uvd-x402-sdk 2.76.0 → 2.78.0

package/dist/index.d.mts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, C as CAIP2_IDENTIFIERS, a as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-0cX9Pw2F.mjs';
 export { E as EIP3009Authorization, a as EIP3009Params } from './wallet-0cX9Pw2F.mjs';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-CYIVd4xO.mjs';
-export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, parseRetryAfterSeconds, readFacilitatorError } from './backend/index.mjs';
+export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, toPaymentRequirementsV2, toResourceInfoV2 } from './backend/index.mjs';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.
@@ -369,8 +369,6 @@ declare function sellerDigestFor(paymentId: string, contentHash: string, payee:
 /**
  * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
  * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
- * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
- * plaintext.
  */
 declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, C as CAIP2_IDENTIFIERS, a as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-0cX9Pw2F.js';
 export { E as EIP3009Authorization, a as EIP3009Params } from './wallet-0cX9Pw2F.js';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-DTDixPzO.js';
-export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, parseRetryAfterSeconds, readFacilitatorError } from './backend/index.js';
+export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, toPaymentRequirementsV2, toResourceInfoV2 } from './backend/index.js';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.
@@ -369,8 +369,6 @@ declare function sellerDigestFor(paymentId: string, contentHash: string, payee:
 /**
  * Largest `POST /dx402/anchor` request the facilitator accepts, mirroring its
  * `MAX_REQUEST_BODY_BYTES` (default 64 KiB, an anti-OOM bound on every route).
- * After base64 inflation and ~600 bytes of metadata this leaves ~47 KB of
- * plaintext.
  */
 declare const ANCHOR_MAX_REQUEST_BYTES: number;
 declare function anchorEvidence(body: Uint8Array, opts: AnchorOptions): Promise<Record<string, unknown>>;

package/dist/index.js

@@ -1638,6 +1638,12 @@ async function anchorEvidence(body, opts) {
       // `sealed` -> it hosts and derives the pointer; `pointer` alone -> it uses
       // yours; neither -> error (x402-rs `dx402/service.rs`).
       ...pointer !== void 0 ? { pointer } : { sealed: toBase64(blob) },
+      // Declared, not measured. Since x402-rs 2.3.0 the facilitator records
+      // the store that ACTUALLY took the bytes and returns that, so a response
+      // may name a different backend than the request did -- `ipfs` where you
+      // said `s3`, because a deployment whose primary is Pinata wrote there.
+      // That is the facilitator correcting the record, not a mismatch to
+      // assert on.
       backend: opts.backend ?? (pointer !== void 0 ? backendForPointer(pointer) : "s3"),
       contentHash: hash,
       keyAlg: opts.payerKey.length === 32 ? "ECIES-X25519" : "ECIES-secp256k1",
@@ -3939,6 +3945,54 @@ function buildSettleRequest(paymentHeader, requirements) {
     paymentRequirements: requirements
   };
 }
+function isCaip2Network(network) {
+  return network.includes(":");
+}
+function toResourceInfoV2(requirements) {
+  return {
+    url: requirements.resource,
+    description: requirements.description ?? DEFAULT_PAYMENT_DESCRIPTION,
+    mimeType: requirements.mimeType ?? DEFAULT_PAYMENT_MIME_TYPE
+  };
+}
+function toPaymentRequirementsV2(requirements) {
+  return {
+    scheme: requirements.scheme,
+    network: isCaip2Network(requirements.network) ? requirements.network : chainToCAIP2(requirements.network),
+    asset: requirements.asset,
+    amount: requirements.maxAmountRequired,
+    payTo: requirements.payTo,
+    // Required by the facilitator: omitting it is a 400, measured the same day.
+    maxTimeoutSeconds: requirements.maxTimeoutSeconds ?? DEFAULT_PAYMENT_TIMEOUT_SECONDS,
+    ...requirements.extra !== void 0 ? { extra: requirements.extra } : {}
+  };
+}
+function resolveEnvelopeVersion(paymentHeader, requirements, requested = "auto") {
+  if (requested !== "auto") {
+    return requested;
+  }
+  return isCaip2Network(paymentHeader.network) || isCaip2Network(requirements.network) ? 2 : 1;
+}
+function buildVerifyRequestForVersion(paymentHeader, requirements, version) {
+  if (version === 2) {
+    return buildVerifyRequestV2(
+      paymentHeader.payload,
+      toResourceInfoV2(requirements),
+      toPaymentRequirementsV2(requirements)
+    );
+  }
+  return buildVerifyRequest(paymentHeader, requirements);
+}
+function buildSettleRequestForVersion(paymentHeader, requirements, version) {
+  if (version === 2) {
+    return buildSettleRequestV2(
+      paymentHeader.payload,
+      toResourceInfoV2(requirements),
+      toPaymentRequirementsV2(requirements)
+    );
+  }
+  return buildSettleRequest(paymentHeader, requirements);
+}
 var X402_CORS_HEADERS = {
   "Access-Control-Allow-Headers": "Content-Type, X-PAYMENT, PAYMENT-SIGNATURE, Authorization",
   "Access-Control-Expose-Headers": "X-PAYMENT-RESPONSE, PAYMENT-RESPONSE, PAYMENT-REQUIRED",
@@ -3962,11 +4016,13 @@ var FacilitatorClient = class {
   timeout;
   explicitTimeout;
   retries;
+  x402Version;
   constructor(options = {}) {
     this.baseUrl = options.baseUrl || "https://facilitator.ultravioletadao.xyz";
     this.explicitTimeout = options.timeout !== void 0;
     this.timeout = options.timeout || 3e4;
     this.retries = options.retries;
+    this.x402Version = options.x402Version ?? "auto";
   }
   /**
    * Get timeout for a specific network, using per-chain defaults when no explicit timeout was set.
@@ -3992,7 +4048,11 @@ var FacilitatorClient = class {
    * @returns Verification result
    */
   async verify(paymentHeader, requirements) {
-    const body = buildVerifyRequest(paymentHeader, requirements);
+    const body = buildVerifyRequestForVersion(
+      paymentHeader,
+      requirements,
+      resolveEnvelopeVersion(paymentHeader, requirements, this.x402Version)
+    );
     try {
       const { response, error } = await facilitatorFetch(
         `${this.baseUrl}/verify`,
@@ -4031,7 +4091,11 @@ var FacilitatorClient = class {
    * @returns Settlement result with transaction hash
    */
   async settle(paymentHeader, requirements) {
-    const body = buildSettleRequest(paymentHeader, requirements);
+    const body = buildSettleRequestForVersion(
+      paymentHeader,
+      requirements,
+      resolveEnvelopeVersion(paymentHeader, requirements, this.x402Version)
+    );
     const settleTimeout = this.getTimeout(requirements.network);
     try {
       const { response, error } = await facilitatorFetch(
@@ -4739,11 +4803,13 @@ exports.availableBackends = availableBackends;
 exports.buildEscrowPreAuth = buildEscrowPreAuth;
 exports.buildPaymentRequirements = buildPaymentRequirements;
 exports.buildSettleRequest = buildSettleRequest;
+exports.buildSettleRequestForVersion = buildSettleRequestForVersion;
 exports.buildSettleRequestV2 = buildSettleRequestV2;
 exports.buildSignatureBase = buildSignatureBase;
 exports.buildSignatureParams = buildSignatureParams;
 exports.buildTokenMetadata = buildTokenMetadata;
 exports.buildVerifyRequest = buildVerifyRequest;
+exports.buildVerifyRequestForVersion = buildVerifyRequestForVersion;
 exports.buildVerifyRequestV2 = buildVerifyRequestV2;
 exports.caip2ToChain = caip2ToChain;
 exports.chainToCAIP2 = chainToCAIP2;
@@ -4818,6 +4884,7 @@ exports.readFacilitatorError = readFacilitatorError;
 exports.recoverEvidence = recoverEvidence;
 exports.replaySafeTypedData = replaySafeTypedData;
 exports.resolveDelegation = resolveDelegation;
+exports.resolveEnvelopeVersion = resolveEnvelopeVersion;
 exports.rpcDelegationResolver = rpcDelegationResolver;
 exports.sealEvidence = sealEvidence;
 exports.sealEvidenceTo = sealEvidenceTo;
@@ -4829,6 +4896,8 @@ exports.signRequest = signRequest;
 exports.signRequestWithSigner = signRequestWithSigner;
 exports.signRequestWithWallet = signRequestWithWallet;
 exports.streamTrafficEvents = streamTrafficEvents;
+exports.toPaymentRequirementsV2 = toPaymentRequirementsV2;
+exports.toResourceInfoV2 = toResourceInfoV2;
 exports.unseal = unseal;
 exports.validateAmount = validateAmount;
 exports.validateRecipient = validateRecipient;