uvd-x402-sdk 2.86.0 → 2.87.0

package/dist/{index-De03nksW.d.mts → index-BHfYxpzI.d.mts}

@@ -21,6 +21,19 @@ import { X as X402Version, i as X402Header, j as X402PayloadData } from './index
  * KMS. In H2A/H2H the PAYER signs in their own browser with the same wallet
  * they paid with, and the marketplace merely transports the block.
  *
+ * >>> TWO SHAPES, ONE ORDER <<<
+ * `buildLifecycleAuth` does the whole ceremony in one call: it mints the
+ * nonce and the deadline, signs through the injected adapter, and returns the
+ * block. That is the server and the `wagmi` paths.
+ *
+ * A publisher's browser cannot use it. There the backend assembles the
+ * document — nonce and deadline included — the browser signs whatever it was
+ * handed, and gives back a signature and nothing else. That is
+ * {@link buildLifecycleTypedData} on one side and
+ * {@link lifecycleAuthFromSignature} on the other, and it produces the SAME
+ * bytes as the one-call path for the same nonce and deadline, pinned in
+ * `src/lifecycle-auth.test.ts`.
+ *
  * Source of truth for the format is the facilitator, `x402-rs`
  * `src/payment_operator/lifecycle_auth.rs` (PR #21). The Python twin is
  * `uvd_x402_sdk.escrow_signing.build_lifecycle_auth` (0.78.0); the two must
@@ -136,41 +149,29 @@ interface LifecycleTypedDataParams {
     amount: string | number | bigint;
     /** EVM chain id of the payment network. */
     chainId: number;
-    /** Unix seconds after which the order is dead. */
-    deadline: number;
-    /** 32 bytes, hex. */
-    nonce: string;
-}
-interface BuildLifecycleAuthParams extends Omit<LifecycleTypedDataParams, 'deadline' | 'nonce'> {
     /**
-     * The signer. Must be the payer, the receiver or the operator owner
-     * depending on the action — see the table in the module docblock.
+     * Unix seconds after which the order is dead. Default: `now + 600`, which
+     * leaves 300 s of headroom under the facilitator's 900 s ceiling.
      */
-    wallet: LifecycleSigner;
-    /** Unix seconds. Default: `now + 600`. */
     deadline?: number;
     /**
-     * 32 bytes in hex. Default: a fresh random one. Distinct PER ORDER — the
-     * facilitator consumes it on acceptance (a stream's partial settles emit
-     * one per delta).
+     * 32 bytes, hex. Default: a fresh random one. Distinct PER ORDER — the
+     * facilitator consumes it on acceptance.
      */
     nonce?: string;
-    /** Unix seconds, for tests. Default: the clock. */
+    /** Unix seconds, for the `deadline` default and for tests. Default: the clock. */
     now?: number;
 }
 /**
- * The exact EIP-712 document a lifecycle order signs.
+ * The EIP-712 document itself: what {@link buildLifecycleTypedData} returns and
+ * what {@link lifecycleAuthFromSignature} reads back.
  *
- * Kept separate from {@link buildLifecycleAuth} because it is the useful
- * seam: it is what the Python twin mirrors, and what a test can poke field
- * by field to confirm the signature stops verifying.
- *
- * @throws {X402Error} `INVALID_CONFIG` on an unknown action or a paymentInfo
- *   missing a field; `INVALID_AMOUNT` on a negative amount. Nothing is
- *   defaulted: an invented field is a signature over a different struct than
- *   the one that is sent, i.e. a rejection the caller cannot diagnose.
+ * Named because it is a WIRE type in the split flow: a backend builds it,
+ * ships it to a browser as JSON, and the browser hands it to `signTypedData`.
+ * `types` carries no `EIP712Domain` entry — ethers and viem both derive that
+ * one, and including it makes ethers throw `ambiguous primary types`.
  */
-declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
+interface LifecycleTypedData {
     domain: {
         name: string;
         version: string;
@@ -182,7 +183,50 @@ declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
     }>>;
     primaryType: 'LifecycleOrder';
     message: Record<string, unknown>;
-};
+}
+interface BuildLifecycleAuthParams extends LifecycleTypedDataParams {
+    /**
+     * The signer. Must be the payer, the receiver or the operator owner
+     * depending on the action — see the table in the module docblock.
+     */
+    wallet: LifecycleSigner;
+}
+/**
+ * The exact EIP-712 document a lifecycle order signs.
+ *
+ * Kept separate from {@link buildLifecycleAuth} because it is the useful
+ * seam: it is what the Python twin mirrors, what a test can poke field by
+ * field to confirm the signature stops verifying, and — the reason it is
+ * PUBLIC — what a backend hands to a browser that signs.
+ *
+ * {@link buildLifecycleAuth} cannot serve that browser: it takes an injected
+ * `WalletAdapter` and mints its own nonce and deadline, while a publisher
+ * signs a document the backend already assembled and hands back only a
+ * signature. Build it here, ship it, and reassemble the wire block with
+ * {@link lifecycleAuthFromSignature} — which reads `deadline` and `nonce`
+ * back out of this same document, so the two cannot disagree.
+ *
+ * @example The split flow, backend half
+ * ```typescript
+ * const typedData = buildLifecycleTypedData({
+ *   action: 'release',
+ *   paymentInfo: pi,   // the SAME object that will be sent
+ *   payer,             // payload.payer
+ *   amount,            // the SAME as payload.amount
+ *   chainId: 8453,
+ * });                  // deadline -> now + 600, nonce -> 32 fresh bytes
+ * // -> res.json({ typedData })  ... the browser signs it and posts back a signature
+ * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, payer);
+ * ```
+ *
+ * @throws {X402Error} `INVALID_CONFIG` on an unknown action or a paymentInfo
+ *   missing a field; `INVALID_AMOUNT` on a negative amount. Nothing IN THE
+ *   SIGNED STRUCT is defaulted: an invented field is a signature over a
+ *   different struct than the one that is sent, i.e. a rejection the caller
+ *   cannot diagnose. `deadline` and `nonce` are the exception because they
+ *   exist nowhere else — they are born here and read back from the document.
+ */
+declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): LifecycleTypedData;
 /**
  * Sign the order and return the complete `payload.lifecycleAuth` block.
  *
@@ -199,6 +243,48 @@ declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
  *   `enforce` is stuck money, and the caller has no log to see it in.
  */
 declare function buildLifecycleAuth(params: BuildLifecycleAuthParams): Promise<LifecycleAuth>;
+/**
+ * Reassemble `payload.lifecycleAuth` from a document that was signed
+ * ELSEWHERE — the other half of the split flow.
+ *
+ * `buildLifecycleAuth` owns the whole ceremony: it mints the nonce and the
+ * deadline, signs, and returns the block. A publisher's browser owns none of
+ * that. It receives a document the backend already assembled and gives back
+ * one string. This is the seam where that string becomes a wire block.
+ *
+ * `deadline` and `nonce` are NOT parameters: they are read out of
+ * `typedData.message`, which is the document that was actually hashed. Taking
+ * them from the caller would let the block claim a nonce the signature never
+ * committed to — a `bad_signature` the caller cannot see, because both halves
+ * look right on their own.
+ *
+ * The signature is NOT recovered here. This SDK's payers include ERC-7702
+ * delegated accounts and contract wallets that validate through ERC-1271
+ * (`src/erc7702.ts:8`), whose signatures do not ecrecover to their address;
+ * `ethers.verifyTypedData` would reject the good ones. Recovery — and the
+ * role check that goes with it — is the facilitator's, against the chain.
+ *
+ * @param typedData - what {@link buildLifecycleTypedData} returned, unmodified.
+ * @param signature - the 0x-hex the wallet gave back (`signTypedData`).
+ * @param signer - the address that signed, claimed in the block and checked
+ *   against the recovered one by the facilitator.
+ *
+ * @throws {X402Error} `INVALID_CONFIG` if the document is not a
+ *   `LifecycleOrder` for this domain, if the signature is not hex, or if the
+ *   signer is not an address.
+ *
+ * @example The browser half
+ * ```typescript
+ * const signature = await walletClient.signTypedData({
+ *   domain: typedData.domain,
+ *   types: typedData.types,
+ *   primaryType: typedData.primaryType,
+ *   message: typedData.message,
+ * });
+ * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, address);
+ * ```
+ */
+declare function lifecycleAuthFromSignature(typedData: LifecycleTypedData, signature: string, signer: string): LifecycleAuth;
 /**
  * Minimal wagmi/viem wallet client: what {@link wagmiLifecycleSigner} needs.
  *
@@ -3326,9 +3412,25 @@ interface LifecycleAuthOptions {
     lifecycleSigner?: LifecycleSigner;
     /**
      * Unix seconds. Default: `now + 600`, which leaves 300 s of headroom under
-     * the facilitator's 900 s ceiling.
+     * the facilitator's 900 s ceiling. Only read alongside `lifecycleSigner` —
+     * a `lifecycleAuth` already carries the deadline it was signed with.
      */
     lifecycleDeadline?: number;
+    /**
+     * An order that was ALREADY SIGNED somewhere else — the publisher's browser
+     * — and that this backend only transports.
+     *
+     * The signing side builds the document with `buildLifecycleTypedData`, the
+     * browser signs it, and `lifecycleAuthFromSignature` turns the signature
+     * back into this block. Nothing is re-derived here: the `paymentInfo`, the
+     * `payer` and the `amount` this call sends must be the ones the order
+     * committed to, or the facilitator reads `bad_signature`.
+     *
+     * MUTUALLY EXCLUSIVE with `lifecycleSigner`. Passing both is not a
+     * preference to resolve — it means the caller believes two different orders
+     * are about to travel, and only one can. It throws.
+     */
+    lifecycleAuth?: LifecycleAuth;
 }
 /**
  * Result of an AUTHORIZE operation.
@@ -3633,6 +3735,13 @@ declare class AdvancedEscrowClient {
      *   lifecycleSigner: payerWallet,   // EnvKeyAdapter, OWS, wagmiLifecycleSigner(...)
      * });
      * ```
+     *
+     * @example Transporting an order the publisher signed in their browser
+     * ```typescript
+     * // The browser sent back a signature over a document THIS backend built.
+     * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, payer);
+     * await client.releaseViaFacilitator(pi, amount, { lifecycleAuth });
+     * ```
      */
     releaseViaFacilitator(paymentInfo: AdvancedPaymentInfo, amount?: string, options?: LifecycleAuthOptions): Promise<AdvancedTransactionResult>;
     /**
@@ -3753,4 +3862,4 @@ declare class AdvancedEscrowClient {
     private sendViaAdapter;
 }
 
-export { isAmbiguousLeaseReason as $, AMBIGUOUS_LEASE_REASONS as A, type BuildLifecycleAuthParams as B, buildLifecycleTypedData as C, DEFAULT_FACILITATOR_RETRIES as D, buildPaymentRequirements as E, FacilitatorClient as F, buildSettleRequest as G, type HonoMiddlewareOptions as H, buildSettleRequestForVersion as I, buildSettleRequestV2 as J, buildVerifyRequest as K, LIFECYCLE_ACTIONS as L, MAX_RETRY_AFTER_SECONDS as M, buildVerifyRequestForVersion as N, buildVerifyRequestV2 as O, type ParsedFacilitatorErrorBody as P, create402Response as Q, REPLAYABLE_LEASE_REASONS as R, SETTLEMENT_UNCONFIRMED as S, createHonoMiddleware as T, createPaymentMiddleware as U, type VerifiedPaymentState as V, WRITER_LEASE_REASONS as W, X402_CORS_HEADERS as X, extractPaymentFromHeaders as Y, facilitatorFetch as Z, getCorsHeaders as _, DEFAULT_RETRY_AFTER_SECONDS as a, type IdentityByOwnerResponse as a$, isReplayableLeaseReason as a0, isSettlementUnconfirmed as a1, parseFacilitatorErrorBody as a2, parseRetryAfterSeconds as a3, readFacilitatorError as a4, resolveEnvelopeVersion as a5, toPaymentRequirementsV2 as a6, toResourceInfoV2 as a7, wagmiLifecycleSigner as a8, type AdvancedAuthorizationResult as a9, type DiscoveryPagination as aA, type DiscoveryRegisterOptions as aB, type DiscoveryResource as aC, type DiscoveryResponse as aD, type DiscoverySource as aE, type DiscoveryStats as aF, type DiscoveryTier as aG, type Dispute as aH, type DisputeOutcome as aI, ERC8004_CONTRACTS as aJ, ERC8004_EXTENSION_ID as aK, ESCROW_CONTRACTS as aL, ESCROW_TIMEOUT_MS as aM, Erc8004Client as aN, type Erc8004ClientOptions as aO, Erc8004LookupError as aP, type Erc8004Network as aQ, EscrowClient as aR, type EscrowClientOptions as aS, type EscrowPayment as aT, type EscrowStateResponse as aU, type EscrowStatus as aV, type FeedbackEntry as aW, type FeedbackParams as aX, type FeedbackRequest as aY, type FeedbackResponse as aZ, HEALTH_FILTERS as a_, AdvancedEscrowClient as aa, type AdvancedEscrowClientOptions as ab, type AdvancedEscrowContracts as ac, type AdvancedEscrowTaskTier as ad, type AdvancedPaymentInfo as ae, type AdvancedTransactionResult as af, type AgentId as ag, type AgentIdentity as ah, type AgentRegistration as ai, type AgentRegistrationFile as aj, type AgentService as ak, type AtomStats as al, BASE_MAINNET_CONTRACTS as am, BazaarClient as an, type BazaarClientOptions as ao, type BazaarDiscoverOptions as ap, type BazaarDiscoverResponse as aq, type BazaarRegisterOptions as ar, type BazaarResource as as, type CreateEscrowOptions as at, DEPOSIT_LIMIT_USDC as au, type DiscoveryAccepts as av, type DiscoveryCuration as aw, type DiscoveryHealth as ax, type DiscoveryHealthStatus as ay, type DiscoveryListOptions as az, type FacilitatorClientOptions as b, type IdentityMetadataResponse as b0, type IdentityTotalSupplyResponse as b1, type LifecycleAuthOptions as b2, MAX_SEARCH_LEN as b3, type MetadataEntryParam as b4, OPERATOR_ABI as b5, OPERATOR_ABI_CREATE3 as b6, PAYMENT_INFO_TYPEHASH as b7, type PaymentRequirementResolver as b8, type PaymentRequirements as b9, type UnavailableResponse as bA, type VerifyRequest as bB, type VerifyResponse as bC, ZERO_ADDRESS as bD, buildErc8004PaymentRequirements as bE, buildUnavailableResponse as bF, canRefundEscrow as bG, canReleaseEscrow as bH, carryFailureFields as bI, epochToDate as bJ, escrowTimeRemaining as bK, getEscrowContractsByChainId as bL, getEscrowSupportedChainIds as bM, isAlive as bN, isEscrowExpired as bO, isEscrowSupportedOnChain as bP, isRegisterJobTerminal as bQ, parsePaymentHeader as bR, supportsRelayedFeedback as bS, wireNetwork as bT, type PaymentRequirementsOptions as ba, type PrepareRelayFeedbackRequest as bb, type PrepareRelayFeedbackResponse as bc, type PrepareRelayResponseRequest as bd, type ProofOfPayment as be, RELAYED_FEEDBACK_NETWORKS as bf, type RefundRequest as bg, type RefundStatus as bh, type RegisterAgentRequest as bi, type RegisterAgentResponse as bj, type RegisterJobResponse as bk, type RegisterJobStatus as bl, RegistrationPendingError as bm, type RelayAuthorizationParams as bn, type ReputationResponse as bo, type ReputationSummary as bp, type RequestRefundOptions as bq, type SettleRequest as br, type SettleResponse as bs, type SettleResponseWithProof as bt, type SubmitRelayFeedbackRequest as bu, type SubmitRelayResponseRequest as bv, TIER_FILTERS as bw, TIER_TIMINGS as bx, USDC_DOMAIN_NAME as by, type UnavailableBody as bz, type FacilitatorErrorInfo as c, type FacilitatorFailureFields as d, type FacilitatorFetchOptions as e, LIFECYCLE_DEFAULT_DEADLINE_SECS as f, LIFECYCLE_DOMAIN_NAME as g, LIFECYCLE_DOMAIN_VERSION as h, LIFECYCLE_MAX_DEADLINE_SECS as i, LIFECYCLE_ORDER_TYPES as j, type LifecycleAction as k, type LifecycleAuth as l, type LifecyclePaymentInfo as m, type LifecycleSigner as n, type LifecycleTypedDataParams as o, type PaymentAcceptance as p, type PaymentMiddlewareOptions as q, type PaymentPayloadV2 as r, type PaymentRequirementsV2 as s, type ResourceInfoV2 as t, type SettleRequestV2 as u, type VerifyRequestV2 as v, type WagmiLifecycleWalletClient as w, type WriterLeaseReason as x, X402_HEADER_NAMES as y, buildLifecycleAuth as z };
+export { getCorsHeaders as $, AMBIGUOUS_LEASE_REASONS as A, type BuildLifecycleAuthParams as B, buildLifecycleAuth as C, DEFAULT_FACILITATOR_RETRIES as D, buildLifecycleTypedData as E, FacilitatorClient as F, buildPaymentRequirements as G, type HonoMiddlewareOptions as H, buildSettleRequest as I, buildSettleRequestForVersion as J, buildSettleRequestV2 as K, LIFECYCLE_ACTIONS as L, MAX_RETRY_AFTER_SECONDS as M, buildVerifyRequest as N, buildVerifyRequestForVersion as O, type ParsedFacilitatorErrorBody as P, buildVerifyRequestV2 as Q, REPLAYABLE_LEASE_REASONS as R, SETTLEMENT_UNCONFIRMED as S, create402Response as T, createHonoMiddleware as U, type VerifiedPaymentState as V, WRITER_LEASE_REASONS as W, X402_CORS_HEADERS as X, createPaymentMiddleware as Y, extractPaymentFromHeaders as Z, facilitatorFetch as _, DEFAULT_RETRY_AFTER_SECONDS as a, type FeedbackResponse as a$, isAmbiguousLeaseReason as a0, isReplayableLeaseReason as a1, isSettlementUnconfirmed as a2, lifecycleAuthFromSignature as a3, parseFacilitatorErrorBody as a4, parseRetryAfterSeconds as a5, readFacilitatorError as a6, resolveEnvelopeVersion as a7, toPaymentRequirementsV2 as a8, toResourceInfoV2 as a9, type DiscoveryHealthStatus as aA, type DiscoveryListOptions as aB, type DiscoveryPagination as aC, type DiscoveryRegisterOptions as aD, type DiscoveryResource as aE, type DiscoveryResponse as aF, type DiscoverySource as aG, type DiscoveryStats as aH, type DiscoveryTier as aI, type Dispute as aJ, type DisputeOutcome as aK, ERC8004_CONTRACTS as aL, ERC8004_EXTENSION_ID as aM, ESCROW_CONTRACTS as aN, ESCROW_TIMEOUT_MS as aO, Erc8004Client as aP, type Erc8004ClientOptions as aQ, Erc8004LookupError as aR, type Erc8004Network as aS, EscrowClient as aT, type EscrowClientOptions as aU, type EscrowPayment as aV, type EscrowStateResponse as aW, type EscrowStatus as aX, type FeedbackEntry as aY, type FeedbackParams as aZ, type FeedbackRequest as a_, wagmiLifecycleSigner as aa, type AdvancedAuthorizationResult as ab, AdvancedEscrowClient as ac, type AdvancedEscrowClientOptions as ad, type AdvancedEscrowContracts as ae, type AdvancedEscrowTaskTier as af, type AdvancedPaymentInfo as ag, type AdvancedTransactionResult as ah, type AgentId as ai, type AgentIdentity as aj, type AgentRegistration as ak, type AgentRegistrationFile as al, type AgentService as am, type AtomStats as an, BASE_MAINNET_CONTRACTS as ao, BazaarClient as ap, type BazaarClientOptions as aq, type BazaarDiscoverOptions as ar, type BazaarDiscoverResponse as as, type BazaarRegisterOptions as at, type BazaarResource as au, type CreateEscrowOptions as av, DEPOSIT_LIMIT_USDC as aw, type DiscoveryAccepts as ax, type DiscoveryCuration as ay, type DiscoveryHealth as az, type FacilitatorClientOptions as b, HEALTH_FILTERS as b0, type IdentityByOwnerResponse as b1, type IdentityMetadataResponse as b2, type IdentityTotalSupplyResponse as b3, type LifecycleAuthOptions as b4, MAX_SEARCH_LEN as b5, type MetadataEntryParam as b6, OPERATOR_ABI as b7, OPERATOR_ABI_CREATE3 as b8, PAYMENT_INFO_TYPEHASH as b9, USDC_DOMAIN_NAME as bA, type UnavailableBody as bB, type UnavailableResponse as bC, type VerifyRequest as bD, type VerifyResponse as bE, ZERO_ADDRESS as bF, buildErc8004PaymentRequirements as bG, buildUnavailableResponse as bH, canRefundEscrow as bI, canReleaseEscrow as bJ, carryFailureFields as bK, epochToDate as bL, escrowTimeRemaining as bM, getEscrowContractsByChainId as bN, getEscrowSupportedChainIds as bO, isAlive as bP, isEscrowExpired as bQ, isEscrowSupportedOnChain as bR, isRegisterJobTerminal as bS, parsePaymentHeader as bT, supportsRelayedFeedback as bU, wireNetwork as bV, type PaymentRequirementResolver as ba, type PaymentRequirements as bb, type PaymentRequirementsOptions as bc, type PrepareRelayFeedbackRequest as bd, type PrepareRelayFeedbackResponse as be, type PrepareRelayResponseRequest as bf, type ProofOfPayment as bg, RELAYED_FEEDBACK_NETWORKS as bh, type RefundRequest as bi, type RefundStatus as bj, type RegisterAgentRequest as bk, type RegisterAgentResponse as bl, type RegisterJobResponse as bm, type RegisterJobStatus as bn, RegistrationPendingError as bo, type RelayAuthorizationParams as bp, type ReputationResponse as bq, type ReputationSummary as br, type RequestRefundOptions as bs, type SettleRequest as bt, type SettleResponse as bu, type SettleResponseWithProof as bv, type SubmitRelayFeedbackRequest as bw, type SubmitRelayResponseRequest as bx, TIER_FILTERS as by, TIER_TIMINGS as bz, type FacilitatorErrorInfo as c, type FacilitatorFailureFields as d, type FacilitatorFetchOptions as e, LIFECYCLE_DEFAULT_DEADLINE_SECS as f, LIFECYCLE_DOMAIN_NAME as g, LIFECYCLE_DOMAIN_VERSION as h, LIFECYCLE_MAX_DEADLINE_SECS as i, LIFECYCLE_ORDER_TYPES as j, type LifecycleAction as k, type LifecycleAuth as l, type LifecyclePaymentInfo as m, type LifecycleSigner as n, type LifecycleTypedData as o, type LifecycleTypedDataParams as p, type PaymentAcceptance as q, type PaymentMiddlewareOptions as r, type PaymentPayloadV2 as s, type PaymentRequirementsV2 as t, type ResourceInfoV2 as u, type SettleRequestV2 as v, type VerifyRequestV2 as w, type WagmiLifecycleWalletClient as x, type WriterLeaseReason as y, X402_HEADER_NAMES as z };

package/dist/{index-4_LWWlyF.d.ts → index-D67eNxY8.d.ts}

@@ -21,6 +21,19 @@ import { X as X402Version, i as X402Header, j as X402PayloadData } from './index
  * KMS. In H2A/H2H the PAYER signs in their own browser with the same wallet
  * they paid with, and the marketplace merely transports the block.
  *
+ * >>> TWO SHAPES, ONE ORDER <<<
+ * `buildLifecycleAuth` does the whole ceremony in one call: it mints the
+ * nonce and the deadline, signs through the injected adapter, and returns the
+ * block. That is the server and the `wagmi` paths.
+ *
+ * A publisher's browser cannot use it. There the backend assembles the
+ * document — nonce and deadline included — the browser signs whatever it was
+ * handed, and gives back a signature and nothing else. That is
+ * {@link buildLifecycleTypedData} on one side and
+ * {@link lifecycleAuthFromSignature} on the other, and it produces the SAME
+ * bytes as the one-call path for the same nonce and deadline, pinned in
+ * `src/lifecycle-auth.test.ts`.
+ *
  * Source of truth for the format is the facilitator, `x402-rs`
  * `src/payment_operator/lifecycle_auth.rs` (PR #21). The Python twin is
  * `uvd_x402_sdk.escrow_signing.build_lifecycle_auth` (0.78.0); the two must
@@ -136,41 +149,29 @@ interface LifecycleTypedDataParams {
     amount: string | number | bigint;
     /** EVM chain id of the payment network. */
     chainId: number;
-    /** Unix seconds after which the order is dead. */
-    deadline: number;
-    /** 32 bytes, hex. */
-    nonce: string;
-}
-interface BuildLifecycleAuthParams extends Omit<LifecycleTypedDataParams, 'deadline' | 'nonce'> {
     /**
-     * The signer. Must be the payer, the receiver or the operator owner
-     * depending on the action — see the table in the module docblock.
+     * Unix seconds after which the order is dead. Default: `now + 600`, which
+     * leaves 300 s of headroom under the facilitator's 900 s ceiling.
      */
-    wallet: LifecycleSigner;
-    /** Unix seconds. Default: `now + 600`. */
     deadline?: number;
     /**
-     * 32 bytes in hex. Default: a fresh random one. Distinct PER ORDER — the
-     * facilitator consumes it on acceptance (a stream's partial settles emit
-     * one per delta).
+     * 32 bytes, hex. Default: a fresh random one. Distinct PER ORDER — the
+     * facilitator consumes it on acceptance.
      */
     nonce?: string;
-    /** Unix seconds, for tests. Default: the clock. */
+    /** Unix seconds, for the `deadline` default and for tests. Default: the clock. */
     now?: number;
 }
 /**
- * The exact EIP-712 document a lifecycle order signs.
+ * The EIP-712 document itself: what {@link buildLifecycleTypedData} returns and
+ * what {@link lifecycleAuthFromSignature} reads back.
  *
- * Kept separate from {@link buildLifecycleAuth} because it is the useful
- * seam: it is what the Python twin mirrors, and what a test can poke field
- * by field to confirm the signature stops verifying.
- *
- * @throws {X402Error} `INVALID_CONFIG` on an unknown action or a paymentInfo
- *   missing a field; `INVALID_AMOUNT` on a negative amount. Nothing is
- *   defaulted: an invented field is a signature over a different struct than
- *   the one that is sent, i.e. a rejection the caller cannot diagnose.
+ * Named because it is a WIRE type in the split flow: a backend builds it,
+ * ships it to a browser as JSON, and the browser hands it to `signTypedData`.
+ * `types` carries no `EIP712Domain` entry — ethers and viem both derive that
+ * one, and including it makes ethers throw `ambiguous primary types`.
  */
-declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
+interface LifecycleTypedData {
     domain: {
         name: string;
         version: string;
@@ -182,7 +183,50 @@ declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
     }>>;
     primaryType: 'LifecycleOrder';
     message: Record<string, unknown>;
-};
+}
+interface BuildLifecycleAuthParams extends LifecycleTypedDataParams {
+    /**
+     * The signer. Must be the payer, the receiver or the operator owner
+     * depending on the action — see the table in the module docblock.
+     */
+    wallet: LifecycleSigner;
+}
+/**
+ * The exact EIP-712 document a lifecycle order signs.
+ *
+ * Kept separate from {@link buildLifecycleAuth} because it is the useful
+ * seam: it is what the Python twin mirrors, what a test can poke field by
+ * field to confirm the signature stops verifying, and — the reason it is
+ * PUBLIC — what a backend hands to a browser that signs.
+ *
+ * {@link buildLifecycleAuth} cannot serve that browser: it takes an injected
+ * `WalletAdapter` and mints its own nonce and deadline, while a publisher
+ * signs a document the backend already assembled and hands back only a
+ * signature. Build it here, ship it, and reassemble the wire block with
+ * {@link lifecycleAuthFromSignature} — which reads `deadline` and `nonce`
+ * back out of this same document, so the two cannot disagree.
+ *
+ * @example The split flow, backend half
+ * ```typescript
+ * const typedData = buildLifecycleTypedData({
+ *   action: 'release',
+ *   paymentInfo: pi,   // the SAME object that will be sent
+ *   payer,             // payload.payer
+ *   amount,            // the SAME as payload.amount
+ *   chainId: 8453,
+ * });                  // deadline -> now + 600, nonce -> 32 fresh bytes
+ * // -> res.json({ typedData })  ... the browser signs it and posts back a signature
+ * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, payer);
+ * ```
+ *
+ * @throws {X402Error} `INVALID_CONFIG` on an unknown action or a paymentInfo
+ *   missing a field; `INVALID_AMOUNT` on a negative amount. Nothing IN THE
+ *   SIGNED STRUCT is defaulted: an invented field is a signature over a
+ *   different struct than the one that is sent, i.e. a rejection the caller
+ *   cannot diagnose. `deadline` and `nonce` are the exception because they
+ *   exist nowhere else — they are born here and read back from the document.
+ */
+declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): LifecycleTypedData;
 /**
  * Sign the order and return the complete `payload.lifecycleAuth` block.
  *
@@ -199,6 +243,48 @@ declare function buildLifecycleTypedData(params: LifecycleTypedDataParams): {
  *   `enforce` is stuck money, and the caller has no log to see it in.
  */
 declare function buildLifecycleAuth(params: BuildLifecycleAuthParams): Promise<LifecycleAuth>;
+/**
+ * Reassemble `payload.lifecycleAuth` from a document that was signed
+ * ELSEWHERE — the other half of the split flow.
+ *
+ * `buildLifecycleAuth` owns the whole ceremony: it mints the nonce and the
+ * deadline, signs, and returns the block. A publisher's browser owns none of
+ * that. It receives a document the backend already assembled and gives back
+ * one string. This is the seam where that string becomes a wire block.
+ *
+ * `deadline` and `nonce` are NOT parameters: they are read out of
+ * `typedData.message`, which is the document that was actually hashed. Taking
+ * them from the caller would let the block claim a nonce the signature never
+ * committed to — a `bad_signature` the caller cannot see, because both halves
+ * look right on their own.
+ *
+ * The signature is NOT recovered here. This SDK's payers include ERC-7702
+ * delegated accounts and contract wallets that validate through ERC-1271
+ * (`src/erc7702.ts:8`), whose signatures do not ecrecover to their address;
+ * `ethers.verifyTypedData` would reject the good ones. Recovery — and the
+ * role check that goes with it — is the facilitator's, against the chain.
+ *
+ * @param typedData - what {@link buildLifecycleTypedData} returned, unmodified.
+ * @param signature - the 0x-hex the wallet gave back (`signTypedData`).
+ * @param signer - the address that signed, claimed in the block and checked
+ *   against the recovered one by the facilitator.
+ *
+ * @throws {X402Error} `INVALID_CONFIG` if the document is not a
+ *   `LifecycleOrder` for this domain, if the signature is not hex, or if the
+ *   signer is not an address.
+ *
+ * @example The browser half
+ * ```typescript
+ * const signature = await walletClient.signTypedData({
+ *   domain: typedData.domain,
+ *   types: typedData.types,
+ *   primaryType: typedData.primaryType,
+ *   message: typedData.message,
+ * });
+ * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, address);
+ * ```
+ */
+declare function lifecycleAuthFromSignature(typedData: LifecycleTypedData, signature: string, signer: string): LifecycleAuth;
 /**
  * Minimal wagmi/viem wallet client: what {@link wagmiLifecycleSigner} needs.
  *
@@ -3326,9 +3412,25 @@ interface LifecycleAuthOptions {
     lifecycleSigner?: LifecycleSigner;
     /**
      * Unix seconds. Default: `now + 600`, which leaves 300 s of headroom under
-     * the facilitator's 900 s ceiling.
+     * the facilitator's 900 s ceiling. Only read alongside `lifecycleSigner` —
+     * a `lifecycleAuth` already carries the deadline it was signed with.
      */
     lifecycleDeadline?: number;
+    /**
+     * An order that was ALREADY SIGNED somewhere else — the publisher's browser
+     * — and that this backend only transports.
+     *
+     * The signing side builds the document with `buildLifecycleTypedData`, the
+     * browser signs it, and `lifecycleAuthFromSignature` turns the signature
+     * back into this block. Nothing is re-derived here: the `paymentInfo`, the
+     * `payer` and the `amount` this call sends must be the ones the order
+     * committed to, or the facilitator reads `bad_signature`.
+     *
+     * MUTUALLY EXCLUSIVE with `lifecycleSigner`. Passing both is not a
+     * preference to resolve — it means the caller believes two different orders
+     * are about to travel, and only one can. It throws.
+     */
+    lifecycleAuth?: LifecycleAuth;
 }
 /**
  * Result of an AUTHORIZE operation.
@@ -3633,6 +3735,13 @@ declare class AdvancedEscrowClient {
      *   lifecycleSigner: payerWallet,   // EnvKeyAdapter, OWS, wagmiLifecycleSigner(...)
      * });
      * ```
+     *
+     * @example Transporting an order the publisher signed in their browser
+     * ```typescript
+     * // The browser sent back a signature over a document THIS backend built.
+     * const lifecycleAuth = lifecycleAuthFromSignature(typedData, signature, payer);
+     * await client.releaseViaFacilitator(pi, amount, { lifecycleAuth });
+     * ```
      */
     releaseViaFacilitator(paymentInfo: AdvancedPaymentInfo, amount?: string, options?: LifecycleAuthOptions): Promise<AdvancedTransactionResult>;
     /**
@@ -3753,4 +3862,4 @@ declare class AdvancedEscrowClient {
     private sendViaAdapter;
 }
 
-export { isAmbiguousLeaseReason as $, AMBIGUOUS_LEASE_REASONS as A, type BuildLifecycleAuthParams as B, buildLifecycleTypedData as C, DEFAULT_FACILITATOR_RETRIES as D, buildPaymentRequirements as E, FacilitatorClient as F, buildSettleRequest as G, type HonoMiddlewareOptions as H, buildSettleRequestForVersion as I, buildSettleRequestV2 as J, buildVerifyRequest as K, LIFECYCLE_ACTIONS as L, MAX_RETRY_AFTER_SECONDS as M, buildVerifyRequestForVersion as N, buildVerifyRequestV2 as O, type ParsedFacilitatorErrorBody as P, create402Response as Q, REPLAYABLE_LEASE_REASONS as R, SETTLEMENT_UNCONFIRMED as S, createHonoMiddleware as T, createPaymentMiddleware as U, type VerifiedPaymentState as V, WRITER_LEASE_REASONS as W, X402_CORS_HEADERS as X, extractPaymentFromHeaders as Y, facilitatorFetch as Z, getCorsHeaders as _, DEFAULT_RETRY_AFTER_SECONDS as a, type IdentityByOwnerResponse as a$, isReplayableLeaseReason as a0, isSettlementUnconfirmed as a1, parseFacilitatorErrorBody as a2, parseRetryAfterSeconds as a3, readFacilitatorError as a4, resolveEnvelopeVersion as a5, toPaymentRequirementsV2 as a6, toResourceInfoV2 as a7, wagmiLifecycleSigner as a8, type AdvancedAuthorizationResult as a9, type DiscoveryPagination as aA, type DiscoveryRegisterOptions as aB, type DiscoveryResource as aC, type DiscoveryResponse as aD, type DiscoverySource as aE, type DiscoveryStats as aF, type DiscoveryTier as aG, type Dispute as aH, type DisputeOutcome as aI, ERC8004_CONTRACTS as aJ, ERC8004_EXTENSION_ID as aK, ESCROW_CONTRACTS as aL, ESCROW_TIMEOUT_MS as aM, Erc8004Client as aN, type Erc8004ClientOptions as aO, Erc8004LookupError as aP, type Erc8004Network as aQ, EscrowClient as aR, type EscrowClientOptions as aS, type EscrowPayment as aT, type EscrowStateResponse as aU, type EscrowStatus as aV, type FeedbackEntry as aW, type FeedbackParams as aX, type FeedbackRequest as aY, type FeedbackResponse as aZ, HEALTH_FILTERS as a_, AdvancedEscrowClient as aa, type AdvancedEscrowClientOptions as ab, type AdvancedEscrowContracts as ac, type AdvancedEscrowTaskTier as ad, type AdvancedPaymentInfo as ae, type AdvancedTransactionResult as af, type AgentId as ag, type AgentIdentity as ah, type AgentRegistration as ai, type AgentRegistrationFile as aj, type AgentService as ak, type AtomStats as al, BASE_MAINNET_CONTRACTS as am, BazaarClient as an, type BazaarClientOptions as ao, type BazaarDiscoverOptions as ap, type BazaarDiscoverResponse as aq, type BazaarRegisterOptions as ar, type BazaarResource as as, type CreateEscrowOptions as at, DEPOSIT_LIMIT_USDC as au, type DiscoveryAccepts as av, type DiscoveryCuration as aw, type DiscoveryHealth as ax, type DiscoveryHealthStatus as ay, type DiscoveryListOptions as az, type FacilitatorClientOptions as b, type IdentityMetadataResponse as b0, type IdentityTotalSupplyResponse as b1, type LifecycleAuthOptions as b2, MAX_SEARCH_LEN as b3, type MetadataEntryParam as b4, OPERATOR_ABI as b5, OPERATOR_ABI_CREATE3 as b6, PAYMENT_INFO_TYPEHASH as b7, type PaymentRequirementResolver as b8, type PaymentRequirements as b9, type UnavailableResponse as bA, type VerifyRequest as bB, type VerifyResponse as bC, ZERO_ADDRESS as bD, buildErc8004PaymentRequirements as bE, buildUnavailableResponse as bF, canRefundEscrow as bG, canReleaseEscrow as bH, carryFailureFields as bI, epochToDate as bJ, escrowTimeRemaining as bK, getEscrowContractsByChainId as bL, getEscrowSupportedChainIds as bM, isAlive as bN, isEscrowExpired as bO, isEscrowSupportedOnChain as bP, isRegisterJobTerminal as bQ, parsePaymentHeader as bR, supportsRelayedFeedback as bS, wireNetwork as bT, type PaymentRequirementsOptions as ba, type PrepareRelayFeedbackRequest as bb, type PrepareRelayFeedbackResponse as bc, type PrepareRelayResponseRequest as bd, type ProofOfPayment as be, RELAYED_FEEDBACK_NETWORKS as bf, type RefundRequest as bg, type RefundStatus as bh, type RegisterAgentRequest as bi, type RegisterAgentResponse as bj, type RegisterJobResponse as bk, type RegisterJobStatus as bl, RegistrationPendingError as bm, type RelayAuthorizationParams as bn, type ReputationResponse as bo, type ReputationSummary as bp, type RequestRefundOptions as bq, type SettleRequest as br, type SettleResponse as bs, type SettleResponseWithProof as bt, type SubmitRelayFeedbackRequest as bu, type SubmitRelayResponseRequest as bv, TIER_FILTERS as bw, TIER_TIMINGS as bx, USDC_DOMAIN_NAME as by, type UnavailableBody as bz, type FacilitatorErrorInfo as c, type FacilitatorFailureFields as d, type FacilitatorFetchOptions as e, LIFECYCLE_DEFAULT_DEADLINE_SECS as f, LIFECYCLE_DOMAIN_NAME as g, LIFECYCLE_DOMAIN_VERSION as h, LIFECYCLE_MAX_DEADLINE_SECS as i, LIFECYCLE_ORDER_TYPES as j, type LifecycleAction as k, type LifecycleAuth as l, type LifecyclePaymentInfo as m, type LifecycleSigner as n, type LifecycleTypedDataParams as o, type PaymentAcceptance as p, type PaymentMiddlewareOptions as q, type PaymentPayloadV2 as r, type PaymentRequirementsV2 as s, type ResourceInfoV2 as t, type SettleRequestV2 as u, type VerifyRequestV2 as v, type WagmiLifecycleWalletClient as w, type WriterLeaseReason as x, X402_HEADER_NAMES as y, buildLifecycleAuth as z };
+export { getCorsHeaders as $, AMBIGUOUS_LEASE_REASONS as A, type BuildLifecycleAuthParams as B, buildLifecycleAuth as C, DEFAULT_FACILITATOR_RETRIES as D, buildLifecycleTypedData as E, FacilitatorClient as F, buildPaymentRequirements as G, type HonoMiddlewareOptions as H, buildSettleRequest as I, buildSettleRequestForVersion as J, buildSettleRequestV2 as K, LIFECYCLE_ACTIONS as L, MAX_RETRY_AFTER_SECONDS as M, buildVerifyRequest as N, buildVerifyRequestForVersion as O, type ParsedFacilitatorErrorBody as P, buildVerifyRequestV2 as Q, REPLAYABLE_LEASE_REASONS as R, SETTLEMENT_UNCONFIRMED as S, create402Response as T, createHonoMiddleware as U, type VerifiedPaymentState as V, WRITER_LEASE_REASONS as W, X402_CORS_HEADERS as X, createPaymentMiddleware as Y, extractPaymentFromHeaders as Z, facilitatorFetch as _, DEFAULT_RETRY_AFTER_SECONDS as a, type FeedbackResponse as a$, isAmbiguousLeaseReason as a0, isReplayableLeaseReason as a1, isSettlementUnconfirmed as a2, lifecycleAuthFromSignature as a3, parseFacilitatorErrorBody as a4, parseRetryAfterSeconds as a5, readFacilitatorError as a6, resolveEnvelopeVersion as a7, toPaymentRequirementsV2 as a8, toResourceInfoV2 as a9, type DiscoveryHealthStatus as aA, type DiscoveryListOptions as aB, type DiscoveryPagination as aC, type DiscoveryRegisterOptions as aD, type DiscoveryResource as aE, type DiscoveryResponse as aF, type DiscoverySource as aG, type DiscoveryStats as aH, type DiscoveryTier as aI, type Dispute as aJ, type DisputeOutcome as aK, ERC8004_CONTRACTS as aL, ERC8004_EXTENSION_ID as aM, ESCROW_CONTRACTS as aN, ESCROW_TIMEOUT_MS as aO, Erc8004Client as aP, type Erc8004ClientOptions as aQ, Erc8004LookupError as aR, type Erc8004Network as aS, EscrowClient as aT, type EscrowClientOptions as aU, type EscrowPayment as aV, type EscrowStateResponse as aW, type EscrowStatus as aX, type FeedbackEntry as aY, type FeedbackParams as aZ, type FeedbackRequest as a_, wagmiLifecycleSigner as aa, type AdvancedAuthorizationResult as ab, AdvancedEscrowClient as ac, type AdvancedEscrowClientOptions as ad, type AdvancedEscrowContracts as ae, type AdvancedEscrowTaskTier as af, type AdvancedPaymentInfo as ag, type AdvancedTransactionResult as ah, type AgentId as ai, type AgentIdentity as aj, type AgentRegistration as ak, type AgentRegistrationFile as al, type AgentService as am, type AtomStats as an, BASE_MAINNET_CONTRACTS as ao, BazaarClient as ap, type BazaarClientOptions as aq, type BazaarDiscoverOptions as ar, type BazaarDiscoverResponse as as, type BazaarRegisterOptions as at, type BazaarResource as au, type CreateEscrowOptions as av, DEPOSIT_LIMIT_USDC as aw, type DiscoveryAccepts as ax, type DiscoveryCuration as ay, type DiscoveryHealth as az, type FacilitatorClientOptions as b, HEALTH_FILTERS as b0, type IdentityByOwnerResponse as b1, type IdentityMetadataResponse as b2, type IdentityTotalSupplyResponse as b3, type LifecycleAuthOptions as b4, MAX_SEARCH_LEN as b5, type MetadataEntryParam as b6, OPERATOR_ABI as b7, OPERATOR_ABI_CREATE3 as b8, PAYMENT_INFO_TYPEHASH as b9, USDC_DOMAIN_NAME as bA, type UnavailableBody as bB, type UnavailableResponse as bC, type VerifyRequest as bD, type VerifyResponse as bE, ZERO_ADDRESS as bF, buildErc8004PaymentRequirements as bG, buildUnavailableResponse as bH, canRefundEscrow as bI, canReleaseEscrow as bJ, carryFailureFields as bK, epochToDate as bL, escrowTimeRemaining as bM, getEscrowContractsByChainId as bN, getEscrowSupportedChainIds as bO, isAlive as bP, isEscrowExpired as bQ, isEscrowSupportedOnChain as bR, isRegisterJobTerminal as bS, parsePaymentHeader as bT, supportsRelayedFeedback as bU, wireNetwork as bV, type PaymentRequirementResolver as ba, type PaymentRequirements as bb, type PaymentRequirementsOptions as bc, type PrepareRelayFeedbackRequest as bd, type PrepareRelayFeedbackResponse as be, type PrepareRelayResponseRequest as bf, type ProofOfPayment as bg, RELAYED_FEEDBACK_NETWORKS as bh, type RefundRequest as bi, type RefundStatus as bj, type RegisterAgentRequest as bk, type RegisterAgentResponse as bl, type RegisterJobResponse as bm, type RegisterJobStatus as bn, RegistrationPendingError as bo, type RelayAuthorizationParams as bp, type ReputationResponse as bq, type ReputationSummary as br, type RequestRefundOptions as bs, type SettleRequest as bt, type SettleResponse as bu, type SettleResponseWithProof as bv, type SubmitRelayFeedbackRequest as bw, type SubmitRelayResponseRequest as bx, TIER_FILTERS as by, TIER_TIMINGS as bz, type FacilitatorErrorInfo as c, type FacilitatorFailureFields as d, type FacilitatorFetchOptions as e, LIFECYCLE_DEFAULT_DEADLINE_SECS as f, LIFECYCLE_DOMAIN_NAME as g, LIFECYCLE_DOMAIN_VERSION as h, LIFECYCLE_MAX_DEADLINE_SECS as i, LIFECYCLE_ORDER_TYPES as j, type LifecycleAction as k, type LifecycleAuth as l, type LifecyclePaymentInfo as m, type LifecycleSigner as n, type LifecycleTypedData as o, type LifecycleTypedDataParams as p, type PaymentAcceptance as q, type PaymentMiddlewareOptions as r, type PaymentPayloadV2 as s, type PaymentRequirementsV2 as t, type ResourceInfoV2 as u, type SettleRequestV2 as v, type VerifyRequestV2 as w, type WagmiLifecycleWalletClient as x, type WriterLeaseReason as y, X402_HEADER_NAMES as z };

package/dist/index.d.mts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, q as CAIP2_IDENTIFIERS, r as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.mjs';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.mjs';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-Z9v4GxOZ.mjs';
-export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, p as PaymentAcceptance, q as PaymentMiddlewareOptions, r as PaymentPayloadV2, s as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, t as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, u as SettleRequestV2, V as VerifiedPaymentState, v as VerifyRequestV2, W as WRITER_LEASE_REASONS, w as WagmiLifecycleWalletClient, x as WriterLeaseReason, X as X402_CORS_HEADERS, y as X402_HEADER_NAMES, z as buildLifecycleAuth, C as buildLifecycleTypedData, E as buildPaymentRequirements, G as buildSettleRequest, I as buildSettleRequestForVersion, J as buildSettleRequestV2, K as buildVerifyRequest, N as buildVerifyRequestForVersion, O as buildVerifyRequestV2, Q as create402Response, T as createHonoMiddleware, U as createPaymentMiddleware, Y as extractPaymentFromHeaders, Z as facilitatorFetch, _ as getCorsHeaders, $ as isAmbiguousLeaseReason, a0 as isReplayableLeaseReason, a1 as isSettlementUnconfirmed, a2 as parseFacilitatorErrorBody, a3 as parseRetryAfterSeconds, a4 as readFacilitatorError, a5 as resolveEnvelopeVersion, a6 as toPaymentRequirementsV2, a7 as toResourceInfoV2, a8 as wagmiLifecycleSigner } from './index-De03nksW.mjs';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-BHfYxpzI.mjs';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { A as AlgorandPaymentPayload, q as CAIP2_IDENTIFIERS, r as CAIP2_TO_CHAI
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.js';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.js';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-C-KmORG9.js';
-export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, p as PaymentAcceptance, q as PaymentMiddlewareOptions, r as PaymentPayloadV2, s as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, t as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, u as SettleRequestV2, V as VerifiedPaymentState, v as VerifyRequestV2, W as WRITER_LEASE_REASONS, w as WagmiLifecycleWalletClient, x as WriterLeaseReason, X as X402_CORS_HEADERS, y as X402_HEADER_NAMES, z as buildLifecycleAuth, C as buildLifecycleTypedData, E as buildPaymentRequirements, G as buildSettleRequest, I as buildSettleRequestForVersion, J as buildSettleRequestV2, K as buildVerifyRequest, N as buildVerifyRequestForVersion, O as buildVerifyRequestV2, Q as create402Response, T as createHonoMiddleware, U as createPaymentMiddleware, Y as extractPaymentFromHeaders, Z as facilitatorFetch, _ as getCorsHeaders, $ as isAmbiguousLeaseReason, a0 as isReplayableLeaseReason, a1 as isSettlementUnconfirmed, a2 as parseFacilitatorErrorBody, a3 as parseRetryAfterSeconds, a4 as readFacilitatorError, a5 as resolveEnvelopeVersion, a6 as toPaymentRequirementsV2, a7 as toResourceInfoV2, a8 as wagmiLifecycleSigner } from './index-4_LWWlyF.js';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-D67eNxY8.js';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.js

@@ -4556,6 +4556,14 @@ function randomNonce() {
   }
   return ethers.ethers.hexlify(ethers.ethers.randomBytes(32));
 }
+function resolveOrderTiming(params) {
+  const nowSec = params.now === void 0 ? Math.floor(Date.now() / 1e3) : Math.floor(params.now);
+  return {
+    nowSec,
+    deadline: params.deadline === void 0 ? nowSec + LIFECYCLE_DEFAULT_DEADLINE_SECS : Math.floor(params.deadline),
+    nonce: params.nonce === void 0 ? randomNonce() : params.nonce
+  };
+}
 function toUintString(value, field) {
   let n;
   try {
@@ -4569,7 +4577,8 @@ function toUintString(value, field) {
   return n.toString();
 }
 function buildLifecycleTypedData(params) {
-  const { action, paymentInfo, payer, amount, chainId, deadline, nonce } = params;
+  const { action, paymentInfo, payer, amount, chainId } = params;
+  const { deadline, nonce } = resolveOrderTiming(params);
   if (!LIFECYCLE_ACTIONS.includes(action)) {
     throw new exports.X402Error(
       `unknown lifecycle action ${String(action)}; the facilitator only signs ${LIFECYCLE_ACTIONS.join(", ")}`,
@@ -4628,10 +4637,8 @@ function buildLifecycleTypedData(params) {
   };
 }
 async function buildLifecycleAuth(params) {
-  const { wallet, deadline, nonce, now, ...rest } = params;
-  const nowSec = now === void 0 ? Math.floor(Date.now() / 1e3) : Math.floor(now);
-  const dl = deadline === void 0 ? nowSec + LIFECYCLE_DEFAULT_DEADLINE_SECS : Math.floor(deadline);
-  const nonceHex = nonce === void 0 ? randomNonce() : nonce;
+  const { wallet, ...rest } = params;
+  const { nowSec, deadline: dl, nonce: nonceHex } = resolveOrderTiming(params);
   if (dl < nowSec) {
     throw new exports.X402Error(
       `deadline ${dl} is in the past (now ${nowSec}): the facilitator discards it as \`expired\``,
@@ -4653,6 +4660,54 @@ async function buildLifecycleAuth(params) {
     signature: signed.signature
   };
 }
+function lifecycleAuthFromSignature(typedData, signature, signer) {
+  const td = typedData ?? {};
+  const message = td.message ?? {};
+  if (td.primaryType !== "LifecycleOrder") {
+    throw new exports.X402Error(
+      `typedData.primaryType must be LifecycleOrder, got ${String(td.primaryType)}: pass the document buildLifecycleTypedData returned, unmodified`,
+      "INVALID_CONFIG"
+    );
+  }
+  const domain = td.domain ?? {};
+  if (domain.name !== LIFECYCLE_DOMAIN_NAME || String(domain.version) !== LIFECYCLE_DOMAIN_VERSION) {
+    throw new exports.X402Error(
+      `typedData.domain must be ${LIFECYCLE_DOMAIN_NAME} v${LIFECYCLE_DOMAIN_VERSION}, got ${String(domain.name)} v${String(domain.version)}`,
+      "INVALID_CONFIG"
+    );
+  }
+  if (message.deadline === void 0 || message.nonce === void 0) {
+    throw new exports.X402Error(
+      "typedData.message carries no deadline/nonce: the wire block reads them from the document that was signed, it does not invent them",
+      "INVALID_CONFIG"
+    );
+  }
+  const deadlineBig = BigInt(toUintString(message.deadline, "typedData.message.deadline"));
+  if (deadlineBig > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new exports.X402Error(
+      `typedData.message.deadline ${deadlineBig} does not fit a JSON number`,
+      "INVALID_CONFIG"
+    );
+  }
+  if (typeof signature !== "string" || !/^0x[0-9a-fA-F]+$/.test(signature) || signature.length % 2 !== 0) {
+    throw new exports.X402Error(
+      `signature must be 0x-prefixed hex, got ${String(signature)}`,
+      "INVALID_CONFIG"
+    );
+  }
+  let checksummed;
+  try {
+    checksummed = ethers.ethers.getAddress(signer);
+  } catch {
+    throw new exports.X402Error(`signer is not an EVM address: ${String(signer)}`, "INVALID_CONFIG");
+  }
+  return {
+    signer: checksummed,
+    deadline: Number(deadlineBig),
+    nonce: nonceToBytes32(message.nonce),
+    signature
+  };
+}
 function wagmiLifecycleSigner(walletClient, address) {
   const account = address ?? walletClient.account?.address;
   if (!account) {
@@ -4679,6 +4734,7 @@ function wagmiLifecycleSigner(walletClient, address) {
 
 // src/backend/index.ts
 init_utils();
+init_types();
 init_chains();
 
 // src/backend/facilitator-error.ts
@@ -5885,6 +5941,7 @@ exports.isSettlementUnconfirmed = isSettlementUnconfirmed;
 exports.isSuiChain = isSuiChain;
 exports.isTokenSupported = isTokenSupported;
 exports.isXRPLChain = isXRPLChain;
+exports.lifecycleAuthFromSignature = lifecycleAuthFromSignature;
 exports.matchesFilters = matchesFilters;
 exports.needsAccountWrap = needsAccountWrap;
 exports.parseEvidenceHeader = parseEvidenceHeader;