string;
+export declare function envelopeHash(env: object): Promise<string>;
+export declare function estimateRelayCost(input: {
+    readonly rpc: ReadOnlyEvmRpc;
+    readonly request: TransactionRequest;
+    readonly from: string;
+    readonly gasLimitMarginPercent: number;
+}): Promise<RelayCostResult>;
+export declare const EVM_USDC_EIP712_DOMAINS: ReadonlyMap<string, EvmUsdcDomain>;
+export interface EvmUsdcDomain {
+    readonly name: string;
+    readonly version: string;
+    readonly chainId: number;
+    readonly verifyingContract: string;
+    readonly domainSeparator: string;
+}
+export declare function exportSessionKeyBytes(key: SessionKey): Uint8Array | null;
+export declare const FACILITATOR_PREFLIGHT_SCHEMA = "voidly.pay.facilitator-preflight/v1";
+export interface FacilitatorPreflightInput {
+    readonly baseUrl: string;
+    readonly chain?: string;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+}
+export interface FacilitatorPreflightResult {
+    readonly schema: typeof FACILITATOR_PREFLIGHT_SCHEMA;
+    readonly verdict: PreflightVerdict;
+    readonly reason: PreflightReason;
+    readonly detail: string;
+    readonly chain: string;
+    readonly frozenAsset: string | null;
+    readonly url: string;
+    readonly httpStatus: number | null;
+    readonly matched: MatchedKind | null;
+    readonly observations: readonly PreflightObservation[];
+    readonly undetermined: readonly PreflightUndetermined[];
+}
+export interface FacilitatorSubmitterInput {
+    readonly preflight: FacilitatorPreflightResult;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+    readonly allowUnadvertisedTransferMethod?: boolean;
+}
+export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+export declare function fetchVerifiedProvider(input: FetchVerifiedProviderInput): Promise<FetchVerifiedProviderResult>;
+export interface FetchVerifiedProviderInput {
+    readonly manifestUrl: string;
+    readonly expectedProviderDid: string;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+}
+export type FetchVerifiedProviderResult = {
+    readonly ok: true;
+    readonly provider: VerifiedProvider;
+} | {
+    readonly ok: false;
+    readonly reason: VerifiedProviderRejectReason | DiscoveryTransportReason;
+    readonly detail: string;
+};
+export declare const FORBIDDEN_RPC_METHODS: readonly string[];
+export declare function frameBucketSize(totalBytes: number): number;
+export declare function hashArtifact(artifact: object): Promise<string>;
+export interface HireKeep {
+    sessionKey: SessionKey;
+    grant_hash: string;
+    offer_hash: string;
+    brief_commitment: string;
+}
+export type HirePaymentRefusal = SignRefusal | HireRefuseDetail | "grant_hash_mismatch";
+export type HireRefuseDetail = RedeemRejectReason | "hire_not_object" | "hire_schema_mismatch" | "hire_unexpected_field" | "hire_invalid_offer_signature_encoding" | "hire_invalid_grant_signature_encoding" | "hire_invalid_authorization_signature_encoding" | "authorization_signature_forged" | "authorization_not_object" | "authorization_unexpected_field" | "authorization_scheme_unsupported" | "authorization_entry_point_unsupported" | "authorization_entry_point_unstated" | "authorization_entry_point_not_accepted" | "provider_entry_points_unconfigured" | "stored_hire_bundle_mismatch" | "stored_hire_unreadable" | "ledger_read_failed" | "authorization_invalid_chain" | "authorization_invalid_asset" | "authorization_invalid_from" | "authorization_invalid_to" | "authorization_invalid_value" | "authorization_invalid_valid_after" | "authorization_invalid_valid_before" | "authorization_invalid_nonce" | "authorization_invalid_signature" | "authorization_chain_mismatch" | "authorization_asset_mismatch" | "authorization_payer_mismatch" | "authorization_payee_mismatch" | AccountSpellingRefuseDetail | "authorization_below_floor" | "authorization_over_ceiling" | "authorization_binding_mismatch" | "authorization_expiry_mismatch" | "authorization_valid_after_too_late" | "hirer_key_unresolved" | "hirer_key_not_the_registered_one" | "offer_signature_forged" | "grant_signature_forged" | "provider_did_not_ours" | "provider_signing_key_not_ours" | "provider_enc_key_not_ours" | "payee_account_not_ours" | "grant_already_expired" | "grant_window_too_short" | "price_under_provider_floor" | "provider_policy_refused" | "provider_not_accepting" | "ledger_write_failed";
+type HireRefuseReason = "hire_malformed" | "identity_unresolved" | "hirer_key_mismatch" | "invalid_hirer_signature" | "artifact_binding_broken" | "not_the_named_provider" | "authorization_invalid" | "authorization_entry_point_refused" | "grant_already_committed" | "price_below_floor" | "window_too_short" | "brief_rejected" | "service_unavailable" | "ledger_unavailable";
+export interface HireTerms {
+    readonly serviceRef: string;
+    readonly chain: string;
+    readonly asset: string;
+    readonly payerAccount: string;
+    readonly payeeAccount: string;
+    readonly minAmount: string;
+    readonly maxAmount: string;
+    readonly grantExpiresAtMs: number;
+    readonly offerExpiresAtMs: number;
+}
+export type HireWire = {
+    offer: SessionOfferEnvelope;
+    offer_signature_base64: string;
+    grant: TaskGrantEnvelope;
+    grant_signature_base64: string;
+    capsule: TaskCapsule;
+};
+export declare function importSessionKey(bytes: Uint8Array): SessionKey;
+declare const INSPECT_CUSTOM: unique symbol;
+export declare function isAllZero(bytes: Uint8Array): boolean;
+export declare function isCaip10(s: string): boolean;
+export declare function isCaip19(s: string): boolean;
+export declare function isCaip2(s: string): boolean;
+export declare function isPositiveDecimalString(s: string): boolean;
+export declare function isSessionParty(value: unknown): value is SessionParty;
+export declare function isVerifiedProvider(value: unknown): value is VerifiedProvider;
+export declare const KNOWN_ASSET_TRANSFER_METHODS: readonly [
+    "eip3009",
+    "permit2",
+    "erc7710"
+];
+export type ManifestRejectReason = "manifest_not_object" | "manifest_schema_mismatch" | "manifest_unexpected_field" | "manifest_field_malformed" | "manifest_signature_missing" | "manifest_signature_malformed" | "manifest_signature_invalid" | "manifest_did_not_derived" | "manifest_did_not_pinned";
+export interface MatchedKind {
+    readonly x402Version: number;
+    readonly scheme: string;
+    readonly network: string;
+    readonly resolvedChain: string;
+    readonly assetTransferMethod: string | null;
+}
+export declare const MAX_BRIEF_LENGTH: number;
+export declare const MAX_CLOCK_SKEW_MS: number;
+export declare const MAX_GRANT_TTL_MS: number;
+export declare const MAX_OFFER_TTL_MS: number;
+export declare const MAX_RESULT_LENGTH: number;
+export declare const MAX_SERVICE_REF_LENGTH = 128;
+export declare const MIN_GRANT_TTL_MS: number;
+export declare const MIN_NONCE_LENGTH = 16;
+export declare function openBrief(input: {
+    wire: HireWire;
+    attestation: unknown;
+    attestationSignatureBase64: string;
+    attestorSigningPublicKey: Uint8Array;
+    hirerSigningPublicKey: Uint8Array;
+    providerDid: string;
+    recipientEncSecretKey: Uint8Array;
+    nowMs: number;
+}): Promise<ProviderOpenResult>;
+export declare function openDeliveredResult(input: {
+    readonly receipt: unknown;
+    readonly signatureBase64: string;
+    readonly resultCapsule: unknown;
+    readonly grant: TaskGrantEnvelope;
+    readonly grantHash: string;
+    readonly sessionKey: SessionKey;
+    readonly nowMs: number;
+}): Promise<OpenDeliveredResultOutcome>;
+export type OpenDeliveredResultOutcome = {
+    kind: "opened";
+    result: string;
+    receipt: TaskDeliveryReceipt;
+} | {
+    kind: "unopenable";
+    receipt: TaskDeliveryReceipt;
+} | {
+    kind: "unverifiable";
+    reason: OpenDeliveredResultRefusal;
+};
+export type OpenDeliveredResultRefusal = "grant_hash_mismatch" | SessionResultRejectReason | "delivery_grant_mismatch";
+export interface PayeeRelayBroadcasterInput {
+    readonly rpc: ReadOnlyEvmRpc;
+    readonly relayerAddress: string;
+    readonly send: SendRelayTransaction;
+    readonly gasLimitMarginPercent: number;
+}
+export declare function payForGrant(options: PayForGrantOptions): Promise<PayForGrantResult>;
+export interface PayForGrantOptions {
+    readonly grant: TaskGrantEnvelope;
+    readonly grantHash: string;
+    readonly nowMs: number;
+    readonly signer: SignTypedData;
+    readonly facilitator?: {
+        readonly baseUrl: string;
+        readonly fetchImpl: FetchLike;
+    };
+    readonly broadcast?: BroadcastTx;
+    readonly allowUnadvertisedTransferMethod?: boolean;
+    readonly signal?: AbortSignal;
+}
+export type PayForGrantRefusal = HirePaymentRefusal | SubmitRefusal | "facilitator_permit2" | "facilitator_unusable" | "facilitator_unknown";
+export type PayForGrantResult = {
+    ok: true;
+    transactionHash: string;
+    authorization: PaymentAuthorization;
+    signed: SignedTransferAuthorization;
+    preflight: FacilitatorPreflightResult | null;
+} | {
+    ok: false;
+    reason: PayForGrantRefusal;
+    detail: string;
+    unsigned: boolean;
+    preflight: FacilitatorPreflightResult | null;
+};
+export declare const PAYMENT_AUTHORIZATION_SCHEME = "eip3009";
+export type PaymentAuthorization = {
+    scheme: typeof PAYMENT_AUTHORIZATION_SCHEME;
+    entry_point?: AuthorizationEntryPoint;
+    chain: string;
+    asset: string;
+    from: string;
+    to: string;
+    value: string;
+    valid_after: string;
+    valid_before: string;
+    nonce: string;
+    signature: string;
+};
+export interface PaymentSubmitter {
+    readonly kind: "facilitator" | "self";
+    submit(signed: SignedTransferAuthorization): Promise<SubmitResult>;
+}
+export declare function postDeliver(ep: SessionEndpoint, input: {
+    wire: HireWire;
+    receipt: TaskDeliveryReceipt;
+    receiptSignatureBase64: string;
+    resultCapsule: TaskResultCapsule;
+}): Promise<SessionResponse>;
+export declare function postReattest(ep: SessionEndpoint, input: {
+    wire: HireWire;
+    proofHeader: {
+        name: string;
+        value: string;
+    };
+}): Promise<SessionResponse>;
+export declare function postRecover(ep: SessionEndpoint, input: {
+    wire: HireWire;
+    request: TaskRecoveryRequest;
+    requestSignatureBase64: string;
+}): Promise<SessionResponse<RecoverResponseBody>>;
+export declare function postRedeem(ep: SessionEndpoint, input: {
+    wire: HireWire;
+    acceptance: TaskAcceptanceEnvelope;
+    acceptanceSignatureBase64: string;
+    evidence: unknown;
+    proofHeader: {
+        name: string;
+        value: string;
+    };
+}): Promise<SessionResponse<RedeemResponseBody>>;
+export declare const PREFLIGHT_DEFAULT_CHAIN = "eip155:8453";
+export declare function preflightAdmitsPayment(preflight: FacilitatorPreflightResult, allowUnadvertisedTransferMethod: boolean): boolean;
+export declare function preflightFacilitator(input: FacilitatorPreflightInput): Promise<FacilitatorPreflightResult>;
+export interface PreflightObservation {
+    readonly code: PreflightObservationCode;
+    readonly detail: string;
+}
+type PreflightObservationCode = "matched_via_v1_alias" | "v1_exact_is_eip3009_by_spec" | "batch_scheme_advertised" | "other_schemes_on_chain" | "supported_response_not_v2_conformant" | "redirected" | "minimum_payment_advertised";
+export type PreflightReason = "eip3009_exact_advertised" | "transfer_method_permit2" | "transfer_method_not_eip3009" | "no_exact_on_chain" | "chain_not_offered" | "asset_not_frozen_usdc" | "transfer_method_not_advertised" | "transfer_method_unrecognised" | "asset_advertisement_unreadable" | "unreachable" | "http_status" | "response_not_json" | "response_malformed" | "response_too_large" | "url_not_https" | "chain_not_supported_by_rail";
+export interface PreflightUndetermined {
+    readonly code: PreflightUndeterminedCode;
+    readonly detail: string;
+}
+type PreflightUndeterminedCode = "batching_not_advertised" | "nonce_control_is_client_side" | "per_transaction_shape_is_on_chain" | "transfer_method_not_advertised";
+export type PreflightVerdict = "usable" | "unusable" | "unknown";
+export declare function privateHire(input: PrivateHireInput): Promise<PrivateHireResult>;
+interface PrivateHireInput {
+    hirer: {
+        did: string;
+        signingPublicKeyBase64: string;
+        sign: Signer;
+    };
+    provider: VerifiedProvider;
+    service: {
+        ref: string;
+    };
+    task: {
+        brief: string;
+    };
+    price: {
+        chain: string;
+        asset: string;
+        payerAccount: string;
+        payeeAccount: string;
+        minAmount: string;
+        maxAmount: string;
+    };
+    ttl: {
+        offerMs: number;
+        grantMs: number;
+    };
+    nowMs: number;
+    entropy: {
+        offerNonce: string;
+        grantNonce: string;
+        sessionKey: Uint8Array;
+        ephemeralSecretKey: Uint8Array;
+        briefSalt: Uint8Array;
+        bodyNonce: Uint8Array;
+        wrapNonce: Uint8Array;
+    };
+}
+type PrivateHireResult = {
+    ok: true;
+    wire: HireWire;
+    keep: HireKeep;
+} | {
+    ok: false;
+    reason: RedeemRejectReason | ProviderTermsRejectReason | AccountSpellingRefuseDetail;
+};
+export declare const PROVIDER_MANIFEST_KEYS: readonly [
+    "schema",
+    "provider_did",
+    "signing_public_key_base64",
+    "encryption_public_key_base64",
+    "attestor_public_key_base64",
+    "accept_url",
+    "hire_message_schema",
+    "worker_base_url",
+    "grant_ttl_ms",
+    "acceptance_ttl_ms",
+    "services",
+    "payment_buys",
+    "notes",
+    "signature_base64"
+];
+export declare const PROVIDER_MANIFEST_PATH = "/.well-known/voidly-session-provider.json";
+export declare const PROVIDER_MANIFEST_SCHEMA = "voidly.session.provider.manifest/v1";
+export interface ProviderManifest {
+    readonly schema: typeof PROVIDER_MANIFEST_SCHEMA;
+    readonly provider_did: string;
+    readonly signing_public_key_base64: string;
+    readonly encryption_public_key_base64: string;
+    readonly attestor_public_key_base64: string;
+    readonly accept_url: string;
+    readonly hire_message_schema: typeof SESSION_HIRE_SCHEMA;
+    readonly worker_base_url: string;
+    readonly grant_ttl_ms: {
+        readonly min: number;
+        readonly max: number;
+    };
+    readonly acceptance_ttl_ms: number;
+    readonly services: ReadonlyArray<{
+        readonly ref: string;
+        readonly description: string;
+        readonly price: {
+            readonly chain: string;
+            readonly asset: string;
+            readonly payee_account: string;
+            readonly min_amount: string;
+            readonly max_amount: string;
+        };
+    }>;
+    readonly payment_buys: "an attempt, not an outcome";
+    readonly notes: readonly string[];
+    readonly signature_base64: string;
+}
+export type ProviderOpenRefusal = "open_clock_implausible" | "attestation_not_object" | "attestation_schema_mismatch" | "attestation_unexpected_field" | "attestation_invalid_grant_hash" | "attestation_invalid_capsule_hash" | "attestation_invalid_offer_hash" | "attestation_invalid_hirer_did" | "attestation_invalid_provider_did" | "attestation_invalid_evidence_id" | "attestation_invalid_settled_chain" | "attestation_invalid_settled_asset" | "attestation_invalid_settled_amount" | "attestation_invalid_timestamp" | "attestation_not_yet_valid" | "attestation_expired" | "attestation_outlives_grant" | "attestor_key_invalid" | "attestation_invalid_signature" | "grant_unreadable" | "hirer_key_invalid" | "hirer_key_not_derivable" | "invalid_grant_signature" | "attestation_grant_mismatch" | "attestation_capsule_mismatch" | "attestation_offer_mismatch" | "attestation_hirer_mismatch" | "attestation_provider_mismatch" | "attestation_settlement_mismatch" | "attestation_below_agreed_price" | "provider_did_mismatch" | "capsule_unreadable" | "capsule_binding_mismatch" | "recipient_binding_mismatch";
+export type ProviderOpenResult = {
+    kind: "opened";
+    brief: string;
+    sessionKey: SessionKey;
+} | {
+    kind: "refused";
+    reason: ProviderOpenRefusal;
+} | {
+    kind: "unopenable";
+};
+export type ProviderTermsRejectReason = "provider_not_verified" | "provider_service_not_offered" | "provider_price_chain_not_offered" | "provider_price_asset_not_offered" | "provider_payee_not_manifested" | "provider_price_below_manifest_floor" | "provider_price_above_manifest_ceiling" | "provider_grant_ttl_below_manifest_floor" | "provider_grant_ttl_above_manifest_ceiling";
+export declare const READ_ONLY_RPC_METHODS: readonly string[];
+export interface ReadOnlyEvmRpc {
+    readonly url: string;
+    request(method: string, params: readonly unknown[]): Promise<RpcResult>;
+}
+export interface ReadOnlyEvmRpcInput {
+    readonly url: string;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+}
+export declare const RECEIVE_WITH_AUTHORIZATION_SELECTOR = "0xef55bec6";
+export declare const RECEIVE_WITH_AUTHORIZATION_TYPEHASH = "0xd099cc98ef71107a616c4f0f941f04c322d8e254fe26b3c6668db87aae413de8";
+export interface ReceiveAuthorizationTypedData {
+    readonly domain: {
+        readonly name: string;
+        readonly version: string;
+        readonly chainId: number;
+        readonly verifyingContract: string;
+    };
+    readonly types: {
+        readonly EIP712Domain: ReadonlyArray<{
+            readonly name: string;
+            readonly type: string;
+        }>;
+        readonly ReceiveWithAuthorization: ReadonlyArray<{
+            readonly name: string;
+            readonly type: string;
+        }>;
+    };
+    readonly primaryType: "ReceiveWithAuthorization";
+    readonly message: {
+        readonly from: string;
+        readonly to: string;
+        readonly value: string;
+        readonly validAfter: string;
+        readonly validBefore: string;
+        readonly nonce: string;
+    };
+}
+type ReceivedHireRefuseDetail = HireRefuseDetail | UnknownHireRefuseDetail;
+export interface RecoverResponseBody {
+    schema: string;
+    outcome: {
+        kind: "answered";
+        grant_hash: string;
+        state: {
+            kind: string;
+        };
+        answer: {
+            receipt: unknown;
+            receipt_signature_base64: string;
+            result_capsule: unknown;
+        } | null;
+    } | {
+        kind: "paid_no_session";
+        grant_hash: string;
+        evidence_id: string;
+    } | {
+        kind: "no_payment_recorded";
+        grant_hash: string;
+    } | {
+        kind: "rejected";
+        reason: string;
+    };
+}
+export declare function recoverResult(input: {
+    readonly endpoint: SessionEndpoint;
+    readonly wire: HireWire;
+    readonly grantHash: string;
+    readonly sessionKey: SessionKey;
+    readonly sign: Signer;
+    readonly nowMs: number;
+    readonly ttlMs?: number;
+    readonly entropy?: SessionEntropy;
+}): Promise<RecoverResultOutcome>;
+export type RecoverResultOutcome = {
+    kind: "opened";
+    result: string;
+    receipt: TaskDeliveryReceipt;
+} | {
+    kind: "unopenable";
+    receipt: TaskDeliveryReceipt;
+} | {
+    kind: "unverifiable";
+    reason: OpenDeliveredResultRefusal | "answer_malformed";
+} | {
+    kind: "no_result";
+    status: number;
+    outcome: string;
+    state: string;
+    evidence_id?: string;
+} | {
+    kind: "undelivered";
+    detail: string;
+} | {
+    kind: "unrecognized";
+    status: number;
+    detail: string;
+} | {
+    kind: "unbuildable";
+    reason: RecoverResultRefusal;
+};
+export type RecoverResultRefusal = "grant_hash_mismatch" | "hirer_did_unusable" | SessionResultRejectReason;
+export type RedeemRejectReason = "clock_implausible" | "offer_not_object" | "offer_schema_mismatch" | "offer_unexpected_field" | "offer_invalid_hirer_did" | "offer_invalid_hirer_pubkey" | "offer_invalid_provider_did" | "offer_self_hire_not_allowed" | "offer_invalid_service_ref" | "offer_invalid_price_chain" | "offer_invalid_price_asset" | "offer_invalid_price_payer_account" | "offer_invalid_price_payee_account" | "offer_price_chain_mismatch" | "offer_invalid_price_amount" | "offer_invalid_price_min_amount" | "offer_price_band_inverted" | "offer_invalid_nonce" | "offer_invalid_timestamp" | "offer_ttl_too_long" | "offer_not_yet_valid" | "offer_expired" | "grant_not_object" | "grant_schema_mismatch" | "grant_unexpected_field" | "grant_invalid_hirer_did" | "grant_invalid_provider_did" | "grant_self_hire_not_allowed" | "grant_invalid_provider_signing_pubkey" | "grant_invalid_provider_enc_pubkey" | "grant_invalid_offer_hash" | "grant_invalid_capsule_hash" | "grant_invalid_brief_commitment" | "grant_invalid_price_chain" | "grant_invalid_price_asset" | "grant_invalid_price_payer_account" | "grant_invalid_price_payee_account" | "grant_price_chain_mismatch" | "grant_invalid_price_amount" | "grant_invalid_price_min_amount" | "grant_price_band_inverted" | "grant_invalid_nonce" | "grant_invalid_timestamp" | "grant_ttl_too_long" | "grant_not_yet_valid" | "capsule_not_object" | "capsule_schema_mismatch" | "capsule_unexpected_field" | "capsule_invalid_alg" | "capsule_invalid_offer_hash" | "capsule_invalid_recipient_pubkey" | "capsule_invalid_ephemeral_pubkey" | "capsule_invalid_wrapped_key" | "capsule_invalid_wrap_nonce" | "capsule_invalid_body_nonce" | "capsule_invalid_body" | "capsule_body_too_large" | "acceptance_not_object" | "acceptance_schema_mismatch" | "acceptance_unexpected_field" | "acceptance_invalid_grant_hash" | "acceptance_invalid_redeemer_did" | "acceptance_invalid_nonce" | "acceptance_invalid_timestamp" | "acceptance_window_too_long" | "acceptance_not_yet_valid" | "acceptance_expired" | "store_not_serialized" | "hirer_did_mismatch" | "provider_did_mismatch" | "provider_key_mismatch" | "hirer_key_mismatch" | "invalid_offer_signature" | "invalid_grant_signature" | "invalid_acceptance_signature" | "grant_offer_mismatch" | "grant_capsule_mismatch" | "capsule_offer_mismatch" | "recipient_binding_mismatch" | "grant_price_mismatch" | "grant_provider_mismatch" | "grant_hirer_mismatch" | "grant_outlives_offer" | "acceptance_grant_mismatch" | "acceptance_redeemer_mismatch" | "invalid_session_key_length" | "invalid_session_key_all_zero" | "invalid_ephemeral_secret_length" | "invalid_brief_salt_length" | "invalid_brief_salt_all_zero" | "invalid_ephemeral_secret_all_zero" | "invalid_body_nonce_length" | "invalid_body_nonce_all_zero" | "invalid_wrap_nonce_length" | "invalid_wrap_nonce_all_zero" | "capsule_frame_failed" | "invalid_recipient_enc_pubkey" | "brief_too_long" | "invalid_ttl" | "grant_ttl_below_settlement_depth" | "signer_failed" | "journal_record_malformed" | "settlement_adapter_unknown" | "settlement_adapter_misregistered" | "settlement_indeterminate" | "settlement_unattributable" | "settlement_rejected" | "settlement_superseded" | "settlement_cancelled" | "settlement_chain_mismatch" | "settlement_asset_mismatch" | "settlement_invalid_amount" | "settlement_over_ceiling" | "settlement_below_floor" | "settlement_invalid_evidence_id" | "settlement_invalid_payer_account" | "settlement_invalid_payee_account" | "settlement_payer_mismatch" | "settlement_payee_mismatch" | "settlement_binding_mismatch" | "settlement_evidence_reused";
+export interface RedeemResponseBody {
+    schema: string;
+    outcome: {
+        kind: "redeemed";
+        grant_hash: string;
+        offer_hash: string;
+        provider_did: string;
+        price: {
+            chain: string;
+            asset: string;
+            min_amount: string;
+            max_amount: string;
+        };
+        settled_amount: string | null;
+        expires_at_ms: number | null;
+        recoverable_until_ms: number | null;
+        brief_readable_here: false;
+        attestation: RedemptionAttestation | null;
+        attestation_signature_base64: string | null;
+        attestation_unavailable: string | null;
+    } | {
+        kind: "replayed";
+        grant_hash: string;
+        first_redeemed_at_ms: number;
+        first_evidence_id: string;
+    } | {
+        kind: "expired";
+        grant_hash: string;
+        expires_at_ms: number;
+        now_ms: number;
+    } | {
+        kind: "rejected";
+        reason: string;
+    };
+}
+export declare const REDEMPTION_ATTESTATION_SCHEMA = "voidly-session-redemption-attestation/v1";
+export type RedemptionAttestation = {
+    schema: typeof REDEMPTION_ATTESTATION_SCHEMA;
+    grant_hash: string;
+    capsule_hash: string;
+    offer_hash: string;
+    hirer_did: string;
+    provider_did: string;
+    evidence_id: string;
+    settled_chain: string;
+    settled_asset: string;
+    settled_amount: string;
+    redeemed_at: string;
+    expires_at: string;
+};
+export interface RelayCost {
+    readonly gas: bigint;
+    readonly gasLimit: bigint;
+    readonly gasPriceWei: bigint;
+    readonly maxCostWei: bigint;
+    readonly relayerBalanceWei: bigint;
+}
+export type RelayCostResult = {
+    readonly ok: true;
+    readonly cost: RelayCost;
+} | {
+    readonly ok: false;
+    readonly reason: CostRefusal;
+    readonly detail: string;
+};
+export declare class RelayRefusal extends Error {
+    readonly reason: RelayRefusalReason;
+    constructor(reason: RelayRefusalReason, detail: string);
+}
+export type RelayRefusalReason = "batched_relay_refused" | "chain_id_mismatch" | "chain_id_unavailable" | "chain_time_unavailable" | "relay_window_too_short" | "relayer_address_malformed" | "simulation_reverted" | "simulation_unavailable" | CostRefusal | "send_threw" | "send_returned_no_hash";
+export declare const REQUIRED_ASSET_TRANSFER_METHOD: "eip3009";
+export declare function resolveSettlementTransaction(input: ResolveSettlementTransactionInput): Promise<SettlementLookupResult>;
+export interface ResolveSettlementTransactionInput {
+    readonly rpc: ReadOnlyEvmRpc;
+    readonly chainId: number;
+    readonly authorizer: string;
+    readonly bindingReference: string;
+    readonly fromBlock: bigint;
+}
+declare const RESULT_CAPSULE_ALG = "xsalsa20-poly1305";
+export declare function revertDataFromRpcError(detail: string): string | null;
+export declare function reviewHire(input: {
+    wire: HireWire;
+    expectedProviderDid: string;
+    hirerSigningPublicKey: Uint8Array;
+    nowMs: number;
+}): Promise<ReviewHireResult>;
+export type ReviewHireRefusal = "offer_unreadable" | "grant_unreadable" | "capsule_unreadable" | "hirer_key_invalid" | "hirer_key_not_derivable" | "invalid_offer_signature" | "invalid_grant_signature" | "grant_offer_mismatch" | "grant_capsule_mismatch" | "capsule_offer_mismatch" | "recipient_binding_mismatch" | "grant_price_mismatch" | "grant_provider_mismatch" | "grant_hirer_mismatch" | "grant_outlives_offer" | "provider_did_mismatch";
+export type ReviewHireResult = {
+    ok: true;
+    offer: SessionOfferEnvelope;
+    grant: TaskGrantEnvelope;
+    capsule: TaskCapsule;
+    grantHash: string;
+    capsuleHash: string;
+    offerHash: string;
+    terms: HireTerms;
+} | {
+    ok: false;
+    reason: ReviewHireRefusal;
+};
+export type RpcRefusal = "rpc_method_not_read_only" | "rpc_url_not_https" | "rpc_unreachable" | "rpc_response_unreadable" | "rpc_error" | "rpc_result_malformed";
+export type RpcResult = {
+    readonly ok: true;
+    readonly result: unknown;
+} | {
+    readonly ok: false;
+    readonly reason: RpcRefusal;
+    readonly detail: string;
+};
+export declare function sealCapsule(input: {
+    brief: string;
+    offerHash: string;
+    recipientEncPublicKey: Uint8Array;
+    sessionKeyBytes: Uint8Array;
+    ephemeralSecretKey: Uint8Array;
+    briefSalt: Uint8Array;
+    bodyNonce: Uint8Array;
+    wrapNonce: Uint8Array;
+}): Promise<{
+    capsule: TaskCapsule;
+    sessionKey: SessionKey;
+    briefCommitment: string;
+}>;
+export declare function sealTaskResult(input: {
+    result: string;
+    grantHash: string;
+    sessionKey: SessionKey;
+    briefCapsule: TaskCapsule;
+    entropy?: SessionEntropy;
+}): Promise<{
+    capsule: TaskResultCapsule;
+    resultCommitment: string;
+    resultCapsuleHash: string;
+}>;
+export interface SelfSubmitterInput {
+    readonly broadcast: BroadcastTx;
+}
+export type SendRelayTransaction = (transaction: {
+    readonly from: string;
+    readonly to: string;
+    readonly data: string;
+    readonly value: "0x0";
+    readonly chainId: number;
+    readonly gasLimit: bigint;
+    readonly gasPriceWei: bigint;
+}) => Promise<string> | string;
+declare const SESSION_HIRE_ACCEPTED_SCHEMA = "voidly-session-hire-accepted/v1";
+declare const SESSION_HIRE_REFUSED_SCHEMA = "voidly-session-hire-refused/v1";
+declare const SESSION_HIRE_SCHEMA = "voidly-session-hire/v1";
+declare const SESSION_OFFER_SCHEMA = "voidly-session-offer/v1";
+export declare const SESSION_PATHS: Readonly<{
+    readonly redeem: "/v1/pay/session/redeem";
+    readonly deliver: "/v1/pay/session/deliver";
+    readonly recover: "/v1/pay/session/recover";
+    readonly reattest: "/v1/pay/session/reattest";
+}>;
+export declare const SESSION_PROVIDER_PROOF_HEADER = "x-voidly-session-provider-proof";
+export declare const SESSION_PROVIDER_PROOF_MAX_WINDOW_MS: number;
+export declare const SESSION_PROVIDER_PROOF_SCHEMA = "voidly-session-provider-redemption/v1";
+export declare const SESSION_RAIL_BLOCK_TIME_MS = 2000;
+export declare const SESSION_RAIL_MIN_CONFIRMATIONS = 12;
+declare const SESSION_REATTEST_PROOF_SCHEMA = "voidly-session-provider-reattestation/v1";
+export declare class SessionCryptoUnavailableError extends Error {
+    readonly code = "session_crypto_unavailable";
+    constructor(message: string);
+}
+export interface SessionEndpoint {
+    baseUrl: string;
+    fetch?: typeof fetch;
+    timeoutMs?: number | null;
+}
+export interface SessionEntropy {
+    random(n: number): Uint8Array;
+    nonce(): string;
+}
+export type SessionHireAccepted = {
+    schema: typeof SESSION_HIRE_ACCEPTED_SCHEMA;
+    grant_hash: string;
+    acceptance: TaskAcceptanceEnvelope;
+    acceptance_signature_base64: string;
+};
+export type SessionHireMessage = {
+    schema: typeof SESSION_HIRE_SCHEMA;
+    offer: SessionOfferEnvelope;
+    offer_signature_base64: string;
+    grant: TaskGrantEnvelope;
+    grant_signature_base64: string;
+    capsule: TaskCapsule;
+    authorization: PaymentAuthorization;
+    authorization_signature_base64: string;
+};
+export type SessionHireRefused = {
+    schema: typeof SESSION_HIRE_REFUSED_SCHEMA;
+    reason: HireRefuseReason;
+    detail: ReceivedHireRefuseDetail;
+};
+export type SessionKey = SessionKeyHandle;
+declare class SessionKeyHandle {
+    #private;
+    toJSON(): string;
+    toString(): string;
+    [INSPECT_CUSTOM](): string;
+    get isSessionKey(): boolean;
+}
+export type SessionOfferEnvelope = {
+    schema: typeof SESSION_OFFER_SCHEMA;
+    hirer_did: string;
+    hirer_signing_pubkey_base64: string;
+    provider_did: string;
+    service_ref: string;
+    price_chain: string;
+    price_asset: string;
+    price_payer_account: string;
+    price_payee_account: string;
+    price_min_amount: string;
+    price_max_amount: string;
+    nonce: string;
+    issued_at: string;
+    expires_at: string;
+};
+interface SessionParty {
+    readonly did: string;
+    readonly signingPublicKey: Uint8Array;
+}
+export declare function sessionProviderProofEnvelope(input: SessionProviderProofFields): SessionProviderProofEnvelope;
+export interface SessionProviderProofEnvelope {
+    schema: SessionProviderProofSchema;
+    provider_did: string;
+    grant_hash: string;
+    action_nonce: string;
+    issued_at: string;
+    expires_at: string;
+}
+interface SessionProviderProofFields {
+    providerDid: string;
+    grantHash: string;
+    actionNonce: string;
+    nowMs: number;
+    ttlMs?: number;
+}
+type SessionProviderProofSchema = typeof SESSION_PROVIDER_PROOF_SCHEMA | typeof SESSION_REATTEST_PROOF_SCHEMA;
+export interface SessionResponse<T = unknown> {
+    status: number;
+    body: T;
+}
+export type SessionResultRejectReason = "result_capsule_not_object" | "result_capsule_schema_mismatch" | "result_capsule_unexpected_field" | "result_capsule_invalid_alg" | "result_capsule_invalid_grant_hash" | "result_capsule_invalid_body_nonce" | "result_capsule_invalid_body" | "result_body_too_large" | "result_capsule_grant_mismatch" | "result_capsule_not_sealed_frame" | "delivery_not_object" | "delivery_schema_mismatch" | "delivery_unexpected_field" | "delivery_invalid_grant_hash" | "delivery_invalid_offer_hash" | "delivery_invalid_provider_did" | "delivery_invalid_result_capsule_hash" | "delivery_invalid_result_commitment" | "delivery_invalid_timestamp" | "delivery_window_too_long" | "delivery_not_yet_valid" | "invalid_delivery_signature" | "delivery_grant_mismatch" | "delivery_offer_mismatch" | "delivery_provider_mismatch" | "delivery_capsule_hash_mismatch" | "recovery_not_object" | "recovery_schema_mismatch" | "recovery_unexpected_field" | "recovery_invalid_grant_hash" | "recovery_invalid_requester_did" | "recovery_invalid_nonce" | "recovery_invalid_timestamp" | "recovery_window_too_long" | "recovery_not_yet_valid" | "recovery_expired" | "invalid_recovery_signature" | "recovery_grant_mismatch" | "recovery_requester_not_a_party" | "record_malformed";
+export declare class SessionTransportError extends Error {
+    readonly code = "session_transport_error";
+    readonly status: number;
+    readonly body: string;
+    constructor(message: string, status: number, body: string);
+}
+export declare class SessionUsageError extends Error {
+    readonly code = "session_usage_error";
+    constructor(message: string);
+}
+export declare const SETTLEMENT_BINDING_DOMAIN = "voidly-session-settlement-binding/v1|";
+declare const SETTLEMENT_HINT_SCHEMA: "voidly.session.settlement-hint/v1";
+export declare function settlementBindingReference(grantHash: string): Promise<string>;
+export interface SettlementHintEnvelope {
+    readonly schema: typeof SETTLEMENT_HINT_SCHEMA;
+    readonly grant_hash: string;
+    readonly provider_did: string;
+    readonly evidence_hash: string;
+    readonly issued_at: string;
+}
+export type SettlementLookupResult = {
+    readonly kind: "found";
+    readonly transactionHash: string;
+    readonly blockNumber: bigint;
+} | {
+    readonly kind: "not_consumed";
+} | {
+    readonly kind: "impossible";
+    readonly detail: string;
+} | {
+    readonly kind: "unavailable";
+    readonly detail: string;
+};
+export declare function settlementNonce(grantHash: string): Promise<`0x${string}`>;
+export declare function settleUrlFor(baseUrl: string): string | null;
+export declare function sha256Hex(bytes: Uint8Array): Promise<string>;
+export declare function signCanonical(env: object, sign: Signer): Promise<string | null>;
+export declare function signDelivery(input: {
+    grantHash: string;
+    offerHash: string;
+    providerDid: string;
+    resultCapsuleHash: string;
+    resultCommitment: string;
+    recoverableUntilMs: number;
+    nowMs: number;
+    sign: Signer;
+}): Promise<{
+    ok: true;
+    receipt: TaskDeliveryReceipt;
+    signature_base64: string;
+} | {
+    ok: false;
+    reason: SessionResultRejectReason;
+}>;
+export interface SignedReceiveAuthorization {
+    readonly typedData: ReceiveAuthorizationTypedData;
+    readonly signature: string;
+    readonly v: number;
+    readonly r: string;
+    readonly s: string;
+    readonly chain: string;
+    readonly grantHash: string;
+}
+export interface SignedTransferAuthorization {
+    readonly typedData: TransferAuthorizationTypedData;
+    readonly signature: string;
+    readonly v: number;
+    readonly r: string;
+    readonly s: string;
+    readonly chain: string;
+    readonly grantHash: string;
+}
+export type Signer = (bytes: Uint8Array) => Uint8Array | Promise<Uint8Array>;
+export declare function signHireAuthorization(input: {
+    readonly grant: TaskGrantEnvelope;
+    readonly grantHash: string;
+    readonly authorization: PaymentAuthorization;
+    readonly sign: Signer;
+}): Promise<SignHireAuthorizationResult>;
+export type SignHireAuthorizationResult = {
+    ok: true;
+    authorizationSignatureBase64: string;
+} | {
+    ok: false;
+    reason: HirePaymentRefusal | "signer_failed";
+    detail: string;
+};
+export declare function signReceiveAuthorization(input: SignReceiveAuthorizationInput, signer: SignReceiveTypedData): Promise<SignReceiveAuthorizationResult>;
+export type SignReceiveAuthorizationInput = SignTransferAuthorizationInput;
+export type SignReceiveAuthorizationResult = {
+    ok: true;
+    signed: SignedReceiveAuthorization;
+} | {
+    ok: false;
+    reason: SignRefusal;
+    detail: string;
+};
+export type SignReceiveTypedData = (typedData: ReceiveAuthorizationTypedData) => Promise<string> | string;
+export type SignRefusal = TransferAuthorizationRefusal | "authorization_expired" | "authorization_not_yet_valid" | "invalid_now_ms" | "signer_threw" | "signature_not_65_bytes" | "signature_recovery_id_invalid";
+export declare function signTransferAuthorization(input: SignTransferAuthorizationInput, signer: SignTypedData): Promise<SignTransferAuthorizationResult>;
+export interface SignTransferAuthorizationInput {
+    chain: string;
+    from: string;
+    to: string;
+    value: string;
+    validAfter: number;
+    validBefore: number;
+    grantHash: string;
+    nowMs: number;
+}
+export type SignTransferAuthorizationResult = {
+    ok: true;
+    signed: SignedTransferAuthorization;
+} | {
+    ok: false;
+    reason: SignRefusal;
+    detail: string;
+};
+export type SignTypedData = (typedData: TransferAuthorizationTypedData) => Promise<string> | string;
+export declare function simulateTransaction(input: {
+    readonly rpc: ReadOnlyEvmRpc;
+    readonly request: TransactionRequest;
+    readonly from: string;
+}): Promise<SimulationOutcome>;
+export type SimulationOutcome = {
+    readonly kind: "would_succeed";
+    readonly returned: string;
+} | {
+    readonly kind: "would_revert";
+    readonly reason: string | null;
+    readonly raw: string;
+} | {
+    readonly kind: "unavailable";
+    readonly detail: string;
+};
+export type SingleAuthorizationCheck = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly detail: string;
+};
+export interface SingleAuthorizationRelayContext {
+    readonly relayerAddress?: string;
+}
+export declare function submitHire(input: {
+    readonly url: string;
+    readonly wire: HireWire;
+    readonly grantHash: string;
+    readonly authorization: PaymentAuthorization;
+    readonly sign: Signer;
+    readonly nowMs: number;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+}): Promise<SubmitHireResult>;
+export type SubmitHireResult = {
+    kind: "accepted";
+    accepted: SessionHireAccepted;
+} | {
+    kind: "refused";
+    refused: SessionHireRefused;
+    retryable: boolean;
+    steersPayment: boolean;
+} | {
+    kind: "undelivered";
+    detail: string;
+} | {
+    kind: "unverifiable";
+    detail: HireRefuseDetail | "response_malformed";
+} | {
+    kind: "unbuildable";
+    reason: HireRefuseDetail | "grant_hash_mismatch";
+};
+export type SubmitRefusal = "facilitator_not_usable" | "chain_mismatch" | "facilitator_refused" | "facilitator_response_unreadable" | "unreachable" | "broadcast_failed";
+export type SubmitResult = {
+    ok: true;
+    transactionHash: string;
+} | {
+    ok: false;
+    reason: SubmitRefusal;
+    detail: string;
+};
+export declare function submitSettlementHint(input: {
+    readonly url: string;
+    readonly grant: TaskGrantEnvelope;
+    readonly grantHash: string;
+    readonly evidence: unknown;
+    readonly sign: Signer;
+    readonly nowMs: number;
+    readonly fetchImpl: FetchLike;
+    readonly signal?: AbortSignal;
+}): Promise<SubmitSettlementHintResult>;
+export type SubmitSettlementHintRefusal = "grant_hash_mismatch" | "provider_did_unusable" | "evidence_unusable" | "signature_failed";
+export type SubmitSettlementHintResult = {
+    kind: "acknowledged";
+    status: number;
+    hint: SettlementHintEnvelope;
+} | {
+    kind: "refused";
+    status: number;
+    reason: string;
+} | {
+    kind: "undelivered";
+    detail: string;
+} | {
+    kind: "unrecognized";
+    status: number;
+    detail: string;
+} | {
+    kind: "unbuildable";
+    reason: SubmitSettlementHintRefusal;
+};
+export declare function supportedUrlFor(baseUrl: string): string | null;
+declare const TASK_ACCEPTANCE_SCHEMA = "voidly-task-acceptance/v1";
+declare const TASK_CAPSULE_SCHEMA = "voidly-task-capsule/v1";
+declare const TASK_DELIVERY_SCHEMA = "voidly-task-delivery/v1";
+declare const TASK_GRANT_SCHEMA = "voidly-task-grant/v1";
+declare const TASK_RECOVERY_SCHEMA = "voidly-task-recovery/v1";
+declare const TASK_RESULT_CAPSULE_SCHEMA = "voidly-task-result-capsule/v1";
+export type TaskAcceptanceEnvelope = {
+    schema: typeof TASK_ACCEPTANCE_SCHEMA;
+    grant_hash: string;
+    redeemer_did: string;
+    action_nonce: string;
+    issued_at: string;
+    expires_at: string;
+};
+export type TaskCapsule = {
+    schema: typeof TASK_CAPSULE_SCHEMA;
+    alg: typeof CAPSULE_ALG;
+    offer_hash: string;
+    recipient_enc_pubkey_base64: string;
+    ephemeral_pubkey_base64: string;
+    wrapped_session_key_base64: string;
+    wrap_nonce_base64: string;
+    body_nonce_base64: string;
+    body_base64: string;
+};
+export type TaskDeliveryReceipt = {
+    schema: typeof TASK_DELIVERY_SCHEMA;
+    grant_hash: string;
+    offer_hash: string;
+    provider_did: string;
+    result_capsule_hash: string;
+    result_commitment: string;
+    issued_at: string;
+    recoverable_until: string;
+};
+export type TaskGrantEnvelope = {
+    schema: typeof TASK_GRANT_SCHEMA;
+    hirer_did: string;
+    provider_did: string;
+    provider_signing_pubkey_base64: string;
+    provider_enc_pubkey_base64: string;
+    offer_hash: string;
+    capsule_hash: string;
+    brief_commitment: string;
+    price_chain: string;
+    price_asset: string;
+    price_payer_account: string;
+    price_payee_account: string;
+    price_min_amount: string;
+    price_max_amount: string;
+    nonce: string;
+    issued_at: string;
+    expires_at: string;
+};
+export type TaskRecoveryRequest = {
+    schema: typeof TASK_RECOVERY_SCHEMA;
+    grant_hash: string;
+    requester_did: string;
+    action_nonce: string;
+    issued_at: string;
+    expires_at: string;
+};
+export type TaskResultCapsule = {
+    schema: typeof TASK_RESULT_CAPSULE_SCHEMA;
+    alg: typeof RESULT_CAPSULE_ALG;
+    grant_hash: string;
+    body_nonce_base64: string;
+    body_base64: string;
+};
+export declare function timestampMs(value: unknown): number | null;
+export interface TransactionRequest {
+    readonly to: string;
+    readonly data: string;
+    readonly value: "0x0";
+    readonly chainId: number;
+}
+export declare const TRANSFER_WITH_AUTHORIZATION_SELECTOR = "0xe3ee160e";
+export declare const TRANSFER_WITH_AUTHORIZATION_TYPEHASH = "0x7c7c6cdb67a18743f49ec6fa9b35f50d52ed05cbed4cc592e13b44501c1a2267";
+export type TransferAuthorizationRefusal = "unsupported_chain" | "invalid_from" | "invalid_to" | "invalid_value" | "invalid_validity_window" | "validity_looks_like_milliseconds" | "invalid_grant_hash";
+export interface TransferAuthorizationTypedData {
+    readonly domain: {
+        readonly name: string;
+        readonly version: string;
+        readonly chainId: number;
+        readonly verifyingContract: string;
+    };
+    readonly types: {
+        readonly EIP712Domain: ReadonlyArray<{
+            readonly name: string;
+            readonly type: string;
+        }>;
+        readonly TransferWithAuthorization: ReadonlyArray<{
+            readonly name: string;
+            readonly type: string;
+        }>;
+    };
+    readonly primaryType: "TransferWithAuthorization";
+    readonly message: {
+        readonly from: string;
+        readonly to: string;
+        readonly value: string;
+        readonly validAfter: string;
+        readonly validBefore: string;
+        readonly nonce: string;
+    };
+}
+type UnknownHireRefuseDetail = string & {};
+export declare function unsealBody(capsule: TaskCapsule, sessionKey: SessionKey): Promise<UnsealResult>;
+type UnsealResult = {
+    kind: "opened";
+    bytes: Uint8Array;
+    payload: Uint8Array;
+} | {
+    kind: "unopenable";
+};
+export declare function validateAcceptance(raw: unknown, nowMs: number): Validated<TaskAcceptanceEnvelope>;
+export declare function validateAuthorizationShape(raw: unknown): Validated<PaymentAuthorization, HireRefuseDetail>;
+export declare function validateCapsuleShape(raw: unknown): Validated<TaskCapsule>;
+export type Validated<T, R = RedeemRejectReason> = {
+    ok: true;
+    env: T;
+} | {
+    ok: false;
+    reason: R;
+};
+export declare function validateGrant(raw: unknown, nowMs: number): Validated<TaskGrantEnvelope>;
+export declare function validateOffer(raw: unknown, nowMs: number): Validated<SessionOfferEnvelope>;
+export declare function validateRecoveryRequest(raw: unknown, nowMs: number): Validated<TaskRecoveryRequest, SessionResultRejectReason>;
+export declare function validateRedemptionAttestation(raw: unknown, nowMs: number): Validated<RedemptionAttestation, ProviderOpenRefusal>;
+export declare function validateResultCapsuleShape(raw: unknown): Validated<TaskResultCapsule, SessionResultRejectReason>;
+export declare function validateX402SessionEvidence(raw: unknown): X402SessionEvidence | null;
+declare const VERIFIED_PROVIDER: unique symbol;
+export interface VerifiedProvider {
+    readonly [VERIFIED_PROVIDER]: true;
+    readonly manifest: ProviderManifest;
+}
+export type VerifiedProviderRejectReason = ManifestRejectReason | "manifest_pin_not_a_did" | "manifest_service_ref_duplicated";
+export type VerifiedProviderVerdict = {
+    readonly ok: true;
+    readonly provider: VerifiedProvider;
+} | {
+    readonly ok: false;
+    readonly reason: VerifiedProviderRejectReason;
+};
+export declare function verifyDeliveryReceipt(input: {
+    receipt: unknown;
+    signatureBase64: string;
+    grant: TaskGrantEnvelope;
+    grantHash: string;
+    nowMs: number;
+}): VerifyDeliveryResult;
+export type VerifyDeliveryResult = {
+    ok: true;
+    receipt: TaskDeliveryReceipt;
+} | {
+    ok: false;
+    reason: SessionResultRejectReason | "delivery_grant_mismatch";
+};
+export declare function verifyDetached(env: object, signatureBase64: string, publicKey: Uint8Array): boolean;
+export declare function verifyProvider(raw: unknown, expectedProviderDid: string): VerifiedProviderVerdict;
+export declare function webCryptoEntropy(): SessionEntropy;
+export declare const X402_SESSION_EVIDENCE_SCHEMA = "voidly.session.settlement.x402/v1";
+export declare const X402_SESSION_USDC_BY_CHAIN: ReadonlyMap<string, string>;
+export declare const X402_V1_NETWORK_ALIASES: ReadonlyMap<string, string>;
+export interface X402PaymentPayload {
+    readonly x402Version: number;
+    readonly scheme: "exact";
+    readonly network: string;
+    readonly payload: {
+        readonly signature: string;
+        readonly authorization: {
+            readonly from: string;
+            readonly to: string;
+            readonly value: string;
+            readonly validAfter: string;
+            readonly validBefore: string;
+            readonly nonce: string;
+        };
+    };
+}
+export declare function x402SessionAccountCaip10(chain: string, address: string): string | null;
+export declare function x402SessionAssetCaip19(chain: string): string | null;
+export declare function x402SessionEvidence(transactionHash: string): X402SessionEvidence;
+export interface X402SessionEvidence {
+    readonly schema: typeof X402_SESSION_EVIDENCE_SCHEMA;
+    readonly transaction_hash: string;
+}