uvd-x402-sdk 2.71.0 → 2.72.0

package/dist/index.mjs

@@ -3422,6 +3422,88 @@ function buildSignatureParams(params) {
   parts.push(`alg="${ALG}"`);
   return parts.join(";");
 }
+
+// src/erc7702.ts
+var DELEGATE_PREFIX = "ef0100";
+var SMA_WRAP_TARGETS = [
+  "0x69007702764179f14f51cdce752f4f775d74e139"
+  // Alchemy SemiModularAccount7702
+];
+function needsAccountWrap(target) {
+  return !!target && SMA_WRAP_TARGETS.includes(target.toLowerCase());
+}
+var WRAP_PREFIX = "0000000000ff00";
+function delegateTarget(code) {
+  if (!code) return null;
+  const h = (code.startsWith("0x") ? code.slice(2) : code).toLowerCase();
+  if (!h.startsWith(DELEGATE_PREFIX) || h.length < 46) return null;
+  return `0x${h.slice(6, 46)}`;
+}
+function wrapSignature(innerSignature) {
+  const s = innerSignature.startsWith("0x") ? innerSignature.slice(2) : innerSignature;
+  return `0x${WRAP_PREFIX}${s}`;
+}
+function replaySafeTypedData(innerDigest, chainId, account) {
+  return {
+    domain: { chainId, verifyingContract: account },
+    types: { ReplaySafeHash: [{ name: "hash", type: "bytes32" }] },
+    message: { hash: innerDigest }
+  };
+}
+function rpcDelegationResolver(urls, timeoutMs = 6e3) {
+  const endpoints = typeof urls === "string" ? [urls] : [...urls];
+  return async (address) => {
+    const addr = (address || "").trim();
+    if (!addr || endpoints.length === 0) return null;
+    for (const url of endpoints) {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), timeoutMs);
+      try {
+        const res = await fetch(url, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "eth_getCode",
+            params: [addr.toLowerCase(), "latest"]
+          }),
+          signal: controller.signal
+        });
+        clearTimeout(timer);
+        if (!res.ok) continue;
+        const code = (await res.json())?.result;
+        if (typeof code === "string" && code.startsWith("0x")) {
+          return delegateTarget(code) ?? false;
+        }
+      } catch {
+        clearTimeout(timer);
+      }
+    }
+    return null;
+  };
+}
+async function resolveDelegation(address, network, resolver) {
+  if (!resolver) return { delegated: null, target: null };
+  let v;
+  try {
+    v = await resolver(address, network);
+  } catch {
+    return { delegated: null, target: null };
+  }
+  if (typeof v === "string") {
+    const t = v.trim();
+    if (/^0x[0-9a-fA-F]{40}$/.test(t)) return { delegated: true, target: t };
+    return { delegated: null, target: null };
+  }
+  if (typeof v === "boolean") return { delegated: v, target: null };
+  return { delegated: null, target: null };
+}
+async function isDelegated(address, network, resolver) {
+  return (await resolveDelegation(address, network, resolver)).delegated;
+}
+
+// src/escrow-preauth.ts
 var ZERO_ADDRESS2 = "0x0000000000000000000000000000000000000000";
 var USDC_DECIMALS = 6;
 var ESCROW_DEPOSIT_LIMIT_USD = 100;
@@ -3567,26 +3649,56 @@ async function buildEscrowPreAuth(wallet, params) {
   );
   const payer = ethers.getAddress(params.payerWallet);
   const tokenCollector = ethers.getAddress(cfg.token_collector);
-  const { signature } = await wallet.signTypedData(
-    JSON.stringify({
-      domain: {
-        name: cfg.usdc_domain_name,
-        version: cfg.usdc_domain_version,
-        chainId: cfg.chain_id,
-        verifyingContract: ethers.getAddress(cfg.usdc)
-      },
-      types: RECEIVE_WITH_AUTHORIZATION_TYPES,
-      primaryType: "ReceiveWithAuthorization",
-      message: {
-        from: payer,
-        to: tokenCollector,
-        value: maxAmount.toString(),
-        validAfter: "0",
-        validBefore: String(paymentInfo.preApprovalExpiry),
-        nonce
-      }
-    })
+  const typedData = {
+    domain: {
+      name: cfg.usdc_domain_name,
+      version: cfg.usdc_domain_version,
+      chainId: cfg.chain_id,
+      verifyingContract: ethers.getAddress(cfg.usdc)
+    },
+    types: RECEIVE_WITH_AUTHORIZATION_TYPES,
+    primaryType: "ReceiveWithAuthorization",
+    message: {
+      from: payer,
+      to: tokenCollector,
+      value: maxAmount.toString(),
+      validAfter: "0",
+      validBefore: String(paymentInfo.preApprovalExpiry),
+      nonce
+    }
+  };
+  const { delegated, target } = await resolveDelegation(
+    payer,
+    `eip155:${cfg.chain_id}`,
+    params.delegationResolver
   );
+  if (delegated === null && params.delegationResolver) {
+    throw new X402Error(
+      `Could not determine whether ${payer} is EIP-7702-delegated on chain ${cfg.chain_id} (the resolver gave no verdict) \u2014 refusing to sign an escrow authorization blindly: the wrong dialect is unsettleable on-chain and the failure only shows up at lock time. Retry when the chain is readable.`,
+      "INVALID_CONFIG"
+    );
+  }
+  let signature;
+  if (delegated && (needsAccountWrap(target) || target === null)) {
+    const innerDigest = ethers.TypedDataEncoder.hash(
+      typedData.domain,
+      typedData.types,
+      typedData.message
+    );
+    const replaySafe = replaySafeTypedData(innerDigest, cfg.chain_id, payer);
+    const wrapped = await wallet.signTypedData(
+      JSON.stringify({ ...replaySafe, primaryType: "ReplaySafeHash" })
+    );
+    if (!wrapped?.signature) {
+      throw new X402Error(
+        "The wallet returned no signature for the replay-safe wrap \u2014 refusing to build an unsettleable authorization.",
+        "INVALID_CONFIG"
+      );
+    }
+    signature = wrapSignature(wrapped.signature);
+  } else {
+    signature = (await wallet.signTypedData(JSON.stringify(typedData))).signature;
+  }
   return JSON.stringify({
     x402Version: 2,
     scheme: "escrow",
@@ -4394,6 +4506,6 @@ var ESCROW_TIMEOUT_MS = {
   // Monad: 90s
 };
 
-export { ANCHOR_MAX_REQUEST_BYTES, CAIP2_IDENTIFIERS, CAIP2_TO_CHAIN, ContentHashMismatch, DEFAULT_CHAIN, DEFAULT_CONFIG, DEFAULT_FACILITATOR_URL, DEFAULT_PAYMENT_HEADER, DX402Error, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, EnvKeyAdapter, EvidenceSkipped, FACILITATOR_ADDRESSES, FacilitatorClient, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, OWSWalletAdapter, PAYMENT_HEADER_NAMES, SSEParser, SUPPORTED_CHAINS, TrafficStreamError, X402Client, X402Error, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, anchorDigest, anchorEvidence, availableBackends, buildEscrowPreAuth, buildPaymentRequirements, buildSettleRequest, buildSettleRequestV2, buildSignatureBase, buildSignatureParams, buildTokenMetadata, buildVerifyRequest, buildVerifyRequestV2, caip2ToChain, chainToCAIP2, computeEscrowNonce, contentHash, convertX402Header, create402Response, createHonoMiddleware, createPaymentHeaders, createPaymentMiddleware, createSignedFetch, createX402Header, createX402V1Header, createX402V2Header, decodeBase64Utf8, decodeX402Header, dereferencePointer, detectX402Version, paymentId as dx402PaymentId, ed25519ToX25519, encodeBase64Json, encodeBase64Utf8, encodeX402Header, evidenceFromHeaders, evidenceHeader, extractPaymentFromHeaders, fetchNonce, generatePaymentOptions, getAlgorandChains, getChainById, getChainByName, getChainsByNetworkType, getChainsByToken, getCorsHeaders, getEVMChainIds, getEnabledChains, getExplorerAddressUrl, getExplorerTxUrl, getFacilitatorAddress, getNetworkType, getPaymentHeader, getSVMChains, getSuiChains, getSupportedTokens, getTokenByAddress, getTokenConfig, getXRPLChains, isAlgorandChain, isCAIP2Format, isChainSupported, isEndToEnd, isSVMChain, isSuiChain, isTokenSupported, isXRPLChain, matchesFilters, parseEvidenceHeader, parseNetworkIdentifier, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, paymentChallengeFrom, recoverEvidence, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal, validateAmount, validateRecipient };
+export { ANCHOR_MAX_REQUEST_BYTES, CAIP2_IDENTIFIERS, CAIP2_TO_CHAIN, ContentHashMismatch, DEFAULT_CHAIN, DEFAULT_CONFIG, DEFAULT_FACILITATOR_URL, DEFAULT_PAYMENT_HEADER, DELEGATE_PREFIX, DX402Error, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, EnvKeyAdapter, EvidenceSkipped, FACILITATOR_ADDRESSES, FacilitatorClient, KEEPALIVE_INTERVAL_MS, OPERATOR_FEE_BPS, OWSWalletAdapter, PAYMENT_HEADER_NAMES, SMA_WRAP_TARGETS, SSEParser, SUPPORTED_CHAINS, TrafficStreamError, X402Client, X402Error, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, anchorDigest, anchorEvidence, availableBackends, buildEscrowPreAuth, buildPaymentRequirements, buildSettleRequest, buildSettleRequestV2, buildSignatureBase, buildSignatureParams, buildTokenMetadata, buildVerifyRequest, buildVerifyRequestV2, caip2ToChain, chainToCAIP2, computeEscrowNonce, contentHash, convertX402Header, create402Response, createHonoMiddleware, createPaymentHeaders, createPaymentMiddleware, createSignedFetch, createX402Header, createX402V1Header, createX402V2Header, decodeBase64Utf8, decodeX402Header, delegateTarget, dereferencePointer, detectX402Version, paymentId as dx402PaymentId, ed25519ToX25519, encodeBase64Json, encodeBase64Utf8, encodeX402Header, evidenceFromHeaders, evidenceHeader, extractPaymentFromHeaders, fetchNonce, generatePaymentOptions, getAlgorandChains, getChainById, getChainByName, getChainsByNetworkType, getChainsByToken, getCorsHeaders, getEVMChainIds, getEnabledChains, getExplorerAddressUrl, getExplorerTxUrl, getFacilitatorAddress, getNetworkType, getPaymentHeader, getSVMChains, getSuiChains, getSupportedTokens, getTokenByAddress, getTokenConfig, getXRPLChains, isAlgorandChain, isCAIP2Format, isChainSupported, isDelegated, isEndToEnd, isSVMChain, isSuiChain, isTokenSupported, isXRPLChain, matchesFilters, needsAccountWrap, parseEvidenceHeader, parseNetworkIdentifier, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, paymentChallengeFrom, recoverEvidence, replaySafeTypedData, resolveDelegation, rpcDelegationResolver, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, unseal, validateAmount, validateRecipient, wrapSignature };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map