@absol-labs/agent 0.11.0 → 0.12.0-rc.2

package/dist/gateway/x402-mode.js

@@ -1,212 +0,0 @@
-import { buildMetrikPaymentRequirements, buildX402PaymentRequiredBody, } from "../x402/payment-requirements.js";
-/**
- * Standard x402 mode for the seller-side gateway (Tier 1).
- *
- * The gateway already authorizes requests that carry a Metrik
- * `InvocationCapability` — a buyer with an open, funded, verified stream. That
- * path is untouched. This module adds a SECOND, independent way in: a request
- * with no capability gets an ordinary HTTP `402` carrying real x402
- * `PaymentRequirements`, so an agent holding nothing but `x402-fetch` can pay
- * per call without knowing Metrik exists.
- *
- * ## The two paths never overlap
- *
- * - capability header present -> stream path, exactly as before;
- * - capability header absent, x402 mode on -> `402` + `PaymentRequirements`;
- * - BOTH present -> rejected. A request that looks like both is ambiguous about
- *   which one is paying for it, and the failure mode of guessing is charging the
- *   caller twice for one call. Better a loud `400` than a silent double charge.
- *
- * ## The per-call price is the seller's, and is not signed
- *
- * `payTo` comes from the operator-signed descriptor (see
- * `../x402/payment-requirements.ts`). The price does not — the descriptor has no
- * per-call price field. It is the seller's own number on the seller's own
- * gateway, which is legitimate, but a buyer cannot cross-check it against the
- * registry the way they can cross-check the payee.
- */
-/** Request header carrying the x402 payment payload (x402 v1). */
-export const X402_PAYMENT_HEADER = "x-payment";
-/** Response header carrying the settlement result (x402 v1). */
-export const X402_PAYMENT_RESPONSE_HEADER = "x-payment-response";
-/**
- * Talks to any x402 facilitator over HTTP — including Metrik's own
- * (`../x402/facilitator-server.ts`), which is the point: a seller who wires this
- * gateway to the Metrik facilitator gets a paywall whose payments stop when
- * their own delivery stops being verifiable.
- */
-export function createHttpFacilitatorClient(options) {
-    const base = options.url.replace(/\/+$/, "");
-    const timeoutMs = options.timeoutMs ?? 10_000;
-    const doFetch = options.fetch ?? globalThis.fetch;
-    async function post(path, body) {
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), timeoutMs);
-        try {
-            const response = await doFetch(`${base}${path}`, {
-                method: "POST",
-                headers: {
-                    "content-type": "application/json",
-                    ...(options.token === undefined
-                        ? {}
-                        : { authorization: `Bearer ${options.token}` }),
-                    ...(options.headers ?? {}),
-                },
-                body: JSON.stringify(body),
-                signal: controller.signal,
-            });
-            return await response.json();
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    return {
-        async verify(payload, requirements) {
-            const result = (await post("/verify", {
-                x402Version: 1,
-                paymentPayload: payload,
-                paymentRequirements: requirements,
-            }));
-            // Fail closed: an unreadable facilitator answer is not a pass.
-            if (typeof result !== "object" || result === null) {
-                return { isValid: false, invalidReason: "unexpected_verify_error" };
-            }
-            return result;
-        },
-        async settle(payload, requirements) {
-            return (await post("/settle", {
-                x402Version: 1,
-                paymentPayload: payload,
-                paymentRequirements: requirements,
-            }));
-        },
-    };
-}
-/** One flat price per call, quoted against the request's own path. */
-export function createListingPriceQuoter(options) {
-    const base = new URL(options.resourceBaseUrl);
-    return (request) => [
-        buildMetrikPaymentRequirements({
-            listing: options.listing,
-            resource: new URL(request.path, base).toString(),
-            priceBaseUnits: options.pricePerCallBaseUnits,
-            chainId: options.chainId,
-            ...(options.description === undefined
-                ? {}
-                : { description: options.description }),
-            ...(options.mimeType === undefined ? {} : { mimeType: options.mimeType }),
-            ...(options.maxTimeoutSeconds === undefined
-                ? {}
-                : { maxTimeoutSeconds: options.maxTimeoutSeconds }),
-            ...(options.asset === undefined ? {} : { asset: options.asset }),
-        }),
-    ];
-}
-/**
- * Evaluates the x402 half of a request. Returns either the `402` body to send or
- * an accepted payment to settle after the upstream has been called.
- */
-export async function evaluateX402Request(request, paymentHeader, mode) {
-    const accepts = await mode.quote(request);
-    if (paymentHeader === undefined || paymentHeader.trim().length === 0) {
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts),
-        };
-    }
-    const payload = decodePaymentHeader(paymentHeader);
-    if (payload === undefined) {
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts, "X-PAYMENT header is not base64-encoded JSON"),
-        };
-    }
-    const requirements = selectRequirements(accepts, payload);
-    if (requirements === undefined) {
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts, "X-PAYMENT does not match any offered payment requirements"),
-        };
-    }
-    let verified;
-    try {
-        verified = await mode.facilitator.verify(payload, requirements);
-    }
-    catch (error) {
-        // An unreachable facilitator is a refusal, never a free call.
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts, `payment could not be verified: ${error instanceof Error ? error.message : "facilitator unreachable"}`),
-        };
-    }
-    if (!verified.isValid) {
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts, verified.invalidReason ?? "payment rejected by facilitator"),
-        };
-    }
-    // A Metrik facilitator reports up front whether it would actually broadcast
-    // this payment (asset allowlist, settlement scope, ...). Refusing HERE — before
-    // the upstream runs — is the difference between "the caller gets nothing" and
-    // "the caller gets the upstream's side effects for free and we cannot charge
-    // for them". A non-Metrik facilitator omits the field and nothing changes.
-    const annotation = verified.metrik;
-    if (annotation?.settleable === false) {
-        return {
-            outcome: "payment-required",
-            body: buildX402PaymentRequiredBody(accepts, `facilitator will not settle this payment: ${annotation.detail ?? "refused"}`),
-        };
-    }
-    const validBefore = readValidBefore(payload);
-    return {
-        outcome: "accepted",
-        payment: {
-            payload,
-            requirements,
-            ...(verified.payer === undefined ? {} : { payer: verified.payer }),
-            ...(validBefore === undefined ? {} : { validBefore }),
-        },
-    };
-}
-/** Reads the exact-EVM authorization deadline, if the payload has one. */
-function readValidBefore(payload) {
-    const authorization = payload?.payload?.authorization;
-    const raw = authorization?.validBefore;
-    if (typeof raw !== "string" && typeof raw !== "number") {
-        return undefined;
-    }
-    const parsed = Number(raw);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
-}
-/**
- * Seconds of headroom the settlement leg needs after the upstream returns.
- *
- * The x402 `exact` verifier rejects an authorization whose `validBefore` is less
- * than 6 s away, so an upstream allowed to run right up to the deadline would
- * hand back a response that can never be settled. This leaves room for that
- * check plus the settle round trip.
- */
-export const X402_SETTLEMENT_HEADROOM_SECONDS = 10;
-/** Matches the payload's scheme+network against the quotes actually offered. */
-function selectRequirements(accepts, payload) {
-    if (typeof payload !== "object" || payload === null) {
-        return undefined;
-    }
-    const { scheme, network } = payload;
-    return accepts.find((candidate) => candidate.scheme === scheme && candidate.network === network);
-}
-export function decodePaymentHeader(header) {
-    try {
-        const decoded = Buffer.from(header.trim(), "base64").toString("utf8");
-        const parsed = JSON.parse(decoded);
-        return typeof parsed === "object" && parsed !== null ? parsed : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function encodeSettleResponseHeader(response) {
-    return Buffer.from(JSON.stringify(response), "utf8").toString("base64");
-}
-//# sourceMappingURL=x402-mode.js.map

package/dist/gateway/x402-mode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"x402-mode.js","sourceRoot":"","sources":["../../src/gateway/x402-mode.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,GAI7B,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAoB,CAAC;AAExD,gEAAgE;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AA4B1E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAElD,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,IAAa;QAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC/C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;wBAC7B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBACjD,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE;gBACpC,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,OAAO;gBACvB,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAmB,CAAC;YACtB,+DAA+D;YAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,yBAAyB,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY;YAChC,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE;gBAC5B,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,OAAO;gBACvB,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAmB,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAClB,8BAA8B,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE;YAChD,cAAc,EAAE,OAAO,CAAC,qBAAqB;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC;KACH,CAAC;AACJ,CAAC;AA8BD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA2D,EAC3D,aAAiC,EACjC,IAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAAC,OAAO,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,6CAA6C,CAC9C;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,2DAA2D,CAC5D;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,kCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAC3C,EAAE,CACH;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,QAAQ,CAAC,aAAa,IAAI,iCAAiC,CAC5D;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,UAAU,GACd,QACD,CAAC,MAAM,CAAC;IACT,IAAI,UAAU,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,6CAA6C,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,CAC9E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE7C,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE;YACP,OAAO;YACP,YAAY;YACZ,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,aAAa,GACjB,OACD,EAAE,OAAO,EAAE,aAAa,CAAC;IAC1B,MAAM,GAAG,GAAG,aAAa,EAAE,WAAW,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD,gFAAgF;AAChF,SAAS,kBAAkB,CACzB,OAAuC,EACvC,OAAgB;IAEhB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAG3B,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC"}

package/dist/x402/delivery-oracle.d.ts

@@ -1,108 +0,0 @@
-/**
- * The Metrik delivery signal, as consumed by the x402 facilitator.
- *
- * ## Where the signal comes from
- *
- * The oracle publishes `GET /services` — one row per `serviceRef`, reduced from
- * the oracle's own settlement-path verdicts for the active streams of that
- * service (`streamproof-oracle/src/service-status.ts`). Its three states are
- * already buyer-favouring at the source: a FRESH failing stream beats a fresh
- * delivering sibling, and absent/stale evidence is reported as `unverified`
- * rather than folded into "fine".
- *
- * ## Why this module re-checks freshness the oracle already checked
- *
- * The oracle's own bound is 5 minutes (`DEFAULT_SERVICE_STATUS_TTL_MS`), which
- * is a sensible bound for a dashboard and far too loose for a payment gate. On
- * top of that the HTTP response itself can be cached or served by a stale
- * replica, and `lastCheckedAt` is the only field that dates the EVIDENCE rather
- * than the response. So the age of `lastCheckedAt` is re-derived here against
- * this module's own, much tighter window.
- *
- * ## The freshness window: 90 seconds, and why
- *
- * The oracle checkpoints every ~15–22 s, and a service's recorded status is
- * refreshed on that cadence. A window has to be wide enough that ordinary
- * jitter does not flap the gate, and narrow enough that "verified" still means
- * "now":
- *
- *   - 3 worst-case probe intervals (3 x 22 s = 66 s) absorbs two consecutive
- *     missed or slow ticks, which is normal operational noise, not evidence of
- *     a dead service.
- *   - plus the oracle's own record-and-serve latency and this process's fetch
- *     round trip, rounded up: **90 s**.
- *
- * Tighter (e.g. 30 s) and a single slow tick turns a healthy service's gate
- * indeterminate. Looser (e.g. the oracle's own 300 s) and a service that died
- * four minutes ago still reads `delivering`, which is exactly the claim this
- * gate exists to avoid making.
- *
- * Note this window is strictly stricter than the oracle's: a verdict aged
- * between 90 s and 300 s is `delivering` at the source and `indeterminate`
- * here.
- */
-export declare const DEFAULT_DELIVERY_FRESHNESS_SECONDS = 90;
-/** How long a fetched `/services` snapshot may be reused. See `verdictFor`. */
-export declare const DEFAULT_DELIVERY_SNAPSHOT_TTL_MS = 10000;
-/** Request timeout for the oracle read. Short: this sits in a payment hot path. */
-export declare const DEFAULT_DELIVERY_ORACLE_TIMEOUT_MS = 4000;
-export declare const DEFAULT_METRIK_ORACLE_URL = "https://oracle.metrik.live";
-/**
- * Three states, never two.
- *
- * `indeterminate` is deliberately NOT collapsed into either of the others: the
- * facilitator's policy for "no fresh evidence" is a separate, configurable
- * decision (see `./verified-delivery-facilitator.ts`), and folding it into
- * `failing` would make Metrik refuse every payment whenever its own oracle is
- * quiet or unreachable.
- */
-export type DeliveryVerdict = "delivering" | "failing" | "indeterminate";
-/** Why the verdict is what it is — machine-readable, for logs and for tests. */
-export type DeliveryVerdictReason = "fresh-delivering" | "fresh-failing" | "no-fresh-evidence" | "verdict-stale" | "service-not-listed" | "oracle-unreachable" | "oracle-malformed";
-export interface DeliveryAssessment {
-    readonly serviceRef: string;
-    readonly verdict: DeliveryVerdict;
-    readonly reason: DeliveryVerdictReason;
-    /** Unix ms of the newest recorded check for this service, when known. */
-    readonly lastCheckedAt: number | null;
-    /** Age of `lastCheckedAt` in seconds, when known. */
-    readonly ageSeconds: number | null;
-    /** The freshness window applied, in seconds. */
-    readonly freshnessWindowSeconds: number;
-}
-export interface MetrikDeliveryOracle {
-    /** Never throws: an unreachable oracle is an `indeterminate` verdict, not an exception. */
-    verdictFor(serviceRef: string): Promise<DeliveryAssessment>;
-}
-export type FetchLike = (input: string, init?: {
-    signal?: AbortSignal;
-    headers?: Record<string, string>;
-}) => Promise<{
-    ok: boolean;
-    status: number;
-    json(): Promise<unknown>;
-}>;
-export interface OracleDeliveryOracleOptions {
-    /** Oracle base URL. Default {@link DEFAULT_METRIK_ORACLE_URL}. */
-    readonly oracleUrl?: string;
-    /** Default {@link DEFAULT_DELIVERY_FRESHNESS_SECONDS}. */
-    readonly freshnessWindowSeconds?: number;
-    /** Default {@link DEFAULT_DELIVERY_SNAPSHOT_TTL_MS}. */
-    readonly snapshotTtlMs?: number;
-    readonly timeoutMs?: number;
-    readonly fetch?: FetchLike;
-    /** Injectable clock (unix ms), for tests. */
-    readonly now?: () => number;
-}
-/**
- * Reads `GET {oracleUrl}/services` and projects one row onto a
- * {@link DeliveryAssessment}.
- *
- * The snapshot is cached for {@link DEFAULT_DELIVERY_SNAPSHOT_TTL_MS} so a burst
- * of payments does not become a burst of oracle reads. The cache is SHORTER than
- * the freshness window by design, and caching cannot make a verdict look fresher
- * than it is: freshness is computed from the row's own `lastCheckedAt`, never
- * from when we fetched it.
- */
-export declare function createOracleDeliveryOracle(options?: OracleDeliveryOracleOptions): MetrikDeliveryOracle;
-//# sourceMappingURL=delivery-oracle.d.ts.map

package/dist/x402/delivery-oracle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-oracle.d.ts","sourceRoot":"","sources":["../../src/x402/delivery-oracle.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,eAAO,MAAM,kCAAkC,KAAK,CAAC;AAErD,+EAA+E;AAC/E,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,kCAAkC,OAAQ,CAAC;AAExD,eAAO,MAAM,yBAAyB,+BAA+B,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,SAAS,GAAG,eAAe,CAAC;AAEzE,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,eAAe,GACf,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gDAAgD;IAChD,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,2FAA2F;IAC3F,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7D;AAeD,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAC9D,OAAO,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,WAAW,2BAA2B;IAC1C,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,wDAAwD;IACxD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,2BAAgC,GACxC,oBAAoB,CA+HtB"}

package/dist/x402/delivery-oracle.js

@@ -1,174 +0,0 @@
-import { z } from "zod";
-/**
- * The Metrik delivery signal, as consumed by the x402 facilitator.
- *
- * ## Where the signal comes from
- *
- * The oracle publishes `GET /services` — one row per `serviceRef`, reduced from
- * the oracle's own settlement-path verdicts for the active streams of that
- * service (`streamproof-oracle/src/service-status.ts`). Its three states are
- * already buyer-favouring at the source: a FRESH failing stream beats a fresh
- * delivering sibling, and absent/stale evidence is reported as `unverified`
- * rather than folded into "fine".
- *
- * ## Why this module re-checks freshness the oracle already checked
- *
- * The oracle's own bound is 5 minutes (`DEFAULT_SERVICE_STATUS_TTL_MS`), which
- * is a sensible bound for a dashboard and far too loose for a payment gate. On
- * top of that the HTTP response itself can be cached or served by a stale
- * replica, and `lastCheckedAt` is the only field that dates the EVIDENCE rather
- * than the response. So the age of `lastCheckedAt` is re-derived here against
- * this module's own, much tighter window.
- *
- * ## The freshness window: 90 seconds, and why
- *
- * The oracle checkpoints every ~15–22 s, and a service's recorded status is
- * refreshed on that cadence. A window has to be wide enough that ordinary
- * jitter does not flap the gate, and narrow enough that "verified" still means
- * "now":
- *
- *   - 3 worst-case probe intervals (3 x 22 s = 66 s) absorbs two consecutive
- *     missed or slow ticks, which is normal operational noise, not evidence of
- *     a dead service.
- *   - plus the oracle's own record-and-serve latency and this process's fetch
- *     round trip, rounded up: **90 s**.
- *
- * Tighter (e.g. 30 s) and a single slow tick turns a healthy service's gate
- * indeterminate. Looser (e.g. the oracle's own 300 s) and a service that died
- * four minutes ago still reads `delivering`, which is exactly the claim this
- * gate exists to avoid making.
- *
- * Note this window is strictly stricter than the oracle's: a verdict aged
- * between 90 s and 300 s is `delivering` at the source and `indeterminate`
- * here.
- */
-export const DEFAULT_DELIVERY_FRESHNESS_SECONDS = 90;
-/** How long a fetched `/services` snapshot may be reused. See `verdictFor`. */
-export const DEFAULT_DELIVERY_SNAPSHOT_TTL_MS = 10_000;
-/** Request timeout for the oracle read. Short: this sits in a payment hot path. */
-export const DEFAULT_DELIVERY_ORACLE_TIMEOUT_MS = 4_000;
-export const DEFAULT_METRIK_ORACLE_URL = "https://oracle.metrik.live";
-/** The subset of the oracle's `/services` row this module relies on. */
-const serviceStatusRowSchema = z
-    .object({
-    serviceRef: z.string(),
-    status: z.enum(["delivering", "failing", "unverified"]),
-    lastCheckedAt: z.number().nullable().optional(),
-})
-    .passthrough();
-const servicesResponseSchema = z.object({
-    services: z.array(serviceStatusRowSchema),
-});
-/**
- * Reads `GET {oracleUrl}/services` and projects one row onto a
- * {@link DeliveryAssessment}.
- *
- * The snapshot is cached for {@link DEFAULT_DELIVERY_SNAPSHOT_TTL_MS} so a burst
- * of payments does not become a burst of oracle reads. The cache is SHORTER than
- * the freshness window by design, and caching cannot make a verdict look fresher
- * than it is: freshness is computed from the row's own `lastCheckedAt`, never
- * from when we fetched it.
- */
-export function createOracleDeliveryOracle(options = {}) {
-    const oracleUrl = (options.oracleUrl ?? DEFAULT_METRIK_ORACLE_URL).replace(/\/+$/, "");
-    const freshnessWindowSeconds = options.freshnessWindowSeconds ?? DEFAULT_DELIVERY_FRESHNESS_SECONDS;
-    if (!Number.isFinite(freshnessWindowSeconds) || freshnessWindowSeconds <= 0) {
-        throw new Error("freshnessWindowSeconds must be a positive number");
-    }
-    const snapshotTtlMs = options.snapshotTtlMs ?? DEFAULT_DELIVERY_SNAPSHOT_TTL_MS;
-    const timeoutMs = options.timeoutMs ?? DEFAULT_DELIVERY_ORACLE_TIMEOUT_MS;
-    const doFetch = (options.fetch ??
-        ((input, init) => globalThis.fetch(input, init)));
-    const now = options.now ?? (() => Date.now());
-    let snapshot;
-    let inFlight;
-    async function loadSnapshot() {
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), timeoutMs);
-        try {
-            const response = await doFetch(`${oracleUrl}/services`, {
-                signal: controller.signal,
-                headers: { accept: "application/json", "cache-control": "no-cache" },
-            });
-            if (!response.ok) {
-                return {
-                    fetchedAtMs: now(),
-                    rows: null,
-                    failure: "oracle-unreachable",
-                };
-            }
-            const parsed = servicesResponseSchema.safeParse(await response.json());
-            if (!parsed.success) {
-                return { fetchedAtMs: now(), rows: null, failure: "oracle-malformed" };
-            }
-            const rows = new Map();
-            for (const row of parsed.data.services) {
-                rows.set(row.serviceRef.toLowerCase(), row);
-            }
-            return { fetchedAtMs: now(), rows, failure: null };
-        }
-        catch {
-            return { fetchedAtMs: now(), rows: null, failure: "oracle-unreachable" };
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    async function currentSnapshot() {
-        const cached = snapshot;
-        if (cached !== undefined && now() - cached.fetchedAtMs < snapshotTtlMs) {
-            return cached;
-        }
-        // Collapse concurrent misses onto one request.
-        inFlight ??= loadSnapshot().finally(() => {
-            inFlight = undefined;
-        });
-        const loaded = await inFlight;
-        snapshot = loaded;
-        return loaded;
-    }
-    return {
-        async verdictFor(serviceRef) {
-            const key = serviceRef.toLowerCase();
-            const loaded = await currentSnapshot();
-            if (loaded.rows === null) {
-                return indeterminate(serviceRef, loaded.failure ?? "oracle-unreachable", null, freshnessWindowSeconds);
-            }
-            const row = loaded.rows.get(key);
-            if (row === undefined) {
-                return indeterminate(serviceRef, "service-not-listed", null, freshnessWindowSeconds);
-            }
-            const lastCheckedAt = row.lastCheckedAt ?? null;
-            const ageSeconds = lastCheckedAt === null
-                ? null
-                : Math.max(0, Math.round((now() - lastCheckedAt) / 1000));
-            if (row.status === "unverified") {
-                return indeterminate(serviceRef, "no-fresh-evidence", lastCheckedAt, freshnessWindowSeconds, ageSeconds);
-            }
-            // The oracle dated its own verdict; if it cannot be shown to be recent it
-            // is not evidence of anything, in EITHER direction.
-            if (ageSeconds === null || ageSeconds > freshnessWindowSeconds) {
-                return indeterminate(serviceRef, "verdict-stale", lastCheckedAt, freshnessWindowSeconds, ageSeconds);
-            }
-            return {
-                serviceRef,
-                verdict: row.status === "failing" ? "failing" : "delivering",
-                reason: row.status === "failing" ? "fresh-failing" : "fresh-delivering",
-                lastCheckedAt,
-                ageSeconds,
-                freshnessWindowSeconds,
-            };
-        },
-    };
-}
-function indeterminate(serviceRef, reason, lastCheckedAt, freshnessWindowSeconds, ageSeconds = null) {
-    return {
-        serviceRef,
-        verdict: "indeterminate",
-        reason,
-        lastCheckedAt,
-        ageSeconds,
-        freshnessWindowSeconds,
-    };
-}
-//# sourceMappingURL=delivery-oracle.js.map

package/dist/x402/delivery-oracle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-oracle.js","sourceRoot":"","sources":["../../src/x402/delivery-oracle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAErD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAEvD,mFAAmF;AACnF,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,CAAC;AAExD,MAAM,CAAC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAwCtE,wEAAwE;AACxE,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CAC1C,CAAC,CAAC;AAwBH;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAAuC,EAAE;IAEzC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,yBAAyB,CAAC,CAAC,OAAO,CACxE,MAAM,EACN,EAAE,CACH,CAAC;IACF,MAAM,sBAAsB,GAC1B,OAAO,CAAC,sBAAsB,IAAI,kCAAkC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,IAAI,gCAAgC,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kCAAkC,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK;QAC5B,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAc,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAO9C,IAAI,QAA8B,CAAC;IACnC,IAAI,QAAuC,CAAC;IAE5C,KAAK,UAAU,YAAY;QACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,SAAS,WAAW,EAAE;gBACtD,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;aACrE,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,WAAW,EAAE,GAAG,EAAE;oBAClB,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,oBAAoB;iBAC9B,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;YACzE,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkD,CAAC;YACvE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,eAAe;QAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,GAAG,aAAa,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,+CAA+C;QAC/C,QAAQ,KAAK,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACvC,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC9B,QAAQ,GAAG,MAAM,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,UAAU;YACzB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,aAAa,CAClB,UAAU,EACV,MAAM,CAAC,OAAO,IAAI,oBAAoB,EACtC,IAAI,EACJ,sBAAsB,CACvB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,aAAa,CAClB,UAAU,EACV,oBAAoB,EACpB,IAAI,EACJ,sBAAsB,CACvB,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;YAChD,MAAM,UAAU,GACd,aAAa,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,aAAa,CAClB,UAAU,EACV,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,UAAU,CACX,CAAC;YACJ,CAAC;YACD,0EAA0E;YAC1E,oDAAoD;YACpD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,GAAG,sBAAsB,EAAE,CAAC;gBAC/D,OAAO,aAAa,CAClB,UAAU,EACV,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,UAAU,CACX,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,UAAU;gBACV,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;gBAC5D,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB;gBACvE,aAAa;gBACb,UAAU;gBACV,sBAAsB;aACvB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAkB,EAClB,MAA6B,EAC7B,aAA4B,EAC5B,sBAA8B,EAC9B,aAA4B,IAAI;IAEhC,OAAO;QACL,UAAU;QACV,OAAO,EAAE,eAAe;QACxB,MAAM;QACN,aAAa;QACb,UAAU;QACV,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/dist/x402/facilitator-server-entry.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=facilitator-server-entry.d.ts.map

package/dist/x402/facilitator-server-entry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"facilitator-server-entry.d.ts","sourceRoot":"","sources":["../../src/x402/facilitator-server-entry.ts"],"names":[],"mappings":""}

package/dist/x402/facilitator-server-entry.js

@@ -1,27 +0,0 @@
-#!/usr/bin/env node
-import { startMetrikFacilitatorServerFromEnv } from "./facilitator-server.js";
-/**
- * Runnable entrypoint for Metrik's x402 facilitator (`metrik-x402-facilitator`).
- * All configuration comes from the environment; see
- * {@link parseMetrikFacilitatorEnvConfig}. Refuses to start without a
- * settlement relayer unless `METRIK_X402_ALLOW_VERIFY_ONLY=true`.
- */
-async function main() {
-    const server = await startMetrikFacilitatorServerFromEnv();
-    const host = process.env.METRIK_X402_HOST ?? "0.0.0.0";
-    console.error(`[metrik-x402-facilitator] listening on http://${host}:${server.boundPort}`);
-    const shutdown = (signal) => {
-        console.error(`[metrik-x402-facilitator] ${signal} received — shutting down`);
-        server
-            .close()
-            .then(() => process.exit(0))
-            .catch(() => process.exit(1));
-    };
-    process.on("SIGINT", () => shutdown("SIGINT"));
-    process.on("SIGTERM", () => shutdown("SIGTERM"));
-}
-main().catch((error) => {
-    console.error(error instanceof Error ? error.message : "failed to start x402 facilitator");
-    process.exit(1);
-});
-//# sourceMappingURL=facilitator-server-entry.js.map

package/dist/x402/facilitator-server-entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"facilitator-server-entry.js","sourceRoot":"","sources":["../../src/x402/facilitator-server-entry.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAE9E;;;;;GAKG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,mCAAmC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC;IACvD,OAAO,CAAC,KAAK,CACX,iDAAiD,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAC5E,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,CACX,6BAA6B,MAAM,2BAA2B,CAC/D,CAAC;QACF,MAAM;aACH,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAC5E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/x402/facilitator-server.d.ts

@@ -1,73 +0,0 @@
-import { type Server } from "node:http";
-import { type Hex } from "viem";
-import { MetrikVerifiedDeliveryFacilitator, type IndeterminatePolicy, type SettlementScope } from "./verified-delivery-facilitator.js";
-export interface MetrikFacilitatorServerConfig {
-    readonly facilitator: MetrikVerifiedDeliveryFacilitator;
-    /** Present only to report settlement availability on `/supported`. */
-    readonly settlementEnabled: boolean;
-    /**
-     * Shared secret required on `POST /settle`.
-     *
-     * `/settle` spends the operator's gas: it makes the relayer sign and
-     * broadcast. It is not a public read, and leaving it open on `0.0.0.0` makes
-     * it a permissionless "make the relayer broadcast for me" endpoint. `/verify`
-     * and `/supported` stay public — they cost nothing and are genuinely useful
-     * to anyone.
-     *
-     * Omit ONLY for a verify-only server. `startMetrikFacilitatorServerFromEnv`
-     * refuses to start a settling facilitator without one.
-     */
-    readonly settlementToken?: string;
-}
-export interface MetrikFacilitatorServer {
-    readonly httpServer: Server;
-    listen(port: number, host?: string): Promise<{
-        port: number;
-        host: string;
-    }>;
-    close(): Promise<void>;
-}
-export declare function createMetrikFacilitatorServer(config: MetrikFacilitatorServerConfig): MetrikFacilitatorServer;
-export interface MetrikFacilitatorEnvConfig {
-    readonly host: string;
-    readonly port: number;
-    readonly chainId: number;
-    readonly rpcUrl: string;
-    readonly oracleUrl: string;
-    readonly registryUrl?: string;
-    readonly freshnessWindowSeconds: number;
-    readonly indeterminatePolicy: IndeterminatePolicy;
-    /** `undefined` means settlement is DISABLED — `/settle` will refuse loudly. */
-    readonly relayerPrivateKey?: Hex;
-    /** Required whenever a relayer is configured. Guards `POST /settle`. */
-    readonly settlementToken?: string;
-    /** Token contracts the relayer may be asked to call. Defaults to chain USDC. */
-    readonly settlementAssetAllowlist?: readonly string[];
-    readonly settlementScope: SettlementScope;
-}
-/**
- * Env contract:
- * - `METRIK_X402_RPC_URL` (required) — RPC for balance checks and, when a relayer
- *   is configured, for broadcasting.
- * - `METRIK_X402_RELAYER_PRIVATE_KEY` (required unless
- *   `METRIK_X402_ALLOW_VERIFY_ONLY=true`) — the relayer that broadcasts EIP-3009
- *   transfers and pays gas.
- * - `METRIK_X402_ALLOW_VERIFY_ONLY` (optional) — explicit opt-in to booting a
- *   verify-only facilitator. Without it, a missing relayer key is a STARTUP
- *   FAILURE rather than a server that silently never settles.
- * - `METRIK_X402_CHAIN_ID` (optional) — default `84532`.
- * - `METRIK_X402_ORACLE_URL` (optional) — default the public Metrik oracle.
- * - `METRIK_X402_REGISTRY_URL` (optional) — listing source; default the oracle's
- *   public credential-free registry.
- * - `METRIK_X402_FRESHNESS_SECONDS` (optional) — default
- *   {@link DEFAULT_DELIVERY_FRESHNESS_SECONDS}.
- * - `METRIK_X402_INDETERMINATE_POLICY` (optional) — `allow` (default) or `deny`.
- * - `PORT` / `METRIK_X402_PORT` (optional) — default `8788`.
- * - `METRIK_X402_HOST` (optional) — default `0.0.0.0`.
- */
-export declare function parseMetrikFacilitatorEnvConfig(env?: NodeJS.ProcessEnv): MetrikFacilitatorEnvConfig;
-export declare function buildMetrikFacilitatorFromEnvConfig(config: MetrikFacilitatorEnvConfig): MetrikVerifiedDeliveryFacilitator;
-export declare function startMetrikFacilitatorServerFromEnv(env?: NodeJS.ProcessEnv): Promise<MetrikFacilitatorServer & {
-    readonly boundPort: number;
-}>;
-//# sourceMappingURL=facilitator-server.d.ts.map

package/dist/x402/facilitator-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"facilitator-server.d.ts","sourceRoot":"","sources":["../../src/x402/facilitator-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAKnB,OAAO,EAAoB,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAalD,OAAO,EAEL,iCAAiC,EAEjC,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACrB,MAAM,oCAAoC,CAAC;AAc5C,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,EAAE,iCAAiC,CAAC;IACxD,sEAAsE;IACtE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,6BAA6B,GACpC,uBAAuB,CAkCzB;AAsHD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,+EAA+E;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,gFAAgF;IAChF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,0BAA0B,CA4G5B;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,0BAA0B,GACjC,iCAAiC,CA+BnC;AAED,wBAAsB,mCAAmC,CACvD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,uBAAuB,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAmCnE"}