uvd-x402-sdk 2.57.0 → 2.59.0

package/dist/index.d.mts

@@ -229,6 +229,64 @@ declare function signAnchorEd25519(privateKey: Uint8Array, paymentId: string, co
  * anchor provisional.
  */
 declare function signAnchorEvm(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): string;
+/**
+ * Derive the encryption target from a Solana (or Fogo) address.
+ *
+ * On ed25519 chains the address **is** the public key, so this needs no
+ * signature and no lookup. Rejects anything that does not decode to exactly 32
+ * bytes: a short decode silently padded up to 32 produces a small-order point,
+ * which fails a layer later with a message that points nowhere near the cause.
+ */
+declare function payerKeyFromSolanaAddress(address: string): Uint8Array;
+/**
+ * Seal `body` so every listed recipient can read it, and nobody else.
+ *
+ * The body is encrypted **once**; only the content key is wrapped per recipient,
+ * so adding the seller costs about sixty bytes rather than a second copy of the
+ * payload. That is what makes it practical for a seller to keep a readable copy
+ * of what it delivered — and answer a false "that is not what you sent" —
+ * instead of paying to anchor evidence it cannot open.
+ *
+ * A single payer recipient is emitted as format **v1, byte-for-byte**, so
+ * nothing already anchored becomes unreadable and readers still on v1 keep
+ * working.
+ */
+declare function sealEvidenceTo(body: Uint8Array, recipients: Array<{
+    role: RecipientRole;
+    key: Uint8Array;
+}>, paymentIdValue: string): Uint8Array;
+interface AnchorOptions {
+    paymentId: string;
+    network: string;
+    txHash: string;
+    payer: string;
+    payee: string;
+    /** The buyer's encryption key, from `payerKeyFromSolanaAddress` or similar. */
+    payerKey: Uint8Array;
+    /**
+     * Your **public** key, to keep a readable copy so you can answer a false
+     * "that is not what you sent".
+     *
+     * It does not have to be your payment key, and should not be — a custodial
+     * payment wallet works fine here, because this key only ever decrypts.
+     */
+    sellerEncryptionKey?: Uint8Array;
+    /**
+     * `(digest) => "0x..."`. A callable rather than a private key is what lets a
+     * custodian sign: it receives the digest and returns the signature without the
+     * seed ever leaving it.
+     *
+     * Without one the anchor is **provisional** — it holds the slot, but a signed
+     * anchor for the same payment supersedes it.
+     */
+    sign?: (digest: Uint8Array) => string | Promise<string>;
+    retention?: string;
+    facilitator?: string;
+    fetch?: typeof fetch;
+}
+declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
+/** Encode an anchor result for the `X-Durable-Evidence` response header. */
+declare function evidenceHeader(evidence: unknown): string;
 
 /**
  * Facilitator wallet addresses by chain type
@@ -877,4 +935,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.d.ts

@@ -229,6 +229,64 @@ declare function signAnchorEd25519(privateKey: Uint8Array, paymentId: string, co
  * anchor provisional.
  */
 declare function signAnchorEvm(privateKey: Uint8Array, paymentId: string, contentHash: string, pointer: string, payee: string, chainId: number): string;
+/**
+ * Derive the encryption target from a Solana (or Fogo) address.
+ *
+ * On ed25519 chains the address **is** the public key, so this needs no
+ * signature and no lookup. Rejects anything that does not decode to exactly 32
+ * bytes: a short decode silently padded up to 32 produces a small-order point,
+ * which fails a layer later with a message that points nowhere near the cause.
+ */
+declare function payerKeyFromSolanaAddress(address: string): Uint8Array;
+/**
+ * Seal `body` so every listed recipient can read it, and nobody else.
+ *
+ * The body is encrypted **once**; only the content key is wrapped per recipient,
+ * so adding the seller costs about sixty bytes rather than a second copy of the
+ * payload. That is what makes it practical for a seller to keep a readable copy
+ * of what it delivered — and answer a false "that is not what you sent" —
+ * instead of paying to anchor evidence it cannot open.
+ *
+ * A single payer recipient is emitted as format **v1, byte-for-byte**, so
+ * nothing already anchored becomes unreadable and readers still on v1 keep
+ * working.
+ */
+declare function sealEvidenceTo(body: Uint8Array, recipients: Array<{
+    role: RecipientRole;
+    key: Uint8Array;
+}>, paymentIdValue: string): Uint8Array;
+interface AnchorOptions {
+    paymentId: string;
+    network: string;
+    txHash: string;
+    payer: string;
+    payee: string;
+    /** The buyer's encryption key, from `payerKeyFromSolanaAddress` or similar. */
+    payerKey: Uint8Array;
+    /**
+     * Your **public** key, to keep a readable copy so you can answer a false
+     * "that is not what you sent".
+     *
+     * It does not have to be your payment key, and should not be — a custodial
+     * payment wallet works fine here, because this key only ever decrypts.
+     */
+    sellerEncryptionKey?: Uint8Array;
+    /**
+     * `(digest) => "0x..."`. A callable rather than a private key is what lets a
+     * custodian sign: it receives the digest and returns the signature without the
+     * seed ever leaving it.
+     *
+     * Without one the anchor is **provisional** — it holds the slot, but a signed
+     * anchor for the same payment supersedes it.
+     */
+    sign?: (digest: Uint8Array) => string | Promise<string>;
+    retention?: string;
+    facilitator?: string;
+    fetch?: typeof fetch;
+}
+declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
+/** Encode an anchor result for the `X-Durable-Evidence` response header. */
+declare function evidenceHeader(evidence: unknown): string;
 
 /**
  * Facilitator wallet addresses by chain type
@@ -877,4 +935,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, recoverEvidence, sealEvidence, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };