PaymentIntent

Defined in: src/signer/types.ts:57

A decoded EIP-3009 TransferWithAuthorization intent — never a pre-computed digest (A4, “no blind signing”). An adapter recomputes the EIP-712 digest from these fields plus the trusted pinned domain (name/version resolved from a (token, chainId) config, not from advertised wire data), so the policy can evaluate exactly what will be signed.

The nonce is supplied by the caller (the x402 wiring), not generated here — double-pay protection is M5’s deriveAuthorizationNonce + the token contract’s authorizationState, a separate concern from spend policy.

Properties

chainId

readonly chainId: number

Defined in: src/signer/types.ts:61

EIP-712 domain chainId — pins cross-chain replay.

---

from

readonly from: `0x${string}`

Defined in: src/signer/types.ts:63

EIP-3009 authorizer; MUST equal the signer’s from.

---

nonce

readonly nonce: `0x${string}`

Defined in: src/signer/types.ts:73

EIP-3009 32-byte nonce (from M5; supplied by the caller).

---

to

readonly to: `0x${string}`

Defined in: src/signer/types.ts:65

Recipient.

---

token

readonly token: `0x${string}`

Defined in: src/signer/types.ts:59

EIP-712 verifyingContract — the JPYC/USDC token contract.

---

validAfter

readonly validAfter: bigint

Defined in: src/signer/types.ts:69

EIP-3009 window start (unix seconds).

---

validBefore

readonly validBefore: bigint

Defined in: src/signer/types.ts:71

EIP-3009 window end / expiry (unix seconds).

---

value

readonly value: bigint

Defined in: src/signer/types.ts:67

Amount, token base units.