@agentcash/router 0.3.0 → 0.4.0

package/dist/index.js

@@ -320,63 +320,106 @@ async function settleX402Payment(server, payload, requirements) {
 }
 
 // src/protocols/mpp.ts
-var mpayLoaded = false;
-var Challenge;
-var Credential;
-var Receipt;
-var tempo;
-async function ensureMpay() {
-  if (mpayLoaded) return;
-  try {
-    const mpay = await import("mpay");
-    Challenge = mpay.Challenge;
-    Credential = mpay.Credential;
-    Receipt = mpay.Receipt;
-    const mpayServer = await import("mpay/server");
-    tempo = mpayServer.tempo;
-    mpayLoaded = true;
-  } catch {
-    throw new Error("mpay package is required for MPP protocol support. Install it: pnpm add mpay");
+import { Challenge, Credential, Receipt } from "mpay";
+import { tempo } from "mpay/server";
+import { createClient, http } from "viem";
+import { tempo as tempoChain } from "viem/chains";
+function buildGetClient(rpcUrl) {
+  const url = rpcUrl ?? process.env.TEMPO_RPC_URL;
+  if (!url) return {};
+  return {
+    getClient: () => createClient({ chain: tempoChain, transport: http(url) })
+  };
+}
+function toStandardRequest(request) {
+  if (request.constructor.name === "Request") {
+    return request;
   }
+  return new Request(request.url, {
+    method: request.method,
+    headers: request.headers,
+    body: request.body,
+    // @ts-expect-error - Request.duplex is required for streaming bodies but not in types yet
+    duplex: "half"
+  });
 }
+var DEFAULT_DECIMALS = 6;
 async function buildMPPChallenge(routeEntry, request, mppConfig, price) {
-  await ensureMpay();
+  const standardRequest = toStandardRequest(request);
+  const currency = mppConfig.currency;
+  const recipient = mppConfig.recipient ?? "";
   const methodIntent = tempo.charge({
-    amount: price,
-    currency: mppConfig.currency,
-    recipient: mppConfig.recipient ?? ""
+    currency,
+    recipient
   });
   const challenge = Challenge.fromIntent(methodIntent, {
     secretKey: mppConfig.secretKey,
-    realm: new URL(request.url).origin,
-    request
+    realm: new URL(standardRequest.url).origin,
+    request: {
+      amount: price,
+      currency,
+      recipient,
+      decimals: DEFAULT_DECIMALS
+    }
   });
   return Challenge.serialize(challenge);
 }
 async function verifyMPPCredential(request, _routeEntry, mppConfig, price) {
-  await ensureMpay();
-  const credential = Credential.fromRequest(request);
-  if (!credential) return null;
-  const isValid = Challenge.verify(credential.challenge, { secretKey: mppConfig.secretKey });
-  if (!isValid) {
-    return { valid: false, payer: null };
-  }
-  const chargeConfig = {
-    amount: price,
-    currency: mppConfig.currency,
-    recipient: mppConfig.recipient ?? ""
-  };
-  const verifyResult = await tempo.charge(chargeConfig).verify(credential);
-  if (!verifyResult?.valid) {
-    return { valid: false, payer: null };
+  const standardRequest = toStandardRequest(request);
+  const currency = mppConfig.currency;
+  const recipient = mppConfig.recipient ?? "";
+  try {
+    const authHeader = standardRequest.headers.get("Authorization");
+    if (!authHeader) {
+      console.error("[MPP] No Authorization header found");
+      return null;
+    }
+    const credential = Credential.fromRequest(standardRequest);
+    if (!credential?.challenge) {
+      console.error("[MPP] Invalid credential structure");
+      return null;
+    }
+    const isValid = Challenge.verify(credential.challenge, { secretKey: mppConfig.secretKey });
+    if (!isValid) {
+      console.error("[MPP] Challenge HMAC verification failed");
+      return { valid: false, payer: null };
+    }
+    const methodIntent = tempo.charge({
+      currency,
+      recipient,
+      ...buildGetClient(mppConfig.rpcUrl)
+    });
+    const paymentRequest = {
+      amount: price,
+      currency,
+      recipient,
+      decimals: DEFAULT_DECIMALS
+    };
+    const resolvedRequest = methodIntent.request ? await methodIntent.request({ credential, request: paymentRequest }) : paymentRequest;
+    const receipt = await methodIntent.verify({
+      credential,
+      request: resolvedRequest
+    });
+    if (!receipt || receipt.status !== "success") {
+      console.error("[MPP] Tempo verification failed:", receipt);
+      return { valid: false, payer: null };
+    }
+    const payer = receipt.reference ?? "";
+    return {
+      valid: true,
+      payer,
+      txHash: receipt.reference
+    };
+  } catch (error) {
+    console.error("[MPP] Credential verification error:", {
+      message: error instanceof Error ? error.message : String(error),
+      stack: error instanceof Error ? error.stack : void 0,
+      errorType: error?.constructor?.name
+    });
+    return null;
   }
-  return {
-    valid: true,
-    payer: verifyResult.payer
-  };
 }
-async function buildMPPReceipt(reference) {
-  await ensureMpay();
+function buildMPPReceipt(reference) {
   const receipt = Receipt.from({
     method: "tempo",
     status: "success",
@@ -489,7 +532,7 @@ function createRequestHandler(routeEntry, handler, deps) {
     if (routeEntry.authMode === "unprotected") {
       return handleAuth(null, void 0);
     }
-    let account = void 0;
+    let account;
     if (routeEntry.authMode === "apiKey" || routeEntry.apiKeyResolver) {
       if (!routeEntry.apiKeyResolver) {
         return fail(401, "API key resolver not configured", meta, pluginCtx);
@@ -504,6 +547,16 @@ function createRequestHandler(routeEntry, handler, deps) {
       }
     }
     const protocol = detectProtocol(request);
+    let earlyBodyData;
+    if (!protocol && typeof routeEntry.pricing === "function" && routeEntry.bodySchema) {
+      const requestForPricing = request.clone();
+      const earlyBodyResult = await parseBody(requestForPricing, routeEntry);
+      if (!earlyBodyResult.ok) {
+        firePluginResponse(deps, pluginCtx, meta, earlyBodyResult.response);
+        return earlyBodyResult.response;
+      }
+      earlyBodyData = earlyBodyResult.data;
+    }
     if (routeEntry.authMode === "siwx") {
       if (!request.headers.get("SIGN-IN-WITH-X")) {
         const url = new URL(request.url);
@@ -572,7 +625,7 @@ function createRequestHandler(routeEntry, handler, deps) {
       return handleAuth(siwx.wallet, void 0);
     }
     if (!protocol || protocol === "siwx") {
-      return await build402(request, routeEntry, deps, meta, pluginCtx);
+      return await build402(request, routeEntry, deps, meta, pluginCtx, earlyBodyData);
     }
     const body = await parseBody(request, routeEntry);
     if (!body.ok) {
@@ -710,10 +763,60 @@ function parseQuery(request, routeEntry) {
   const result = routeEntry.querySchema.safeParse(params);
   return result.success ? result.data : params;
 }
-async function build402(request, routeEntry, deps, meta, pluginCtx) {
-  const response = new NextResponse2(null, { status: 402 });
+async function resolveDynamicPrice(bodyData, routeEntry, deps, pluginCtx, meta) {
+  try {
+    let price = await resolvePrice(routeEntry.pricing, bodyData);
+    if (routeEntry.maxPrice) {
+      const calculated = parseFloat(price);
+      const max = parseFloat(routeEntry.maxPrice);
+      if (calculated > max) {
+        firePluginHook(deps.plugin, "onAlert", pluginCtx, {
+          level: "warn",
+          message: `Price ${price} exceeds maxPrice ${routeEntry.maxPrice}, capping`,
+          route: routeEntry.key,
+          meta: { calculated: price, maxPrice: routeEntry.maxPrice, body: bodyData }
+        });
+        price = routeEntry.maxPrice;
+      }
+    }
+    return { price };
+  } catch (err) {
+    firePluginHook(deps.plugin, "onAlert", pluginCtx, {
+      level: "error",
+      message: `Pricing function failed: ${err instanceof Error ? err.message : String(err)}`,
+      route: routeEntry.key,
+      meta: { error: err instanceof Error ? err.stack : String(err), body: bodyData }
+    });
+    if (routeEntry.maxPrice) {
+      firePluginHook(deps.plugin, "onAlert", pluginCtx, {
+        level: "warn",
+        message: `Using maxPrice ${routeEntry.maxPrice} as fallback after pricing error`,
+        route: routeEntry.key
+      });
+      return { price: routeEntry.maxPrice };
+    } else {
+      const errorResponse = NextResponse2.json(
+        { success: false, error: "Price calculation failed" },
+        { status: 500 }
+      );
+      firePluginResponse(deps, pluginCtx, meta, errorResponse);
+      return { error: errorResponse };
+    }
+  }
+}
+async function build402(request, routeEntry, deps, meta, pluginCtx, bodyData) {
+  const response = new NextResponse2(null, {
+    status: 402,
+    headers: {
+      "Content-Type": "application/json"
+    }
+  });
   let challengePrice;
-  if (routeEntry.maxPrice) {
+  if (bodyData !== void 0 && typeof routeEntry.pricing === "function") {
+    const result = await resolveDynamicPrice(bodyData, routeEntry, deps, pluginCtx, meta);
+    if ("error" in result) return result.error;
+    challengePrice = result.price;
+  } else if (routeEntry.maxPrice) {
     challengePrice = routeEntry.maxPrice;
   } else if (routeEntry.pricing) {
     try {
@@ -874,9 +977,6 @@ var RouteBuilder = class {
     next._pricing = pricing;
     if (options?.protocols) next._protocols = options.protocols;
     if (options?.maxPrice) next._maxPrice = options.maxPrice;
-    if (typeof pricing === "function" && !options?.maxPrice) {
-      throw new Error(`route '${this._key}': dynamic pricing requires maxPrice option`);
-    }
     if (typeof pricing === "object" && "tiers" in pricing) {
       for (const [tierKey, tierConfig] of Object.entries(pricing.tiers)) {
         if (!tierKey) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {
@@ -19,7 +19,9 @@
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
-    "dist"
+    "dist",
+    ".claude/CLAUDE.md",
+    ".claude/skills"
   ],
   "scripts": {
     "build": "tsup",
@@ -42,11 +44,6 @@
     "zod": "^4.0.0",
     "zod-openapi": "^5.0.0"
   },
-  "peerDependenciesMeta": {
-    "mpay": {
-      "optional": true
-    }
-  },
   "devDependencies": {
     "@coinbase/x402": "^2.1.0",
     "@eslint/js": "^10.0.1",
@@ -62,6 +59,7 @@
     "tsup": "^8.0.0",
     "typescript": "^5.8.0",
     "typescript-eslint": "^8.55.0",
+    "viem": "^2.0.0",
     "vitest": "^3.0.0",
     "zod": "^4.0.0",
     "zod-openapi": "^5.0.0"