uvd-x402-sdk 2.109.0 → 2.110.0

package/README.md

@@ -10,7 +10,7 @@ Users sign a message or transaction, and the Ultravioleta facilitator handles on
 
 ## Features
 
-**Arras NEAR escrow (v2.108.0):** offline local-key NEP-366 authorization, canonical Rust payment IDs and pull lifecycle helpers through `uvd-x402-sdk/near`. [Guide and agent example](docs/near-escrow.md). As of 2026-11-02 the facilitator advertises escrow only on testnet, and the SDK's escrow contract registry has no mainnet row yet.
+**Arras NEAR escrow (v2.110.0):** offline local-key NEP-366 authorization, canonical Rust payment IDs and pull lifecycle helpers through `uvd-x402-sdk/near`. [Guide and agent example](docs/near-escrow.md). As of 2026-11-03 the production facilitator relays NEAR escrow only on testnet. Since 2.110.0 the registry allows mainnet escrow signing only for `v1.arras-escrow.near`; testnet keeps `arras-v1b-1101.testnet`.
 
 - **31 Networks**: EVM (19 including HashKey Chain, Arc, Scroll, SKALE Base, Robinhood Chain), Solana, Fogo, Stellar, NEAR, Algorand, Sui, XRP Ledger, Hedera (mainnet + testnet)
 - **Multi-Stablecoin**: USDC, EURC, AUSD, PYUSD, USDT, USDG (Robinhood Chain)

package/dist/providers/near/index.d.mts

@@ -65,7 +65,7 @@ declare const NEAR_ESCROW_TOKENS: Readonly<Record<NearEscrowNetwork, string>>;
 /**
  * The Arras escrow deployments this SDK signs for, per network. Any other escrowContract is refused before the
  * signer is called, for authorization and lifecycle alike: a signed delegate can be relayed by anyone, so a 402
- * server must not be able to point it at its own account. Mainnet stays empty until its contract ships in a release.
+ * server must not be able to point it at its own account. Only deployed Arras v1 contracts are registered.
  */
 declare const NEAR_ESCROW_CONTRACTS: Readonly<Record<NearEscrowNetwork, readonly string[]>>;
 /** Canonical Arras JSON: field order, decimal-string timestamps, lowercase hex, no spaces. */
@@ -154,7 +154,7 @@ interface NearStorageOptions {
     /** YoctoNEAR, not NEAR. Query storage_balance_bounds for the live contract minimum. */
     deposit?: NearUnsigned;
 }
-/** Explicit trusted deployment configuration; this unsigned builder does not select an account parent. */
+/** Explicit deployment from NEAR_ESCROW_CONTRACTS for the selected network. */
 interface ArrasStorageOptions extends NearStorageOptions {
     escrowContract: string;
 }

package/dist/providers/near/index.d.ts

@@ -65,7 +65,7 @@ declare const NEAR_ESCROW_TOKENS: Readonly<Record<NearEscrowNetwork, string>>;
 /**
  * The Arras escrow deployments this SDK signs for, per network. Any other escrowContract is refused before the
  * signer is called, for authorization and lifecycle alike: a signed delegate can be relayed by anyone, so a 402
- * server must not be able to point it at its own account. Mainnet stays empty until its contract ships in a release.
+ * server must not be able to point it at its own account. Only deployed Arras v1 contracts are registered.
  */
 declare const NEAR_ESCROW_CONTRACTS: Readonly<Record<NearEscrowNetwork, readonly string[]>>;
 /** Canonical Arras JSON: field order, decimal-string timestamps, lowercase hex, no spaces. */
@@ -154,7 +154,7 @@ interface NearStorageOptions {
     /** YoctoNEAR, not NEAR. Query storage_balance_bounds for the live contract minimum. */
     deposit?: NearUnsigned;
 }
-/** Explicit trusted deployment configuration; this unsigned builder does not select an account parent. */
+/** Explicit deployment from NEAR_ESCROW_CONTRACTS for the selected network. */
 interface ArrasStorageOptions extends NearStorageOptions {
     escrowContract: string;
 }

package/dist/providers/near/index.js

@@ -1363,7 +1363,7 @@ var NEAR_ESCROW_TOKENS = Object.freeze({
 });
 var NEAR_ESCROW_CONTRACTS = Object.freeze({
   "near:testnet": Object.freeze(["arras-v1b-1101.testnet"]),
-  "near:mainnet": Object.freeze([])
+  "near:mainnet": Object.freeze(["v1.arras-escrow.near"])
 });
 var NONCE_RANGE_MULTIPLIER = 1000000n;
 function hex(value, size, name) {
@@ -1643,6 +1643,9 @@ function storage(o, receiverId, registrationOnly, defaultDeposit) {
 function buildArrasStorageDeposit(options) {
   const o = { ...options };
   if (o.network !== "near:mainnet" && o.network !== "near:testnet") throw new Error("Unsupported NEAR network");
+  if (!NEAR_ESCROW_CONTRACTS[o.network].includes(o.escrowContract)) {
+    throw new Error(`escrowContract: not a registered Arras escrow for ${o.network}`);
+  }
   return storage(o, o.escrowContract, false, NEAR_ARRAS_STORAGE_DEPOSIT);
 }
 function buildUsdcStorageDeposit(options) {