uvd-x402-sdk 2.85.0 → 2.86.0

package/dist/index.d.mts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, q as CAIP2_IDENTIFIERS, r as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.mjs';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.mjs';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-Z9v4GxOZ.mjs';
-export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, ParsedFacilitatorErrorBody, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SETTLEMENT_UNCONFIRMED, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, toPaymentRequirementsV2, toResourceInfoV2 } from './backend/index.mjs';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, p as PaymentAcceptance, q as PaymentMiddlewareOptions, r as PaymentPayloadV2, s as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, t as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, u as SettleRequestV2, V as VerifiedPaymentState, v as VerifyRequestV2, W as WRITER_LEASE_REASONS, w as WagmiLifecycleWalletClient, x as WriterLeaseReason, X as X402_CORS_HEADERS, y as X402_HEADER_NAMES, z as buildLifecycleAuth, C as buildLifecycleTypedData, E as buildPaymentRequirements, G as buildSettleRequest, I as buildSettleRequestForVersion, J as buildSettleRequestV2, K as buildVerifyRequest, N as buildVerifyRequestForVersion, O as buildVerifyRequestV2, Q as create402Response, T as createHonoMiddleware, U as createPaymentMiddleware, Y as extractPaymentFromHeaders, Z as facilitatorFetch, _ as getCorsHeaders, $ as isAmbiguousLeaseReason, a0 as isReplayableLeaseReason, a1 as isSettlementUnconfirmed, a2 as parseFacilitatorErrorBody, a3 as parseRetryAfterSeconds, a4 as readFacilitatorError, a5 as resolveEnvelopeVersion, a6 as toPaymentRequirementsV2, a7 as toResourceInfoV2, a8 as wagmiLifecycleSigner } from './index-De03nksW.mjs';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, q as CAIP2_IDENTIFIERS, r as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.js';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.js';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-C-KmORG9.js';
-export { AMBIGUOUS_LEASE_REASONS, DEFAULT_FACILITATOR_RETRIES, DEFAULT_RETRY_AFTER_SECONDS, FacilitatorClient, FacilitatorClientOptions, FacilitatorErrorInfo, FacilitatorFailureFields, FacilitatorFetchOptions, HonoMiddlewareOptions, MAX_RETRY_AFTER_SECONDS, ParsedFacilitatorErrorBody, PaymentAcceptance, PaymentMiddlewareOptions, PaymentPayloadV2, PaymentRequirementsV2, REPLAYABLE_LEASE_REASONS, ResourceInfoV2, SETTLEMENT_UNCONFIRMED, SettleRequestV2, VerifiedPaymentState, VerifyRequestV2, WRITER_LEASE_REASONS, WriterLeaseReason, X402_CORS_HEADERS, X402_HEADER_NAMES, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, create402Response, createHonoMiddleware, createPaymentMiddleware, extractPaymentFromHeaders, facilitatorFetch, getCorsHeaders, isAmbiguousLeaseReason, isReplayableLeaseReason, isSettlementUnconfirmed, parseFacilitatorErrorBody, parseRetryAfterSeconds, readFacilitatorError, resolveEnvelopeVersion, toPaymentRequirementsV2, toResourceInfoV2 } from './backend/index.js';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, p as PaymentAcceptance, q as PaymentMiddlewareOptions, r as PaymentPayloadV2, s as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, t as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, u as SettleRequestV2, V as VerifiedPaymentState, v as VerifyRequestV2, W as WRITER_LEASE_REASONS, w as WagmiLifecycleWalletClient, x as WriterLeaseReason, X as X402_CORS_HEADERS, y as X402_HEADER_NAMES, z as buildLifecycleAuth, C as buildLifecycleTypedData, E as buildPaymentRequirements, G as buildSettleRequest, I as buildSettleRequestForVersion, J as buildSettleRequestV2, K as buildVerifyRequest, N as buildVerifyRequestForVersion, O as buildVerifyRequestV2, Q as create402Response, T as createHonoMiddleware, U as createPaymentMiddleware, Y as extractPaymentFromHeaders, Z as facilitatorFetch, _ as getCorsHeaders, $ as isAmbiguousLeaseReason, a0 as isReplayableLeaseReason, a1 as isSettlementUnconfirmed, a2 as parseFacilitatorErrorBody, a3 as parseRetryAfterSeconds, a4 as readFacilitatorError, a5 as resolveEnvelopeVersion, a6 as toPaymentRequirementsV2, a7 as toResourceInfoV2, a8 as wagmiLifecycleSigner } from './index-4_LWWlyF.js';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.js

@@ -4469,6 +4469,214 @@ async function buildEscrowPreAuth(wallet, params) {
   });
 }
 
+// src/lifecycle-auth.ts
+init_types();
+var LIFECYCLE_DOMAIN_NAME = "x402 escrow lifecycle";
+var LIFECYCLE_DOMAIN_VERSION = "1";
+var LIFECYCLE_MAX_DEADLINE_SECS = 900;
+var LIFECYCLE_DEFAULT_DEADLINE_SECS = 600;
+var LIFECYCLE_ACTIONS = ["release", "refundInEscrow"];
+var LIFECYCLE_ORDER_TYPES = {
+  LifecycleOrder: [
+    { name: "action", type: "string" },
+    { name: "amount", type: "uint256" },
+    { name: "deadline", type: "uint256" },
+    { name: "nonce", type: "bytes32" },
+    { name: "paymentInfo", type: "PaymentInfo" }
+  ],
+  PaymentInfo: [
+    { name: "operator", type: "address" },
+    { name: "payer", type: "address" },
+    { name: "receiver", type: "address" },
+    { name: "token", type: "address" },
+    { name: "maxAmount", type: "uint120" },
+    { name: "preApprovalExpiry", type: "uint48" },
+    { name: "authorizationExpiry", type: "uint48" },
+    { name: "refundExpiry", type: "uint48" },
+    { name: "minFeeBps", type: "uint16" },
+    { name: "maxFeeBps", type: "uint16" },
+    { name: "feeReceiver", type: "address" },
+    { name: "salt", type: "uint256" }
+  ]
+};
+var LIFECYCLE_PI_KEYS = [
+  "operator",
+  "receiver",
+  "token",
+  "maxAmount",
+  "preApprovalExpiry",
+  "authorizationExpiry",
+  "refundExpiry",
+  "minFeeBps",
+  "maxFeeBps",
+  "feeReceiver",
+  "salt"
+];
+function saltToBigInt(salt) {
+  if (typeof salt === "bigint") return salt;
+  if (typeof salt === "number") {
+    if (!Number.isInteger(salt) || salt < 0) {
+      throw new exports.X402Error(`paymentInfo.salt invalid: ${String(salt)}`, "INVALID_CONFIG");
+    }
+    return BigInt(salt);
+  }
+  if (typeof salt === "string") {
+    const trimmed = salt.trim();
+    const hex = trimmed.startsWith("0x") || trimmed.startsWith("0X") ? trimmed : `0x${trimmed}`;
+    try {
+      return BigInt(hex);
+    } catch {
+      throw new exports.X402Error(`paymentInfo.salt invalid: ${salt}`, "INVALID_CONFIG");
+    }
+  }
+  throw new exports.X402Error(`paymentInfo.salt invalid: ${String(salt)}`, "INVALID_CONFIG");
+}
+function nonceToBytes32(nonce) {
+  if (typeof nonce !== "string") {
+    throw new exports.X402Error(`lifecycleAuth.nonce invalid: ${String(nonce)}`, "INVALID_CONFIG");
+  }
+  const raw = nonce.startsWith("0x") || nonce.startsWith("0X") ? nonce.slice(2) : nonce;
+  if (!/^[0-9a-fA-F]*$/.test(raw)) {
+    throw new exports.X402Error(`lifecycleAuth.nonce is not hex: ${nonce}`, "INVALID_CONFIG");
+  }
+  if (raw.length !== 64) {
+    throw new exports.X402Error(
+      `lifecycleAuth.nonce must be 32 bytes, got ${raw.length / 2}`,
+      "INVALID_CONFIG"
+    );
+  }
+  return `0x${raw.toLowerCase()}`;
+}
+function randomNonce() {
+  const webCrypto = globalThis.crypto;
+  if (webCrypto?.getRandomValues) {
+    const bytes = new Uint8Array(32);
+    webCrypto.getRandomValues(bytes);
+    return ethers.ethers.hexlify(bytes);
+  }
+  return ethers.ethers.hexlify(ethers.ethers.randomBytes(32));
+}
+function toUintString(value, field) {
+  let n;
+  try {
+    n = typeof value === "bigint" ? value : BigInt(value);
+  } catch {
+    throw new exports.X402Error(`${field} must be a non-negative integer, got ${String(value)}`, "INVALID_CONFIG");
+  }
+  if (n < 0n) {
+    throw new exports.X402Error(`${field} must be a non-negative integer, got ${String(value)}`, "INVALID_CONFIG");
+  }
+  return n.toString();
+}
+function buildLifecycleTypedData(params) {
+  const { action, paymentInfo, payer, amount, chainId, deadline, nonce } = params;
+  if (!LIFECYCLE_ACTIONS.includes(action)) {
+    throw new exports.X402Error(
+      `unknown lifecycle action ${String(action)}; the facilitator only signs ${LIFECYCLE_ACTIONS.join(", ")}`,
+      "INVALID_CONFIG"
+    );
+  }
+  let amountBig;
+  try {
+    amountBig = typeof amount === "bigint" ? amount : BigInt(amount);
+  } catch {
+    throw new exports.X402Error(`amount must be an integer >= 0, got ${String(amount)}`, "INVALID_AMOUNT");
+  }
+  if (amountBig < 0n) {
+    throw new exports.X402Error(`amount must be an integer >= 0, got ${String(amount)}`, "INVALID_AMOUNT");
+  }
+  const pi = paymentInfo ?? {};
+  const missing = LIFECYCLE_PI_KEYS.filter((k) => pi[k] === void 0);
+  if (missing.length > 0) {
+    throw new exports.X402Error(
+      `paymentInfo is missing fields that enter the signature: ${missing.join(", ")}. The paymentInfo that is SENT is the one that is signed; defaulting a field would sign a different struct than the one that reaches the facilitator.`,
+      "INVALID_CONFIG"
+    );
+  }
+  return {
+    domain: {
+      name: LIFECYCLE_DOMAIN_NAME,
+      version: LIFECYCLE_DOMAIN_VERSION,
+      chainId: Number(chainId)
+    },
+    types: LIFECYCLE_ORDER_TYPES,
+    primaryType: "LifecycleOrder",
+    message: {
+      action,
+      amount: amountBig.toString(),
+      deadline: toUintString(deadline, "deadline"),
+      nonce: nonceToBytes32(nonce),
+      paymentInfo: {
+        operator: ethers.ethers.getAddress(paymentInfo.operator),
+        payer: ethers.ethers.getAddress(payer),
+        receiver: ethers.ethers.getAddress(paymentInfo.receiver),
+        token: ethers.ethers.getAddress(paymentInfo.token),
+        maxAmount: toUintString(paymentInfo.maxAmount, "paymentInfo.maxAmount"),
+        preApprovalExpiry: toUintString(paymentInfo.preApprovalExpiry, "paymentInfo.preApprovalExpiry"),
+        authorizationExpiry: toUintString(
+          paymentInfo.authorizationExpiry,
+          "paymentInfo.authorizationExpiry"
+        ),
+        refundExpiry: toUintString(paymentInfo.refundExpiry, "paymentInfo.refundExpiry"),
+        minFeeBps: toUintString(paymentInfo.minFeeBps, "paymentInfo.minFeeBps"),
+        maxFeeBps: toUintString(paymentInfo.maxFeeBps, "paymentInfo.maxFeeBps"),
+        feeReceiver: ethers.ethers.getAddress(paymentInfo.feeReceiver),
+        // uint256 in the signature, bytes32 on the wire — see saltToBigInt.
+        salt: saltToBigInt(paymentInfo.salt).toString()
+      }
+    }
+  };
+}
+async function buildLifecycleAuth(params) {
+  const { wallet, deadline, nonce, now, ...rest } = params;
+  const nowSec = now === void 0 ? Math.floor(Date.now() / 1e3) : Math.floor(now);
+  const dl = deadline === void 0 ? nowSec + LIFECYCLE_DEFAULT_DEADLINE_SECS : Math.floor(deadline);
+  const nonceHex = nonce === void 0 ? randomNonce() : nonce;
+  if (dl < nowSec) {
+    throw new exports.X402Error(
+      `deadline ${dl} is in the past (now ${nowSec}): the facilitator discards it as \`expired\``,
+      "INVALID_CONFIG"
+    );
+  }
+  if (dl - nowSec > LIFECYCLE_MAX_DEADLINE_SECS) {
+    throw new exports.X402Error(
+      `deadline ${dl} is ${dl - nowSec} s ahead and the facilitator's ceiling is ${LIFECYCLE_MAX_DEADLINE_SECS} s (\`deadline_too_far\`): a leaked order cannot be a standing permission`,
+      "INVALID_CONFIG"
+    );
+  }
+  const typed = buildLifecycleTypedData({ ...rest, deadline: dl, nonce: nonceHex });
+  const signed = await wallet.signTypedData(JSON.stringify(typed));
+  return {
+    signer: wallet.getAddress(),
+    deadline: dl,
+    nonce: nonceToBytes32(nonceHex),
+    signature: signed.signature
+  };
+}
+function wagmiLifecycleSigner(walletClient, address) {
+  const account = address ?? walletClient.account?.address;
+  if (!account) {
+    throw new exports.X402Error(
+      "wagmiLifecycleSigner needs an account: pass one, or connect the wallet client first",
+      "INVALID_CONFIG"
+    );
+  }
+  const checksummed = ethers.ethers.getAddress(account);
+  return {
+    getAddress: () => checksummed,
+    async signTypedData(typedData) {
+      const parsed = JSON.parse(typedData);
+      const signature = await walletClient.signTypedData({
+        domain: parsed.domain,
+        types: parsed.types,
+        primaryType: parsed.primaryType,
+        message: parsed.message
+      });
+      return { signature };
+    }
+  };
+}
+
 // src/backend/index.ts
 init_utils();
 init_chains();
@@ -5581,6 +5789,12 @@ exports.EvidenceSkipped = EvidenceSkipped;
 exports.FACILITATOR_ADDRESSES = FACILITATOR_ADDRESSES;
 exports.FacilitatorClient = FacilitatorClient;
 exports.KEEPALIVE_INTERVAL_MS = KEEPALIVE_INTERVAL_MS;
+exports.LIFECYCLE_ACTIONS = LIFECYCLE_ACTIONS;
+exports.LIFECYCLE_DEFAULT_DEADLINE_SECS = LIFECYCLE_DEFAULT_DEADLINE_SECS;
+exports.LIFECYCLE_DOMAIN_NAME = LIFECYCLE_DOMAIN_NAME;
+exports.LIFECYCLE_DOMAIN_VERSION = LIFECYCLE_DOMAIN_VERSION;
+exports.LIFECYCLE_MAX_DEADLINE_SECS = LIFECYCLE_MAX_DEADLINE_SECS;
+exports.LIFECYCLE_ORDER_TYPES = LIFECYCLE_ORDER_TYPES;
 exports.MAX_PROTOCOL_FEE_BPS = MAX_PROTOCOL_FEE_BPS;
 exports.MAX_RETRY_AFTER_SECONDS = MAX_RETRY_AFTER_SECONDS;
 exports.OPERATOR_FEE_BPS = OPERATOR_FEE_BPS;
@@ -5599,6 +5813,8 @@ exports.anchorDigest = anchorDigest;
 exports.anchorEvidence = anchorEvidence;
 exports.availableBackends = availableBackends;
 exports.buildEscrowPreAuth = buildEscrowPreAuth;
+exports.buildLifecycleAuth = buildLifecycleAuth;
+exports.buildLifecycleTypedData = buildLifecycleTypedData;
 exports.buildPaymentRequirements = buildPaymentRequirements;
 exports.buildSettleRequest = buildSettleRequest;
 exports.buildSettleRequestForVersion = buildSettleRequestForVersion;
@@ -5701,6 +5917,7 @@ exports.toResourceInfoV2 = toResourceInfoV2;
 exports.unseal = unseal;
 exports.validateAmount = validateAmount;
 exports.validateRecipient = validateRecipient;
+exports.wagmiLifecycleSigner = wagmiLifecycleSigner;
 exports.wrapSignature = wrapSignature;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map