@zkproofport-ai/sdk 0.2.10 → 0.2.11

package/dist/payment.js

@@ -0,0 +1,167 @@
+/**
+ * Paying for a proof.
+ *
+ * ## What happens
+ *
+ * 1. Ask for a proof with no payment. The service answers 402 with a list of
+ *    chains it will take payment on (`accepts`), each with a price in that
+ *    chain's USDC and a one-time nonce.
+ * 2. Pick a chain. Sign an EIP-3009 authorization for it. Send it back.
+ * 3. The service settles the authorization and returns the proof.
+ *
+ * The buyer signs. It never submits a transaction, so it needs no gas and no
+ * native balance on the chain it pays on -- only USDC. That holds on Base, on
+ * Ethereum and on Arc alike.
+ *
+ * ## Why this file is short
+ *
+ * Because the encoding is not written here. `@x402/evm`'s exact scheme builds
+ * and signs the authorization and `@x402/core`'s HTTP client encodes the
+ * header, which between them is the part that is easy to get subtly wrong --
+ * the v1 and v2 header formats differ, the USDC EIP-712 domain name differs
+ * between mainnet ("USD Coin") and testnets ("USDC"), and a wrong domain
+ * produces a valid signature over the wrong message that fails with no hint.
+ *
+ * This was written by hand twice before. In April a settle body was assembled
+ * field by field and posted to a facilitator; earlier today the authorization
+ * was skipped altogether in favour of the buyer sending its own transaction,
+ * which needs gas the buyer may not have and cannot work on a chain where no
+ * proof-of-payment is expected. Both were replaced by this.
+ *
+ * ## Which chains
+ *
+ * Any EVM chain the service offers. The v2 scheme registers as an `eip155:*`
+ * wildcard, so nothing here holds a chain list -- Arc included, which is the
+ * reason the offer is CAIP-2 (`eip155:5042002`) rather than a bare name. The
+ * bare names are a fixed 24-chain table inside `@x402/evm` and Arc is not in
+ * it.
+ */
+import { usdcSpendControls, isKnownUsdc, knownUsdc, DEFAULT_MAX_PAYMENT } from './usdc.js';
+/**
+ * The chains a 402 answer will take payment on, in the order offered.
+ *
+ * Reading this before paying is what lets a caller choose -- "pay on Arc" is a
+ * filter over this list, not a separate code path.
+ */
+export function paymentOffers(challenge) {
+    const raw = (challenge.accepts ?? (challenge.payment ? [challenge.payment] : []));
+    return raw.map((r) => ({
+        network: String(r.network),
+        networkName: r.networkName ? String(r.networkName) : String(r.network),
+        // `amount` is the v2 name; `maxAmountRequired` was v1's. Both read, so
+        // an older service still parses.
+        amount: String(r.amount ?? r.maxAmountRequired ?? '0'),
+        asset: String(r.asset ?? ''),
+        payTo: String(r.payTo ?? ''),
+        raw: r,
+    }));
+}
+/**
+ * Sign payment for one of the offers and return the headers to retry with.
+ *
+ * `network` names the chain to pay on, as either the CAIP-2 id
+ * (`eip155:5042002`) or the plain name (`arc-testnet`). Omitting it takes the
+ * first offer, which is the order the service listed its chains in.
+ *
+ * An unmatched name is an error listing what was offered. It is never a
+ * silent fall back to the first chain: paying on a chain the caller did not
+ * ask for spends real money in the wrong place, and the caller who typed
+ * `--network arc` would be told the payment succeeded.
+ */
+export function assertApprovedPayment(offer, approved) {
+    const extra = offer.raw.extra;
+    const sameAddress = (a, b) => typeof a === 'string' && /^0x[0-9a-fA-F]{40}$/.test(a) && a.toLowerCase() === b.toLowerCase();
+    if (offer.network !== approved.network || offer.raw.scheme !== approved.scheme || offer.amount !== approved.amount ||
+        !sameAddress(offer.asset, approved.asset) || !sameAddress(offer.payTo, approved.payTo) ||
+        extra?.name !== approved.extra.name || extra?.version !== approved.extra.version || !sameAddress(extra?.verifyingContract, approved.extra.verifyingContract)) {
+        throw Error('The actual payment offer differs from the user-approved amount, recipient, asset, network or signing domain. Refusing to sign.');
+    }
+}
+export async function signPayment(challenge, wallet, opts = {}) {
+    const offers = paymentOffers(challenge);
+    if (offers.length === 0) {
+        throw new Error('The service named no chains it takes payment on; nothing to pay');
+    }
+    let offer = offers[0];
+    if (opts.network) {
+        const wanted = opts.network.toLowerCase();
+        const found = offers.find((o) => o.network.toLowerCase() === wanted || o.networkName.toLowerCase() === wanted);
+        if (!found) {
+            throw new Error(`The service does not take payment on '${opts.network}'. It offers: ` +
+                offers.map((o) => `${o.networkName} (${o.network})`).join(', '));
+        }
+        offer = found;
+    }
+    if (opts.approvedPayment)
+        assertApprovedPayment(offer, opts.approvedPayment);
+    // Checked here so the refusal names the token. @x402/core would also
+    // refuse -- that is what spend controls are for -- but its message talks
+    // about allowedAssets and does not say what was asked for.
+    if (!isKnownUsdc(offer.network, offer.asset)) {
+        throw new Error(`${offer.networkName} payment was requested in token ${offer.asset}, which is not the USDC ` +
+            `this SDK knows for that chain` +
+            (knownUsdc(offer.network) ? ` (${knownUsdc(offer.network)})` : ' (no USDC known for it at all)') +
+            `. Refusing to sign: a 402 answer names the token it wants, and signing whatever it names ` +
+            `lets a service ask to be paid in anything.`);
+    }
+    // x402's top-level USD cap does not cover custom allowed assets such as
+    // Arc USDC. Enforce the same six-decimal limit on the selected offer here,
+    // before invoking any signer, whether or not exact terms were supplied.
+    const maximum = opts.maxPayment ?? DEFAULT_MAX_PAYMENT;
+    const match = /^\$?(\d+)(?:\.(\d{1,6}))?$/.exec(maximum);
+    if (!match)
+        throw new Error('Invalid maximum USDC payment: use a non-negative decimal with up to six places.');
+    const maximumUnits = BigInt(match[1]) * 1000000n + BigInt((match[2] ?? '').padEnd(6, '0'));
+    if (!/^\d+$/.test(offer.amount))
+        throw new Error('The USDC payment offer must use integer atomic units.');
+    if (BigInt(offer.amount) > maximumUnits) {
+        throw new Error(`The payment offer exceeds the maximum ${maximum} USDC payment. Refusing to sign.`);
+    }
+    const { x402Client, x402HTTPClient } = await import('@x402/core/client');
+    const { registerExactEvmScheme } = await import('@x402/evm/exact/client');
+    const { supportsBatching } = await import('@circle-fin/x402-batching');
+    const { registerBatchScheme } = await import('@circle-fin/x402-batching/client');
+    // Spend controls stay ON. Arc's USDC is not among the library's default
+    // assets, so paying there needs the assets named -- not the control
+    // disabled, which would allow any token on any chain.
+    const client = new x402Client();
+    client.setSpendControls(usdcSpendControls(opts.maxPayment));
+    // How the authorization gets signed depends on the offer.
+    //
+    // A batched offer is signed against Circle Gateway's wallet contract, not
+    // against USDC, and the two signatures are not interchangeable: registering
+    // the ordinary scheme and then the batched one leaves the ordinary one
+    // signing, which Gateway rejects as `unauthorized` -- a valid signature over
+    // the wrong thing. Circle's own way is to hand the ordinary scheme in as the
+    // fallback, so ONE composite scheme picks per offer.
+    if (supportsBatching(offer.raw)) {
+        const { ExactEvmScheme } = await import('@x402/evm/exact/client');
+        registerBatchScheme(client, {
+            signer: wallet,
+            fallbackScheme: new ExactEvmScheme(wallet),
+        });
+    }
+    else {
+        registerExactEvmScheme(client, { signer: wallet });
+    }
+    const http = new x402HTTPClient(client);
+    const payload = await client.createPaymentPayload({
+        x402Version: 2,
+        accepts: [offer.raw],
+    });
+    const headers = http.encodePaymentSignatureHeader(payload);
+    return {
+        headers: {
+            ...headers,
+            // The service's own nonce, which ties this payment to the challenge it
+            // answers. Sent alongside the x402 header rather than inside it: the
+            // nonce is ours, not part of the standard, and it is what stops a
+            // settled payment being replayed against a second proof request.
+            ...(challenge.nonce ? { 'X-Payment-Nonce': challenge.nonce } : {}),
+        },
+        paidOn: offer.networkName,
+        amount: offer.amount,
+        payer: wallet.address,
+    };
+}
+//# sourceMappingURL=payment.js.map

package/dist/payment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../src/payment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAI7B;IACC,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAE/E,CAAC;IACF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtE,uEAAuE;QACvE,iCAAiC;QACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,iBAAiB,IAAI,GAAG,CAAC;QACtD,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,GAAG,EAAE,CAAC;KACP,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAC,QAAwB;IAC/E,MAAM,KAAK,GAAC,KAAK,CAAC,GAAG,CAAC,KAAyC,CAAC;IAChE,MAAM,WAAW,GAAC,CAAC,CAAS,EAAC,CAAQ,EAAC,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,WAAW,EAAE,KAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9H,IAAG,KAAK,CAAC,OAAO,KAAG,QAAQ,CAAC,OAAO,IAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,KAAG,QAAQ,CAAC,MAAM;QACrG,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,CAAC;QAClF,KAAK,EAAE,IAAI,KAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAE,KAAK,EAAE,OAAO,KAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAE,CAAC,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAC,CAAC;QACrJ,MAAM,KAAK,CAAC,gIAAgI,CAAC,CAAC;IAChJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAqE,EACrE,MAAqB,EACrB,OAAoF,EAAE;IAEtF,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,MAAM,CACpF,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,OAAO,gBAAgB;gBACrE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChE,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IAED,IAAG,IAAI,CAAC,eAAe;QAAC,qBAAqB,CAAC,KAAK,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,2DAA2D;IAC3D,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,WAAW,mCAAmC,KAAK,CAAC,KAAK,0BAA0B;YAC5F,+BAA+B;YAC/B,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC,CAAC;YAChG,2FAA2F;YAC3F,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACvD,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAC/G,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,QAAU,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1G,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,kCAAkC,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC1E,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACvE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAEjF,wEAAwE;IACxE,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAU,CAAC,CAAC;IAErE,0DAA0D;IAC1D,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,gBAAgB,CAAC,KAAK,CAAC,GAA0C,CAAC,EAAE,CAAC;QACvE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,mBAAmB,CAAC,MAAe,EAAE;YACnC,MAAM,EAAE,MAAe;YACvB,cAAc,EAAE,IAAK,cAAuD,CAAC,MAAM,CAAU;SACrF,CAAC,CAAC;IACd,CAAC;SAAM,CAAC;QACN,sBAAsB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;QAChD,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;KACZ,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAE3D,OAAO;QACL,OAAO,EAAE;YACP,GAAG,OAAO;YACV,uEAAuE;YACvE,qEAAqE;YACrE,kEAAkE;YAClE,iEAAiE;YACjE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;QACD,MAAM,EAAE,KAAK,CAAC,WAAW;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC"}

package/dist/prove.d.ts

@@ -12,6 +12,12 @@ export declare function submitProof(config: ClientConfig, request: {
     circuit: CircuitName;
     inputs?: ProveInputs | Record<string, unknown>;
     nonce?: string;
+    /**
+     * Payment headers from `signPayment` -- the x402 `X-Payment` header
+     * carrying a signed authorization. Absent against a service with payment
+     * disabled.
+     */
+    paymentHeaders?: Record<string, string>;
 }): Promise<ProveResponse>;
 /**
  * Submit an E2E encrypted proof request.
@@ -21,5 +27,6 @@ export declare function submitEncryptedProof(config: ClientConfig, request: {
     circuit: CircuitName;
     encryptedPayload: EncryptedEnvelope;
     nonce?: string;
+    paymentHeaders?: Record<string, string>;
 }): Promise<ProveResponse>;
 //# sourceMappingURL=prove.d.ts.map

package/dist/prove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../src/prove.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IACP,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IACP,OAAO,EAAE,WAAW,CAAC;IACrB,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,aAAa,CAAC,CA4BxB"}
+{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../src/prove.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IACP,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GACA,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IACP,OAAO,EAAE,WAAW,CAAC;IACrB,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GACA,OAAO,CAAC,aAAa,CAAC,CA6BxB"}

package/dist/prove.js

@@ -18,6 +18,7 @@ export async function submitProof(config, request) {
     if (request.nonce) {
         headers['X-Payment-Nonce'] = request.nonce;
     }
+    Object.assign(headers, request.paymentHeaders ?? {});
     const response = await fetch(url, {
         method: 'POST',
         headers,
@@ -41,6 +42,7 @@ export async function submitEncryptedProof(config, request) {
     if (request.nonce) {
         headers['X-Payment-Nonce'] = request.nonce;
     }
+    Object.assign(headers, request.paymentHeaders ?? {});
     const response = await fetch(url, {
         method: 'POST',
         headers,

package/dist/prove.js.map

@@ -1 +1 @@
-{"version":3,"file":"prove.js","sourceRoot":"","sources":["../src/prove.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAoB,EACpB,OAIC;IAED,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC;IAC7C,MAAM,IAAI,GAA4B;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;IACF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA4B,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAoB,EACpB,OAIC;IAED,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC;IAC7C,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,iBAAiB,EAAE,OAAO,CAAC,gBAAgB;SAC5C,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAE1F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA4B,CAAC;AACnD,CAAC"}
+{"version":3,"file":"prove.js","sourceRoot":"","sources":["../src/prove.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAoB,EACpB,OAUC;IAED,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC;IAC7C,MAAM,IAAI,GAA4B;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;IACF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA4B,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAoB,EACpB,OAKC;IAED,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC;IAC7C,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,iBAAiB,EAAE,OAAO,CAAC,gBAAgB;SAC5C,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAE1F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA4B,CAAC;AACnD,CAAC"}

package/dist/typedAction.d.ts

@@ -0,0 +1,3 @@
+/** The reason the value is not a usable action, or `null` when it is one. */
+export declare function validateTypedAction(value: unknown): string | null;
+//# sourceMappingURL=typedAction.d.ts.map

package/dist/typedAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typedAction.d.ts","sourceRoot":"","sources":["../src/typedAction.ts"],"names":[],"mappings":"AAsBA,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkDjE"}

package/dist/typedAction.js

@@ -0,0 +1,50 @@
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/** The reason the value is not a usable action, or `null` when it is one. */
+export function validateTypedAction(value) {
+    if (value === undefined || value === null) {
+        return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
+    }
+    if (typeof value !== 'object' || Array.isArray(value)) {
+        return 'action must be an object.';
+    }
+    const a = value;
+    const d = a.domain;
+    if (!d || typeof d !== 'object') {
+        return 'action.domain is required.';
+    }
+    for (const k of ['name', 'version', 'verifyingContract']) {
+        if (typeof d[k] !== 'string' || !d[k]) {
+            return `action.domain.${k} must be a non-empty string.`;
+        }
+    }
+    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
+        return 'action.domain.chainId must be an integer.';
+    }
+    if (!ADDRESS.test(d.verifyingContract)) {
+        return 'action.domain.verifyingContract must be a 20-byte hex address.';
+    }
+    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
+        return 'action.types is required.';
+    }
+    if (typeof a.primaryType !== 'string' || !a.primaryType) {
+        return 'action.primaryType is required.';
+    }
+    if (!(a.primaryType in a.types)) {
+        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
+    }
+    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
+        return 'action.message is required.';
+    }
+    const fields = a.types[a.primaryType];
+    if (!Array.isArray(fields) || fields.length === 0) {
+        return `action.types.${a.primaryType} declares no fields.`;
+    }
+    const missing = fields
+        .map(f => f?.name)
+        .filter(n => typeof n === 'string' && !(n in a.message));
+    if (missing.length) {
+        return `action.message is missing: ${missing.join(', ')}`;
+    }
+    return null;
+}
+//# sourceMappingURL=typedAction.js.map

package/dist/typedAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typedAction.js","sourceRoot":"","sources":["../src/typedAction.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,+IAA+I,CAAC;IACzJ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,GAAG,KAA6B,CAAC;IAExC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,iBAAiB,CAAC,8BAA8B,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,2CAA2C,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,OAAO,gEAAgE,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,uBAAuB,CAAC,CAAC,WAAW,8CAA8C,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,OAAO,6BAA6B,CAAC;IACvC,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,gBAAgB,CAAC,CAAC,WAAW,sBAAsB,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/types.d.ts

@@ -1,7 +1,18 @@
+import { PROVABLE_CIRCUIT_IDS } from './circuits.js';
 /** Client-friendly circuit aliases. */
-export type CircuitName = 'coinbase_kyc' | 'coinbase_country' | 'oidc_domain';
-/** Canonical circuit IDs matching Nargo.toml names. */
-export type CircuitId = 'coinbase_attestation' | 'coinbase_country_attestation' | 'oidc_domain_attestation';
+export type CircuitName = 'coinbase_kyc' | 'coinbase_country' | 'oidc_domain'
+/** Coinbase KYC, with the signature bound to one EIP-712 action. */
+ | 'arc_eligibility';
+/**
+ * Canonical circuit IDs this server can prove.
+ *
+ * Derived from `PROVABLE_CIRCUIT_IDS` in `./circuits.js`, which is itself built
+ * from the canonical identifiers owned by `@zkproofport-app/sdk/circuits`. The
+ * union is unchanged — the three names are no longer typed out here, so a
+ * rename in the customer SDK becomes a compile error instead of a silent
+ * divergence.
+ */
+export type CircuitId = (typeof PROVABLE_CIRCUIT_IDS)[number];
 /** Map client-friendly names to canonical circuit IDs. */
 export declare const CIRCUIT_NAME_MAP: Record<CircuitName, CircuitId>;
 /** Map canonical circuit IDs back to client-friendly names. */
@@ -19,9 +30,25 @@ export interface ChallengeResponse {
         keyId: string;
         attestationDocument: string | null;
     } | null;
+    /**
+     * False when the service is running with payment disabled. The nonce is
+     * still real and still single-use in that case -- it is replay protection,
+     * not a payment receipt -- so the flow is identical apart from the paying.
+     */
+    requiresPayment?: boolean;
+    /**
+     * The chains this service will take payment on, one entry each, in the
+     * order it prefers. Read it to choose; pass a chain to `signPayment` to
+     * pay on it.
+     */
+    accepts?: Array<Record<string, unknown>>;
 }
 export interface ProveInputs {
     signal_hash: string;
+    /** EIP-712 domain hash. Present only when `action` was supplied. */
+    domain_separator?: string;
+    /** EIP-712 hashStruct of the action. Present only when `action` was supplied. */
+    action_hash?: string;
     nullifier: string;
     scope_bytes: string;
     merkle_root: string;
@@ -98,8 +125,68 @@ export interface AttestationData {
     attestation: EASAttestation;
     rawTransaction: string;
 }
+/**
+ * An EIP-712 typed structure, exactly as `eth_signTypedData_v4` takes it.
+ *
+ * The caller owns every field here. This SDK keeps no registry of action
+ * shapes and never invents one: it hands the structure to the wallet, which
+ * renders the named fields for the person to read, and passes the two
+ * resulting 32-byte hashes to the circuit.
+ *
+ * Do NOT include an `EIP712Domain` entry in `types` -- ethers adds it, and
+ * passing it yourself produces a different hash than the wallet computes.
+ *
+ * A single free-form string is a valid shape:
+ *
+ *   types: { Agreement: [{ name: 'terms', type: 'string' }] },
+ *   primaryType: 'Agreement',
+ *   message: { terms: 'Deposit 10 USDC into the KYC-gated vault' }
+ *
+ * A contract cannot enforce prose, though -- to check an amount on-chain the
+ * amount has to be its own field.
+ */
+export interface TypedAction {
+    domain: {
+        name: string;
+        version: string;
+        chainId: number;
+        /** The contract that will verify this signature. Binds it to one address. */
+        verifyingContract: string;
+    };
+    types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/** Terms explicitly accepted by a user; nonce is intentionally not pinned. */
+export interface ApprovedPayment {
+    network: string;
+    scheme: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    extra: {
+        name: string;
+        version: string;
+        verifyingContract: string;
+    };
+}
 export interface ProofParams {
     circuit: CircuitName;
+    /**
+     * Which chain to pay on, when the service charges. Either the CAIP-2 id
+     * (`eip155:5042002`) or the plain name (`arc-testnet`).
+     *
+     * Omitting it takes the first chain the service offers. Naming a chain it
+     * does not offer is an error listing what it does -- never a quiet fall
+     * back to the first, which would spend money somewhere the caller did not
+     * choose and report success.
+     */
+    payOn?: string;
+    approvedPayment?: ApprovedPayment;
+    maxPayment?: string;
     /** Scope string for the proof (defaults to "proofport") */
     scope?: string;
     /** Country codes for the country circuit (e.g. ["US", "KR"]) */
@@ -110,6 +197,22 @@ export interface ProofParams {
     jwt?: string;
     /** OIDC provider: 'google' (default) or 'microsoft' for Microsoft 365 */
     provider?: 'google' | 'microsoft';
+    /**
+     * Bind this proof to one action.
+     *
+     * WITHOUT it the wallet signs `signal_hash` through personal_sign, exactly
+     * as every existing caller does today: the signature asserts "this wallet is
+     * KYC'd for this scope" and commits to no contract, amount, caller or
+     * deadline, and the wallet can only show the person 32 opaque bytes.
+     *
+     * WITH it the wallet signs the typed structure instead, so the person reads
+     * named fields before approving, and the verifying contract recomputes the
+     * same two hashes from the call it is about to run. A proof produced for one
+     * contract no longer verifies at another.
+     *
+     * Omitting it keeps the old behaviour, so existing callers need no change.
+     */
+    action?: TypedAction;
 }
 export interface ProofResult {
     circuit: string;
@@ -127,4 +230,44 @@ export interface StepResult<T = unknown> {
     data: T;
     durationMs: number;
 }
+/**
+ * A wallet that can pay for a proof: an address and the ability to sign one
+ * EIP-712 message. Deliberately nothing more -- see `wallets.ts` for why
+ * paying needs no transaction, no gas and no chain of its own.
+ *
+ * Structurally `ClientEvmSigner` from `@x402/evm`, so a viem account or
+ * Coinbase's `fromCdpEvmAccount` result satisfies it as-is.
+ */
+export interface PaymentWallet {
+    address: `0x${string}`;
+    signTypedData(message: {
+        domain: Record<string, unknown>;
+        types: Record<string, unknown>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<`0x${string}`>;
+    /** A line naming this wallet for a log or a CLI, without its secrets. */
+    describe(): string;
+}
+/** One chain a service will take payment on, from its 402 answer. */
+export interface PaymentOffer {
+    /** CAIP-2, e.g. `eip155:5042002`. */
+    network: string;
+    /** The plain name, e.g. `arc-testnet`. */
+    networkName: string;
+    /** Price in that chain's USDC, in the token's own units. */
+    amount: string;
+    /** The USDC contract the payment must be in. */
+    asset: string;
+    payTo: string;
+    /** The requirement as the service sent it, passed to the signer untouched. */
+    raw: Record<string, unknown>;
+}
+/** A signed payment, ready to be sent back with the proof request. */
+export interface PaidRequest {
+    headers: Record<string, string>;
+    paidOn: string;
+    amount: string;
+    payer: string;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,uCAAuC;AACvC,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,aAAa,CAAC;AAE9E,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,sBAAsB,GAAG,8BAA8B,GAAG,yBAAyB,CAAC;AAE5G,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,CAI3D,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAIzD,CAAC;AAIF,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,GAAG,IAAI,CAAC;CACV;AAID,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;CAChE;AAID,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE;QACjB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE;YACZ,WAAW,EAAE,OAAO,CAAC;YACrB,UAAU,EAAE,OAAO,CAAC;YACpB,cAAc,EAAE,OAAO,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC9B,CAAC;KACH,GAAG,IAAI,CAAC;IACT,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,YAAY,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,cAAc,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,WAAW,CAAC;IACrB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CAC7C;AAID,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,CAAC;IACR,UAAU,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAElE,uCAAuC;AACvC,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,kBAAkB,GAClB,aAAa;AACf,oEAAoE;GAClE,iBAAiB,CAAC;AAEtB;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,CAK3D,CAAC;AAEF,+DAA+D;AAC/D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAKzD,CAAC;AAIF,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACpC,GAAG,IAAI,CAAC;IACT;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C;AAID,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;CAChE;AAID,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE;QACjB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE;YACZ,WAAW,EAAE,OAAO,CAAC;YACrB,UAAU,EAAE,OAAO,CAAC;YACpB,cAAc,EAAE,OAAO,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAC9B,CAAC;KACH,GAAG,IAAI,CAAC;IACT,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,YAAY,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,cAAc,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,6EAA6E;QAC7E,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IACrE,KAAK,EAAC;QAAC,IAAI,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,iBAAiB,EAAC,MAAM,CAAA;KAAC,CAAC;CAC7D;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,WAAW,CAAC;IACrB;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAElC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CAC7C;AAID,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,CAAC;IACR,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,OAAO,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,IAAI,MAAM,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/types.js

@@ -1,14 +1,17 @@
 // ─── Circuit name mappings ──────────────────────────────────────────────
+import { CIRCUIT_IDS } from './circuits.js';
 /** Map client-friendly names to canonical circuit IDs. */
 export const CIRCUIT_NAME_MAP = {
-    coinbase_kyc: 'coinbase_attestation',
-    coinbase_country: 'coinbase_country_attestation',
-    oidc_domain: 'oidc_domain_attestation',
+    coinbase_kyc: CIRCUIT_IDS.COINBASE_ATTESTATION,
+    coinbase_country: CIRCUIT_IDS.COINBASE_COUNTRY_ATTESTATION,
+    oidc_domain: CIRCUIT_IDS.OIDC_DOMAIN_ATTESTATION,
+    arc_eligibility: CIRCUIT_IDS.ARC_ELIGIBILITY,
 };
 /** Map canonical circuit IDs back to client-friendly names. */
 export const CIRCUIT_ID_MAP = {
-    coinbase_attestation: 'coinbase_kyc',
-    coinbase_country_attestation: 'coinbase_country',
-    oidc_domain_attestation: 'oidc_domain',
+    [CIRCUIT_IDS.COINBASE_ATTESTATION]: 'coinbase_kyc',
+    [CIRCUIT_IDS.COINBASE_COUNTRY_ATTESTATION]: 'coinbase_country',
+    [CIRCUIT_IDS.OIDC_DOMAIN_ATTESTATION]: 'oidc_domain',
+    [CIRCUIT_IDS.ARC_ELIGIBILITY]: 'arc_eligibility',
 };
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAQ3E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAmC;IAC9D,YAAY,EAAE,sBAAsB;IACpC,gBAAgB,EAAE,8BAA8B;IAChD,WAAW,EAAE,yBAAyB;CACvC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC5D,oBAAoB,EAAE,cAAc;IACpC,4BAA4B,EAAE,kBAAkB;IAChD,uBAAuB,EAAE,aAAa;CACvC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAC;AAqBlE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAmC;IAC9D,YAAY,EAAE,WAAW,CAAC,oBAAoB;IAC9C,gBAAgB,EAAE,WAAW,CAAC,4BAA4B;IAC1D,WAAW,EAAE,WAAW,CAAC,uBAAuB;IAChD,eAAe,EAAE,WAAW,CAAC,eAAe;CAC7C,CAAC;AAEF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAmC;IAC5D,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,cAAc;IAClD,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE,kBAAkB;IAC9D,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,aAAa;IACpD,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,iBAAiB;CACjD,CAAC"}

package/dist/usdc.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The USDC contracts this SDK is willing to pay in.
+ *
+ * ## Why the client keeps its own list
+ *
+ * A 402 answer names the token it wants paid in. Signing whatever it names
+ * means a service can ask for any token at all -- including one it minted --
+ * and a wallet paying autonomously would sign it. `@x402/core` guards against
+ * exactly that: it refuses to sign for an asset outside its own default list
+ * unless told otherwise, and refusing is the correct behaviour.
+ *
+ * Arc's USDC is not in that default list, so paying on Arc needs this list
+ * rather than `spendControls: false`. The difference matters: turning the
+ * control off allows every token on every chain, which is how an agent ends up
+ * signing away something nobody meant to spend. This allows five specific
+ * contracts and nothing else.
+ *
+ * So yes, this duplicates the server's table in `src/payment/networks.ts` --
+ * deliberately. A shared table would mean the client trusting the server's
+ * word about which token is USDC, which is the thing being guarded against.
+ *
+ * ## Keeping it right
+ *
+ * Each address was read from the chain, not from memory:
+ * `decimals()` is 6 and `name()`/`symbol()` say USDC on all five. Arc's is the
+ * ERC-20 view of its native balance, checked on 2026-09-09 -- name "USDC",
+ * version "2", decimals 6, and a `DOMAIN_SEPARATOR()` that matches the hash a
+ * client computes from those values.
+ */
+/**
+ * The most this SDK will sign for in one payment, unless the caller says
+ * otherwise.
+ *
+ * A proof costs cents. A cap two orders of magnitude above that leaves room
+ * for a price change without leaving room for a mistake -- and it is the
+ * difference between a misconfigured service overcharging by a cent and
+ * draining a wallet.
+ */
+export declare const DEFAULT_MAX_PAYMENT = "$1";
+/**
+ * The spend controls to sign under: these five USDC contracts, capped.
+ *
+ * Passing an asset the offer names that is NOT in the list produces a refusal
+ * from `@x402/core` rather than a signature.
+ */
+export declare function usdcSpendControls(maxPayment?: string): {
+    maxAmountPerPayment: string;
+    allowedAssets: {
+        network: string;
+        asset: string;
+    }[];
+};
+/**
+ * Whether an offer names the USDC this SDK knows for that chain.
+ *
+ * Checked before signing so the error says which token was asked for, rather
+ * than letting `@x402/core` refuse with a message about allowedAssets that
+ * does not name the culprit.
+ */
+export declare function isKnownUsdc(network: string, asset: string): boolean;
+/** The USDC this SDK knows for a chain, or undefined. */
+export declare function knownUsdc(network: string): string | undefined;
+//# sourceMappingURL=usdc.d.ts.map

package/dist/usdc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usdc.d.ts","sourceRoot":"","sources":["../src/usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAWH;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM;;;;;;EAQpD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED,yDAAyD;AACzD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D"}