uvd-x402-sdk 2.80.0 → 2.84.0

package/dist/backend/index.d.mts

@@ -1,5 +1,5 @@
-import { S as SigningWalletAdapter } from '../wallet-0cX9Pw2F.mjs';
-import { Q as X402Version, x as X402Header, G as X402PayloadData } from '../index-ZH10otHE.mjs';
+import { S as SigningWalletAdapter } from '../wallet-w7BnImDG.mjs';
+import { X as X402Version, i as X402Header, j as X402PayloadData } from '../index-CkR8p1sT.mjs';
 
 /**
  * Reading a facilitator refusal as DATA instead of prose.
@@ -1044,6 +1044,69 @@ declare function create402Response(requirements: PaymentRequirementsOptions, opt
     headers: Record<string, string>;
     body: Record<string, unknown>;
 };
+/** The body of a no-verdict refusal. See {@link buildUnavailableResponse}. */
+interface UnavailableBody {
+    /** Human-readable summary. Never says the payment was rejected. */
+    error: string;
+    /** The facilitator's own reason, under whichever field it populated. */
+    reason?: string;
+    /** Always `true` — this response exists to say "no verdict", not "refused". */
+    retryable: true;
+    /** Whole seconds to wait, mirroring the `Retry-After` header. */
+    retryAfterSeconds: number;
+    /**
+     * `false` for `forward_failed` and for a bare timeout: the write may already
+     * have landed, so the caller must reconcile before resending.
+     */
+    safeToReplay: boolean;
+}
+/** A framework-agnostic HTTP response. See {@link buildUnavailableResponse}. */
+interface UnavailableResponse {
+    /** Always 503. */
+    status: 503;
+    /** `Retry-After`, ready to spread onto any framework's header setter. */
+    headers: Record<string, string>;
+    body: UnavailableBody;
+    /** Same value as the header, already clamped to a whole second >= 1. */
+    retryAfterSeconds: number;
+}
+/**
+ * Build the answer to a facilitator refusal that reached NO VERDICT.
+ *
+ * `verify` returns invalid for two different things: a payment that was
+ * REJECTED, and a facilitator that never reached a verdict (`retryable`).
+ * Answering `402` in the second case tells the buyer to sign a NEW
+ * authorization while the first one is still live and still spendable by the
+ * facilitator — so the buyer pays twice. The correct answer is `503` plus
+ * `Retry-After`, which asks for the SAME credential again.
+ *
+ * This returns plain data — status, headers, body — so a handler written
+ * without Express (Lambda, Hono, a Next route, Fastify, a bare `Response`) can
+ * answer correctly without re-deriving the rule. The Express and Hono
+ * middlewares in this SDK both build their reply from it.
+ *
+ * @param message - Summary for the `error` field, e.g. `'Payment verification unavailable'`
+ * @param failure - The facilitator result. Only its failure fields are read.
+ *
+ * @example Lambda / any framework
+ * ```ts
+ * const verifyResult = await client.verify(payment, requirements);
+ * if (!verifyResult.isValid && verifyResult.retryable) {
+ *   const r = buildUnavailableResponse('Payment verification unavailable', verifyResult);
+ *   return { statusCode: r.status, headers: r.headers, body: JSON.stringify(r.body) };
+ * }
+ * ```
+ *
+ * @example Web `Response`
+ * ```ts
+ * const r = buildUnavailableResponse('Payment settlement unavailable', settleResult);
+ * return Response.json(r.body, { status: r.status, headers: r.headers });
+ * ```
+ */
+declare function buildUnavailableResponse(message: string, failure: FacilitatorFailureFields & {
+    error?: string;
+    invalidReason?: string;
+}): UnavailableResponse;
 /**
  * Create an Express-compatible middleware for x402 payments
  *
@@ -2902,6 +2965,15 @@ declare const DEPOSIT_LIMIT_USDC = "100000000";
  * Default facilitator request timeout per chain in milliseconds.
  * Ethereum L1 (~12s blocks) needs much longer than L2s (~2s blocks).
  * Timeout chain: Client > SDK > Facilitator. The facilitator uses 900s for Ethereum L1.
+ *
+ * These are correct, and they are also a PRODUCT constraint worth reading before
+ * you offer a network in a checkout: Ethereum L1 is 960s against 90s for every
+ * L2 here. A buyer waiting in a browser will not wait sixteen minutes, so a
+ * human-facing flow should offer the L2s and leave L1 to agent-to-agent or
+ * batch callers that can tolerate the wait. Do not shorten this to make a
+ * checkout feel faster — the value tracks L1 block time and the facilitator's
+ * own 900s TxWatcher, and cutting it just times out a payment that was going
+ * to land.
  */
 declare const ESCROW_TIMEOUT_MS: Record<number, number>;
 /**
@@ -2914,6 +2986,21 @@ declare const USDC_DOMAIN_NAME: Record<number, string>;
  * Multi-chain escrow contract addresses for the Advanced Escrow system.
  * Keyed by EVM chain ID. Source: x402r-sdk A1igator/multichain-config deployment.
  */
+/**
+ * Per-chain escrow contract addresses.
+ *
+ * KNOWN GAP, measured 2026-09-05: the `operator` entries are
+ * PaymentOperatorFactory addresses, not deployed PaymentOperator instances.
+ * Verified on Base mainnet, Base Sepolia and Arbitrum — they answer
+ * `ESCROW()` and `operators(bytes32)` and revert on `FEE_CALCULATOR()`,
+ * `FEE_RECIPIENT()` and `release(...)` — and x402-rs
+ * `docs/X402R_MULTICHAIN_DEPLOYMENT.md` labels the same addresses
+ * "PaymentOperatorFactory". A factory has no `release`/`charge`, so the direct
+ * on-chain paths below cannot execute against these addresses as written;
+ * resolve the real operator from the marketplace's own escrow config
+ * ({@link EscrowNetworkConfig}) and pass it via `options.contracts`.
+ * See {@link OPERATOR_FEE_BPS} for the commands.
+ */
 declare const ESCROW_CONTRACTS: Record<number, AdvancedEscrowContracts>;
 /**
  * Base Mainnet contract addresses for the Advanced Escrow system.
@@ -3194,6 +3281,15 @@ declare class AdvancedEscrowClient {
     buildPaymentInfo(receiver: string, amount: string, tier?: AdvancedEscrowTaskTier, salt?: string, opts?: {
         deadline?: number;
         reviewWindowSec?: number;
+        /**
+         * Fee bounds to sign, in basis points. Default
+         * {@link DEFAULT_MIN_FEE_BPS} / {@link DEFAULT_MAX_FEE_BPS}. Override
+         * only against an operator whose fee you have actually read on-chain —
+         * `maxFeeBps` is a CEILING, so a value under the operator's own fee does
+         * not shave the fee, it reverts the deposit.
+         */
+        minFeeBps?: number;
+        maxFeeBps?: number;
     }): AdvancedPaymentInfo;
     /**
      * Compute the correct nonce (with PAYMENT_INFO_TYPEHASH).
@@ -3375,4 +3471,4 @@ declare class AdvancedEscrowClient {
     private sendViaAdapter;
 }
 
-export { AMBIGUOUS_LEASE_REASONS, type AdvancedAuthorizationResult, AdvancedEscrowClient, type AdvancedEscrowClientOptions, type AdvancedEscrowContracts, type AdvancedEscrowTaskTier, type AdvancedPaymentInfo, type AdvancedTransactionResult, type AgentId, type AgentIdentity, type AgentRegistration, type AgentRegistrationFile, type AgentService, type AtomStats, BASE_MAINNET_CONTRACTS, BazaarClient, type BazaarClientOptions, type BazaarDiscoverOptions, type BazaarDiscoverResponse, type BazaarRegisterOptions, type BazaarResource, type CreateEscrowOptions, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, DEPOSIT_LIMIT_USDC, type DiscoveryAccepts, type DiscoveryCuration, type DiscoveryHealth, type DiscoveryHealthStatus, type DiscoveryListOptions, type DiscoveryPagination, type DiscoveryRegisterOptions, type DiscoveryResource, type DiscoveryResponse, type DiscoverySource, type DiscoveryStats, type DiscoveryTier, type Dispute, type DisputeOutcome, ERC8004_CONTRACTS, ERC8004_EXTENSION_ID, ESCROW_CONTRACTS, ESCROW_TIMEOUT_MS, Erc8004Client, type Erc8004ClientOptions, Erc8004LookupError, type Erc8004Network, EscrowClient, type EscrowClientOptions, type EscrowPayment, type EscrowStateResponse, type EscrowStatus, FacilitatorClient, type FacilitatorClientOptions, type FacilitatorErrorInfo, type FacilitatorFailureFields, type FacilitatorFetchOptions, type FeedbackEntry, type FeedbackParams, type FeedbackRequest, type FeedbackResponse, HEALTH_FILTERS, type HonoMiddlewareOptions, type IdentityByOwnerResponse, type IdentityMetadataResponse, type IdentityTotalSupplyResponse, MAX_RETRY_AFTER_SECONDS, MAX_SEARCH_LEN, type MetadataEntryParam, OPERATOR_ABI, OPERATOR_ABI_CREATE3, PAYMENT_INFO_TYPEHASH, type ParsedFacilitatorErrorBody, type PaymentAcceptance, type PaymentMiddlewareOptions, type PaymentPayloadV2, type PaymentRequirementResolver, type PaymentRequirements, type PaymentRequirementsOptions, type PaymentRequirementsV2, type PrepareRelayFeedbackRequest, type PrepareRelayFeedbackResponse, type PrepareRelayResponseRequest, type ProofOfPayment, RELAYED_FEEDBACK_NETWORKS, REPLAYABLE_LEASE_REASONS, type RefundRequest, type RefundStatus, type RegisterAgentRequest, type RegisterAgentResponse, type RegisterJobResponse, type RegisterJobStatus, RegistrationPendingError, type RelayAuthorizationParams, type ReputationResponse, type ReputationSummary, type RequestRefundOptions, type ResourceInfoV2, SETTLEMENT_UNCONFIRMED, type SettleRequest, type SettleRequestV2, type SettleResponse, type SettleResponseWithProof, type SubmitRelayFeedbackRequest, type SubmitRelayResponseRequest, TIER_FILTERS, TIER_TIMINGS, USDC_DOMAIN_NAME, type VerifiedPaymentState, type VerifyRequest, type VerifyRequestV2, type VerifyResponse, WRITER_LEASE_REASONS, type WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, buildErc8004PaymentRequirements, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, canRefundEscrow, canReleaseEscrow, carryFailureFields, create402Response, createHonoMiddleware, createPaymentMiddleware, epochToDate, escrowTimeRemaining, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, getEscrowContractsByChainId, getEscrowSupportedChainIds, isAlive, isAmbiguousLeaseReason, isEscrowExpired, isEscrowSupportedOnChain, isRegisterJobTerminal, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parsePaymentHeader, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, supportsRelayedFeedback, toPaymentRequirementsV2, toResourceInfoV2, wireNetwork };
+export { AMBIGUOUS_LEASE_REASONS, type AdvancedAuthorizationResult, AdvancedEscrowClient, type AdvancedEscrowClientOptions, type AdvancedEscrowContracts, type AdvancedEscrowTaskTier, type AdvancedPaymentInfo, type AdvancedTransactionResult, type AgentId, type AgentIdentity, type AgentRegistration, type AgentRegistrationFile, type AgentService, type AtomStats, BASE_MAINNET_CONTRACTS, BazaarClient, type BazaarClientOptions, type BazaarDiscoverOptions, type BazaarDiscoverResponse, type BazaarRegisterOptions, type BazaarResource, type CreateEscrowOptions, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, DEPOSIT_LIMIT_USDC, type DiscoveryAccepts, type DiscoveryCuration, type DiscoveryHealth, type DiscoveryHealthStatus, type DiscoveryListOptions, type DiscoveryPagination, type DiscoveryRegisterOptions, type DiscoveryResource, type DiscoveryResponse, type DiscoverySource, type DiscoveryStats, type DiscoveryTier, type Dispute, type DisputeOutcome, ERC8004_CONTRACTS, ERC8004_EXTENSION_ID, ESCROW_CONTRACTS, ESCROW_TIMEOUT_MS, Erc8004Client, type Erc8004ClientOptions, Erc8004LookupError, type Erc8004Network, EscrowClient, type EscrowClientOptions, type EscrowPayment, type EscrowStateResponse, type EscrowStatus, FacilitatorClient, type FacilitatorClientOptions, type FacilitatorErrorInfo, type FacilitatorFailureFields, type FacilitatorFetchOptions, type FeedbackEntry, type FeedbackParams, type FeedbackRequest, type FeedbackResponse, HEALTH_FILTERS, type HonoMiddlewareOptions, type IdentityByOwnerResponse, type IdentityMetadataResponse, type IdentityTotalSupplyResponse, MAX_RETRY_AFTER_SECONDS, MAX_SEARCH_LEN, type MetadataEntryParam, OPERATOR_ABI, OPERATOR_ABI_CREATE3, PAYMENT_INFO_TYPEHASH, type ParsedFacilitatorErrorBody, type PaymentAcceptance, type PaymentMiddlewareOptions, type PaymentPayloadV2, type PaymentRequirementResolver, type PaymentRequirements, type PaymentRequirementsOptions, type PaymentRequirementsV2, type PrepareRelayFeedbackRequest, type PrepareRelayFeedbackResponse, type PrepareRelayResponseRequest, type ProofOfPayment, RELAYED_FEEDBACK_NETWORKS, REPLAYABLE_LEASE_REASONS, type RefundRequest, type RefundStatus, type RegisterAgentRequest, type RegisterAgentResponse, type RegisterJobResponse, type RegisterJobStatus, RegistrationPendingError, type RelayAuthorizationParams, type ReputationResponse, type ReputationSummary, type RequestRefundOptions, type ResourceInfoV2, SETTLEMENT_UNCONFIRMED, type SettleRequest, type SettleRequestV2, type SettleResponse, type SettleResponseWithProof, type SubmitRelayFeedbackRequest, type SubmitRelayResponseRequest, TIER_FILTERS, TIER_TIMINGS, USDC_DOMAIN_NAME, type UnavailableBody, type UnavailableResponse, type VerifiedPaymentState, type VerifyRequest, type VerifyRequestV2, type VerifyResponse, WRITER_LEASE_REASONS, type WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, buildErc8004PaymentRequirements, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildUnavailableResponse, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, canRefundEscrow, canReleaseEscrow, carryFailureFields, create402Response, createHonoMiddleware, createPaymentMiddleware, epochToDate, escrowTimeRemaining, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, getEscrowContractsByChainId, getEscrowSupportedChainIds, isAlive, isAmbiguousLeaseReason, isEscrowExpired, isEscrowSupportedOnChain, isRegisterJobTerminal, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parsePaymentHeader, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, supportsRelayedFeedback, toPaymentRequirementsV2, toResourceInfoV2, wireNetwork };

package/dist/backend/index.d.ts

@@ -1,5 +1,5 @@
-import { S as SigningWalletAdapter } from '../wallet-0cX9Pw2F.js';
-import { Q as X402Version, x as X402Header, G as X402PayloadData } from '../index-ZH10otHE.js';
+import { S as SigningWalletAdapter } from '../wallet-w7BnImDG.js';
+import { X as X402Version, i as X402Header, j as X402PayloadData } from '../index-CkR8p1sT.js';
 
 /**
  * Reading a facilitator refusal as DATA instead of prose.
@@ -1044,6 +1044,69 @@ declare function create402Response(requirements: PaymentRequirementsOptions, opt
     headers: Record<string, string>;
     body: Record<string, unknown>;
 };
+/** The body of a no-verdict refusal. See {@link buildUnavailableResponse}. */
+interface UnavailableBody {
+    /** Human-readable summary. Never says the payment was rejected. */
+    error: string;
+    /** The facilitator's own reason, under whichever field it populated. */
+    reason?: string;
+    /** Always `true` — this response exists to say "no verdict", not "refused". */
+    retryable: true;
+    /** Whole seconds to wait, mirroring the `Retry-After` header. */
+    retryAfterSeconds: number;
+    /**
+     * `false` for `forward_failed` and for a bare timeout: the write may already
+     * have landed, so the caller must reconcile before resending.
+     */
+    safeToReplay: boolean;
+}
+/** A framework-agnostic HTTP response. See {@link buildUnavailableResponse}. */
+interface UnavailableResponse {
+    /** Always 503. */
+    status: 503;
+    /** `Retry-After`, ready to spread onto any framework's header setter. */
+    headers: Record<string, string>;
+    body: UnavailableBody;
+    /** Same value as the header, already clamped to a whole second >= 1. */
+    retryAfterSeconds: number;
+}
+/**
+ * Build the answer to a facilitator refusal that reached NO VERDICT.
+ *
+ * `verify` returns invalid for two different things: a payment that was
+ * REJECTED, and a facilitator that never reached a verdict (`retryable`).
+ * Answering `402` in the second case tells the buyer to sign a NEW
+ * authorization while the first one is still live and still spendable by the
+ * facilitator — so the buyer pays twice. The correct answer is `503` plus
+ * `Retry-After`, which asks for the SAME credential again.
+ *
+ * This returns plain data — status, headers, body — so a handler written
+ * without Express (Lambda, Hono, a Next route, Fastify, a bare `Response`) can
+ * answer correctly without re-deriving the rule. The Express and Hono
+ * middlewares in this SDK both build their reply from it.
+ *
+ * @param message - Summary for the `error` field, e.g. `'Payment verification unavailable'`
+ * @param failure - The facilitator result. Only its failure fields are read.
+ *
+ * @example Lambda / any framework
+ * ```ts
+ * const verifyResult = await client.verify(payment, requirements);
+ * if (!verifyResult.isValid && verifyResult.retryable) {
+ *   const r = buildUnavailableResponse('Payment verification unavailable', verifyResult);
+ *   return { statusCode: r.status, headers: r.headers, body: JSON.stringify(r.body) };
+ * }
+ * ```
+ *
+ * @example Web `Response`
+ * ```ts
+ * const r = buildUnavailableResponse('Payment settlement unavailable', settleResult);
+ * return Response.json(r.body, { status: r.status, headers: r.headers });
+ * ```
+ */
+declare function buildUnavailableResponse(message: string, failure: FacilitatorFailureFields & {
+    error?: string;
+    invalidReason?: string;
+}): UnavailableResponse;
 /**
  * Create an Express-compatible middleware for x402 payments
  *
@@ -2902,6 +2965,15 @@ declare const DEPOSIT_LIMIT_USDC = "100000000";
  * Default facilitator request timeout per chain in milliseconds.
  * Ethereum L1 (~12s blocks) needs much longer than L2s (~2s blocks).
  * Timeout chain: Client > SDK > Facilitator. The facilitator uses 900s for Ethereum L1.
+ *
+ * These are correct, and they are also a PRODUCT constraint worth reading before
+ * you offer a network in a checkout: Ethereum L1 is 960s against 90s for every
+ * L2 here. A buyer waiting in a browser will not wait sixteen minutes, so a
+ * human-facing flow should offer the L2s and leave L1 to agent-to-agent or
+ * batch callers that can tolerate the wait. Do not shorten this to make a
+ * checkout feel faster — the value tracks L1 block time and the facilitator's
+ * own 900s TxWatcher, and cutting it just times out a payment that was going
+ * to land.
  */
 declare const ESCROW_TIMEOUT_MS: Record<number, number>;
 /**
@@ -2914,6 +2986,21 @@ declare const USDC_DOMAIN_NAME: Record<number, string>;
  * Multi-chain escrow contract addresses for the Advanced Escrow system.
  * Keyed by EVM chain ID. Source: x402r-sdk A1igator/multichain-config deployment.
  */
+/**
+ * Per-chain escrow contract addresses.
+ *
+ * KNOWN GAP, measured 2026-09-05: the `operator` entries are
+ * PaymentOperatorFactory addresses, not deployed PaymentOperator instances.
+ * Verified on Base mainnet, Base Sepolia and Arbitrum — they answer
+ * `ESCROW()` and `operators(bytes32)` and revert on `FEE_CALCULATOR()`,
+ * `FEE_RECIPIENT()` and `release(...)` — and x402-rs
+ * `docs/X402R_MULTICHAIN_DEPLOYMENT.md` labels the same addresses
+ * "PaymentOperatorFactory". A factory has no `release`/`charge`, so the direct
+ * on-chain paths below cannot execute against these addresses as written;
+ * resolve the real operator from the marketplace's own escrow config
+ * ({@link EscrowNetworkConfig}) and pass it via `options.contracts`.
+ * See {@link OPERATOR_FEE_BPS} for the commands.
+ */
 declare const ESCROW_CONTRACTS: Record<number, AdvancedEscrowContracts>;
 /**
  * Base Mainnet contract addresses for the Advanced Escrow system.
@@ -3194,6 +3281,15 @@ declare class AdvancedEscrowClient {
     buildPaymentInfo(receiver: string, amount: string, tier?: AdvancedEscrowTaskTier, salt?: string, opts?: {
         deadline?: number;
         reviewWindowSec?: number;
+        /**
+         * Fee bounds to sign, in basis points. Default
+         * {@link DEFAULT_MIN_FEE_BPS} / {@link DEFAULT_MAX_FEE_BPS}. Override
+         * only against an operator whose fee you have actually read on-chain —
+         * `maxFeeBps` is a CEILING, so a value under the operator's own fee does
+         * not shave the fee, it reverts the deposit.
+         */
+        minFeeBps?: number;
+        maxFeeBps?: number;
     }): AdvancedPaymentInfo;
     /**
      * Compute the correct nonce (with PAYMENT_INFO_TYPEHASH).
@@ -3375,4 +3471,4 @@ declare class AdvancedEscrowClient {
     private sendViaAdapter;
 }
 
-export { AMBIGUOUS_LEASE_REASONS, type AdvancedAuthorizationResult, AdvancedEscrowClient, type AdvancedEscrowClientOptions, type AdvancedEscrowContracts, type AdvancedEscrowTaskTier, type AdvancedPaymentInfo, type AdvancedTransactionResult, type AgentId, type AgentIdentity, type AgentRegistration, type AgentRegistrationFile, type AgentService, type AtomStats, BASE_MAINNET_CONTRACTS, BazaarClient, type BazaarClientOptions, type BazaarDiscoverOptions, type BazaarDiscoverResponse, type BazaarRegisterOptions, type BazaarResource, type CreateEscrowOptions, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, DEPOSIT_LIMIT_USDC, type DiscoveryAccepts, type DiscoveryCuration, type DiscoveryHealth, type DiscoveryHealthStatus, type DiscoveryListOptions, type DiscoveryPagination, type DiscoveryRegisterOptions, type DiscoveryResource, type DiscoveryResponse, type DiscoverySource, type DiscoveryStats, type DiscoveryTier, type Dispute, type DisputeOutcome, ERC8004_CONTRACTS, ERC8004_EXTENSION_ID, ESCROW_CONTRACTS, ESCROW_TIMEOUT_MS, Erc8004Client, type Erc8004ClientOptions, Erc8004LookupError, type Erc8004Network, EscrowClient, type EscrowClientOptions, type EscrowPayment, type EscrowStateResponse, type EscrowStatus, FacilitatorClient, type FacilitatorClientOptions, type FacilitatorErrorInfo, type FacilitatorFailureFields, type FacilitatorFetchOptions, type FeedbackEntry, type FeedbackParams, type FeedbackRequest, type FeedbackResponse, HEALTH_FILTERS, type HonoMiddlewareOptions, type IdentityByOwnerResponse, type IdentityMetadataResponse, type IdentityTotalSupplyResponse, MAX_RETRY_AFTER_SECONDS, MAX_SEARCH_LEN, type MetadataEntryParam, OPERATOR_ABI, OPERATOR_ABI_CREATE3, PAYMENT_INFO_TYPEHASH, type ParsedFacilitatorErrorBody, type PaymentAcceptance, type PaymentMiddlewareOptions, type PaymentPayloadV2, type PaymentRequirementResolver, type PaymentRequirements, type PaymentRequirementsOptions, type PaymentRequirementsV2, type PrepareRelayFeedbackRequest, type PrepareRelayFeedbackResponse, type PrepareRelayResponseRequest, type ProofOfPayment, RELAYED_FEEDBACK_NETWORKS, REPLAYABLE_LEASE_REASONS, type RefundRequest, type RefundStatus, type RegisterAgentRequest, type RegisterAgentResponse, type RegisterJobResponse, type RegisterJobStatus, RegistrationPendingError, type RelayAuthorizationParams, type ReputationResponse, type ReputationSummary, type RequestRefundOptions, type ResourceInfoV2, SETTLEMENT_UNCONFIRMED, type SettleRequest, type SettleRequestV2, type SettleResponse, type SettleResponseWithProof, type SubmitRelayFeedbackRequest, type SubmitRelayResponseRequest, TIER_FILTERS, TIER_TIMINGS, USDC_DOMAIN_NAME, type VerifiedPaymentState, type VerifyRequest, type VerifyRequestV2, type VerifyResponse, WRITER_LEASE_REASONS, type WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, buildErc8004PaymentRequirements, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, canRefundEscrow, canReleaseEscrow, carryFailureFields, create402Response, createHonoMiddleware, createPaymentMiddleware, epochToDate, escrowTimeRemaining, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, getEscrowContractsByChainId, getEscrowSupportedChainIds, isAlive, isAmbiguousLeaseReason, isEscrowExpired, isEscrowSupportedOnChain, isRegisterJobTerminal, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parsePaymentHeader, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, supportsRelayedFeedback, toPaymentRequirementsV2, toResourceInfoV2, wireNetwork };
+export { AMBIGUOUS_LEASE_REASONS, type AdvancedAuthorizationResult, AdvancedEscrowClient, type AdvancedEscrowClientOptions, type AdvancedEscrowContracts, type AdvancedEscrowTaskTier, type AdvancedPaymentInfo, type AdvancedTransactionResult, type AgentId, type AgentIdentity, type AgentRegistration, type AgentRegistrationFile, type AgentService, type AtomStats, BASE_MAINNET_CONTRACTS, BazaarClient, type BazaarClientOptions, type BazaarDiscoverOptions, type BazaarDiscoverResponse, type BazaarRegisterOptions, type BazaarResource, type CreateEscrowOptions, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, DEPOSIT_LIMIT_USDC, type DiscoveryAccepts, type DiscoveryCuration, type DiscoveryHealth, type DiscoveryHealthStatus, type DiscoveryListOptions, type DiscoveryPagination, type DiscoveryRegisterOptions, type DiscoveryResource, type DiscoveryResponse, type DiscoverySource, type DiscoveryStats, type DiscoveryTier, type Dispute, type DisputeOutcome, ERC8004_CONTRACTS, ERC8004_EXTENSION_ID, ESCROW_CONTRACTS, ESCROW_TIMEOUT_MS, Erc8004Client, type Erc8004ClientOptions, Erc8004LookupError, type Erc8004Network, EscrowClient, type EscrowClientOptions, type EscrowPayment, type EscrowStateResponse, type EscrowStatus, FacilitatorClient, type FacilitatorClientOptions, type FacilitatorErrorInfo, type FacilitatorFailureFields, type FacilitatorFetchOptions, type FeedbackEntry, type FeedbackParams, type FeedbackRequest, type FeedbackResponse, HEALTH_FILTERS, type HonoMiddlewareOptions, type IdentityByOwnerResponse, type IdentityMetadataResponse, type IdentityTotalSupplyResponse, MAX_RETRY_AFTER_SECONDS, MAX_SEARCH_LEN, type MetadataEntryParam, OPERATOR_ABI, OPERATOR_ABI_CREATE3, PAYMENT_INFO_TYPEHASH, type ParsedFacilitatorErrorBody, type PaymentAcceptance, type PaymentMiddlewareOptions, type PaymentPayloadV2, type PaymentRequirementResolver, type PaymentRequirements, type PaymentRequirementsOptions, type PaymentRequirementsV2, type PrepareRelayFeedbackRequest, type PrepareRelayFeedbackResponse, type PrepareRelayResponseRequest, type ProofOfPayment, RELAYED_FEEDBACK_NETWORKS, REPLAYABLE_LEASE_REASONS, type RefundRequest, type RefundStatus, type RegisterAgentRequest, type RegisterAgentResponse, type RegisterJobResponse, type RegisterJobStatus, RegistrationPendingError, type RelayAuthorizationParams, type ReputationResponse, type ReputationSummary, type RequestRefundOptions, type ResourceInfoV2, SETTLEMENT_UNCONFIRMED, type SettleRequest, type SettleRequestV2, type SettleResponse, type SettleResponseWithProof, type SubmitRelayFeedbackRequest, type SubmitRelayResponseRequest, TIER_FILTERS, TIER_TIMINGS, USDC_DOMAIN_NAME, type UnavailableBody, type UnavailableResponse, type VerifiedPaymentState, type VerifyRequest, type VerifyRequestV2, type VerifyResponse, WRITER_LEASE_REASONS, type WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, buildErc8004PaymentRequirements, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildUnavailableResponse, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, canRefundEscrow, canReleaseEscrow, carryFailureFields, create402Response, createHonoMiddleware, createPaymentMiddleware, epochToDate, escrowTimeRemaining, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, getEscrowContractsByChainId, getEscrowSupportedChainIds, isAlive, isAmbiguousLeaseReason, isEscrowExpired, isEscrowSupportedOnChain, isRegisterJobTerminal, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parsePaymentHeader, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, supportsRelayedFeedback, toPaymentRequirementsV2, toResourceInfoV2, wireNetwork };

package/dist/backend/index.js

@@ -1090,6 +1090,10 @@ function decodeX402Header(encoded) {
   const json = decodeBase64Utf8(encoded);
   return JSON.parse(json);
 }
+var OPERATOR_FEE_BPS = 1300;
+var MAX_PROTOCOL_FEE_BPS = 500;
+var DEFAULT_MIN_FEE_BPS = 0;
+var DEFAULT_MAX_FEE_BPS = OPERATOR_FEE_BPS + MAX_PROTOCOL_FEE_BPS;
 var REVIEW_WINDOW_SEC = 7 * 24 * 3600;
 var REFUND_WINDOW_SEC = 7 * 24 * 3600;
 
@@ -2006,20 +2010,26 @@ function createVerifiedPaymentState(client, payment, requirements, verifyResult)
     }
   };
 }
-function respondUnavailable(res, message, failure) {
+function buildUnavailableResponse(message, failure) {
   const seconds = Math.max(1, Math.ceil(failure.retryAfterSeconds ?? DEFAULT_RETRY_AFTER_SECONDS));
-  const body = {
-    error: message,
-    reason: failure.reason ?? failure.invalidReason ?? failure.error,
-    retryable: true,
-    retryAfterSeconds: seconds,
-    // False for `forward_failed` and for a bare timeout: the write may already
-    // have landed, so the caller must reconcile before resending.
-    safeToReplay: failure.safeToReplay === true
+  return {
+    status: 503,
+    headers: { "Retry-After": String(seconds) },
+    body: {
+      error: message,
+      reason: failure.reason ?? failure.invalidReason ?? failure.error,
+      retryable: true,
+      retryAfterSeconds: seconds,
+      safeToReplay: failure.safeToReplay === true
+    },
+    retryAfterSeconds: seconds
   };
-  const staged = res.status(503);
+}
+function respondUnavailable(res, message, failure) {
+  const { status, headers, body } = buildUnavailableResponse(message, failure);
+  const staged = res.status(status);
   if (typeof staged.set === "function") {
-    staged.set({ "Retry-After": String(seconds) }).json(body);
+    staged.set(headers).json(body);
     return;
   }
   staged.json(body);
@@ -2079,18 +2089,11 @@ function settlementFailureBody(failure, fallbackReason) {
   };
 }
 function honoUnavailable(c, message, failure) {
-  const seconds = Math.max(1, Math.ceil(failure.retryAfterSeconds ?? DEFAULT_RETRY_AFTER_SECONDS));
-  c.header?.("Retry-After", String(seconds));
-  return c.json(
-    {
-      error: message,
-      reason: failure.reason ?? failure.invalidReason ?? failure.error,
-      retryable: true,
-      retryAfterSeconds: seconds,
-      safeToReplay: failure.safeToReplay === true
-    },
-    503
-  );
+  const { status, headers, body } = buildUnavailableResponse(message, failure);
+  for (const [name, value] of Object.entries(headers)) {
+    c.header?.(name, value);
+  }
+  return c.json(body, status);
 }
 function createHonoMiddleware(options) {
   const client = new FacilitatorClient({
@@ -4150,6 +4153,16 @@ var AdvancedEscrowClient = class {
       }
       generatedSalt = "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
     }
+    const minFeeBps = opts?.minFeeBps ?? DEFAULT_MIN_FEE_BPS;
+    const maxFeeBps = opts?.maxFeeBps ?? DEFAULT_MAX_FEE_BPS;
+    if (maxFeeBps < minFeeBps) {
+      throw new Error(`maxFeeBps=${maxFeeBps} is below minFeeBps=${minFeeBps}`);
+    }
+    if (maxFeeBps < OPERATOR_FEE_BPS) {
+      throw new Error(
+        `maxFeeBps=${maxFeeBps} cannot cover the operator's ${OPERATOR_FEE_BPS} bps fee \u2014 the on-chain authorize would revert with FeeBoundsIncompatible. Read the fee off your operator before overriding it.`
+      );
+    }
     return {
       operator: this.contracts.operator,
       receiver,
@@ -4158,8 +4171,8 @@ var AdvancedEscrowClient = class {
       preApprovalExpiry: now + t.pre,
       authorizationExpiry,
       refundExpiry,
-      minFeeBps: 0,
-      maxFeeBps: 800,
+      minFeeBps,
+      maxFeeBps,
       feeReceiver: this.contracts.operator,
       salt: generatedSalt
     };
@@ -4879,6 +4892,7 @@ exports.buildPaymentRequirements = buildPaymentRequirements;
 exports.buildSettleRequest = buildSettleRequest;
 exports.buildSettleRequestForVersion = buildSettleRequestForVersion;
 exports.buildSettleRequestV2 = buildSettleRequestV2;
+exports.buildUnavailableResponse = buildUnavailableResponse;
 exports.buildVerifyRequest = buildVerifyRequest;
 exports.buildVerifyRequestForVersion = buildVerifyRequestForVersion;
 exports.buildVerifyRequestV2 = buildVerifyRequestV2;