@agentcash/router 0.6.4 → 0.6.6

package/.claude/CLAUDE.md

@@ -131,6 +131,21 @@ router
 
 ## Environment Variables
 
+### Base URL
+
+`baseUrl` is **required** in `RouterConfig`. No auto-detection, no fallbacks. The realm is load-bearing for payment matching (MPP memo indexing, 402 challenge realm), so it must be explicitly set.
+
+```typescript
+createRouter({
+  baseUrl: process.env.BASE_URL!,
+  // ...
+})
+```
+
+If `baseUrl` is missing, `createRouter` throws immediately — in dev and prod. This ensures devs discover the issue on first `pnpm dev` rather than deploying with a wrong realm.
+
+### CDP API Keys
+
 The router uses the default facilitator from `@coinbase/x402`, which requires CDP API keys in `process.env`:
 
 - `CDP_API_KEY_ID` — Coinbase Developer Platform API key ID

package/dist/index.cjs

@@ -1467,20 +1467,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL : void 0);
+  if (!config.baseUrl) {
+    throw new Error(
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
+    );
+  }
   if (config.protocols && config.protocols.length === 0) {
     throw new Error(
       "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  if (!baseUrl) {
-    const msg = "baseUrl is required. Pass it in RouterConfig or set NEXT_PUBLIC_BASE_URL (e.g. https://myapp.com). It is used for discovery URLs, OpenAPI servers, and MPP realm.";
-    if (process.env.NODE_ENV === "production") {
-      throw new Error(msg);
-    }
-    console.warn(`[router] ${msg}`);
-  }
-  const resolvedBaseUrl = (baseUrl ?? "http://localhost:3000").replace(/\/+$/, "");
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/dist/index.d.cts

@@ -235,13 +235,13 @@ interface RouteEntry {
 interface RouterConfig {
     payeeAddress: string;
     /**
-     * Production origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Origin URL (e.g. `https://myapp.com`).
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Falls back to `NEXT_PUBLIC_BASE_URL` env var.
-     * Required in production — `next build` will fail without it.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.d.ts

@@ -235,13 +235,13 @@ interface RouteEntry {
 interface RouterConfig {
     payeeAddress: string;
     /**
-     * Production origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Origin URL (e.g. `https://myapp.com`).
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Falls back to `NEXT_PUBLIC_BASE_URL` env var.
-     * Required in production — `next build` will fail without it.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.js

@@ -1430,20 +1430,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" ? process.env.NEXT_PUBLIC_BASE_URL : void 0);
+  if (!config.baseUrl) {
+    throw new Error(
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
+    );
+  }
   if (config.protocols && config.protocols.length === 0) {
     throw new Error(
       "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  if (!baseUrl) {
-    const msg = "baseUrl is required. Pass it in RouterConfig or set NEXT_PUBLIC_BASE_URL (e.g. https://myapp.com). It is used for discovery URLs, OpenAPI servers, and MPP realm.";
-    if (process.env.NODE_ENV === "production") {
-      throw new Error(msg);
-    }
-    console.warn(`[router] ${msg}`);
-  }
-  const resolvedBaseUrl = (baseUrl ?? "http://localhost:3000").replace(/\/+$/, "");
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {