@agentcash/router 0.4.10 → 0.5.1

package/dist/index.cjs

@@ -1301,6 +1301,7 @@ var RouteBuilder = class {
 // src/discovery/well-known.ts
 var import_server3 = require("next/server");
 function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
+  const normalizedBase = baseUrl.replace(/\/+$/, "");
   let validated = false;
   return async (_request) => {
     if (!validated && pricesKeys) {
@@ -1310,7 +1311,7 @@ function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
     const x402Set = /* @__PURE__ */ new Set();
     const mppSet = /* @__PURE__ */ new Set();
     for (const [key, entry] of registry.entries()) {
-      const url = `${baseUrl}/api/${entry.path ?? key}`;
+      const url = `${normalizedBase}/api/${entry.path ?? key}`;
       if (entry.authMode !== "unprotected") x402Set.add(url);
       if (entry.protocols.includes("mpp")) mppSet.add(url);
     }
@@ -1350,6 +1351,7 @@ function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
 // src/discovery/openapi.ts
 var import_server4 = require("next/server");
 function createOpenAPIHandler(registry, baseUrl, pricesKeys, options) {
+  const normalizedBase = baseUrl.replace(/\/+$/, "");
   let cached = null;
   let validated = false;
   return async (_request) => {
@@ -1376,7 +1378,7 @@ function createOpenAPIHandler(registry, baseUrl, pricesKeys, options) {
         version: options.version,
         ...options.contact && { contact: options.contact }
       },
-      servers: [{ url: options.baseUrl ?? baseUrl }],
+      servers: [{ url: (options.baseUrl ?? normalizedBase).replace(/\/+$/, "") }],
       tags: Array.from(tagSet).sort().map((name) => ({ name })),
       paths
     });
@@ -1448,12 +1450,20 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL ?? "http://localhost:3000" : "http://localhost:3000";
+  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL : void 0);
   if (config.protocols && config.protocols.length === 0) {
     throw new Error(
       "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
+  if (!baseUrl) {
+    const msg = "baseUrl is required. Pass it in RouterConfig or set NEXT_PUBLIC_BASE_URL (e.g. https://myapp.com). It is used for discovery URLs, OpenAPI servers, and MPP realm.";
+    if (process.env.NODE_ENV === "production") {
+      throw new Error(msg);
+    }
+    console.warn(`[router] ${msg}`);
+  }
+  const resolvedBaseUrl = (baseUrl ?? "http://localhost:3000").replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {
@@ -1477,7 +1487,7 @@ function createRouter(config) {
   }
   if (config.plugin?.init) {
     try {
-      const result = config.plugin.init({ origin: baseUrl });
+      const result = config.plugin.init({ origin: resolvedBaseUrl });
       if (result && typeof result.catch === "function") {
         result.catch(() => {
         });
@@ -1526,7 +1536,8 @@ function createRouter(config) {
               }
             })
           ],
-          secretKey: config.mpp.secretKey
+          secretKey: config.mpp.secretKey,
+          realm: new URL(resolvedBaseUrl).host
         });
       } catch (err) {
         deps.mppx = null;
@@ -1546,10 +1557,10 @@ function createRouter(config) {
       return builder;
     },
     wellKnown(options) {
-      return createWellKnownHandler(registry, baseUrl, pricesKeys, options);
+      return createWellKnownHandler(registry, resolvedBaseUrl, pricesKeys, options);
     },
     openapi(options) {
-      return createOpenAPIHandler(registry, baseUrl, pricesKeys, options);
+      return createOpenAPIHandler(registry, resolvedBaseUrl, pricesKeys, options);
     },
     monitors() {
       const result = [];

package/dist/index.d.cts

@@ -227,6 +227,14 @@ interface RouteEntry {
 }
 interface RouterConfig {
     payeeAddress: string;
+    /**
+     * Production origin URL (e.g. `https://myapp.com`).
+     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     *
+     * Falls back to `NEXT_PUBLIC_BASE_URL` env var.
+     * Required in production — `next build` will fail without it.
+     */
+    baseUrl?: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.d.ts

@@ -227,6 +227,14 @@ interface RouteEntry {
 }
 interface RouterConfig {
     payeeAddress: string;
+    /**
+     * Production origin URL (e.g. `https://myapp.com`).
+     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     *
+     * Falls back to `NEXT_PUBLIC_BASE_URL` env var.
+     * Required in production — `next build` will fail without it.
+     */
+    baseUrl?: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.js

@@ -1264,6 +1264,7 @@ var RouteBuilder = class {
 // src/discovery/well-known.ts
 import { NextResponse as NextResponse3 } from "next/server";
 function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
+  const normalizedBase = baseUrl.replace(/\/+$/, "");
   let validated = false;
   return async (_request) => {
     if (!validated && pricesKeys) {
@@ -1273,7 +1274,7 @@ function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
     const x402Set = /* @__PURE__ */ new Set();
     const mppSet = /* @__PURE__ */ new Set();
     for (const [key, entry] of registry.entries()) {
-      const url = `${baseUrl}/api/${entry.path ?? key}`;
+      const url = `${normalizedBase}/api/${entry.path ?? key}`;
       if (entry.authMode !== "unprotected") x402Set.add(url);
       if (entry.protocols.includes("mpp")) mppSet.add(url);
     }
@@ -1313,6 +1314,7 @@ function createWellKnownHandler(registry, baseUrl, pricesKeys, options = {}) {
 // src/discovery/openapi.ts
 import { NextResponse as NextResponse4 } from "next/server";
 function createOpenAPIHandler(registry, baseUrl, pricesKeys, options) {
+  const normalizedBase = baseUrl.replace(/\/+$/, "");
   let cached = null;
   let validated = false;
   return async (_request) => {
@@ -1339,7 +1341,7 @@ function createOpenAPIHandler(registry, baseUrl, pricesKeys, options) {
         version: options.version,
         ...options.contact && { contact: options.contact }
       },
-      servers: [{ url: options.baseUrl ?? baseUrl }],
+      servers: [{ url: (options.baseUrl ?? normalizedBase).replace(/\/+$/, "") }],
       tags: Array.from(tagSet).sort().map((name) => ({ name })),
       paths
     });
@@ -1411,12 +1413,20 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL ?? "http://localhost:3000" : "http://localhost:3000";
+  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL : void 0);
   if (config.protocols && config.protocols.length === 0) {
     throw new Error(
       "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
+  if (!baseUrl) {
+    const msg = "baseUrl is required. Pass it in RouterConfig or set NEXT_PUBLIC_BASE_URL (e.g. https://myapp.com). It is used for discovery URLs, OpenAPI servers, and MPP realm.";
+    if (process.env.NODE_ENV === "production") {
+      throw new Error(msg);
+    }
+    console.warn(`[router] ${msg}`);
+  }
+  const resolvedBaseUrl = (baseUrl ?? "http://localhost:3000").replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {
@@ -1440,7 +1450,7 @@ function createRouter(config) {
   }
   if (config.plugin?.init) {
     try {
-      const result = config.plugin.init({ origin: baseUrl });
+      const result = config.plugin.init({ origin: resolvedBaseUrl });
       if (result && typeof result.catch === "function") {
         result.catch(() => {
         });
@@ -1489,7 +1499,8 @@ function createRouter(config) {
               }
             })
           ],
-          secretKey: config.mpp.secretKey
+          secretKey: config.mpp.secretKey,
+          realm: new URL(resolvedBaseUrl).host
         });
       } catch (err) {
         deps.mppx = null;
@@ -1509,10 +1520,10 @@ function createRouter(config) {
       return builder;
     },
     wellKnown(options) {
-      return createWellKnownHandler(registry, baseUrl, pricesKeys, options);
+      return createWellKnownHandler(registry, resolvedBaseUrl, pricesKeys, options);
     },
     openapi(options) {
-      return createOpenAPIHandler(registry, baseUrl, pricesKeys, options);
+      return createOpenAPIHandler(registry, resolvedBaseUrl, pricesKeys, options);
     },
     monitors() {
       const result = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "0.4.10",
+  "version": "0.5.1",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {
@@ -28,7 +28,7 @@
     "@x402/core": "^2.3.0",
     "@x402/evm": "^2.3.0",
     "@x402/extensions": "^2.3.0",
-    "mppx": "^0.2.4",
+    "mppx": "^0.3.2",
     "next": ">=15.0.0",
     "zod": "^4.0.0",
     "zod-openapi": "^5.0.0"
@@ -42,12 +42,13 @@
     "@changesets/cli": "^2.29.8",
     "@coinbase/x402": "^2.1.0",
     "@eslint/js": "^10.0.1",
+    "@modelcontextprotocol/sdk": "^1.26.0",
     "@types/node": "^22.0.0",
     "@x402/core": "^2.3.0",
     "@x402/evm": "^2.3.0",
     "@x402/extensions": "^2.3.0",
     "eslint": "^10.0.0",
-    "mppx": "^0.2.5",
+    "mppx": "^0.3.2",
     "next": "^15.0.0",
     "prettier": "^3.8.1",
     "react": "^19.0.0",