uvd-x402-sdk 2.61.0 → 2.62.0

package/dist/index.d.mts

@@ -271,6 +271,18 @@ interface AnchorOptions {
      * payment wallet works fine here, because this key only ever decrypts.
      */
     sellerEncryptionKey?: Uint8Array;
+    /**
+     * The settlement proof, in the facilitator's `ProofOfPayment` shape
+     * (`transactionHash`, `blockNumber`, `network`, `payer`, `payee`, `amount`,
+     * `token`, `timestamp`, `paymentHash`).
+     *
+     * **The only thing that reaches `verified: true`.** Without it the
+     * facilitator has checked no chain, so it records the anchor as provisional
+     * and answers `notVerifiedReason: "dx402_proof_missing"`: the signature is
+     * accepted (`signed: true`) but authorship is not certified, and a claim that
+     * proves more may supersede it.
+     */
+    proofOfPayment?: Record<string, unknown>;
     /**
      * `(digest) => "0x..."`. A callable rather than a private key is what lets a
      * custodian sign: it receives the digest and returns the signature without the
@@ -284,6 +296,32 @@ interface AnchorOptions {
     facilitator?: string;
     fetch?: typeof fetch;
 }
+/**
+ * The digest the facilitator will ACTUALLY verify, chosen by the payee's curve.
+ *
+ * The gate dispatches on the payee and checks **one** form -- never both. A
+ * secp256k1 payee is verified against the digest built with its REAL address and
+ * chain id; an ed25519 payee, whose address does not fit the `address` field, is
+ * verified against the zero address and chain id 0.
+ *
+ * Signing the wrong form throws nothing. It yields a signature that never
+ * verifies, the anchor silently stays **provisional**, and a provisional anchor
+ * can be superseded by anyone -- the very hijack a signed anchor exists to stop.
+ * Reproduced against production by KarmaKadabra, 2026-08-19: with everything else
+ * identical, the ed25519 form was refused (`409 dx402_already_anchored`) and the
+ * EVM form superseded the provisional.
+ *
+ * `pointer` stays empty on both branches: this call sends `sealed`, so the
+ * facilitator issues the pointer and you cannot sign what you have not seen.
+ */
+declare function sellerDigestFor(paymentId: string, contentHash: string, payee: string, network: string): Uint8Array | undefined;
+/**
+ * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
+ * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
+ * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
+ * plaintext.
+ */
+declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
 /** Encode an anchor result for the `X-Durable-Evidence` response header. */
 declare function evidenceHeader(evidence: unknown): string;
@@ -935,4 +973,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { ANCHOR_MAX_REQUEST_BYTES, type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.d.ts

@@ -271,6 +271,18 @@ interface AnchorOptions {
      * payment wallet works fine here, because this key only ever decrypts.
      */
     sellerEncryptionKey?: Uint8Array;
+    /**
+     * The settlement proof, in the facilitator's `ProofOfPayment` shape
+     * (`transactionHash`, `blockNumber`, `network`, `payer`, `payee`, `amount`,
+     * `token`, `timestamp`, `paymentHash`).
+     *
+     * **The only thing that reaches `verified: true`.** Without it the
+     * facilitator has checked no chain, so it records the anchor as provisional
+     * and answers `notVerifiedReason: "dx402_proof_missing"`: the signature is
+     * accepted (`signed: true`) but authorship is not certified, and a claim that
+     * proves more may supersede it.
+     */
+    proofOfPayment?: Record<string, unknown>;
     /**
      * `(digest) => "0x..."`. A callable rather than a private key is what lets a
      * custodian sign: it receives the digest and returns the signature without the
@@ -284,6 +296,32 @@ interface AnchorOptions {
     facilitator?: string;
     fetch?: typeof fetch;
 }
+/**
+ * The digest the facilitator will ACTUALLY verify, chosen by the payee's curve.
+ *
+ * The gate dispatches on the payee and checks **one** form -- never both. A
+ * secp256k1 payee is verified against the digest built with its REAL address and
+ * chain id; an ed25519 payee, whose address does not fit the `address` field, is
+ * verified against the zero address and chain id 0.
+ *
+ * Signing the wrong form throws nothing. It yields a signature that never
+ * verifies, the anchor silently stays **provisional**, and a provisional anchor
+ * can be superseded by anyone -- the very hijack a signed anchor exists to stop.
+ * Reproduced against production by KarmaKadabra, 2026-08-19: with everything else
+ * identical, the ed25519 form was refused (`409 dx402_already_anchored`) and the
+ * EVM form superseded the provisional.
+ *
+ * `pointer` stays empty on both branches: this call sends `sealed`, so the
+ * facilitator issues the pointer and you cannot sign what you have not seen.
+ */
+declare function sellerDigestFor(paymentId: string, contentHash: string, payee: string, network: string): Uint8Array | undefined;
+/**
+ * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
+ * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
+ * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
+ * plaintext.
+ */
+declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;
 /** Encode an anchor result for the `X-Durable-Evidence` response header. */
 declare function evidenceHeader(evidence: unknown): string;
@@ -935,4 +973,4 @@ interface EscrowPreAuthParams {
  */
 declare function buildEscrowPreAuth(wallet: EscrowPreAuthSigner, params: EscrowPreAuthParams): Promise<string>;
 
-export { type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };
+export { ANCHOR_MAX_REQUEST_BYTES, type AnchorOptions, type AnchoredEvidence, ContentHashMismatch, type CreateSignedFetchConfig, DX402Error, type ERC8128RequestOptions, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, type EscrowNetworkConfig, type EscrowPaymentInfo, type EscrowPreAuthParams, type EscrowPreAuthSigner, type EscrowTierWindows, type EvidenceMode, EvidenceSkipped, FACILITATOR_ADDRESSES, type FacilitatorAddresses, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, type RecipientRole, type SSEFrame, SSEParser, type SignRequestOptions, type SignRequestWithSignerOptions, type SignatureBaseParams, type SignatureHeaders, type SignatureParamsInput, SigningWalletAdapter, type StreamTrafficEventsOptions, type TrafficEvent, type TrafficEventKind, TrafficStreamError, ZERO_ADDRESS, anchorDigest, anchorEvidence, buildEscrowPreAuth, buildSignatureBase, buildSignatureParams, computeEscrowNonce, contentHash, createSignedFetch, dereferencePointer, paymentId as dx402PaymentId, ed25519ToX25519, evidenceFromHeaders, evidenceHeader, fetchNonce, getFacilitatorAddress, isEndToEnd, matchesFilters, parseEvidenceHeader, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal };

package/dist/index.js

@@ -1625,6 +1625,9 @@ async function anchorEvidence(body, opts) {
       retention: opts.retention ?? "90d"
     };
     let unsigned;
+    if (opts.proofOfPayment) {
+      payload.proofOfPayment = opts.proofOfPayment;
+    }
     if (opts.sign) {
       const digest = sellerDigestFor(opts.paymentId, hash, opts.payee, opts.network);
       if (digest === void 0) {
@@ -1663,8 +1666,8 @@ async function anchorEvidence(body, opts) {
   }
 }
 function evidenceHeader(evidence) {
-  const json = JSON.stringify(evidence);
-  return btoa(json).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const bytes = new TextEncoder().encode(JSON.stringify(evidence));
+  return toBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 
 // src/types/index.ts
@@ -4297,6 +4300,7 @@ var ESCROW_TIMEOUT_MS = {
   // Monad: 90s
 };
 
+exports.ANCHOR_MAX_REQUEST_BYTES = ANCHOR_MAX_REQUEST_BYTES;
 exports.CAIP2_IDENTIFIERS = CAIP2_IDENTIFIERS;
 exports.CAIP2_TO_CHAIN = CAIP2_TO_CHAIN;
 exports.ContentHashMismatch = ContentHashMismatch;
@@ -4401,6 +4405,7 @@ exports.recoverEvidence = recoverEvidence;
 exports.sealEvidence = sealEvidence;
 exports.sealEvidenceTo = sealEvidenceTo;
 exports.sealedRoles = sealedRoles;
+exports.sellerDigestFor = sellerDigestFor;
 exports.signAnchorEd25519 = signAnchorEd25519;
 exports.signAnchorEvm = signAnchorEvm;
 exports.signRequest = signRequest;