@agentcash/router 1.10.1 → 1.10.3

package/README.md

@@ -57,7 +57,7 @@ The recommended entry point reads its config from `process.env`. A copy-paste `.
 |-----|----------|---------|
 | `MPP_SECRET_KEY` | when MPP is enabled | Server-side MPP secret. Presence toggles MPP on. |
 | `MPP_CURRENCY` | when MPP is enabled | Tempo currency address. Use `TEMPO_USDC_ADDRESS` for Tempo USDC. |
-| `TEMPO_RPC_URL` | when MPP is enabled | Authenticated Tempo JSON-RPC endpoint. Public `rpc.tempo.xyz` returns 401. |
+| `TEMPO_RPC_URL` | no | Tempo JSON-RPC endpoint for MPP on-chain verification. Defaults to the public `DEFAULT_TEMPO_RPC_URL` (`https://rpc.tempo.xyz`). Override only if you have a dedicated endpoint. |
 | `MPP_OPERATOR_KEY` | no | Signs server-side close/settle. When set, MPP session mode is enabled automatically (required for `.metered()`: both streaming and request-mode per-tick billing). Address must equal the payee. |
 | `MPP_FEE_PAYER_KEY` | no | Sponsors client gas for channel open/topUp. Must resolve to a different address than `MPP_OPERATOR_KEY` (Tempo rejects fee-delegated txs where `sender === feePayer`). |
 

package/dist/index.cjs

@@ -31,7 +31,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/constants.ts
-var BASE_MAINNET_NETWORK, SOLANA_MAINNET_NETWORK, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, ZERO_EVM_ADDRESS, DEFAULT_SOLANA_FACILITATOR_URL;
+var BASE_MAINNET_NETWORK, SOLANA_MAINNET_NETWORK, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, ZERO_EVM_ADDRESS, DEFAULT_SOLANA_FACILITATOR_URL, DEFAULT_TEMPO_RPC_URL;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
@@ -43,6 +43,7 @@ var init_constants = __esm({
     BASE_USDC_DECIMALS = 6;
     ZERO_EVM_ADDRESS = "0x0000000000000000000000000000000000000000";
     DEFAULT_SOLANA_FACILITATOR_URL = "https://facilitator.corbits.dev";
+    DEFAULT_TEMPO_RPC_URL = "https://rpc.tempo.xyz";
   }
 });
 
@@ -412,7 +413,7 @@ async function createX402Server(config, kvStore) {
   const { x402ResourceServer, HTTPFacilitatorClient } = await import("@x402/core/server");
   const { registerExactEvmScheme } = await import("@x402/evm/exact/server");
   const { bazaarResourceServerExtension } = await import("@x402/extensions/bazaar");
-  const { siwxResourceServerExtension } = await import("@x402/extensions/sign-in-with-x");
+  const { createSIWxResourceServerExtension, InMemorySIWxStorage } = await import("@x402/extensions/sign-in-with-x");
   const { facilitator: defaultFacilitator } = await import("@coinbase/x402");
   const configuredNetworks = getConfiguredX402Networks(config);
   const facilitatorsByNetwork = getResolvedX402Facilitators(
@@ -442,7 +443,9 @@ async function createX402Server(config, kvStore) {
     registerExactSvmScheme(server, { networks: svmNetworks });
   }
   server.registerExtension(bazaarResourceServerExtension);
-  server.registerExtension(siwxResourceServerExtension);
+  server.registerExtension(
+    createSIWxResourceServerExtension({ storage: new InMemorySIWxStorage() })
+  );
   const initPromise = server.initialize();
   return {
     server,
@@ -468,6 +471,7 @@ __export(index_exports, {
   BASE_USDC_ADDRESS: () => BASE_USDC_ADDRESS,
   BASE_USDC_DECIMALS: () => BASE_USDC_DECIMALS,
   DEFAULT_SOLANA_FACILITATOR_URL: () => DEFAULT_SOLANA_FACILITATOR_URL,
+  DEFAULT_TEMPO_RPC_URL: () => DEFAULT_TEMPO_RPC_URL,
   HttpError: () => HttpError,
   RouterConfigError: () => RouterConfigError,
   SOLANA_MAINNET_NETWORK: () => SOLANA_MAINNET_NETWORK,
@@ -1572,7 +1576,7 @@ async function verifyHashMode(args, info) {
   }
   if (chargeResult.status === 402) {
     const reason = await readChallengeReason(chargeResult.challenge);
-    const detail = reason || "credential may be invalid, or check TEMPO_RPC_URL configuration";
+    const detail = reason || "credential may be invalid, or check your TEMPO_RPC_URL endpoint";
     report("warn", `MPP credential rejected: ${detail}`);
     return { ok: false, kind: "invalid" };
   }
@@ -4462,7 +4466,7 @@ var envShape = {
   }).optional(),
   TEMPO_RPC_URL: import_zod.z.string().refine(isUrl, {
     params: { code: "invalid_mpp_rpc_url", ...mpp },
-    message: "TEMPO_RPC_URL must be a valid URL \u2014 authenticated Tempo JSON-RPC endpoint. Public rpc.tempo.xyz returns 401."
+    message: "TEMPO_RPC_URL must be a valid URL \u2014 the Tempo JSON-RPC endpoint used for MPP on-chain verification. Optional; defaults to the public DEFAULT_TEMPO_RPC_URL."
   }).optional(),
   MPP_OPERATOR_KEY: import_zod.z.string().refine(isEvmPrivateKey, {
     params: { code: "invalid_mpp_operator_key", ...mpp },
@@ -4503,14 +4507,6 @@ var EnvInputSchema = import_zod.z.object(envShape).passthrough().superRefine((en
         ["MPP_CURRENCY"]
       );
     }
-    if (env.TEMPO_RPC_URL === void 0) {
-      addIssue(
-        ctx,
-        { code: "missing_mpp_rpc_url", ...mpp },
-        "TEMPO_RPC_URL is required when MPP is enabled \u2014 authenticated Tempo JSON-RPC endpoint. Public rpc.tempo.xyz returns 401.",
-        ["TEMPO_RPC_URL"]
-      );
-    }
   }
   const collision = operatorAddressesCollide(env.MPP_OPERATOR_KEY, env.MPP_FEE_PAYER_KEY);
   if (collision) {
@@ -4642,7 +4638,7 @@ function validateX402Config(config, env) {
   }
   return issues;
 }
-function validateMppConfig(config, env) {
+function validateMppConfig(config) {
   const m = config.mpp;
   if (!m) {
     return [
@@ -4690,12 +4686,6 @@ function validateMppConfig(config, env) {
       `MPP recipient '${placeholder}' is a placeholder address and cannot receive payments.`
     );
   }
-  if (!m.rpcUrl && !env.TEMPO_RPC_URL) {
-    push(
-      "missing_mpp_rpc_url",
-      "MPP requires an authenticated Tempo RPC URL. Set TEMPO_RPC_URL env var or pass rpcUrl in the mpp config object."
-    );
-  }
   if (m.feePayerKey && !isEvmPrivateKey(m.feePayerKey)) {
     push(
       "invalid_mpp_fee_payer_key",
@@ -4802,7 +4792,7 @@ function routerConfigFromEnv(options) {
   const mppConfig = mppEnabled ? {
     secretKey: env.MPP_SECRET_KEY,
     currency: canonicalizeEvm(env.MPP_CURRENCY),
-    rpcUrl: env.TEMPO_RPC_URL,
+    rpcUrl: env.TEMPO_RPC_URL ?? DEFAULT_TEMPO_RPC_URL,
     recipient: payeeAddress,
     ...env.MPP_FEE_PAYER_KEY ? { feePayerKey: env.MPP_FEE_PAYER_KEY } : {},
     ...env.MPP_OPERATOR_KEY ? { operatorKey: env.MPP_OPERATOR_KEY, session: {} } : {}
@@ -4853,7 +4843,7 @@ function getRouterConfigIssues(config, options = {}) {
     });
   }
   if (protocols.includes("x402")) issues.push(...validateX402Config(config, env));
-  if (protocols.includes("mpp")) issues.push(...validateMppConfig(config, env));
+  if (protocols.includes("mpp")) issues.push(...validateMppConfig(config));
   return issues;
 }
 
@@ -4925,6 +4915,7 @@ function getMppxStreamingContext(args) {
 }
 
 // src/init/mpp.ts
+init_constants();
 async function initMpp(config, resolvedBaseUrl, kvStore, configError) {
   if (configError) return { initError: configError };
   if (!config.mpp) return {};
@@ -4933,7 +4924,7 @@ async function initMpp(config, resolvedBaseUrl, kvStore, configError) {
     const { createClient, http } = await import("viem");
     const { tempo: tempoChain } = await import("viem/chains");
     const { privateKeyToAccount: privateKeyToAccount2 } = await import("viem/accounts");
-    const rpcUrl = config.mpp.rpcUrl ?? process.env.TEMPO_RPC_URL;
+    const rpcUrl = config.mpp.rpcUrl ?? process.env.TEMPO_RPC_URL ?? DEFAULT_TEMPO_RPC_URL;
     const tempoClient = createClient({ chain: tempoChain, transport: http(rpcUrl) });
     const getClient = async () => tempoClient;
     const operatorAccount = config.mpp.operatorKey ? privateKeyToAccount2(config.mpp.operatorKey) : void 0;
@@ -5111,6 +5102,7 @@ function createRouterFromEnv(options) {
   BASE_USDC_ADDRESS,
   BASE_USDC_DECIMALS,
   DEFAULT_SOLANA_FACILITATOR_URL,
+  DEFAULT_TEMPO_RPC_URL,
   HttpError,
   RouterConfigError,
   SOLANA_MAINNET_NETWORK,

package/dist/index.d.cts

@@ -411,7 +411,7 @@ interface RouterConfig {
         currency: string;
         /** MPP payee address (EVM). Overrides `payeeAddress` for MPP only. Required when `payeeAddress` is unset. MUST equal `operatorKey`'s derived address when `session` is enabled. */
         recipient?: string;
-        /** Tempo RPC URL for on-chain verification. Falls back to `TEMPO_RPC_URL`. */
+        /** Tempo RPC URL for on-chain verification. Falls back to `TEMPO_RPC_URL`, then to the public `DEFAULT_TEMPO_RPC_URL`. */
         rpcUrl?: string;
         /** Hex private key. Signs channel close/settle; required for `session`. Address MUST equal `recipient`/payee — mppx asserts sender===payee on settle. Validated at init. */
         operatorKey?: string;
@@ -793,7 +793,7 @@ declare class RouteBuilder<TBody = undefined, TQuery = undefined, TOutput = unde
     private register;
 }
 
-type RouterConfigIssueCode = 'missing_base_url' | 'invalid_base_url' | 'empty_protocols' | 'missing_x402_accepts' | 'missing_x402_network' | 'unsupported_x402_network' | 'missing_x402_asset' | 'invalid_x402_decimals' | 'missing_x402_payee' | 'invalid_x402_payee' | 'invalid_solana_payee' | 'invalid_solana_facilitator_url' | 'missing_cdp_keys' | 'placeholder_payee' | 'missing_mpp_config' | 'missing_mpp_secret_key' | 'missing_mpp_currency' | 'invalid_mpp_currency' | 'missing_mpp_recipient' | 'invalid_mpp_recipient' | 'missing_mpp_rpc_url' | 'invalid_mpp_rpc_url' | 'invalid_mpp_fee_payer_key' | 'invalid_mpp_operator_key' | 'mpp_operator_equals_fee_payer' | 'mpp_operator_recipient_mismatch' | 'missing_discovery_title' | 'missing_discovery_description' | 'missing_discovery_guidance' | 'invalid_server_url' | 'kv_url_without_token' | 'kv_token_without_url' | 'invalid_kv_url' | 'missing_kv_in_production';
+type RouterConfigIssueCode = 'missing_base_url' | 'invalid_base_url' | 'empty_protocols' | 'missing_x402_accepts' | 'missing_x402_network' | 'unsupported_x402_network' | 'missing_x402_asset' | 'invalid_x402_decimals' | 'missing_x402_payee' | 'invalid_x402_payee' | 'invalid_solana_payee' | 'invalid_solana_facilitator_url' | 'missing_cdp_keys' | 'placeholder_payee' | 'missing_mpp_config' | 'missing_mpp_secret_key' | 'missing_mpp_currency' | 'invalid_mpp_currency' | 'missing_mpp_recipient' | 'invalid_mpp_recipient' | 'invalid_mpp_rpc_url' | 'invalid_mpp_fee_payer_key' | 'invalid_mpp_operator_key' | 'mpp_operator_equals_fee_payer' | 'mpp_operator_recipient_mismatch' | 'missing_discovery_title' | 'missing_discovery_description' | 'missing_discovery_guidance' | 'invalid_server_url' | 'kv_url_without_token' | 'kv_token_without_url' | 'invalid_kv_url' | 'missing_kv_in_production';
 type RouterConfigIssueSeverity = 'error' | 'warning';
 interface RouterConfigIssue {
     code: RouterConfigIssueCode;
@@ -870,6 +870,8 @@ declare const BASE_USDC_DECIMALS = 6;
 declare const ZERO_EVM_ADDRESS = "0x0000000000000000000000000000000000000000";
 /** Public Solana x402 facilitator. Override per-deployment via `SOLANA_FACILITATOR_URL`. */
 declare const DEFAULT_SOLANA_FACILITATOR_URL = "https://facilitator.corbits.dev";
+/** Public Tempo JSON-RPC endpoint used for MPP on-chain verification. Override per-deployment via `TEMPO_RPC_URL`. */
+declare const DEFAULT_TEMPO_RPC_URL = "https://rpc.tempo.xyz";
 
 interface MonitorEntry {
     provider: string;
@@ -912,4 +914,4 @@ declare function createRouter<const P extends Record<string, string> = Record<ne
  */
 declare function createRouterFromEnv<const P extends Record<string, string> = Record<never, string>>(options: CreateRouterFromEnvOptions<P>): ServiceRouter<Extract<keyof P, string>>;
 
-export { BASE_MAINNET_NETWORK, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, type CreateRouterFromEnvOptions, DEFAULT_SOLANA_FACILITATOR_URL, type DiscoveryConfig, type HandlerContext, HttpError, type KvStore, type PaidOptions, type ProtocolType, type RouterConfig, RouterConfigError, type RouterConfigIssue, type RouterConfigIssueCode, type RouterConfigIssueSeverity, type RouterPlugin, SOLANA_MAINNET_NETWORK, type ServiceRouter, type SettlementErrorContext, type SettlementLifecycleContext, type SettlementSettledContext, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, type X402FacilitatorsConfig, ZERO_EVM_ADDRESS, createRouter, createRouterFromEnv, routerConfigFromEnv };
+export { BASE_MAINNET_NETWORK, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, type CreateRouterFromEnvOptions, DEFAULT_SOLANA_FACILITATOR_URL, DEFAULT_TEMPO_RPC_URL, type DiscoveryConfig, type HandlerContext, HttpError, type KvStore, type PaidOptions, type ProtocolType, type RouterConfig, RouterConfigError, type RouterConfigIssue, type RouterConfigIssueCode, type RouterConfigIssueSeverity, type RouterPlugin, SOLANA_MAINNET_NETWORK, type ServiceRouter, type SettlementErrorContext, type SettlementLifecycleContext, type SettlementSettledContext, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, type X402FacilitatorsConfig, ZERO_EVM_ADDRESS, createRouter, createRouterFromEnv, routerConfigFromEnv };

package/dist/index.d.ts

@@ -411,7 +411,7 @@ interface RouterConfig {
         currency: string;
         /** MPP payee address (EVM). Overrides `payeeAddress` for MPP only. Required when `payeeAddress` is unset. MUST equal `operatorKey`'s derived address when `session` is enabled. */
         recipient?: string;
-        /** Tempo RPC URL for on-chain verification. Falls back to `TEMPO_RPC_URL`. */
+        /** Tempo RPC URL for on-chain verification. Falls back to `TEMPO_RPC_URL`, then to the public `DEFAULT_TEMPO_RPC_URL`. */
         rpcUrl?: string;
         /** Hex private key. Signs channel close/settle; required for `session`. Address MUST equal `recipient`/payee — mppx asserts sender===payee on settle. Validated at init. */
         operatorKey?: string;
@@ -793,7 +793,7 @@ declare class RouteBuilder<TBody = undefined, TQuery = undefined, TOutput = unde
     private register;
 }
 
-type RouterConfigIssueCode = 'missing_base_url' | 'invalid_base_url' | 'empty_protocols' | 'missing_x402_accepts' | 'missing_x402_network' | 'unsupported_x402_network' | 'missing_x402_asset' | 'invalid_x402_decimals' | 'missing_x402_payee' | 'invalid_x402_payee' | 'invalid_solana_payee' | 'invalid_solana_facilitator_url' | 'missing_cdp_keys' | 'placeholder_payee' | 'missing_mpp_config' | 'missing_mpp_secret_key' | 'missing_mpp_currency' | 'invalid_mpp_currency' | 'missing_mpp_recipient' | 'invalid_mpp_recipient' | 'missing_mpp_rpc_url' | 'invalid_mpp_rpc_url' | 'invalid_mpp_fee_payer_key' | 'invalid_mpp_operator_key' | 'mpp_operator_equals_fee_payer' | 'mpp_operator_recipient_mismatch' | 'missing_discovery_title' | 'missing_discovery_description' | 'missing_discovery_guidance' | 'invalid_server_url' | 'kv_url_without_token' | 'kv_token_without_url' | 'invalid_kv_url' | 'missing_kv_in_production';
+type RouterConfigIssueCode = 'missing_base_url' | 'invalid_base_url' | 'empty_protocols' | 'missing_x402_accepts' | 'missing_x402_network' | 'unsupported_x402_network' | 'missing_x402_asset' | 'invalid_x402_decimals' | 'missing_x402_payee' | 'invalid_x402_payee' | 'invalid_solana_payee' | 'invalid_solana_facilitator_url' | 'missing_cdp_keys' | 'placeholder_payee' | 'missing_mpp_config' | 'missing_mpp_secret_key' | 'missing_mpp_currency' | 'invalid_mpp_currency' | 'missing_mpp_recipient' | 'invalid_mpp_recipient' | 'invalid_mpp_rpc_url' | 'invalid_mpp_fee_payer_key' | 'invalid_mpp_operator_key' | 'mpp_operator_equals_fee_payer' | 'mpp_operator_recipient_mismatch' | 'missing_discovery_title' | 'missing_discovery_description' | 'missing_discovery_guidance' | 'invalid_server_url' | 'kv_url_without_token' | 'kv_token_without_url' | 'invalid_kv_url' | 'missing_kv_in_production';
 type RouterConfigIssueSeverity = 'error' | 'warning';
 interface RouterConfigIssue {
     code: RouterConfigIssueCode;
@@ -870,6 +870,8 @@ declare const BASE_USDC_DECIMALS = 6;
 declare const ZERO_EVM_ADDRESS = "0x0000000000000000000000000000000000000000";
 /** Public Solana x402 facilitator. Override per-deployment via `SOLANA_FACILITATOR_URL`. */
 declare const DEFAULT_SOLANA_FACILITATOR_URL = "https://facilitator.corbits.dev";
+/** Public Tempo JSON-RPC endpoint used for MPP on-chain verification. Override per-deployment via `TEMPO_RPC_URL`. */
+declare const DEFAULT_TEMPO_RPC_URL = "https://rpc.tempo.xyz";
 
 interface MonitorEntry {
     provider: string;
@@ -912,4 +914,4 @@ declare function createRouter<const P extends Record<string, string> = Record<ne
  */
 declare function createRouterFromEnv<const P extends Record<string, string> = Record<never, string>>(options: CreateRouterFromEnvOptions<P>): ServiceRouter<Extract<keyof P, string>>;
 
-export { BASE_MAINNET_NETWORK, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, type CreateRouterFromEnvOptions, DEFAULT_SOLANA_FACILITATOR_URL, type DiscoveryConfig, type HandlerContext, HttpError, type KvStore, type PaidOptions, type ProtocolType, type RouterConfig, RouterConfigError, type RouterConfigIssue, type RouterConfigIssueCode, type RouterConfigIssueSeverity, type RouterPlugin, SOLANA_MAINNET_NETWORK, type ServiceRouter, type SettlementErrorContext, type SettlementLifecycleContext, type SettlementSettledContext, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, type X402FacilitatorsConfig, ZERO_EVM_ADDRESS, createRouter, createRouterFromEnv, routerConfigFromEnv };
+export { BASE_MAINNET_NETWORK, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, type CreateRouterFromEnvOptions, DEFAULT_SOLANA_FACILITATOR_URL, DEFAULT_TEMPO_RPC_URL, type DiscoveryConfig, type HandlerContext, HttpError, type KvStore, type PaidOptions, type ProtocolType, type RouterConfig, RouterConfigError, type RouterConfigIssue, type RouterConfigIssueCode, type RouterConfigIssueSeverity, type RouterPlugin, SOLANA_MAINNET_NETWORK, type ServiceRouter, type SettlementErrorContext, type SettlementLifecycleContext, type SettlementSettledContext, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, type X402FacilitatorsConfig, ZERO_EVM_ADDRESS, createRouter, createRouterFromEnv, routerConfigFromEnv };

package/dist/index.js

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/constants.ts
-var BASE_MAINNET_NETWORK, SOLANA_MAINNET_NETWORK, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, ZERO_EVM_ADDRESS, DEFAULT_SOLANA_FACILITATOR_URL;
+var BASE_MAINNET_NETWORK, SOLANA_MAINNET_NETWORK, TEMPO_USDC_ADDRESS, TEMPO_USDC_DECIMALS, BASE_USDC_ADDRESS, BASE_USDC_DECIMALS, ZERO_EVM_ADDRESS, DEFAULT_SOLANA_FACILITATOR_URL, DEFAULT_TEMPO_RPC_URL;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
@@ -21,6 +21,7 @@ var init_constants = __esm({
     BASE_USDC_DECIMALS = 6;
     ZERO_EVM_ADDRESS = "0x0000000000000000000000000000000000000000";
     DEFAULT_SOLANA_FACILITATOR_URL = "https://facilitator.corbits.dev";
+    DEFAULT_TEMPO_RPC_URL = "https://rpc.tempo.xyz";
   }
 });
 
@@ -390,7 +391,7 @@ async function createX402Server(config, kvStore) {
   const { x402ResourceServer, HTTPFacilitatorClient } = await import("@x402/core/server");
   const { registerExactEvmScheme } = await import("@x402/evm/exact/server");
   const { bazaarResourceServerExtension } = await import("@x402/extensions/bazaar");
-  const { siwxResourceServerExtension } = await import("@x402/extensions/sign-in-with-x");
+  const { createSIWxResourceServerExtension, InMemorySIWxStorage } = await import("@x402/extensions/sign-in-with-x");
   const { facilitator: defaultFacilitator } = await import("@coinbase/x402");
   const configuredNetworks = getConfiguredX402Networks(config);
   const facilitatorsByNetwork = getResolvedX402Facilitators(
@@ -420,7 +421,9 @@ async function createX402Server(config, kvStore) {
     registerExactSvmScheme(server, { networks: svmNetworks });
   }
   server.registerExtension(bazaarResourceServerExtension);
-  server.registerExtension(siwxResourceServerExtension);
+  server.registerExtension(
+    createSIWxResourceServerExtension({ storage: new InMemorySIWxStorage() })
+  );
   const initPromise = server.initialize();
   return {
     server,
@@ -1531,7 +1534,7 @@ async function verifyHashMode(args, info) {
   }
   if (chargeResult.status === 402) {
     const reason = await readChallengeReason(chargeResult.challenge);
-    const detail = reason || "credential may be invalid, or check TEMPO_RPC_URL configuration";
+    const detail = reason || "credential may be invalid, or check your TEMPO_RPC_URL endpoint";
     report("warn", `MPP credential rejected: ${detail}`);
     return { ok: false, kind: "invalid" };
   }
@@ -4421,7 +4424,7 @@ var envShape = {
   }).optional(),
   TEMPO_RPC_URL: z.string().refine(isUrl, {
     params: { code: "invalid_mpp_rpc_url", ...mpp },
-    message: "TEMPO_RPC_URL must be a valid URL \u2014 authenticated Tempo JSON-RPC endpoint. Public rpc.tempo.xyz returns 401."
+    message: "TEMPO_RPC_URL must be a valid URL \u2014 the Tempo JSON-RPC endpoint used for MPP on-chain verification. Optional; defaults to the public DEFAULT_TEMPO_RPC_URL."
   }).optional(),
   MPP_OPERATOR_KEY: z.string().refine(isEvmPrivateKey, {
     params: { code: "invalid_mpp_operator_key", ...mpp },
@@ -4462,14 +4465,6 @@ var EnvInputSchema = z.object(envShape).passthrough().superRefine((env, ctx) =>
         ["MPP_CURRENCY"]
       );
     }
-    if (env.TEMPO_RPC_URL === void 0) {
-      addIssue(
-        ctx,
-        { code: "missing_mpp_rpc_url", ...mpp },
-        "TEMPO_RPC_URL is required when MPP is enabled \u2014 authenticated Tempo JSON-RPC endpoint. Public rpc.tempo.xyz returns 401.",
-        ["TEMPO_RPC_URL"]
-      );
-    }
   }
   const collision = operatorAddressesCollide(env.MPP_OPERATOR_KEY, env.MPP_FEE_PAYER_KEY);
   if (collision) {
@@ -4601,7 +4596,7 @@ function validateX402Config(config, env) {
   }
   return issues;
 }
-function validateMppConfig(config, env) {
+function validateMppConfig(config) {
   const m = config.mpp;
   if (!m) {
     return [
@@ -4649,12 +4644,6 @@ function validateMppConfig(config, env) {
       `MPP recipient '${placeholder}' is a placeholder address and cannot receive payments.`
     );
   }
-  if (!m.rpcUrl && !env.TEMPO_RPC_URL) {
-    push(
-      "missing_mpp_rpc_url",
-      "MPP requires an authenticated Tempo RPC URL. Set TEMPO_RPC_URL env var or pass rpcUrl in the mpp config object."
-    );
-  }
   if (m.feePayerKey && !isEvmPrivateKey(m.feePayerKey)) {
     push(
       "invalid_mpp_fee_payer_key",
@@ -4761,7 +4750,7 @@ function routerConfigFromEnv(options) {
   const mppConfig = mppEnabled ? {
     secretKey: env.MPP_SECRET_KEY,
     currency: canonicalizeEvm(env.MPP_CURRENCY),
-    rpcUrl: env.TEMPO_RPC_URL,
+    rpcUrl: env.TEMPO_RPC_URL ?? DEFAULT_TEMPO_RPC_URL,
     recipient: payeeAddress,
     ...env.MPP_FEE_PAYER_KEY ? { feePayerKey: env.MPP_FEE_PAYER_KEY } : {},
     ...env.MPP_OPERATOR_KEY ? { operatorKey: env.MPP_OPERATOR_KEY, session: {} } : {}
@@ -4812,7 +4801,7 @@ function getRouterConfigIssues(config, options = {}) {
     });
   }
   if (protocols.includes("x402")) issues.push(...validateX402Config(config, env));
-  if (protocols.includes("mpp")) issues.push(...validateMppConfig(config, env));
+  if (protocols.includes("mpp")) issues.push(...validateMppConfig(config));
   return issues;
 }
 
@@ -4884,6 +4873,7 @@ function getMppxStreamingContext(args) {
 }
 
 // src/init/mpp.ts
+init_constants();
 async function initMpp(config, resolvedBaseUrl, kvStore, configError) {
   if (configError) return { initError: configError };
   if (!config.mpp) return {};
@@ -4892,7 +4882,7 @@ async function initMpp(config, resolvedBaseUrl, kvStore, configError) {
     const { createClient, http } = await import("viem");
     const { tempo: tempoChain } = await import("viem/chains");
     const { privateKeyToAccount: privateKeyToAccount2 } = await import("viem/accounts");
-    const rpcUrl = config.mpp.rpcUrl ?? process.env.TEMPO_RPC_URL;
+    const rpcUrl = config.mpp.rpcUrl ?? process.env.TEMPO_RPC_URL ?? DEFAULT_TEMPO_RPC_URL;
     const tempoClient = createClient({ chain: tempoChain, transport: http(rpcUrl) });
     const getClient = async () => tempoClient;
     const operatorAccount = config.mpp.operatorKey ? privateKeyToAccount2(config.mpp.operatorKey) : void 0;
@@ -5069,6 +5059,7 @@ export {
   BASE_USDC_ADDRESS,
   BASE_USDC_DECIMALS,
   DEFAULT_SOLANA_FACILITATOR_URL,
+  DEFAULT_TEMPO_RPC_URL,
   HttpError,
   RouterConfigError,
   SOLANA_MAINNET_NETWORK,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcash/router",
-  "version": "1.10.1",
+  "version": "1.10.3",
   "description": "Unified route builder for Next.js App Router APIs with x402, MPP, SIWX, and API key auth",
   "type": "module",
   "exports": {
@@ -28,10 +28,10 @@
   ],
   "dependencies": {
     "@coinbase/x402": "^2.1.0",
-    "@x402/core": "^2.11.0",
-    "@x402/evm": "^2.11.0",
-    "@x402/extensions": "^2.11.0",
-    "@x402/svm": "^2.11.0",
+    "@x402/core": "^2.13.0",
+    "@x402/evm": "^2.13.0",
+    "@x402/extensions": "^2.13.0",
+    "@x402/svm": "^2.13.0",
     "mppx": "^0.6.16",
     "viem": "^2.47.6",
     "zod-openapi": "^5.0.0"