uvd-x402-sdk 2.86.0 → 2.87.0

package/dist/index.mjs

@@ -4554,6 +4554,14 @@ function randomNonce() {
   }
   return ethers.hexlify(ethers.randomBytes(32));
 }
+function resolveOrderTiming(params) {
+  const nowSec = params.now === void 0 ? Math.floor(Date.now() / 1e3) : Math.floor(params.now);
+  return {
+    nowSec,
+    deadline: params.deadline === void 0 ? nowSec + LIFECYCLE_DEFAULT_DEADLINE_SECS : Math.floor(params.deadline),
+    nonce: params.nonce === void 0 ? randomNonce() : params.nonce
+  };
+}
 function toUintString(value, field) {
   let n;
   try {
@@ -4567,7 +4575,8 @@ function toUintString(value, field) {
   return n.toString();
 }
 function buildLifecycleTypedData(params) {
-  const { action, paymentInfo, payer, amount, chainId, deadline, nonce } = params;
+  const { action, paymentInfo, payer, amount, chainId } = params;
+  const { deadline, nonce } = resolveOrderTiming(params);
   if (!LIFECYCLE_ACTIONS.includes(action)) {
     throw new X402Error(
       `unknown lifecycle action ${String(action)}; the facilitator only signs ${LIFECYCLE_ACTIONS.join(", ")}`,
@@ -4626,10 +4635,8 @@ function buildLifecycleTypedData(params) {
   };
 }
 async function buildLifecycleAuth(params) {
-  const { wallet, deadline, nonce, now, ...rest } = params;
-  const nowSec = now === void 0 ? Math.floor(Date.now() / 1e3) : Math.floor(now);
-  const dl = deadline === void 0 ? nowSec + LIFECYCLE_DEFAULT_DEADLINE_SECS : Math.floor(deadline);
-  const nonceHex = nonce === void 0 ? randomNonce() : nonce;
+  const { wallet, ...rest } = params;
+  const { nowSec, deadline: dl, nonce: nonceHex } = resolveOrderTiming(params);
   if (dl < nowSec) {
     throw new X402Error(
       `deadline ${dl} is in the past (now ${nowSec}): the facilitator discards it as \`expired\``,
@@ -4651,6 +4658,54 @@ async function buildLifecycleAuth(params) {
     signature: signed.signature
   };
 }
+function lifecycleAuthFromSignature(typedData, signature, signer) {
+  const td = typedData ?? {};
+  const message = td.message ?? {};
+  if (td.primaryType !== "LifecycleOrder") {
+    throw new X402Error(
+      `typedData.primaryType must be LifecycleOrder, got ${String(td.primaryType)}: pass the document buildLifecycleTypedData returned, unmodified`,
+      "INVALID_CONFIG"
+    );
+  }
+  const domain = td.domain ?? {};
+  if (domain.name !== LIFECYCLE_DOMAIN_NAME || String(domain.version) !== LIFECYCLE_DOMAIN_VERSION) {
+    throw new X402Error(
+      `typedData.domain must be ${LIFECYCLE_DOMAIN_NAME} v${LIFECYCLE_DOMAIN_VERSION}, got ${String(domain.name)} v${String(domain.version)}`,
+      "INVALID_CONFIG"
+    );
+  }
+  if (message.deadline === void 0 || message.nonce === void 0) {
+    throw new X402Error(
+      "typedData.message carries no deadline/nonce: the wire block reads them from the document that was signed, it does not invent them",
+      "INVALID_CONFIG"
+    );
+  }
+  const deadlineBig = BigInt(toUintString(message.deadline, "typedData.message.deadline"));
+  if (deadlineBig > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new X402Error(
+      `typedData.message.deadline ${deadlineBig} does not fit a JSON number`,
+      "INVALID_CONFIG"
+    );
+  }
+  if (typeof signature !== "string" || !/^0x[0-9a-fA-F]+$/.test(signature) || signature.length % 2 !== 0) {
+    throw new X402Error(
+      `signature must be 0x-prefixed hex, got ${String(signature)}`,
+      "INVALID_CONFIG"
+    );
+  }
+  let checksummed;
+  try {
+    checksummed = ethers.getAddress(signer);
+  } catch {
+    throw new X402Error(`signer is not an EVM address: ${String(signer)}`, "INVALID_CONFIG");
+  }
+  return {
+    signer: checksummed,
+    deadline: Number(deadlineBig),
+    nonce: nonceToBytes32(message.nonce),
+    signature
+  };
+}
 function wagmiLifecycleSigner(walletClient, address) {
   const account = address ?? walletClient.account?.address;
   if (!account) {
@@ -4677,6 +4732,7 @@ function wagmiLifecycleSigner(walletClient, address) {
 
 // src/backend/index.ts
 init_utils();
+init_types();
 init_chains();
 
 // src/backend/facilitator-error.ts
@@ -5769,6 +5825,6 @@ var ESCROW_TIMEOUT_MS = {
   // Monad: 90s
 };
 
-export { AMBIGUOUS_LEASE_REASONS, ANCHOR_MAX_REQUEST_BYTES, CAIP2_IDENTIFIERS, CAIP2_TO_CHAIN, ContentHashMismatch, DEFAULT_CHAIN, DEFAULT_CONFIG, DEFAULT_FACILITATOR_RETRIES, DEFAULT_FACILITATOR_URL, DEFAULT_MAX_FEE_BPS, DEFAULT_MIN_FEE_BPS, DEFAULT_PAYMENT_HEADER, DEFAULT_RETRY_AFTER_SECONDS, DELEGATE_PREFIX, DX402Error, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, EnvKeyAdapter, EvidenceSkipped, FACILITATOR_ADDRESSES, FacilitatorClient, KEEPALIVE_INTERVAL_MS, LIFECYCLE_ACTIONS, LIFECYCLE_DEFAULT_DEADLINE_SECS, LIFECYCLE_DOMAIN_NAME, LIFECYCLE_DOMAIN_VERSION, LIFECYCLE_MAX_DEADLINE_SECS, LIFECYCLE_ORDER_TYPES, MAX_PROTOCOL_FEE_BPS, MAX_RETRY_AFTER_SECONDS, OPERATOR_FEE_BPS, OWSWalletAdapter, PAYMENT_HEADER_NAMES, REPLAYABLE_LEASE_REASONS, SETTLEMENT_UNCONFIRMED, SMA_WRAP_TARGETS, SSEParser, SUPPORTED_CHAINS, TrafficStreamError, WRITER_LEASE_REASONS, X402Client, X402Error, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, anchorDigest, anchorEvidence, availableBackends, buildEscrowPreAuth, buildLifecycleAuth, buildLifecycleTypedData, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildSignatureBase, buildSignatureParams, buildTokenMetadata, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, caip2ToChain, chainToCAIP2, computeEscrowNonce, contentHash, convertX402Header, create402Response, createHonoMiddleware, createPaymentHeaders, createPaymentMiddleware, createSignedFetch, createX402Header, createX402V1Header, createX402V2Header, decodeBase64Utf8, decodeX402Header, delegateTarget, dereferencePointer, detectX402Version, paymentId as dx402PaymentId, ed25519ToX25519, encodeBase64Json, encodeBase64Utf8, encodeX402Header, evidenceFromHeaders, evidenceHeader, extractPaymentFromHeaders, facilitatorFetch, fetchNonce, generatePaymentOptions, getAlgorandChains, getChainById, getChainByName, getChainsByNetworkType, getChainsByToken, getCorsHeaders, getEVMChainIds, getEnabledChains, getExplorerAddressUrl, getExplorerTxUrl, getFacilitatorAddress, getNetworkType, getPaymentHeader, getSVMChains, getSuiChains, getSupportedTokens, getTokenByAddress, getTokenConfig, getXRPLChains, isAlgorandChain, isAmbiguousLeaseReason, isCAIP2Format, isChainSupported, isDelegated, isEndToEnd, isReplayableLeaseReason, isSVMChain, isSettlementUnconfirmed, isSuiChain, isTokenSupported, isXRPLChain, matchesFilters, needsAccountWrap, parseEvidenceHeader, parseFacilitatorErrorBody, parseNetworkIdentifier, parseRetryAfterSeconds, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, paymentChallengeFrom, readFacilitatorError, recoverEvidence, replaySafeTypedData, resolveDelegation, resolveEnvelopeVersion, rpcDelegationResolver, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, toPaymentRequirementsV2, toResourceInfoV2, unseal, validateAmount, validateRecipient, wagmiLifecycleSigner, wrapSignature };
+export { AMBIGUOUS_LEASE_REASONS, ANCHOR_MAX_REQUEST_BYTES, CAIP2_IDENTIFIERS, CAIP2_TO_CHAIN, ContentHashMismatch, DEFAULT_CHAIN, DEFAULT_CONFIG, DEFAULT_FACILITATOR_RETRIES, DEFAULT_FACILITATOR_URL, DEFAULT_MAX_FEE_BPS, DEFAULT_MIN_FEE_BPS, DEFAULT_PAYMENT_HEADER, DEFAULT_RETRY_AFTER_SECONDS, DELEGATE_PREFIX, DX402Error, ESCROW_DEPOSIT_LIMIT_USD, ESCROW_TIER_WINDOWS, EVENT_KINDS, EVIDENCE_HEADER, EnvKeyAdapter, EvidenceSkipped, FACILITATOR_ADDRESSES, FacilitatorClient, KEEPALIVE_INTERVAL_MS, LIFECYCLE_ACTIONS, LIFECYCLE_DEFAULT_DEADLINE_SECS, LIFECYCLE_DOMAIN_NAME, LIFECYCLE_DOMAIN_VERSION, LIFECYCLE_MAX_DEADLINE_SECS, LIFECYCLE_ORDER_TYPES, MAX_PROTOCOL_FEE_BPS, MAX_RETRY_AFTER_SECONDS, OPERATOR_FEE_BPS, OWSWalletAdapter, PAYMENT_HEADER_NAMES, REPLAYABLE_LEASE_REASONS, SETTLEMENT_UNCONFIRMED, SMA_WRAP_TARGETS, SSEParser, SUPPORTED_CHAINS, TrafficStreamError, WRITER_LEASE_REASONS, X402Client, X402Error, X402_CORS_HEADERS, X402_HEADER_NAMES, ZERO_ADDRESS, anchorDigest, anchorEvidence, availableBackends, buildEscrowPreAuth, buildLifecycleAuth, buildLifecycleTypedData, buildPaymentRequirements, buildSettleRequest, buildSettleRequestForVersion, buildSettleRequestV2, buildSignatureBase, buildSignatureParams, buildTokenMetadata, buildVerifyRequest, buildVerifyRequestForVersion, buildVerifyRequestV2, caip2ToChain, chainToCAIP2, computeEscrowNonce, contentHash, convertX402Header, create402Response, createHonoMiddleware, createPaymentHeaders, createPaymentMiddleware, createSignedFetch, createX402Header, createX402V1Header, createX402V2Header, decodeBase64Utf8, decodeX402Header, delegateTarget, dereferencePointer, detectX402Version, paymentId as dx402PaymentId, ed25519ToX25519, encodeBase64Json, encodeBase64Utf8, encodeX402Header, evidenceFromHeaders, evidenceHeader, extractPaymentFromHeaders, facilitatorFetch, fetchNonce, generatePaymentOptions, getAlgorandChains, getChainById, getChainByName, getChainsByNetworkType, getChainsByToken, getCorsHeaders, getEVMChainIds, getEnabledChains, getExplorerAddressUrl, getExplorerTxUrl, getFacilitatorAddress, getNetworkType, getPaymentHeader, getSVMChains, getSuiChains, getSupportedTokens, getTokenByAddress, getTokenConfig, getXRPLChains, isAlgorandChain, isAmbiguousLeaseReason, isCAIP2Format, isChainSupported, isDelegated, isEndToEnd, isReplayableLeaseReason, isSVMChain, isSettlementUnconfirmed, isSuiChain, isTokenSupported, isXRPLChain, lifecycleAuthFromSignature, matchesFilters, needsAccountWrap, parseEvidenceHeader, parseFacilitatorErrorBody, parseNetworkIdentifier, parseRetryAfterSeconds, parseSealed, parseTrafficEvent, payerKeyFromEvmSignature, payerKeyFromSolanaAddress, paymentChallengeFrom, readFacilitatorError, recoverEvidence, replaySafeTypedData, resolveDelegation, resolveEnvelopeVersion, rpcDelegationResolver, sealEvidence, sealEvidenceTo, sealedRoles, sellerDigestFor, signAnchorEd25519, signAnchorEvm, signRequest, signRequestWithSigner, signRequestWithWallet, streamTrafficEvents, toPaymentRequirementsV2, toResourceInfoV2, unseal, validateAmount, validateRecipient, wagmiLifecycleSigner, wrapSignature };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map