@agentcash/router 0.6.5 → 0.6.6

package/.claude/CLAUDE.md

@@ -131,17 +131,18 @@ router
 
 ## Environment Variables
 
-### Base URL Resolution
+### Base URL
 
-`baseUrl` is auto-detected — most consumers don't need to pass it:
+`baseUrl` is **required** in `RouterConfig`. No auto-detection, no fallbacks. The realm is load-bearing for payment matching (MPP memo indexing, 402 challenge realm), so it must be explicitly set.
 
-1. **`config.baseUrl`** — Explicit override (for non-Vercel deployments)
-2. **`VERCEL_URL`** — Auto-detected on Vercel (set by the platform on every build and deployment)
-3. **`localhost:PORT`** — Fallback for local dev (`PORT` env var, defaults to 3000)
-
-In production on a non-Vercel host, pass `baseUrl` explicitly. On Vercel, it just works. In dev, it just works. No custom env vars needed.
+```typescript
+createRouter({
+  baseUrl: process.env.BASE_URL!,
+  // ...
+})
+```
 
-**Do NOT use `NEXT_PUBLIC_BASE_URL`.** It was removed in 0.6.5. The library handles base URL resolution internally.
+If `baseUrl` is missing, `createRouter` throws immediately — in dev and prod. This ensures devs discover the issue on first `pnpm dev` rather than deploying with a wrong realm.
 
 ### CDP API Keys
 

package/dist/index.cjs

@@ -1467,21 +1467,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" && process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : void 0);
-  if (config.protocols && config.protocols.length === 0) {
+  if (!config.baseUrl) {
     throw new Error(
-      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
     );
   }
-  if (!baseUrl && process.env.NODE_ENV === "production") {
-    console.warn(
-      "[router] baseUrl was not provided and VERCEL_URL is not set. Falling back to localhost. Pass baseUrl in RouterConfig for non-Vercel deployments."
+  if (config.protocols && config.protocols.length === 0) {
+    throw new Error(
+      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  const resolvedBaseUrl = (baseUrl ?? `http://localhost:${process.env.PORT ?? 3e3}`).replace(
-    /\/+$/,
-    ""
-  );
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/dist/index.d.cts

@@ -236,12 +236,12 @@ interface RouterConfig {
     payeeAddress: string;
     /**
      * Origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Auto-detected on Vercel via `VERCEL_URL`. Falls back to `localhost:PORT` in dev.
-     * Only needed for non-Vercel production deployments.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.d.ts

@@ -236,12 +236,12 @@ interface RouterConfig {
     payeeAddress: string;
     /**
      * Origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Auto-detected on Vercel via `VERCEL_URL`. Falls back to `localhost:PORT` in dev.
-     * Only needed for non-Vercel production deployments.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.js

@@ -1430,21 +1430,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" && process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : void 0);
-  if (config.protocols && config.protocols.length === 0) {
+  if (!config.baseUrl) {
     throw new Error(
-      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
     );
   }
-  if (!baseUrl && process.env.NODE_ENV === "production") {
-    console.warn(
-      "[router] baseUrl was not provided and VERCEL_URL is not set. Falling back to localhost. Pass baseUrl in RouterConfig for non-Vercel deployments."
+  if (config.protocols && config.protocols.length === 0) {
+    throw new Error(
+      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  const resolvedBaseUrl = (baseUrl ?? `http://localhost:${process.env.PORT ?? 3e3}`).replace(
-    /\/+$/,
-    ""
-  );
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {