uvd-x402-sdk 2.56.0 → 2.57.0

package/dist/index.d.mts

@@ -193,6 +193,42 @@ declare function payerKeyFromEvmSignature(signature: Uint8Array | string, digest
  * Returns the bytes to upload. Nothing here touches the network.
  */
 declare function sealEvidence(body: Uint8Array, payerKey: Uint8Array, paymentIdValue: string): Uint8Array;
+/** The zero address, for the ed25519 form of the digest. */
+declare const ZERO_ADDRESS: string;
+/**
+ * The 32-byte digest a seller signs to prove an anchor is theirs.
+ *
+ * One canonical message across every curve. `payee` is the EVM address for a
+ * secp256k1 payee and the **zero address** for an ed25519 one — an ed25519
+ * address does not fit the `address` field, and the binding is already
+ * established by which key verifies the signature.
+ *
+ * `pointer` is whatever you send in the anchor, or the **empty string** when you
+ * send `sealed` and the facilitator issues the pointer itself: you cannot sign a
+ * value you have not seen.
+ *
+ * Getting this wrong throws nothing — it produces a signature that simply never
+ * verifies, and the anchor stays provisional with no clue why. The tests pin it
+ * against digests emitted by the facilitator's own Rust implementation.
+ */
+declare function anchorDigest(paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): Uint8Array;
+/**
+ * Sign an anchor authorization with a Solana / Stellar ed25519 key.
+ *
+ * A Solana payee cannot produce an EIP-712 signature at all — its address is an
+ * ed25519 key — so requiring one would leave that chain unable to prove
+ * authorship even once the on-chain gate is enforced. This closes it today, with
+ * no RPC.
+ */
+declare function signAnchorEd25519(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer?: string): string;
+/**
+ * Sign an anchor authorization with an EVM secp256k1 key.
+ *
+ * `payee` must be the address of `privateKey` — the facilitator recovers the
+ * signer and compares, so declaring somebody else's address simply leaves the
+ * anchor provisional.
+ */
+declare function signAnchorEvm(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): string;
 
 /**
  * Facilitator wallet addresses by chain type
@@ -841,4 +877,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.d.ts

@@ -193,6 +193,42 @@ declare function payerKeyFromEvmSignature(signature: Uint8Array | string, digest
  * Returns the bytes to upload. Nothing here touches the network.
  */
 declare function sealEvidence(body: Uint8Array, payerKey: Uint8Array, paymentIdValue: string): Uint8Array;
+/** The zero address, for the ed25519 form of the digest. */
+declare const ZERO_ADDRESS: string;
+/**
+ * The 32-byte digest a seller signs to prove an anchor is theirs.
+ *
+ * One canonical message across every curve. `payee` is the EVM address for a
+ * secp256k1 payee and the **zero address** for an ed25519 one — an ed25519
+ * address does not fit the `address` field, and the binding is already
+ * established by which key verifies the signature.
+ *
+ * `pointer` is whatever you send in the anchor, or the **empty string** when you
+ * send `sealed` and the facilitator issues the pointer itself: you cannot sign a
+ * value you have not seen.
+ *
+ * Getting this wrong throws nothing — it produces a signature that simply never
+ * verifies, and the anchor stays provisional with no clue why. The tests pin it
+ * against digests emitted by the facilitator's own Rust implementation.
+ */
+declare function anchorDigest(paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): Uint8Array;
+/**
+ * Sign an anchor authorization with a Solana / Stellar ed25519 key.
+ *
+ * A Solana payee cannot produce an EIP-712 signature at all — its address is an
+ * ed25519 key — so requiring one would leave that chain unable to prove
+ * authorship even once the on-chain gate is enforced. This closes it today, with
+ * no RPC.
+ */
+declare function signAnchorEd25519(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer?: string): string;
+/**
+ * Sign an anchor authorization with an EVM secp256k1 key.
+ *
+ * `payee` must be the address of `privateKey` — the facilitator recovers the
+ * signer and compares, so declaring somebody else's address simply leaves the
+ * anchor provisional.
+ */
+declare function signAnchorEvm(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): string;
 
 /**
  * Facilitator wallet addresses by chain type
@@ -841,4 +877,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.js

@@ -289,6 +289,73 @@ function sealEvidence(body, payerKey, paymentIdValue) {
   out.set(ciphertext, pos);
   return out;
 }
+var ANCHOR_DOMAIN_NAME = "DX402 Anchor";
+var ANCHOR_DOMAIN_VERSION = "1";
+var ANCHOR_TYPE = "Dx402AnchorAuthorization(bytes32 paymentId,bytes32 contentHash,string pointer,address payee)";
+var EIP712_DOMAIN_TYPE = "EIP712Domain(string name,string version,uint256 chainId)";
+var ZERO_ADDRESS = "0x" + "00".repeat(20);
+function concatBytes(...parts) {
+  const total = parts.reduce((n, p) => n + p.length, 0);
+  const out = new Uint8Array(total);
+  let pos = 0;
+  for (const p of parts) {
+    out.set(p, pos);
+    pos += p.length;
+  }
+  return out;
+}
+function uint256(n) {
+  const out = new Uint8Array(32);
+  let v = BigInt(n);
+  for (let i = 31; i >= 0 && v > 0n; i--) {
+    out[i] = Number(v & 0xffn);
+    v >>= 8n;
+  }
+  return out;
+}
+function anchorDigest(paymentId2, contentHash2, pointer, payee, chainId) {
+  const b32 = (value, field) => {
+    const raw = hexToBytes(value);
+    if (raw.length !== 32) throw new DX402Error(`${field} must be 32 bytes, got ${raw.length}`);
+    return raw;
+  };
+  const addr = hexToBytes(payee);
+  if (addr.length !== 20) {
+    throw new DX402Error(`payee must be a 20-byte address, got ${addr.length}`);
+  }
+  const enc = new TextEncoder();
+  const domainSeparator = sha3.keccak_256(
+    concatBytes(
+      sha3.keccak_256(enc.encode(EIP712_DOMAIN_TYPE)),
+      sha3.keccak_256(enc.encode(ANCHOR_DOMAIN_NAME)),
+      sha3.keccak_256(enc.encode(ANCHOR_DOMAIN_VERSION)),
+      uint256(chainId)
+    )
+  );
+  const structHash = sha3.keccak_256(
+    concatBytes(
+      sha3.keccak_256(enc.encode(ANCHOR_TYPE)),
+      b32(paymentId2, "paymentId"),
+      b32(contentHash2, "contentHash"),
+      sha3.keccak_256(enc.encode(pointer)),
+      new Uint8Array(12),
+      addr
+    )
+  );
+  return sha3.keccak_256(concatBytes(new Uint8Array([25, 1]), domainSeparator, structHash));
+}
+function signAnchorEd25519(privateKey, paymentId2, contentHash2, pointer = "") {
+  if (privateKey.length !== 32) {
+    throw new DX402Error(`ed25519 seed must be 32 bytes, got ${privateKey.length}`);
+  }
+  const digest = anchorDigest(paymentId2, contentHash2, pointer, ZERO_ADDRESS, 0);
+  return "0x" + bytesToHex(ed25519.ed25519.sign(digest, privateKey));
+}
+function signAnchorEvm(privateKey, paymentId2, contentHash2, pointer, payee, chainId) {
+  const digest = anchorDigest(paymentId2, contentHash2, pointer, payee, chainId);
+  const sig = secp256k1.secp256k1.sign(digest, privateKey);
+  return "0x" + bytesToHex(sig.toCompactRawBytes()) + (sig.recovery === 1 ? "01" : "00");
+}
 
 // src/types/index.ts
 var CAIP2_IDENTIFIERS = {
@@ -3118,7 +3185,7 @@ function buildSignatureParams(params) {
   parts.push(`alg="${ALG}"`);
   return parts.join(";");
 }
-var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
+var ZERO_ADDRESS2 = "0x0000000000000000000000000000000000000000";
 var USDC_DECIMALS = 6;
 var ESCROW_DEPOSIT_LIMIT_USD = 100;
 var OPERATOR_FEE_BPS = 1300;
@@ -3167,7 +3234,7 @@ function computeEscrowNonce(chainId, escrowAddress, paymentInfoTypehash, pi) {
   const coder = ethers.ethers.AbiCoder.defaultAbiCoder();
   const piTuple = [
     ethers.ethers.getAddress(pi.operator),
-    ZERO_ADDRESS,
+    ZERO_ADDRESS2,
     // payer = 0 for the payer-agnostic hash
     ethers.ethers.getAddress(pi.receiver),
     ethers.ethers.getAddress(pi.token),
@@ -4092,6 +4159,8 @@ exports.X402Client = X402Client;
 exports.X402Error = X402Error;
 exports.X402_CORS_HEADERS = X402_CORS_HEADERS;
 exports.X402_HEADER_NAMES = X402_HEADER_NAMES;
+exports.ZERO_ADDRESS = ZERO_ADDRESS;
+exports.anchorDigest = anchorDigest;
 exports.buildEscrowPreAuth = buildEscrowPreAuth;
 exports.buildPaymentRequirements = buildPaymentRequirements;
 exports.buildSettleRequest = buildSettleRequest;
@@ -4163,6 +4232,8 @@ exports.payerKeyFromEvmSignature = payerKeyFromEvmSignature;
 exports.recoverEvidence = recoverEvidence;
 exports.sealEvidence = sealEvidence;
 exports.sealedRoles = sealedRoles;
+exports.signAnchorEd25519 = signAnchorEd25519;
+exports.signAnchorEvm = signAnchorEvm;
 exports.signRequest = signRequest;
 exports.signRequestWithSigner = signRequestWithSigner;
 exports.signRequestWithWallet = signRequestWithWallet;