uvd-x402-sdk 2.89.0 → 2.91.0

package/dist/{index-13ZUDF7c.d.mts → index-DAC3DRdT.d.mts}

@@ -1,4 +1,4 @@
-import { b as X402ClientConfig, e as PurchasePolicy, P as PaymentInfo, a as PaymentResult, f as X402FetchOptions, d as WalletState, C as ChainConfig, g as X402Event, h as X402EventHandler, N as NetworkType, T as TokenType, i as TokenConfig } from './index-BWN0Haa0.mjs';
+import { b as X402ClientConfig, e as PurchasePolicy, P as PaymentInfo, a as PaymentResult, f as X402FetchOptions, d as WalletState, C as ChainConfig, g as X402Event, h as X402EventHandler, N as NetworkType, T as TokenType, i as TokenConfig } from './index-DbauIMV2.mjs';
 
 /**
  * uvd-x402-sdk - Main Client

package/dist/{index-B5B9EK3x.d.ts → index-DRSEcZ36.d.ts}

@@ -1,4 +1,4 @@
-import { b as X402ClientConfig, e as PurchasePolicy, P as PaymentInfo, a as PaymentResult, f as X402FetchOptions, d as WalletState, C as ChainConfig, g as X402Event, h as X402EventHandler, N as NetworkType, T as TokenType, i as TokenConfig } from './index-BWN0Haa0.js';
+import { b as X402ClientConfig, e as PurchasePolicy, P as PaymentInfo, a as PaymentResult, f as X402FetchOptions, d as WalletState, C as ChainConfig, g as X402Event, h as X402EventHandler, N as NetworkType, T as TokenType, i as TokenConfig } from './index-DbauIMV2.js';
 
 /**
  * uvd-x402-sdk - Main Client

package/dist/{index-CAJg-_cr.d.mts → index-DRk6i654.d.mts}

@@ -1,5 +1,5 @@
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.mjs';
-import { X as X402Version, j as X402Header, k as X402PayloadData } from './index-BWN0Haa0.mjs';
+import { X as X402Version, j as X402Header, k as X402PayloadData } from './index-DbauIMV2.mjs';
 
 /**
  * uvd-x402-sdk - Signed lifecycle orders for `release` / `refundInEscrow`.

package/dist/{index-BWN0Haa0.d.mts → index-DbauIMV2.d.mts}

@@ -689,6 +689,26 @@ interface PaymentInfo {
      * decides, exactly as before.
      */
     x402Version?: X402Version;
+    /**
+     * Seconds this EIP-3009 authorization stays settleable
+     * (`validBefore = now + validitySeconds`).
+     *
+     * Set it when the seller settles **async** -- verify, hand over the resource,
+     * settle afterwards -- and needs the authorization alive for longer than the
+     * default. Left undefined, `X402ClientConfig.validitySeconds` decides, and
+     * failing that `DEFAULT_VALIDITY_SECONDS` (300 s, the timeout this SDK's own
+     * seller side announces by default). `X402Client.fetch()` fills it from the
+     * seller's `maxTimeoutSeconds` when the 402 declares one.
+     *
+     * Must be a whole number of seconds between 1 and `MAX_VALIDITY_SECONDS`
+     * (3600); anything else is refused with `INVALID_CONFIG` before anything is
+     * signed. The ceiling is here because this type is shaped like a parsed 402:
+     * a caller that hands a seller's response straight to `createPayment` would
+     * otherwise let the SELLER decide how long the payer's authorization stays
+     * claimable. The facilitator also keeps a 6 s clock-skew grace, so the payer
+     * really has `validitySeconds - 6` to sign.
+     */
+    validitySeconds?: number;
 }
 /**
  * One payment option read off a resource's `402`, normalised.
@@ -711,6 +731,15 @@ interface X402PaymentOffer {
     decimals: number;
     /** Recipient of the payment. */
     payTo: string;
+    /**
+     * The seller's `maxTimeoutSeconds`, when its 402 entry declared a finite number.
+     *
+     * `X402Client.fetch()` signs this window -- clamped to `1..MAX_VALIDITY_SECONDS`
+     * -- instead of the client's own, because the seller is the one party that
+     * knows how long its settlement takes. Undefined when the entry declared none,
+     * or declared something that is not a number.
+     */
+    maxTimeoutSeconds?: number;
     /** The accept object verbatim -- echoed back for v2. */
     raw: Record<string, unknown>;
 }
@@ -1181,6 +1210,18 @@ interface X402ClientConfig {
      * stays byte-identical to previous versions.
      */
     includeTokenMetadata?: boolean;
+    /**
+     * Seconds every EIP-3009 authorization this client signs stays settleable
+     * (`validBefore = now + validitySeconds`).
+     *
+     * The per-payment {@link PaymentInfo.validitySeconds} overrides it; with
+     * neither, `DEFAULT_VALIDITY_SECONDS` (300 s) applies, and `MAX_VALIDITY_SECONDS`
+     * (3600 s) is the ceiling for both. Until 2.91.0 this
+     * was not configurable at all: the window was 300 s on Base and 60 s on every
+     * other EVM network, decided by the payer's SDK, which is exactly the party
+     * that does not know how long the seller's settlement takes.
+     */
+    validitySeconds?: number;
 }
 /**
  * Default configuration values

package/dist/{index-BWN0Haa0.d.ts → index-DbauIMV2.d.ts}

@@ -689,6 +689,26 @@ interface PaymentInfo {
      * decides, exactly as before.
      */
     x402Version?: X402Version;
+    /**
+     * Seconds this EIP-3009 authorization stays settleable
+     * (`validBefore = now + validitySeconds`).
+     *
+     * Set it when the seller settles **async** -- verify, hand over the resource,
+     * settle afterwards -- and needs the authorization alive for longer than the
+     * default. Left undefined, `X402ClientConfig.validitySeconds` decides, and
+     * failing that `DEFAULT_VALIDITY_SECONDS` (300 s, the timeout this SDK's own
+     * seller side announces by default). `X402Client.fetch()` fills it from the
+     * seller's `maxTimeoutSeconds` when the 402 declares one.
+     *
+     * Must be a whole number of seconds between 1 and `MAX_VALIDITY_SECONDS`
+     * (3600); anything else is refused with `INVALID_CONFIG` before anything is
+     * signed. The ceiling is here because this type is shaped like a parsed 402:
+     * a caller that hands a seller's response straight to `createPayment` would
+     * otherwise let the SELLER decide how long the payer's authorization stays
+     * claimable. The facilitator also keeps a 6 s clock-skew grace, so the payer
+     * really has `validitySeconds - 6` to sign.
+     */
+    validitySeconds?: number;
 }
 /**
  * One payment option read off a resource's `402`, normalised.
@@ -711,6 +731,15 @@ interface X402PaymentOffer {
     decimals: number;
     /** Recipient of the payment. */
     payTo: string;
+    /**
+     * The seller's `maxTimeoutSeconds`, when its 402 entry declared a finite number.
+     *
+     * `X402Client.fetch()` signs this window -- clamped to `1..MAX_VALIDITY_SECONDS`
+     * -- instead of the client's own, because the seller is the one party that
+     * knows how long its settlement takes. Undefined when the entry declared none,
+     * or declared something that is not a number.
+     */
+    maxTimeoutSeconds?: number;
     /** The accept object verbatim -- echoed back for v2. */
     raw: Record<string, unknown>;
 }
@@ -1181,6 +1210,18 @@ interface X402ClientConfig {
      * stays byte-identical to previous versions.
      */
     includeTokenMetadata?: boolean;
+    /**
+     * Seconds every EIP-3009 authorization this client signs stays settleable
+     * (`validBefore = now + validitySeconds`).
+     *
+     * The per-payment {@link PaymentInfo.validitySeconds} overrides it; with
+     * neither, `DEFAULT_VALIDITY_SECONDS` (300 s) applies, and `MAX_VALIDITY_SECONDS`
+     * (3600 s) is the ceiling for both. Until 2.91.0 this
+     * was not configurable at all: the window was 300 s on Base and 60 s on every
+     * other EVM network, decided by the payer's SDK, which is exactly the party
+     * that does not know how long the seller's settlement takes.
+     */
+    validitySeconds?: number;
 }
 /**
  * Default configuration values

package/dist/{index-Cd1Mpznb.d.ts → index-s6ot_Mu-.d.ts}

@@ -1,5 +1,5 @@
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.js';
-import { X as X402Version, j as X402Header, k as X402PayloadData } from './index-BWN0Haa0.js';
+import { X as X402Version, j as X402Header, k as X402PayloadData } from './index-DbauIMV2.js';
 
 /**
  * uvd-x402-sdk - Signed lifecycle orders for `release` / `refundInEscrow`.

package/dist/index.d.mts

@@ -1,10 +1,10 @@
-export { D as DEFAULT_CHAIN, a as DEFAULT_FACILITATOR_URL, S as SUPPORTED_CHAINS, X as X402Client, b as getAlgorandChains, c as getChainById, g as getChainByName, d as getChainsByNetworkType, e as getChainsByToken, f as getEVMChainIds, h as getEnabledChains, i as getExplorerAddressUrl, j as getExplorerTxUrl, k as getNetworkType, l as getSVMChains, m as getSuiChains, n as getSupportedTokens, o as getTokenByAddress, p as getTokenConfig, q as getXRPLChains, r as isAlgorandChain, s as isChainSupported, t as isSVMChain, u as isSuiChain, v as isTokenSupported, w as isXRPLChain } from './index-13ZUDF7c.mjs';
-export { A as AdvertisedQuote, r as AlgorandPaymentPayload, s as CAIP2_IDENTIFIERS, t as CAIP2_TO_CHAIN, C as ChainConfig, D as DEFAULT_CONFIG, u as DecideOptions, E as EIP712Domain, v as EIP712Types, w as EVMPaymentPayload, x as EvaluateOptions, M as MultiPaymentConfig, y as NEARPaymentPayload, z as NativeCurrency, c as NetworkBalance, N as NetworkType, O as OFFER_VALIDITY_EXTENSION, q as PaymentHeaders, P as PaymentInfo, B as PaymentPayload, F as PaymentRequest, a as PaymentResult, o as PaymentTokenMetadata, G as PolicyApproval, H as PolicyAsset, I as PolicyDecision, J as PolicyRefusal, K as PolicyRefusalCode, L as PolicyRefusedError, e as PurchasePolicy, Q as QuoteComparison, R as ReadChallenge, S as SolanaPaymentPayload, U as StellarPaymentPayload, V as SuiPaymentPayload, i as TokenConfig, T as TokenType, Y as USDCConfig, W as WalletAdapter, d as WalletState, Z as X402AlgorandPayload, b as X402ClientConfig, _ as X402EVMPayload, $ as X402Error, a0 as X402ErrorCode, g as X402Event, a1 as X402EventData, h as X402EventHandler, f as X402FetchOptions, j as X402Header, p as X402HeaderName, l as X402HeaderV1, n as X402HeaderV2, a2 as X402NEARPayload, k as X402PayloadData, a3 as X402PaymentOffer, m as X402PaymentOption, a4 as X402Scheme, a5 as X402SettlementAccountPayload, a6 as X402SolanaPayload, a7 as X402StellarPayload, a8 as X402SuiPayload, X as X402Version, a9 as X402XRPLPayload, aa as XRPLPaymentPayload, ab as assetKey, ac as canonicalRecipient, ad as decideOnChallenge, ae as noReadableOffer, af as offerAsset, ag as offerValidUntil } from './index-BWN0Haa0.mjs';
-export { D as DEFAULT_PAYMENT_HEADER, P as PAYMENT_HEADER_NAMES, b as buildTokenMetadata, c as caip2ToChain, a as chainToCAIP2, d as convertX402Header, e as createPaymentHeaders, f as createX402Header, g as createX402V1Header, h as createX402V2Header, i as decodeBase64Utf8, j as decodeX402Header, k as detectX402Version, l as encodeBase64Json, m as encodeBase64Utf8, n as encodeX402Header, o as generatePaymentOptions, p as getPaymentHeader, q as isCAIP2Format, r as parseNetworkIdentifier, s as paymentChallengeFrom, v as validateAmount, t as validateRecipient } from './validation-B95g0MqC.mjs';
+export { D as DEFAULT_CHAIN, a as DEFAULT_FACILITATOR_URL, S as SUPPORTED_CHAINS, X as X402Client, b as getAlgorandChains, c as getChainById, g as getChainByName, d as getChainsByNetworkType, e as getChainsByToken, f as getEVMChainIds, h as getEnabledChains, i as getExplorerAddressUrl, j as getExplorerTxUrl, k as getNetworkType, l as getSVMChains, m as getSuiChains, n as getSupportedTokens, o as getTokenByAddress, p as getTokenConfig, q as getXRPLChains, r as isAlgorandChain, s as isChainSupported, t as isSVMChain, u as isSuiChain, v as isTokenSupported, w as isXRPLChain } from './index-DAC3DRdT.mjs';
+export { A as AdvertisedQuote, r as AlgorandPaymentPayload, s as CAIP2_IDENTIFIERS, t as CAIP2_TO_CHAIN, C as ChainConfig, D as DEFAULT_CONFIG, u as DecideOptions, E as EIP712Domain, v as EIP712Types, w as EVMPaymentPayload, x as EvaluateOptions, M as MultiPaymentConfig, y as NEARPaymentPayload, z as NativeCurrency, c as NetworkBalance, N as NetworkType, O as OFFER_VALIDITY_EXTENSION, q as PaymentHeaders, P as PaymentInfo, B as PaymentPayload, F as PaymentRequest, a as PaymentResult, o as PaymentTokenMetadata, G as PolicyApproval, H as PolicyAsset, I as PolicyDecision, J as PolicyRefusal, K as PolicyRefusalCode, L as PolicyRefusedError, e as PurchasePolicy, Q as QuoteComparison, R as ReadChallenge, S as SolanaPaymentPayload, U as StellarPaymentPayload, V as SuiPaymentPayload, i as TokenConfig, T as TokenType, Y as USDCConfig, W as WalletAdapter, d as WalletState, Z as X402AlgorandPayload, b as X402ClientConfig, _ as X402EVMPayload, $ as X402Error, a0 as X402ErrorCode, g as X402Event, a1 as X402EventData, h as X402EventHandler, f as X402FetchOptions, j as X402Header, p as X402HeaderName, l as X402HeaderV1, n as X402HeaderV2, a2 as X402NEARPayload, k as X402PayloadData, a3 as X402PaymentOffer, m as X402PaymentOption, a4 as X402Scheme, a5 as X402SettlementAccountPayload, a6 as X402SolanaPayload, a7 as X402StellarPayload, a8 as X402SuiPayload, X as X402Version, a9 as X402XRPLPayload, aa as XRPLPaymentPayload, ab as assetKey, ac as canonicalRecipient, ad as decideOnChallenge, ae as noReadableOffer, af as offerAsset, ag as offerValidUntil } from './index-DbauIMV2.mjs';
+export { D as DEFAULT_PAYMENT_HEADER, a as DEFAULT_VALIDITY_SECONDS, M as MAX_VALIDITY_SECONDS, P as PAYMENT_HEADER_NAMES, b as buildTokenMetadata, c as caip2ToChain, d as chainToCAIP2, e as clampValiditySeconds, f as convertX402Header, g as createPaymentHeaders, h as createX402Header, i as createX402V1Header, j as createX402V2Header, k as decodeBase64Utf8, l as decodeX402Header, m as detectX402Version, n as encodeBase64Json, o as encodeBase64Utf8, p as encodeX402Header, q as generatePaymentOptions, r as getPaymentHeader, s as isCAIP2Format, t as parseNetworkIdentifier, u as paymentChallengeFrom, v as resolveValiditySeconds, w as validateAmount, x as validateRecipient } from './validity-BTMBMmuj.mjs';
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.mjs';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.mjs';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-Z9v4GxOZ.mjs';
-export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-CAJg-_cr.mjs';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-DRk6i654.mjs';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-export { D as DEFAULT_CHAIN, a as DEFAULT_FACILITATOR_URL, S as SUPPORTED_CHAINS, X as X402Client, b as getAlgorandChains, c as getChainById, g as getChainByName, d as getChainsByNetworkType, e as getChainsByToken, f as getEVMChainIds, h as getEnabledChains, i as getExplorerAddressUrl, j as getExplorerTxUrl, k as getNetworkType, l as getSVMChains, m as getSuiChains, n as getSupportedTokens, o as getTokenByAddress, p as getTokenConfig, q as getXRPLChains, r as isAlgorandChain, s as isChainSupported, t as isSVMChain, u as isSuiChain, v as isTokenSupported, w as isXRPLChain } from './index-B5B9EK3x.js';
-export { A as AdvertisedQuote, r as AlgorandPaymentPayload, s as CAIP2_IDENTIFIERS, t as CAIP2_TO_CHAIN, C as ChainConfig, D as DEFAULT_CONFIG, u as DecideOptions, E as EIP712Domain, v as EIP712Types, w as EVMPaymentPayload, x as EvaluateOptions, M as MultiPaymentConfig, y as NEARPaymentPayload, z as NativeCurrency, c as NetworkBalance, N as NetworkType, O as OFFER_VALIDITY_EXTENSION, q as PaymentHeaders, P as PaymentInfo, B as PaymentPayload, F as PaymentRequest, a as PaymentResult, o as PaymentTokenMetadata, G as PolicyApproval, H as PolicyAsset, I as PolicyDecision, J as PolicyRefusal, K as PolicyRefusalCode, L as PolicyRefusedError, e as PurchasePolicy, Q as QuoteComparison, R as ReadChallenge, S as SolanaPaymentPayload, U as StellarPaymentPayload, V as SuiPaymentPayload, i as TokenConfig, T as TokenType, Y as USDCConfig, W as WalletAdapter, d as WalletState, Z as X402AlgorandPayload, b as X402ClientConfig, _ as X402EVMPayload, $ as X402Error, a0 as X402ErrorCode, g as X402Event, a1 as X402EventData, h as X402EventHandler, f as X402FetchOptions, j as X402Header, p as X402HeaderName, l as X402HeaderV1, n as X402HeaderV2, a2 as X402NEARPayload, k as X402PayloadData, a3 as X402PaymentOffer, m as X402PaymentOption, a4 as X402Scheme, a5 as X402SettlementAccountPayload, a6 as X402SolanaPayload, a7 as X402StellarPayload, a8 as X402SuiPayload, X as X402Version, a9 as X402XRPLPayload, aa as XRPLPaymentPayload, ab as assetKey, ac as canonicalRecipient, ad as decideOnChallenge, ae as noReadableOffer, af as offerAsset, ag as offerValidUntil } from './index-BWN0Haa0.js';
-export { D as DEFAULT_PAYMENT_HEADER, P as PAYMENT_HEADER_NAMES, b as buildTokenMetadata, c as caip2ToChain, a as chainToCAIP2, d as convertX402Header, e as createPaymentHeaders, f as createX402Header, g as createX402V1Header, h as createX402V2Header, i as decodeBase64Utf8, j as decodeX402Header, k as detectX402Version, l as encodeBase64Json, m as encodeBase64Utf8, n as encodeX402Header, o as generatePaymentOptions, p as getPaymentHeader, q as isCAIP2Format, r as parseNetworkIdentifier, s as paymentChallengeFrom, v as validateAmount, t as validateRecipient } from './validation-_Tcjm2gu.js';
+export { D as DEFAULT_CHAIN, a as DEFAULT_FACILITATOR_URL, S as SUPPORTED_CHAINS, X as X402Client, b as getAlgorandChains, c as getChainById, g as getChainByName, d as getChainsByNetworkType, e as getChainsByToken, f as getEVMChainIds, h as getEnabledChains, i as getExplorerAddressUrl, j as getExplorerTxUrl, k as getNetworkType, l as getSVMChains, m as getSuiChains, n as getSupportedTokens, o as getTokenByAddress, p as getTokenConfig, q as getXRPLChains, r as isAlgorandChain, s as isChainSupported, t as isSVMChain, u as isSuiChain, v as isTokenSupported, w as isXRPLChain } from './index-DRSEcZ36.js';
+export { A as AdvertisedQuote, r as AlgorandPaymentPayload, s as CAIP2_IDENTIFIERS, t as CAIP2_TO_CHAIN, C as ChainConfig, D as DEFAULT_CONFIG, u as DecideOptions, E as EIP712Domain, v as EIP712Types, w as EVMPaymentPayload, x as EvaluateOptions, M as MultiPaymentConfig, y as NEARPaymentPayload, z as NativeCurrency, c as NetworkBalance, N as NetworkType, O as OFFER_VALIDITY_EXTENSION, q as PaymentHeaders, P as PaymentInfo, B as PaymentPayload, F as PaymentRequest, a as PaymentResult, o as PaymentTokenMetadata, G as PolicyApproval, H as PolicyAsset, I as PolicyDecision, J as PolicyRefusal, K as PolicyRefusalCode, L as PolicyRefusedError, e as PurchasePolicy, Q as QuoteComparison, R as ReadChallenge, S as SolanaPaymentPayload, U as StellarPaymentPayload, V as SuiPaymentPayload, i as TokenConfig, T as TokenType, Y as USDCConfig, W as WalletAdapter, d as WalletState, Z as X402AlgorandPayload, b as X402ClientConfig, _ as X402EVMPayload, $ as X402Error, a0 as X402ErrorCode, g as X402Event, a1 as X402EventData, h as X402EventHandler, f as X402FetchOptions, j as X402Header, p as X402HeaderName, l as X402HeaderV1, n as X402HeaderV2, a2 as X402NEARPayload, k as X402PayloadData, a3 as X402PaymentOffer, m as X402PaymentOption, a4 as X402Scheme, a5 as X402SettlementAccountPayload, a6 as X402SolanaPayload, a7 as X402StellarPayload, a8 as X402SuiPayload, X as X402Version, a9 as X402XRPLPayload, aa as XRPLPaymentPayload, ab as assetKey, ac as canonicalRecipient, ad as decideOnChallenge, ae as noReadableOffer, af as offerAsset, ag as offerValidUntil } from './index-DbauIMV2.js';
+export { D as DEFAULT_PAYMENT_HEADER, a as DEFAULT_VALIDITY_SECONDS, M as MAX_VALIDITY_SECONDS, P as PAYMENT_HEADER_NAMES, b as buildTokenMetadata, c as caip2ToChain, d as chainToCAIP2, e as clampValiditySeconds, f as convertX402Header, g as createPaymentHeaders, h as createX402Header, i as createX402V1Header, j as createX402V2Header, k as decodeBase64Utf8, l as decodeX402Header, m as detectX402Version, n as encodeBase64Json, o as encodeBase64Utf8, p as encodeX402Header, q as generatePaymentOptions, r as getPaymentHeader, s as isCAIP2Format, t as parseNetworkIdentifier, u as paymentChallengeFrom, v as resolveValiditySeconds, w as validateAmount, x as validateRecipient } from './validity-C0z0GqH6.js';
 import { S as SigningWalletAdapter } from './wallet-w7BnImDG.js';
 export { a as EIP3009Authorization, E as EIP3009Params } from './wallet-w7BnImDG.js';
 export { E as EnvKeyAdapter, O as OWSWallet, a as OWSWalletAdapter } from './ows-C-KmORG9.js';
-export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-Cd1Mpznb.js';
+export { A as AMBIGUOUS_LEASE_REASONS, B as BuildLifecycleAuthParams, D as DEFAULT_FACILITATOR_RETRIES, a as DEFAULT_RETRY_AFTER_SECONDS, F as FacilitatorClient, b as FacilitatorClientOptions, c as FacilitatorErrorInfo, d as FacilitatorFailureFields, e as FacilitatorFetchOptions, H as HonoMiddlewareOptions, L as LIFECYCLE_ACTIONS, f as LIFECYCLE_DEFAULT_DEADLINE_SECS, g as LIFECYCLE_DOMAIN_NAME, h as LIFECYCLE_DOMAIN_VERSION, i as LIFECYCLE_MAX_DEADLINE_SECS, j as LIFECYCLE_ORDER_TYPES, k as LifecycleAction, l as LifecycleAuth, m as LifecyclePaymentInfo, n as LifecycleSigner, o as LifecycleTypedData, p as LifecycleTypedDataParams, M as MAX_RETRY_AFTER_SECONDS, P as ParsedFacilitatorErrorBody, q as PaymentAcceptance, r as PaymentMiddlewareOptions, s as PaymentPayloadV2, t as PaymentRequirementsV2, R as REPLAYABLE_LEASE_REASONS, u as ResourceInfoV2, S as SETTLEMENT_UNCONFIRMED, v as SettleRequestV2, V as VerifiedPaymentState, w as VerifyRequestV2, W as WRITER_LEASE_REASONS, x as WagmiLifecycleWalletClient, y as WriterLeaseReason, X as X402_CORS_HEADERS, z as X402_HEADER_NAMES, C as buildLifecycleAuth, E as buildLifecycleTypedData, G as buildPaymentRequirements, I as buildSettleRequest, J as buildSettleRequestForVersion, K as buildSettleRequestV2, N as buildVerifyRequest, O as buildVerifyRequestForVersion, Q as buildVerifyRequestV2, T as create402Response, U as createHonoMiddleware, Y as createPaymentMiddleware, Z as extractPaymentFromHeaders, _ as facilitatorFetch, $ as getCorsHeaders, a0 as isAmbiguousLeaseReason, a1 as isReplayableLeaseReason, a2 as isSettlementUnconfirmed, a3 as lifecycleAuthFromSignature, a4 as parseFacilitatorErrorBody, a5 as parseRetryAfterSeconds, a6 as readFacilitatorError, a7 as resolveEnvelopeVersion, a8 as toPaymentRequirementsV2, a9 as toResourceInfoV2, aa as wagmiLifecycleSigner } from './index-s6ot_Mu-.js';
 
 /**
  * DX402 `durable-evidence`: recover a paid response after the fact.

package/dist/index.js

@@ -1623,6 +1623,37 @@ var init_personal_sign = __esm({
   }
 });
 
+// src/utils/validity.ts
+function resolveValiditySeconds(perPayment, clientDefault) {
+  const chosen = perPayment ?? clientDefault ?? exports.DEFAULT_VALIDITY_SECONDS;
+  if (!Number.isInteger(chosen) || chosen <= 0) {
+    throw new exports.X402Error(
+      `validitySeconds must be a positive whole number of seconds, got ${String(chosen)}`,
+      "INVALID_CONFIG",
+      { validitySeconds: chosen }
+    );
+  }
+  if (chosen > exports.MAX_VALIDITY_SECONDS) {
+    throw new exports.X402Error(
+      `validitySeconds must be at most ${exports.MAX_VALIDITY_SECONDS} seconds, got ${String(chosen)}. A longer window is a standing claim on the payer: it can be settled long after the payer gave the payment up for expired.`,
+      "INVALID_CONFIG",
+      { validitySeconds: chosen, max: exports.MAX_VALIDITY_SECONDS }
+    );
+  }
+  return chosen;
+}
+function clampValiditySeconds(maxTimeoutSeconds) {
+  return Math.min(exports.MAX_VALIDITY_SECONDS, Math.max(1, Math.floor(maxTimeoutSeconds)));
+}
+exports.DEFAULT_VALIDITY_SECONDS = void 0; exports.MAX_VALIDITY_SECONDS = void 0;
+var init_validity = __esm({
+  "src/utils/validity.ts"() {
+    init_types();
+    exports.DEFAULT_VALIDITY_SECONDS = 300;
+    exports.MAX_VALIDITY_SECONDS = 3600;
+  }
+});
+
 // src/utils/index.ts
 var init_utils = __esm({
   "src/utils/index.ts"() {
@@ -1631,6 +1662,7 @@ var init_utils = __esm({
     init_base64();
     init_validation();
     init_personal_sign();
+    init_validity();
   }
 });
 
@@ -2929,6 +2961,7 @@ var X402Client = class _X402Client {
    */
   purchasePolicy;
   constructor(config = {}) {
+    resolveValiditySeconds(void 0, config.validitySeconds);
     this.config = {
       ...exports.DEFAULT_CONFIG,
       ...config
@@ -3256,7 +3289,8 @@ var X402Client = class _X402Client {
       amount: ethers.ethers.formatUnits(chosen.amount, chosen.decimals),
       tokenType,
       network: chosen.chainName,
-      x402Version: version
+      x402Version: version,
+      validitySeconds: chosen.maxTimeoutSeconds !== void 0 ? clampValiditySeconds(chosen.maxTimeoutSeconds) : void 0
     });
     const paidHeaders = {
       ..._X402Client.headersToRecord(options.init?.headers),
@@ -3330,6 +3364,7 @@ var X402Client = class _X402Client {
         continue;
       }
       const chainName = getChainByName(network) ? network : caip2ToChain(network);
+      const declaredTimeout = typeof accept.maxTimeoutSeconds === "number" && Number.isFinite(accept.maxTimeoutSeconds) ? accept.maxTimeoutSeconds : void 0;
       offers.push({
         network,
         chainName,
@@ -3337,6 +3372,7 @@ var X402Client = class _X402Client {
         amount: String(amount),
         decimals: _X402Client.offerDecimals(chainName, tokenType),
         payTo,
+        ...declaredTimeout !== void 0 ? { maxTimeoutSeconds: declaredTimeout } : {},
         raw: accept
       });
     }
@@ -3636,7 +3672,10 @@ var X402Client = class _X402Client {
     }
     const nonce = ethers.ethers.hexlify(nonceBytes);
     const validAfter = 0;
-    const validityWindowSeconds = chain.name === "base" ? 300 : 60;
+    const validityWindowSeconds = resolveValiditySeconds(
+      paymentInfo.validitySeconds,
+      this.config.validitySeconds
+    );
     const validBefore = Math.floor(Date.now() / 1e3) + validityWindowSeconds;
     const domain = {
       name: token.name,
@@ -6343,6 +6382,7 @@ exports.buildVerifyRequestV2 = buildVerifyRequestV2;
 exports.caip2ToChain = caip2ToChain;
 exports.canonicalRecipient = canonicalRecipient;
 exports.chainToCAIP2 = chainToCAIP2;
+exports.clampValiditySeconds = clampValiditySeconds;
 exports.computeEscrowNonce = computeEscrowNonce;
 exports.contentHash = contentHash;
 exports.convertX402Header = convertX402Header;
@@ -6422,6 +6462,7 @@ exports.recoverEvidence = recoverEvidence;
 exports.replaySafeTypedData = replaySafeTypedData;
 exports.resolveDelegation = resolveDelegation;
 exports.resolveEnvelopeVersion = resolveEnvelopeVersion;
+exports.resolveValiditySeconds = resolveValiditySeconds;
 exports.rpcDelegationResolver = rpcDelegationResolver;
 exports.sealEvidence = sealEvidence;
 exports.sealEvidenceTo = sealEvidenceTo;