uvd-x402-sdk 2.69.0 → 2.71.0

package/dist/backend/index.js

@@ -2608,6 +2608,20 @@ var ERC8004_CONTRACTS = {
 function wireNetwork(network) {
   return network === "base-mainnet" ? "base" : network;
 }
+var RELAYED_FEEDBACK_NETWORKS = [
+  "base",
+  "ethereum",
+  "polygon",
+  "arbitrum",
+  "optimism",
+  "celo",
+  "bsc",
+  "monad",
+  "base-sepolia"
+];
+function supportsRelayedFeedback(network) {
+  return RELAYED_FEEDBACK_NETWORKS.includes(wireNetwork(network));
+}
 var Erc8004LookupError = class extends Error {
   /** HTTP status returned by the facilitator */
   status;
@@ -2805,6 +2819,14 @@ var Erc8004Client = class {
    *
    * Requires proof of payment for authorized feedback submission.
    *
+   * @deprecated On this route the facilitator is the AUTHOR: the registry
+   * records `msg.sender`, and that is the facilitator's wallet — which can also
+   * revoke what it wrote. On the networks in {@link RELAYED_FEEDBACK_NETWORKS}
+   * use {@link Erc8004Client.prepareRelayedFeedback} +
+   * {@link Erc8004Client.submitRelayedFeedback} instead, which record the RATER
+   * as author. This route still works and is not going away without notice: it
+   * is the only one available where no `FeedbackDelegate` is deployed.
+   *
    * @param request - Feedback request with agent ID, value, and proof
    * @returns Feedback response with transaction hash
    *
@@ -2864,6 +2886,139 @@ var Erc8004Client = class {
       };
     }
   }
+  /**
+   * Ask the facilitator what the rater must sign to author a rating.
+   *
+   * Step 1 of the rater-authored rail. Writes nothing on-chain and costs
+   * nothing: it reads the delegate, the rater's delegation state and their
+   * account nonce, then hands back a digest, a deadline and a single-use nonce.
+   *
+   * Why this exists: the ERC-8004 Reputation Registry records `msg.sender` as
+   * the author, and the deployed implementation has no delegation path — no
+   * `giveFeedbackWithSignature`, no ERC-2771 forwarder. So a rating the
+   * facilitator relays the ordinary way is a rating attributed to the
+   * FACILITATOR. EIP-7702 fixes it without touching the registry: the rater
+   * delegates their own EOA to the `FeedbackDelegate` and the transaction is
+   * sent TO THE RATER'S ADDRESS, so the registry sees the rater while the
+   * facilitator pays.
+   *
+   * What to do with the answer:
+   * 1. Produce the rater's signature. **Which value you sign depends on how you
+   *    sign it**, and getting it wrong yields a well-formed signature that
+   *    authorises nobody:
+   *    - raw key: sign `digest` as a **prehash**. It already carries the
+   *      EIP-191 envelope.
+   *    - wallet: `personal_sign` over `signingPayload`. `personal_sign` adds the
+   *      envelope itself, so signing `digest` with it wraps the value TWICE and
+   *      recovers a stranger — the only symptom is `relay_bad_signature`.
+   * 2. If `delegated` is `false`, also produce an EIP-7702 authorization over
+   *    `(chainId, delegate, accountNonce)`.
+   * 3. Hand both to {@link submitRelayedFeedback} with the SAME feedback
+   *    parameters, `deadline` and `nonce`.
+   *
+   * @param request - Network, rater address and feedback parameters
+   * @returns Everything needed to sign, including whether an EIP-7702
+   * authorization is still required
+   *
+   * @example
+   * ```ts
+   * const prep = await erc8004.prepareRelayedFeedback({
+   *   x402Version: 1,
+   *   network: 'base',
+   *   feedback: { agentId: 18896, value: 95, tag1: 'quality', rater: raterAddress },
+   * });
+   * // prep.delegated === false -> an EIP-7702 authorization is required
+   * ```
+   */
+  async prepareRelayedFeedback(request) {
+    const url = `${this.baseUrl}/feedback/evm/prepare`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Accept": "application/json"
+        },
+        body: JSON.stringify({ ...request, network: wireNetwork(request.network) }),
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      if (!response.ok) {
+        const errorText = await response.text();
+        return {
+          success: false,
+          delegated: false,
+          chainId: 0,
+          error: `Facilitator error: ${response.status} - ${errorText}`,
+          network: request.network
+        };
+      }
+      return await response.json();
+    } catch (error) {
+      clearTimeout(timeoutId);
+      return {
+        success: false,
+        delegated: false,
+        chainId: 0,
+        error: error instanceof Error ? error.message : "Unknown error",
+        network: request.network
+      };
+    }
+  }
+  /**
+   * Relay a rater-authored rating; the facilitator pays the gas.
+   *
+   * Step 2 of the rater-authored rail. The on-chain record that comes out of it
+   * has the RATER as `msg.sender`, so `getClients(agentId)` shows the rater
+   * rather than the facilitator.
+   *
+   * Pass back the same feedback parameters, `deadline` and `nonce` that
+   * {@link prepareRelayedFeedback} returned. They are not redundant: the
+   * facilitator rebuilds the registry calldata from them and requires the
+   * rater's signature to cover exactly that.
+   *
+   * `authorization` is required only when `prepare` answered
+   * `delegated: false`. One that names a different delegate than the one
+   * `prepare` offered is refused before any gas is spent.
+   *
+   * @param request - Feedback parameters plus the rater's signature
+   * @returns Feedback response with the transaction hash
+   */
+  async submitRelayedFeedback(request) {
+    const url = `${this.baseUrl}/feedback/evm/submit`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Accept": "application/json"
+        },
+        body: JSON.stringify({ ...request, network: wireNetwork(request.network) }),
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      if (!response.ok) {
+        const errorText = await response.text();
+        return {
+          success: false,
+          error: `Facilitator error: ${response.status} - ${errorText}`,
+          network: request.network
+        };
+      }
+      return await response.json();
+    } catch (error) {
+      clearTimeout(timeoutId);
+      return {
+        success: false,
+        error: error instanceof Error ? error.message : "Unknown error",
+        network: request.network
+      };
+    }
+  }
   /**
    * Revoke previously submitted feedback
    *
@@ -4250,6 +4405,7 @@ exports.MAX_SEARCH_LEN = MAX_SEARCH_LEN;
 exports.OPERATOR_ABI = OPERATOR_ABI;
 exports.OPERATOR_ABI_CREATE3 = OPERATOR_ABI_CREATE3;
 exports.PAYMENT_INFO_TYPEHASH = PAYMENT_INFO_TYPEHASH;
+exports.RELAYED_FEEDBACK_NETWORKS = RELAYED_FEEDBACK_NETWORKS;
 exports.RegistrationPendingError = RegistrationPendingError;
 exports.TIER_FILTERS = TIER_FILTERS;
 exports.TIER_TIMINGS = TIER_TIMINGS;
@@ -4279,6 +4435,7 @@ exports.isEscrowExpired = isEscrowExpired;
 exports.isEscrowSupportedOnChain = isEscrowSupportedOnChain;
 exports.isRegisterJobTerminal = isRegisterJobTerminal;
 exports.parsePaymentHeader = parsePaymentHeader;
+exports.supportsRelayedFeedback = supportsRelayedFeedback;
 exports.wireNetwork = wireNetwork;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map