@agentcash/router 0.6.5 → 0.6.7

package/.claude/CLAUDE.md

@@ -131,17 +131,18 @@ router
 
 ## Environment Variables
 
-### Base URL Resolution
+### Base URL
 
-`baseUrl` is auto-detected — most consumers don't need to pass it:
+`baseUrl` is **required** in `RouterConfig`. No auto-detection, no fallbacks. The realm is load-bearing for payment matching (MPP memo indexing, 402 challenge realm), so it must be explicitly set.
 
-1. **`config.baseUrl`** — Explicit override (for non-Vercel deployments)
-2. **`VERCEL_URL`** — Auto-detected on Vercel (set by the platform on every build and deployment)
-3. **`localhost:PORT`** — Fallback for local dev (`PORT` env var, defaults to 3000)
-
-In production on a non-Vercel host, pass `baseUrl` explicitly. On Vercel, it just works. In dev, it just works. No custom env vars needed.
+```typescript
+createRouter({
+  baseUrl: process.env.BASE_URL!,
+  // ...
+})
+```
 
-**Do NOT use `NEXT_PUBLIC_BASE_URL`.** It was removed in 0.6.5. The library handles base URL resolution internally.
+If `baseUrl` is missing, `createRouter` throws immediately — in dev and prod. This ensures devs discover the issue on first `pnpm dev` rather than deploying with a wrong realm.
 
 ### CDP API Keys
 

package/dist/index.cjs

@@ -369,6 +369,7 @@ function resolveMaxPrice(pricing) {
 
 // src/orchestrate.ts
 var import_mppx = require("mppx");
+var import_viem = require("viem");
 
 // src/protocols/x402.ts
 async function buildX402Challenge(server, routeEntry, request, price, payeeAddress, network, extensions) {
@@ -871,13 +872,16 @@ function createRequestHandler(routeEntry, handler, deps) {
         return await build402(request, routeEntry, deps, meta, pluginCtx);
       }
       const credential = import_mppx.Credential.fromRequest(request);
-      const wallet = (credential?.source ?? "").toLowerCase();
+      const rawSource = credential?.source ?? "";
+      const didParts = rawSource.split(":");
+      const lastPart = didParts[didParts.length - 1];
+      const wallet = ((0, import_viem.isAddress)(lastPart) ? (0, import_viem.getAddress)(lastPart) : rawSource).toLowerCase();
       pluginCtx.setVerifiedWallet(wallet);
       firePluginHook(deps.plugin, "onPaymentVerified", pluginCtx, {
         protocol: "mpp",
         payer: wallet,
         amount: price,
-        network: "tempo:42431"
+        network: "tempo:4217"
       });
       const { response, rawResult } = await invoke(
         request,
@@ -1467,21 +1471,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" && process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : void 0);
-  if (config.protocols && config.protocols.length === 0) {
+  if (!config.baseUrl) {
     throw new Error(
-      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
     );
   }
-  if (!baseUrl && process.env.NODE_ENV === "production") {
-    console.warn(
-      "[router] baseUrl was not provided and VERCEL_URL is not set. Falling back to localhost. Pass baseUrl in RouterConfig for non-Vercel deployments."
+  if (config.protocols && config.protocols.length === 0) {
+    throw new Error(
+      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  const resolvedBaseUrl = (baseUrl ?? `http://localhost:${process.env.PORT ?? 3e3}`).replace(
-    /\/+$/,
-    ""
-  );
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/dist/index.d.cts

@@ -236,12 +236,12 @@ interface RouterConfig {
     payeeAddress: string;
     /**
      * Origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Auto-detected on Vercel via `VERCEL_URL`. Falls back to `localhost:PORT` in dev.
-     * Only needed for non-Vercel production deployments.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.d.ts

@@ -236,12 +236,12 @@ interface RouterConfig {
     payeeAddress: string;
     /**
      * Origin URL (e.g. `https://myapp.com`).
-     * Used for discovery URLs, OpenAPI servers, and MPP realm.
+     * Used for 402 challenge realm, discovery URLs, OpenAPI servers, and MPP memo indexing.
      *
-     * Auto-detected on Vercel via `VERCEL_URL`. Falls back to `localhost:PORT` in dev.
-     * Only needed for non-Vercel production deployments.
+     * **Required.** No auto-detection — the realm is load-bearing for payment matching,
+     * so it must be explicitly set by the consuming app.
      */
-    baseUrl?: string;
+    baseUrl: string;
     network?: string;
     facilitatorUrl?: string;
     plugin?: RouterPlugin;

package/dist/index.js

@@ -332,6 +332,7 @@ function resolveMaxPrice(pricing) {
 
 // src/orchestrate.ts
 import { Credential } from "mppx";
+import { isAddress, getAddress } from "viem";
 
 // src/protocols/x402.ts
 async function buildX402Challenge(server, routeEntry, request, price, payeeAddress, network, extensions) {
@@ -834,13 +835,16 @@ function createRequestHandler(routeEntry, handler, deps) {
         return await build402(request, routeEntry, deps, meta, pluginCtx);
       }
       const credential = Credential.fromRequest(request);
-      const wallet = (credential?.source ?? "").toLowerCase();
+      const rawSource = credential?.source ?? "";
+      const didParts = rawSource.split(":");
+      const lastPart = didParts[didParts.length - 1];
+      const wallet = (isAddress(lastPart) ? getAddress(lastPart) : rawSource).toLowerCase();
       pluginCtx.setVerifiedWallet(wallet);
       firePluginHook(deps.plugin, "onPaymentVerified", pluginCtx, {
         protocol: "mpp",
         payer: wallet,
         amount: price,
-        network: "tempo:42431"
+        network: "tempo:4217"
       });
       const { response, rawResult } = await invoke(
         request,
@@ -1430,21 +1434,17 @@ function createRouter(config) {
   const registry = new RouteRegistry();
   const nonceStore = config.siwx?.nonceStore ?? new MemoryNonceStore();
   const network = config.network ?? "eip155:8453";
-  const baseUrl = config.baseUrl ?? (typeof globalThis.process !== "undefined" && process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : void 0);
-  if (config.protocols && config.protocols.length === 0) {
+  if (!config.baseUrl) {
     throw new Error(
-      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
+      '[router] baseUrl is required in RouterConfig. Set it to your production domain (e.g., "https://api.example.com"). The realm is used for payment matching and must be correct.'
     );
   }
-  if (!baseUrl && process.env.NODE_ENV === "production") {
-    console.warn(
-      "[router] baseUrl was not provided and VERCEL_URL is not set. Falling back to localhost. Pass baseUrl in RouterConfig for non-Vercel deployments."
+  if (config.protocols && config.protocols.length === 0) {
+    throw new Error(
+      "RouterConfig.protocols cannot be empty. Omit the field to use default ['x402'] or specify protocols explicitly."
     );
   }
-  const resolvedBaseUrl = (baseUrl ?? `http://localhost:${process.env.PORT ?? 3e3}`).replace(
-    /\/+$/,
-    ""
-  );
+  const resolvedBaseUrl = config.baseUrl.replace(/\/+$/, "");
   let x402ConfigError;
   let mppConfigError;
   if ((!config.protocols || config.protocols.includes("x402")) && !config.payeeAddress) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {