uvd-x402-sdk 2.60.0 → 2.62.0

package/dist/index.d.mts

@@ -271,6 +271,18 @@ interface AnchorOptions {
      * payment wallet works fine here, because this key only ever decrypts.
      */
     sellerEncryptionKey?: Uint8Array;
+    /**
+     * The settlement proof, in the facilitator's `ProofOfPayment` shape
+     * (`transactionHash`, `blockNumber`, `network`, `payer`, `payee`, `amount`,
+     * `token`, `timestamp`, `paymentHash`).
+     *
+     * **The only thing that reaches `verified: true`.** Without it the
+     * facilitator has checked no chain, so it records the anchor as provisional
+     * and answers `notVerifiedReason: "dx402_proof_missing"`: the signature is
+     * accepted (`signed: true`) but authorship is not certified, and a claim that
+     * proves more may supersede it.
+     */
+    proofOfPayment?: Record<string, unknown>;
     /**
      * `(digest) => "0x..."`. A callable rather than a private key is what lets a
      * custodian sign: it receives the digest and returns the signature without the
@@ -284,6 +296,32 @@ interface AnchorOptions {
     facilitator?: string;
     fetch?: typeof fetch;
 }
+/**
+ * The digest the facilitator will ACTUALLY verify, chosen by the payee's curve.
+ *
+ * The gate dispatches on the payee and checks **one** form -- never both. A
+ * secp256k1 payee is verified against the digest built with its REAL address and
+ * chain id; an ed25519 payee, whose address does not fit the `address` field, is
+ * verified against the zero address and chain id 0.
+ *
+ * Signing the wrong form throws nothing. It yields a signature that never
+ * verifies, the anchor silently stays **provisional**, and a provisional anchor
+ * can be superseded by anyone -- the very hijack a signed anchor exists to stop.
+ * Reproduced against production by KarmaKadabra, 2026-08-19: with everything else
+ * identical, the ed25519 form was refused (`409 dx402_already_anchored`) and the
+ * EVM form superseded the provisional.
+ *
+ * `pointer` stays empty on both branches: this call sends `sealed`, so the
+ * facilitator issues the pointer and you cannot sign what you have not seen.
+ */
+declare function sellerDigestFor(paymentId: string, contentHash: string, payee: string, network: string): Uint8Array | undefined;
+/**
+ * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
+ * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
+ * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
+ * plaintext.
+ */
+declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
 /** Encode an anchor result for the `X-Durable-Evidence` response header. */
 declare function evidenceHeader(evidence: unknown): string;
@@ -935,4 +973,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { ANCHOR_MAX_REQUEST_BYTES, type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.d.ts

@@ -271,6 +271,18 @@ interface AnchorOptions {
      * payment wallet works fine here, because this key only ever decrypts.
      */
     sellerEncryptionKey?: Uint8Array;
+    /**
+     * The settlement proof, in the facilitator's `ProofOfPayment` shape
+     * (`transactionHash`, `blockNumber`, `network`, `payer`, `payee`, `amount`,
+     * `token`, `timestamp`, `paymentHash`).
+     *
+     * **The only thing that reaches `verified: true`.** Without it the
+     * facilitator has checked no chain, so it records the anchor as provisional
+     * and answers `notVerifiedReason: "dx402_proof_missing"`: the signature is
+     * accepted (`signed: true`) but authorship is not certified, and a claim that
+     * proves more may supersede it.
+     */
+    proofOfPayment?: Record<string, unknown>;
     /**
      * `(digest) => "0x..."`. A callable rather than a private key is what lets a
      * custodian sign: it receives the digest and returns the signature without the
@@ -284,6 +296,32 @@ interface AnchorOptions {
     facilitator?: string;
     fetch?: typeof fetch;
 }
+/**
+ * The digest the facilitator will ACTUALLY verify, chosen by the payee's curve.
+ *
+ * The gate dispatches on the payee and checks **one** form -- never both. A
+ * secp256k1 payee is verified against the digest built with its REAL address and
+ * chain id; an ed25519 payee, whose address does not fit the `address` field, is
+ * verified against the zero address and chain id 0.
+ *
+ * Signing the wrong form throws nothing. It yields a signature that never
+ * verifies, the anchor silently stays **provisional**, and a provisional anchor
+ * can be superseded by anyone -- the very hijack a signed anchor exists to stop.
+ * Reproduced against production by KarmaKadabra, 2026-08-19: with everything else
+ * identical, the ed25519 form was refused (`409 dx402_already_anchored`) and the
+ * EVM form superseded the provisional.
+ *
+ * `pointer` stays empty on both branches: this call sends `sealed`, so the
+ * facilitator issues the pointer and you cannot sign what you have not seen.
+ */
+declare function sellerDigestFor(paymentId: string, contentHash: string, payee: string, network: string): Uint8Array | undefined;
+/**
+ * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
+ * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
+ * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
+ * plaintext.
+ */
+declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
 /** Encode an anchor result for the `X-Durable-Evidence` response header. */
 declare function evidenceHeader(evidence: unknown): string;
@@ -935,4 +973,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { ANCHOR_MAX_REQUEST_BYTES, type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.js

@@ -4,9 +4,9 @@ var aes = require('@noble/ciphers/aes');
 var ed25519 = require('@noble/curves/ed25519');
 var secp256k1 = require('@noble/curves/secp256k1');
 var hkdf = require('@noble/hashes/hkdf');
+var utils = require('@noble/hashes/utils');
 var sha3 = require('@noble/hashes/sha3');
 var sha2 = require('@noble/hashes/sha2');
-var utils = require('@noble/hashes/utils');
 var ethers = require('ethers');
 
 // src/dx402.ts
@@ -1194,24 +1194,20 @@ function b64urlDecode(value) {
 }
 function hexToBytes(hex) {
   const clean = hex.startsWith("0x") ? hex.slice(2) : hex;
-  if (clean.length % 2 !== 0) throw new DX402Error("odd-length hex string");
-  const out = new Uint8Array(clean.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+  try {
+    return utils.hexToBytes(clean);
+  } catch (e) {
+    throw new DX402Error(`invalid hex: ${e.message}`);
   }
-  return out;
-}
-function bytesToHex(bytes) {
-  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 function contentHash(body) {
-  return "0x" + bytesToHex(sha3.keccak_256(body));
+  return "0x" + utils.bytesToHex(sha3.keccak_256(body));
 }
 function paymentId(caip2Network, txHash) {
   const enc = new TextEncoder();
   const clean = txHash.startsWith("0x") ? txHash.slice(2) : txHash;
   const preimage = new Uint8Array([...enc.encode(caip2Network), ...enc.encode(clean)]);
-  return "0x" + bytesToHex(sha3.keccak_256(preimage));
+  return "0x" + utils.bytesToHex(sha3.keccak_256(preimage));
 }
 function parseEvidenceHeader(value) {
   let payload;
@@ -1494,12 +1490,12 @@ function signAnchorEd25519(privateKey, paymentId2, contentHash2, pointer = "") {
     throw new DX402Error(`ed25519 seed must be 32 bytes, got ${privateKey.length}`);
   }
   const digest = anchorDigest(paymentId2, contentHash2, pointer, ZERO_ADDRESS, 0);
-  return "0x" + bytesToHex(ed25519.ed25519.sign(digest, privateKey));
+  return "0x" + utils.bytesToHex(ed25519.ed25519.sign(digest, privateKey));
 }
 function signAnchorEvm(privateKey, paymentId2, contentHash2, pointer, payee, chainId) {
   const digest = anchorDigest(paymentId2, contentHash2, pointer, payee, chainId);
   const sig = secp256k1.secp256k1.sign(digest, privateKey);
-  return "0x" + bytesToHex(sig.toCompactRawBytes()) + (sig.recovery === 1 ? "01" : "00");
+  return "0x" + utils.bytesToHex(sig.toCompactRawBytes()) + (sig.recovery === 1 ? "01" : "00");
 }
 function payerKeyFromSolanaAddress(address) {
   if (!address || !address.trim()) throw new DX402Error("empty Solana address");
@@ -1578,7 +1574,12 @@ function isEvmAddress(value) {
   return /^0x[0-9a-fA-F]{40}$/.test((value ?? "").trim());
 }
 function chainIdFor(network) {
-  const name = (network ?? "").includes(":") ? network.split(":")[1] ?? "" : network;
+  const raw = network ?? "";
+  if (raw.toLowerCase().startsWith("eip155:")) {
+    const tail = raw.slice("eip155:".length);
+    if (/^\d+$/.test(tail)) return Number(tail);
+  }
+  const name = raw.includes(":") ? raw.split(":")[1] ?? "" : raw;
   const byId = Number(name);
   if (Number.isFinite(byId) && byId > 0) return getChainById(byId)?.chainId;
   return getChainByName(name)?.chainId;
@@ -1586,7 +1587,8 @@ function chainIdFor(network) {
 function sellerDigestFor(paymentId2, contentHash2, payee, network) {
   if (isEvmAddress(payee)) {
     const chainId = chainIdFor(network);
-    if (chainId) return anchorDigest(paymentId2, contentHash2, "", payee, chainId);
+    if (!chainId) return void 0;
+    return anchorDigest(paymentId2, contentHash2, "", payee, chainId);
   }
   return anchorDigest(paymentId2, contentHash2, "", ZERO_ADDRESS, 0);
 }
@@ -1622,10 +1624,17 @@ async function anchorEvidence(body, opts) {
       mode: "direct",
       retention: opts.retention ?? "90d"
     };
+    let unsigned;
+    if (opts.proofOfPayment) {
+      payload.proofOfPayment = opts.proofOfPayment;
+    }
     if (opts.sign) {
-      payload.sellerSignature = await opts.sign(
-        sellerDigestFor(opts.paymentId, hash, opts.payee, opts.network)
-      );
+      const digest = sellerDigestFor(opts.paymentId, hash, opts.payee, opts.network);
+      if (digest === void 0) {
+        unsigned = "unknown_chain_id";
+      } else {
+        payload.sellerSignature = await opts.sign(digest);
+      }
     }
     const wire = JSON.stringify(payload);
     if (new TextEncoder().encode(wire).length > ANCHOR_MAX_REQUEST_BYTES) {
@@ -1649,14 +1658,16 @@ async function anchorEvidence(body, opts) {
       }
       return { v: 1, skipped: "anchor_failed", status: res.status, error };
     }
-    return await res.json();
+    const out = await res.json();
+    if (unsigned) out.unsigned = unsigned;
+    return out;
   } catch {
     return { v: 1, skipped: "anchor_failed" };
   }
 }
 function evidenceHeader(evidence) {
-  const json = JSON.stringify(evidence);
-  return btoa(json).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const bytes = new TextEncoder().encode(JSON.stringify(evidence));
+  return toBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 
 // src/types/index.ts
@@ -4289,6 +4300,7 @@ var ESCROW_TIMEOUT_MS = {
   // Monad: 90s
 };
 
+exports.ANCHOR_MAX_REQUEST_BYTES = ANCHOR_MAX_REQUEST_BYTES;
 exports.CAIP2_IDENTIFIERS = CAIP2_IDENTIFIERS;
 exports.CAIP2_TO_CHAIN = CAIP2_TO_CHAIN;
 exports.ContentHashMismatch = ContentHashMismatch;
@@ -4393,6 +4405,7 @@ exports.recoverEvidence = recoverEvidence;
 exports.sealEvidence = sealEvidence;
 exports.sealEvidenceTo = sealEvidenceTo;
 exports.sealedRoles = sealedRoles;
+exports.sellerDigestFor = sellerDigestFor;
 exports.signAnchorEd25519 = signAnchorEd25519;
 exports.signAnchorEvm = signAnchorEvm;
 exports.signRequest = signRequest;