@absol-labs/agent 0.11.0 → 0.12.0-rc.1

package/dist/x402/facilitator-server.js

@@ -1,305 +0,0 @@
-import { createServer, } from "node:http";
-import { timingSafeEqual } from "node:crypto";
-import { isAddress, isHex } from "viem";
-import { createOracleDeliveryOracle, DEFAULT_DELIVERY_FRESHNESS_SECONDS, DEFAULT_METRIK_ORACLE_URL, } from "./delivery-oracle.js";
-import { createRegistryResourceIndex } from "./resource-index.js";
-import { createX402PaymentSettler, createX402PaymentVerifier, relayerAddress, } from "./relayer.js";
-import { DEFAULT_SETTLEMENT_SCOPE, MetrikVerifiedDeliveryFacilitator, RelayerNotConfiguredError, } from "./verified-delivery-facilitator.js";
-/**
- * Reference HTTP server for Metrik's x402 facilitator: `POST /verify`,
- * `POST /settle`, `GET /supported` — the three endpoints the x402 facilitator
- * interface defines, with Metrik's verified-delivery gate wired into `/verify`.
- *
- * Point any x402 resource server at this with
- * `facilitator: { url: "https://<host>" }` and it becomes a resource server
- * whose payments stop when the seller stops delivering.
- */
-const MAX_BODY_BYTES = 256 * 1024;
-export function createMetrikFacilitatorServer(config) {
-    const httpServer = createServer((req, res) => {
-        handle(req, res, config).catch((error) => {
-            if (error instanceof RelayerNotConfiguredError) {
-                writeJson(res, 503, {
-                    success: false,
-                    errorReason: "unexpected_settle_error",
-                    transaction: "",
-                    error: error.message,
-                });
-                return;
-            }
-            logError("unhandled request error", error);
-            writeJson(res, 500, { error: "internal-error" });
-        });
-    });
-    return {
-        httpServer,
-        listen: (port, host = "0.0.0.0") => new Promise((resolve, reject) => {
-            const onError = (error) => reject(error);
-            httpServer.once("error", onError);
-            httpServer.listen(port, host, () => {
-                httpServer.removeListener("error", onError);
-                const address = httpServer.address();
-                resolve({ port: address.port, host });
-            });
-        }),
-        close: () => new Promise((resolve, reject) => {
-            httpServer.close((error) => (error ? reject(error) : resolve()));
-        }),
-    };
-}
-async function handle(req, res, config) {
-    const url = new URL(req.url ?? "/", "http://localhost");
-    const path = url.pathname.replace(/\/+$/, "") || "/";
-    if (req.method === "GET" && (path === "/supported" || path === "/")) {
-        writeJson(res, 200, {
-            ...config.facilitator.supported(),
-            settlementEnabled: config.settlementEnabled,
-        });
-        return;
-    }
-    if (req.method !== "POST") {
-        writeJson(res, 405, { error: "method-not-allowed" });
-        return;
-    }
-    if (path !== "/verify" && path !== "/settle") {
-        writeJson(res, 404, { error: "not-found" });
-        return;
-    }
-    // Authenticate BEFORE reading the body: an unauthenticated caller must not be
-    // able to make this process do work, parse input, or reach the chain.
-    if (path === "/settle" && !isAuthorizedSettle(req, config)) {
-        writeJson(res, 401, {
-            success: false,
-            errorReason: "invalid_payment",
-            transaction: "",
-            error: "POST /settle requires the facilitator's bearer token. It spends the operator's gas.",
-        });
-        return;
-    }
-    let body;
-    try {
-        body = JSON.parse(await readBody(req));
-    }
-    catch {
-        writeJson(res, 400, { error: "invalid-json" });
-        return;
-    }
-    if (path === "/verify") {
-        writeJson(res, 200, await config.facilitator.verify(body));
-        return;
-    }
-    writeJson(res, 200, await config.facilitator.settle(body));
-}
-/**
- * Constant-time bearer check. A missing configured token denies, so a
- * misconfiguration can never silently open the endpoint.
- */
-function isAuthorizedSettle(req, config) {
-    const expected = config.settlementToken;
-    if (expected === undefined || expected.length === 0) {
-        return false;
-    }
-    const header = req.headers.authorization;
-    if (typeof header !== "string") {
-        return false;
-    }
-    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
-    if (match === null) {
-        return false;
-    }
-    const presented = Buffer.from(match[1], "utf8");
-    const target = Buffer.from(expected, "utf8");
-    // `timingSafeEqual` throws on a length mismatch, which would itself leak the
-    // length, so compare a fixed-width digest-shaped pair instead: pad both to the
-    // longer length and AND in the length equality.
-    const width = Math.max(presented.length, target.length);
-    const a = Buffer.alloc(width);
-    const b = Buffer.alloc(width);
-    presented.copy(a);
-    target.copy(b);
-    return timingSafeEqual(a, b) && presented.length === target.length;
-}
-async function readBody(req) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        const buffer = chunk;
-        size += buffer.length;
-        if (size > MAX_BODY_BYTES) {
-            throw new Error("request body too large");
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks).toString("utf8");
-}
-function writeJson(res, status, body) {
-    if (res.headersSent) {
-        res.end();
-        return;
-    }
-    res
-        .writeHead(status, { "Content-Type": "application/json" })
-        .end(JSON.stringify(body));
-}
-function logError(context, error) {
-    const message = error instanceof Error ? error.message : String(error);
-    console.error(`[metrik-x402-facilitator] ${context}: ${message}`);
-}
-/**
- * Env contract:
- * - `METRIK_X402_RPC_URL` (required) — RPC for balance checks and, when a relayer
- *   is configured, for broadcasting.
- * - `METRIK_X402_RELAYER_PRIVATE_KEY` (required unless
- *   `METRIK_X402_ALLOW_VERIFY_ONLY=true`) — the relayer that broadcasts EIP-3009
- *   transfers and pays gas.
- * - `METRIK_X402_ALLOW_VERIFY_ONLY` (optional) — explicit opt-in to booting a
- *   verify-only facilitator. Without it, a missing relayer key is a STARTUP
- *   FAILURE rather than a server that silently never settles.
- * - `METRIK_X402_CHAIN_ID` (optional) — default `84532`.
- * - `METRIK_X402_ORACLE_URL` (optional) — default the public Metrik oracle.
- * - `METRIK_X402_REGISTRY_URL` (optional) — listing source; default the oracle's
- *   public credential-free registry.
- * - `METRIK_X402_FRESHNESS_SECONDS` (optional) — default
- *   {@link DEFAULT_DELIVERY_FRESHNESS_SECONDS}.
- * - `METRIK_X402_INDETERMINATE_POLICY` (optional) — `allow` (default) or `deny`.
- * - `PORT` / `METRIK_X402_PORT` (optional) — default `8788`.
- * - `METRIK_X402_HOST` (optional) — default `0.0.0.0`.
- */
-export function parseMetrikFacilitatorEnvConfig(env = process.env) {
-    const rpcUrl = env.METRIK_X402_RPC_URL;
-    if (rpcUrl === undefined || rpcUrl.trim().length === 0) {
-        throw new Error("METRIK_X402_RPC_URL is required (fail-closed)");
-    }
-    const rawKey = env.METRIK_X402_RELAYER_PRIVATE_KEY?.trim();
-    const allowVerifyOnly = env.METRIK_X402_ALLOW_VERIFY_ONLY === "true";
-    let relayerPrivateKey;
-    if (rawKey !== undefined && rawKey.length > 0) {
-        if (!isHex(rawKey, { strict: true }) || rawKey.length !== 66) {
-            throw new Error("METRIK_X402_RELAYER_PRIVATE_KEY must be a 32-byte 0x-prefixed hex private key");
-        }
-        relayerPrivateKey = rawKey;
-    }
-    else if (!allowVerifyOnly) {
-        throw new Error("METRIK_X402_RELAYER_PRIVATE_KEY is required to settle payments. " +
-            "This facilitator will NOT start without one, because a facilitator that " +
-            "accepts /settle and never broadcasts is worse than one that is absent. " +
-            "Set METRIK_X402_ALLOW_VERIFY_ONLY=true to deliberately run verify-only.");
-    }
-    // `/settle` makes the relayer sign and pay gas. An open one is a
-    // permissionless "broadcast for me" endpoint, so a settling facilitator
-    // cannot boot without a token. Fail closed at startup, not at request time.
-    const settlementToken = env.METRIK_X402_FACILITATOR_TOKEN?.trim();
-    if (relayerPrivateKey !== undefined) {
-        if (settlementToken === undefined || settlementToken.length < 32) {
-            throw new Error("METRIK_X402_FACILITATOR_TOKEN is required (at least 32 characters) whenever a " +
-                "settlement relayer is configured. POST /settle spends the operator's gas and " +
-                "binds 0.0.0.0; without a token anyone who can reach it can make the relayer " +
-                "broadcast and pay for it.");
-        }
-    }
-    const rawAllowlist = (env.METRIK_X402_SETTLEMENT_ASSETS ?? "")
-        .split(",")
-        .map((value) => value.trim())
-        .filter((value) => value.length > 0);
-    for (const candidate of rawAllowlist) {
-        if (!isAddress(candidate)) {
-            throw new Error(`METRIK_X402_SETTLEMENT_ASSETS must contain only EVM addresses (got ${candidate})`);
-        }
-    }
-    const rawScope = env.METRIK_X402_SETTLEMENT_SCOPE ?? DEFAULT_SETTLEMENT_SCOPE;
-    if (rawScope !== "tracked-resources" && rawScope !== "any-resource") {
-        throw new Error(`invalid METRIK_X402_SETTLEMENT_SCOPE: ${rawScope} (tracked-resources|any-resource)`);
-    }
-    const chainId = Number(env.METRIK_X402_CHAIN_ID ?? "84532");
-    if (!Number.isInteger(chainId) || chainId <= 0) {
-        throw new Error(`invalid METRIK_X402_CHAIN_ID: ${env.METRIK_X402_CHAIN_ID}`);
-    }
-    const freshnessWindowSeconds = Number(env.METRIK_X402_FRESHNESS_SECONDS ??
-        String(DEFAULT_DELIVERY_FRESHNESS_SECONDS));
-    if (!Number.isFinite(freshnessWindowSeconds) || freshnessWindowSeconds <= 0) {
-        throw new Error(`invalid METRIK_X402_FRESHNESS_SECONDS: ${env.METRIK_X402_FRESHNESS_SECONDS}`);
-    }
-    const rawPolicy = env.METRIK_X402_INDETERMINATE_POLICY ?? "allow";
-    if (rawPolicy !== "allow" && rawPolicy !== "deny") {
-        throw new Error(`invalid METRIK_X402_INDETERMINATE_POLICY: ${rawPolicy} (allow|deny)`);
-    }
-    const port = Number(env.METRIK_X402_PORT ?? env.PORT ?? "8788");
-    if (!Number.isInteger(port) || port < 0 || port > 65535) {
-        throw new Error(`invalid port: ${env.METRIK_X402_PORT ?? env.PORT}`);
-    }
-    const registryUrl = env.METRIK_X402_REGISTRY_URL;
-    return {
-        host: env.METRIK_X402_HOST ?? "0.0.0.0",
-        port,
-        chainId,
-        rpcUrl,
-        oracleUrl: env.METRIK_X402_ORACLE_URL ?? DEFAULT_METRIK_ORACLE_URL,
-        freshnessWindowSeconds,
-        indeterminatePolicy: rawPolicy,
-        settlementScope: rawScope,
-        ...(rawAllowlist.length === 0
-            ? {}
-            : { settlementAssetAllowlist: rawAllowlist }),
-        ...(registryUrl === undefined ? {} : { registryUrl }),
-        ...(relayerPrivateKey === undefined ? {} : { relayerPrivateKey }),
-        ...(settlementToken === undefined || settlementToken.length === 0
-            ? {}
-            : { settlementToken }),
-    };
-}
-export function buildMetrikFacilitatorFromEnvConfig(config) {
-    return new MetrikVerifiedDeliveryFacilitator({
-        paymentVerifier: createX402PaymentVerifier({
-            chainId: config.chainId,
-            rpcUrl: config.rpcUrl,
-        }),
-        ...(config.relayerPrivateKey === undefined
-            ? {}
-            : {
-                paymentSettler: createX402PaymentSettler({
-                    chainId: config.chainId,
-                    rpcUrl: config.rpcUrl,
-                    privateKey: config.relayerPrivateKey,
-                }),
-            }),
-        resourceIndex: createRegistryResourceIndex(config.registryUrl === undefined
-            ? {}
-            : { discoverOptions: { registryUrl: config.registryUrl } }),
-        deliveryOracle: createOracleDeliveryOracle({
-            oracleUrl: config.oracleUrl,
-            freshnessWindowSeconds: config.freshnessWindowSeconds,
-        }),
-        indeterminatePolicy: config.indeterminatePolicy,
-        chainId: config.chainId,
-        settlementScope: config.settlementScope,
-        ...(config.settlementAssetAllowlist === undefined
-            ? {}
-            : { settlementAssetAllowlist: config.settlementAssetAllowlist }),
-    });
-}
-export async function startMetrikFacilitatorServerFromEnv(env = process.env) {
-    const config = parseMetrikFacilitatorEnvConfig(env);
-    const facilitator = buildMetrikFacilitatorFromEnvConfig(config);
-    if (config.relayerPrivateKey === undefined) {
-        console.error("[metrik-x402-facilitator] SETTLEMENT DISABLED — no METRIK_X402_RELAYER_PRIVATE_KEY. " +
-            "/verify works; /settle will return 503 and broadcast nothing.");
-    }
-    else {
-        console.error(`[metrik-x402-facilitator] settlement relayer ${relayerAddress(config.relayerPrivateKey)} — this address must hold native gas on chain ${config.chainId}.`);
-    }
-    console.error(`[metrik-x402-facilitator] delivery gate: oracle=${config.oracleUrl} ` +
-        `freshness=${config.freshnessWindowSeconds}s policy-on-no-evidence=${config.indeterminatePolicy}`);
-    console.error(`[metrik-x402-facilitator] settlement policy: scope=${config.settlementScope} ` +
-        `assets=${facilitator.allowedSettlementAssets.join(",")} — the relayer will not be ` +
-        "asked to call any other contract.");
-    const server = createMetrikFacilitatorServer({
-        facilitator,
-        settlementEnabled: config.relayerPrivateKey !== undefined,
-        ...(config.settlementToken === undefined
-            ? {}
-            : { settlementToken: config.settlementToken }),
-    });
-    const { port } = await server.listen(config.port, config.host);
-    return Object.assign(server, { boundPort: port });
-}
-//# sourceMappingURL=facilitator-server.js.map

package/dist/x402/facilitator-server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"facilitator-server.js","sourceRoot":"","sources":["../../src/x402/facilitator-server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAY,MAAM,MAAM,CAAC;AAElD,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,EAClC,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,iCAAiC,EACjC,yBAAyB,GAG1B,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;GAQG;AAEH,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AA2BlC,MAAM,UAAU,6BAA6B,CAC3C,MAAqC;IAErC,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACvC,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;gBAC/C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,yBAAyB;oBACtC,WAAW,EAAE,EAAE;oBACf,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC3C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,EAAE,CACjC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACjC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAiB,CAAC;gBACpD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAoB,EACpB,GAAmB,EACnB,MAAqC;IAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAErD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACpE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE;YACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EAAE,EAAE;YACf,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,GAAoB,EACpB,MAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,6EAA6E;IAC7E,+EAA+E;IAC/E,gDAAgD;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAe,CAAC;QAC/B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,GAAG;SACA,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;SACzD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,KAAc;IAC/C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,6BAA6B,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,GAAG,CAAC,6BAA6B,KAAK,MAAM,CAAC;IACrE,IAAI,iBAAkC,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,iBAAiB,GAAG,MAAM,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,eAAe,GAAG,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,gFAAgF;gBAC9E,+EAA+E;gBAC/E,8EAA8E;gBAC9E,2BAA2B,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;SAC3D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,sEAAsE,SAAS,GAAG,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,4BAA4B,IAAI,wBAAwB,CAAC;IAC9E,IAAI,QAAQ,KAAK,mBAAmB,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,mCAAmC,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,oBAAoB,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,sBAAsB,GAAG,MAAM,CACnC,GAAG,CAAC,6BAA6B;QAC/B,MAAM,CAAC,kCAAkC,CAAC,CAC7C,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,CAAC,6BAA6B,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,gCAAgC,IAAI,OAAO,CAAC;IAClE,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,6CAA6C,SAAS,eAAe,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC;IAEjD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACvC,IAAI;QACJ,OAAO;QACP,MAAM;QACN,SAAS,EAAE,GAAG,CAAC,sBAAsB,IAAI,yBAAyB;QAClE,sBAAsB;QACtB,mBAAmB,EAAE,SAAS;QAC9B,eAAe,EAAE,QAAQ;QACzB,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,wBAAwB,EAAE,YAAY,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;QACjE,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAC/D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,MAAkC;IAElC,OAAO,IAAI,iCAAiC,CAAC;QAC3C,eAAe,EAAE,yBAAyB,CAAC;YACzC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,cAAc,EAAE,wBAAwB,CAAC;oBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,iBAAiB;iBACrC,CAAC;aACH,CAAC;QACN,aAAa,EAAE,2BAA2B,CACxC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAC7D;QACD,cAAc,EAAE,0BAA0B,CAAC;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;SACtD,CAAC;QACF,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG,CAAC,MAAM,CAAC,wBAAwB,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,EAAE,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,mCAAmC,CAAC,MAAM,CAAC,CAAC;IAEhE,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CACX,sFAAsF;YACpF,+DAA+D,CAClE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,gDAAgD,cAAc,CAC5D,MAAM,CAAC,iBAAiB,CACzB,iDAAiD,MAAM,CAAC,OAAO,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAK,CACX,mDAAmD,MAAM,CAAC,SAAS,GAAG;QACpE,aAAa,MAAM,CAAC,sBAAsB,2BAA2B,MAAM,CAAC,mBAAmB,EAAE,CACpG,CAAC;IACF,OAAO,CAAC,KAAK,CACX,sDAAsD,MAAM,CAAC,eAAe,GAAG;QAC7E,UAAU,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B;QACpF,mCAAmC,CACtC,CAAC;IAEF,MAAM,MAAM,GAAG,6BAA6B,CAAC;QAC3C,WAAW;QACX,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACzD,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC"}

package/dist/x402/payment-requirements.d.ts

@@ -1,106 +0,0 @@
-import type { Address, Hex } from "viem";
-import type { PaymentRequirements } from "x402/types";
-/**
- * Standard x402 `exact` payment requirements, built from an OPERATOR-SIGNED
- * Metrik listing.
- *
- * This is the "additional way in" described in `docs/x402.md`: the Metrik
- * verified-stream flow (`./facilitator.ts`) is unchanged and is still the only
- * path with recoverable escrow. What this module adds is the ability for a
- * seller's gateway to ALSO quote an ordinary, fully conformant x402 `exact`
- * price for a single call, so an agent holding nothing but `x402-fetch` can pay
- * without knowing Metrik exists.
- *
- * ## What is signed and what is not
- *
- * `payTo` is derived from the operator's EIP-712-signed service descriptor and
- * from nothing else. It is never read from configuration and never read from a
- * caller-supplied field, because `payTo` is the one field whose corruption
- * silently redirects money.
- *
- * The PRICE is not signed. The descriptor schema (`@absol-labs/shared`) carries
- * `minRatePerSecond` / `maxRatePerSecond` for metered streams and has no
- * per-call price field, so a per-call x402 amount can only come from the seller
- * running the gateway. That is legitimate — it is the seller's own price on the
- * seller's own gateway — but a buyer CANNOT cross-check it against the registry
- * the way they can cross-check `payTo`. Said plainly here so nobody assumes a
- * guarantee that does not exist.
- */
-/** The only x402 protocol version implemented by the published `x402` package. */
-export declare const X402_VERSION: 1;
-/** The only x402 payment scheme implemented by the published `x402` package. */
-export declare const X402_EXACT_SCHEME: "exact";
-/** x402 v1 uses bare network names, not CAIP-2. Metrik settles on Base only. */
-export declare const X402_NETWORK_BY_CHAIN_ID: Readonly<Record<number, "base" | "base-sepolia">>;
-export interface X402AssetConfig {
-    readonly address: Address;
-    /** EIP-712 domain `name` of the asset, needed to sign EIP-3009 offline. */
-    readonly eip712Name: string;
-    /** EIP-712 domain `version` of the asset. */
-    readonly eip712Version: string;
-    readonly decimals: number;
-}
-/**
- * USDC per Base chain. The EIP-712 domain values are what a client needs to
- * sign `TransferWithAuthorization` WITHOUT an extra RPC round trip: the x402
- * client falls back to reading `version()` on chain only when
- * `PaymentRequirements.extra` omits it, so quoting them here removes a network
- * dependency from the payer's hot path.
- *
- * Base Sepolia values read from the live contract on 2026-09-18
- * (`name() == "USDC"`, `version() == "2"`).
- */
-export declare const X402_USDC_BY_CHAIN_ID: Readonly<Record<number, X402AssetConfig>>;
-export declare class X402RequirementsError extends Error {
-    constructor(message: string);
-}
-/**
- * The minimum a payee must prove. Both fields MUST be projected from the
- * operator-signed descriptor (see `../discovery/registry.ts`, which recovers the
- * EIP-712 signer and re-derives `serviceRef` from the signed content), never
- * from an unsigned registry column and never from a request.
- */
-export interface SignedListingPayee {
-    readonly serviceRef: Hex;
-    readonly operator: Address;
-}
-export interface BuildMetrikPaymentRequirementsInput {
-    readonly listing: SignedListingPayee;
-    /** Absolute URL of the paid resource, as the buyer will request it. */
-    readonly resource: string;
-    /** Price for ONE call, in the asset's base units (micro-USDC at 6 decimals). */
-    readonly priceBaseUnits: bigint;
-    readonly chainId: number;
-    readonly description?: string;
-    readonly mimeType?: string;
-    /** How long the signed authorization stays valid. Default 60s. */
-    readonly maxTimeoutSeconds?: number;
-    readonly outputSchema?: Record<string, unknown>;
-    /** Override the settlement asset (defaults to USDC for `chainId`). */
-    readonly asset?: X402AssetConfig;
-}
-/** Default authorization validity window quoted to payers, in seconds. */
-export declare const DEFAULT_X402_MAX_TIMEOUT_SECONDS = 60;
-/**
- * Builds standard-`exact` `PaymentRequirements` for one call of a Metrik-listed
- * resource. Throws rather than emitting anything a conformant client would
- * reject or a payer could be harmed by.
- */
-export declare function buildMetrikPaymentRequirements(input: BuildMetrikPaymentRequirementsInput): PaymentRequirements;
-/**
- * The HTTP `402` response body a resource server returns.
- *
- * NOTE on `error`: the shipped `x402ResponseSchema` types `error` as the closed
- * `ErrorReasons` enum, which no real x402 server obeys — `x402-express` and
- * friends put human-readable text there, and `x402-fetch` never reads the field
- * at all. Metrik follows the real-world behaviour (free text) rather than the
- * schema; `test/x402-facilitator-conformance.test.ts` pins that divergence so it
- * is a recorded decision and not an accident.
- */
-export interface X402PaymentRequiredBody {
-    readonly x402Version: typeof X402_VERSION;
-    readonly error: string;
-    readonly accepts: readonly PaymentRequirements[];
-}
-export declare function buildX402PaymentRequiredBody(accepts: readonly PaymentRequirements[], error?: string): X402PaymentRequiredBody;
-//# sourceMappingURL=payment-requirements.d.ts.map

package/dist/x402/payment-requirements.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payment-requirements.d.ts","sourceRoot":"","sources":["../../src/x402/payment-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAOzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kFAAkF;AAClF,eAAO,MAAM,YAAY,EAAG,CAAU,CAAC;AAEvC,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,EAAG,OAAgB,CAAC;AAElD,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAIvC,CAAC;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAcxE,CAAC;AAEL,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,mBAAmB,CAyErB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,OAAO,YAAY,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAClD;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,KAAK,SAAiC,GACrC,uBAAuB,CAOzB"}

package/dist/x402/payment-requirements.js

@@ -1,138 +0,0 @@
-import { getAddress, isAddress, isHex } from "viem";
-/**
- * Standard x402 `exact` payment requirements, built from an OPERATOR-SIGNED
- * Metrik listing.
- *
- * This is the "additional way in" described in `docs/x402.md`: the Metrik
- * verified-stream flow (`./facilitator.ts`) is unchanged and is still the only
- * path with recoverable escrow. What this module adds is the ability for a
- * seller's gateway to ALSO quote an ordinary, fully conformant x402 `exact`
- * price for a single call, so an agent holding nothing but `x402-fetch` can pay
- * without knowing Metrik exists.
- *
- * ## What is signed and what is not
- *
- * `payTo` is derived from the operator's EIP-712-signed service descriptor and
- * from nothing else. It is never read from configuration and never read from a
- * caller-supplied field, because `payTo` is the one field whose corruption
- * silently redirects money.
- *
- * The PRICE is not signed. The descriptor schema (`@absol-labs/shared`) carries
- * `minRatePerSecond` / `maxRatePerSecond` for metered streams and has no
- * per-call price field, so a per-call x402 amount can only come from the seller
- * running the gateway. That is legitimate — it is the seller's own price on the
- * seller's own gateway — but a buyer CANNOT cross-check it against the registry
- * the way they can cross-check `payTo`. Said plainly here so nobody assumes a
- * guarantee that does not exist.
- */
-/** The only x402 protocol version implemented by the published `x402` package. */
-export const X402_VERSION = 1;
-/** The only x402 payment scheme implemented by the published `x402` package. */
-export const X402_EXACT_SCHEME = "exact";
-/** x402 v1 uses bare network names, not CAIP-2. Metrik settles on Base only. */
-export const X402_NETWORK_BY_CHAIN_ID = Object.freeze({
-    8453: "base",
-    84532: "base-sepolia",
-});
-/**
- * USDC per Base chain. The EIP-712 domain values are what a client needs to
- * sign `TransferWithAuthorization` WITHOUT an extra RPC round trip: the x402
- * client falls back to reading `version()` on chain only when
- * `PaymentRequirements.extra` omits it, so quoting them here removes a network
- * dependency from the payer's hot path.
- *
- * Base Sepolia values read from the live contract on 2026-09-18
- * (`name() == "USDC"`, `version() == "2"`).
- */
-export const X402_USDC_BY_CHAIN_ID = Object.freeze({
-    8453: Object.freeze({
-        address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
-        eip712Name: "USD Coin",
-        eip712Version: "2",
-        decimals: 6,
-    }),
-    84532: Object.freeze({
-        address: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
-        eip712Name: "USDC",
-        eip712Version: "2",
-        decimals: 6,
-    }),
-});
-export class X402RequirementsError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "X402RequirementsError";
-    }
-}
-/** Default authorization validity window quoted to payers, in seconds. */
-export const DEFAULT_X402_MAX_TIMEOUT_SECONDS = 60;
-/**
- * Builds standard-`exact` `PaymentRequirements` for one call of a Metrik-listed
- * resource. Throws rather than emitting anything a conformant client would
- * reject or a payer could be harmed by.
- */
-export function buildMetrikPaymentRequirements(input) {
-    const network = X402_NETWORK_BY_CHAIN_ID[input.chainId];
-    if (network === undefined) {
-        throw new X402RequirementsError(`x402 v1 has no network name for chain ${input.chainId} (Metrik settles on Base: 8453, 84532)`);
-    }
-    const asset = input.asset ?? X402_USDC_BY_CHAIN_ID[input.chainId];
-    if (asset === undefined) {
-        throw new X402RequirementsError(`no default settlement asset known for chain ${input.chainId}`);
-    }
-    if (!isAddress(input.listing.operator)) {
-        throw new X402RequirementsError("listing.operator must be an EVM address (it becomes payTo)");
-    }
-    if (!isHex(input.listing.serviceRef, { strict: true }) ||
-        input.listing.serviceRef.length !== 66) {
-        throw new X402RequirementsError("listing.serviceRef must be a 32-byte hex value");
-    }
-    if (input.priceBaseUnits <= 0n) {
-        throw new X402RequirementsError("priceBaseUnits must be positive — a zero-priced x402 quote is not a payment");
-    }
-    let resource;
-    try {
-        resource = new URL(input.resource);
-    }
-    catch {
-        throw new X402RequirementsError(`resource must be an absolute URL`);
-    }
-    const maxTimeoutSeconds = input.maxTimeoutSeconds ?? DEFAULT_X402_MAX_TIMEOUT_SECONDS;
-    if (!Number.isInteger(maxTimeoutSeconds) || maxTimeoutSeconds <= 0) {
-        throw new X402RequirementsError("maxTimeoutSeconds must be a positive integer");
-    }
-    return {
-        scheme: X402_EXACT_SCHEME,
-        network,
-        maxAmountRequired: input.priceBaseUnits.toString(),
-        resource: resource.toString(),
-        description: input.description ??
-            "One call to a Metrik-listed service. Metrik's facilitator refuses to settle this payment while its oracle reports the service as failing.",
-        mimeType: input.mimeType ?? "application/json",
-        payTo: getAddress(input.listing.operator),
-        maxTimeoutSeconds,
-        asset: getAddress(asset.address),
-        extra: {
-            // Required by the x402 `exact` EVM binding so the payer can sign the
-            // EIP-3009 authorization offline.
-            name: asset.eip712Name,
-            version: asset.eip712Version,
-            // ADVISORY ONLY. The facilitator NEVER reads this to decide anything: it
-            // arrives inside a caller-supplied request body, so trusting it would let
-            // a caller pick which service's delivery record gets checked. The
-            // facilitator re-derives the service from `resource` against its own
-            // registry view. Published purely so a client can look the listing up.
-            metrikServiceRef: input.listing.serviceRef,
-        },
-        ...(input.outputSchema === undefined
-            ? {}
-            : { outputSchema: input.outputSchema }),
-    };
-}
-export function buildX402PaymentRequiredBody(accepts, error = "X-PAYMENT header is required") {
-    if (accepts.length === 0) {
-        throw new X402RequirementsError("a 402 must advertise at least one PaymentRequirements");
-    }
-    return { x402Version: X402_VERSION, error, accepts };
-}
-//# sourceMappingURL=payment-requirements.js.map

package/dist/x402/payment-requirements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payment-requirements.js","sourceRoot":"","sources":["../../src/x402/payment-requirements.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAQpD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAU,CAAC;AAEvC,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAgB,CAAC;AAElD,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAEjC,MAAM,CAAC,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,cAAc;CACtB,CAAC,CAAC;AAWH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,MAAM,CAAC,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,4CAAuD;QAChE,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,GAAG;QAClB,QAAQ,EAAE,CAAC;KACZ,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,4CAAuD;QAChE,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,GAAG;QAClB,QAAQ,EAAE,CAAC;KACZ,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AA6BD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,qBAAqB,CAC7B,yCAAyC,KAAK,CAAC,OAAO,wCAAwC,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,qBAAqB,CAC7B,+CAA+C,KAAK,CAAC,OAAO,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAC7B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClD,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,EACtC,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAC7B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,iBAAiB,GACrB,KAAK,CAAC,iBAAiB,IAAI,gCAAgC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,qBAAqB,CAC7B,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,OAAO;QACP,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE;QAClD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;QAC7B,WAAW,EACT,KAAK,CAAC,WAAW;YACjB,2IAA2I;QAC7I,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,kBAAkB;QAC9C,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzC,iBAAiB;QACjB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE;YACL,qEAAqE;YACrE,kCAAkC;YAClC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,OAAO,EAAE,KAAK,CAAC,aAAa;YAC5B,yEAAyE;YACzE,0EAA0E;YAC1E,kEAAkE;YAClE,qEAAqE;YACrE,uEAAuE;YACvE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;SAC3C;QACD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,4BAA4B,CAC1C,OAAuC,EACvC,KAAK,GAAG,8BAA8B;IAEtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAC7B,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC"}

package/dist/x402/relayer.d.ts

@@ -1,41 +0,0 @@
-import { type Chain, type Hex } from "viem";
-import type { PaymentSettler, PaymentVerifier } from "./verified-delivery-facilitator.js";
-/**
- * Chain wiring for the payment half of Metrik's x402 facilitator.
- *
- * Nothing here is Metrik-specific: verification and settlement are delegated
- * VERBATIM to the real `x402/facilitator` implementation of the `exact` scheme.
- * Metrik does not reimplement EIP-3009, and a change in the library's rules is
- * inherited rather than drifted away from. The Metrik-specific part — the
- * delivery gate — lives entirely in `./verified-delivery-facilitator.ts` and is
- * layered ON TOP of whatever this returns.
- */
-export declare const X402_CHAINS: Readonly<Record<number, Chain>>;
-export interface X402ChainOptions {
-    /** Default `84532` (Base Sepolia). */
-    readonly chainId?: number;
-    /** RPC endpoint. Required: the library's default public RPCs are not operable infrastructure. */
-    readonly rpcUrl: string;
-}
-/**
- * Read-only verifier. Needs an RPC because the `exact` scheme checks the payer's
- * on-chain balance; it holds no key and can broadcast nothing.
- */
-export declare function createX402PaymentVerifier(options: X402ChainOptions): PaymentVerifier;
-export interface X402RelayerOptions extends X402ChainOptions {
-    /**
-     * The relayer's private key. This wallet BROADCASTS and pays gas; it never
-     * custodies payment funds (EIP-3009 moves value directly from payer to payee).
-     * Supplied by the operator through the environment, exactly like every other
-     * wallet in this package. Never committed, never defaulted.
-     */
-    readonly privateKey: Hex;
-}
-/**
- * The settlement half. Constructing this is the ONLY place a key enters the
- * facilitator, and there is no code path that broadcasts without one.
- */
-export declare function createX402PaymentSettler(options: X402RelayerOptions): PaymentSettler;
-/** The relayer address, so an operator can check what they must fund with gas. */
-export declare function relayerAddress(privateKey: Hex): `0x${string}`;
-//# sourceMappingURL=relayer.d.ts.map

package/dist/x402/relayer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relayer.d.ts","sourceRoot":"","sources":["../../src/x402/relayer.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,KAAK,EACV,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAWd,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;;GASG;AAEH,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAGtD,CAAC;AAEH,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAUD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,GACxB,eAAe,CAkBjB;AAED,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,kBAAkB,GAC1B,cAAc,CAoBhB;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,UAAU,EAAE,GAAG,GAAG,KAAK,MAAM,EAAE,CAE7D"}