@antseed/cli 0.1.167 → 0.1.169

package/dist/gateway/store.d.ts

@@ -0,0 +1,114 @@
+import { type PeriodSpend, type SpendLimits } from './limits.js';
+export type ApiKeySource = 'created' | 'tunnel-env';
+export type ApiKeyStatus = 'active' | 'revoked';
+export interface ApiKeyRecord {
+    id: string;
+    label: string;
+    hint: string;
+    /** Buyer identity (wallet) that pays for this key's requests. */
+    buyerIdentity: string;
+    source: ApiKeySource;
+    status: ApiKeyStatus;
+    limits: SpendLimits;
+    /** Whether the key holder may fund the key's wallet with x402 top-ups. */
+    topupEnabled: boolean;
+    expiresAt: number | null;
+    createdAt: number;
+    revokedAt: number | null;
+    lastUsedAt: number | null;
+}
+/**
+ * Balance movements per key, as signed deltas in USDC base units: spend is
+ * negative, credit (a top-up or payment received for the key) is positive.
+ * `externalRef` makes every write idempotent against its source event.
+ */
+export type LedgerEntryKind = 'spend' | 'credit';
+export interface LedgerEntryInput {
+    kind: LedgerEntryKind;
+    keyId: string;
+    buyerIdentity: string;
+    amountUsdc: number;
+    externalRef: string;
+    requestTag?: string | null;
+    sellerPeerId?: string | null;
+    inputTokens?: number;
+    cachedInputTokens?: number;
+    outputTokens?: number;
+    note?: string | null;
+    createdAt: number;
+}
+export interface GatewayRequestStart {
+    tag: string;
+    keyId: string;
+    buyerIdentity: string;
+    method: string;
+    path: string;
+    model: string | null;
+    startedAt: number;
+}
+export interface KeyUsageStats {
+    requests: number;
+    failedRequests: number;
+    spentUsdc: number;
+    creditedUsdc: number;
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+}
+export declare function gatewayDir(dataDir: string): string;
+/**
+ * Durable state for the API-key gateway: keys, request log and the per-key
+ * ledger. SQLite in WAL mode so `antseed gateway key …`
+ * commands can change keys while a gateway process is serving them.
+ */
+export declare class GatewayStore {
+    private readonly _now;
+    private readonly _db;
+    constructor(dataDir: string, _now?: () => number);
+    close(): void;
+    private _migrate;
+    createKey(input: {
+        label: string;
+        buyerIdentity: string;
+        limits: SpendLimits;
+        expiresAt: number | null;
+        topupEnabled?: boolean;
+    }): {
+        key: ApiKeyRecord;
+        secret: string;
+    };
+    /**
+     * The single key `antseed tunnel start` used to take from
+     * ANTSEED_TUNNEL_API_KEY becomes an unlimited key on the default identity,
+     * so existing tunnel clients keep working. A changed env key replaces it.
+     */
+    syncEnvironmentKey(secret: string): ApiKeyRecord;
+    /**
+     * Revokes the ANTSEED_TUNNEL_API_KEY key once the tunnel starts without the
+     * env var, so unsetting it retires the shared unlimited key. Returns the
+     * revoked key, or null when there was no active one.
+     */
+    retireEnvironmentKey(): ApiKeyRecord | null;
+    findKeyBySecret(secret: string): ApiKeyRecord | null;
+    getKey(id: string): ApiKeyRecord | null;
+    listKeys(): ApiKeyRecord[];
+    countActiveKeys(): number;
+    setLimits(id: string, limits: Partial<SpendLimits>): ApiKeyRecord;
+    setTopupEnabled(id: string, enabled: boolean): ApiKeyRecord;
+    revokeKey(id: string): ApiKeyRecord;
+    touchKey(id: string): void;
+    startRequest(input: GatewayRequestStart): void;
+    finishRequest(tag: string, result: {
+        status: number;
+        buyerRequestId: string | null;
+    }): void;
+    findRequest(tag: string): {
+        keyId: string;
+        buyerIdentity: string;
+    } | null;
+    /** Returns false when the entry was already recorded (same externalRef). */
+    recordLedgerEntry(entry: LedgerEntryInput): boolean;
+    periodSpend(keyId: string, now?: number): PeriodSpend;
+    usageStats(keyId: string, since?: number): KeyUsageStats;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/gateway/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/gateway/store.ts"],"names":[],"mappings":"AAKA,OAAO,EAA8B,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAE5F,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,YAAY,CAAA;AACnD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE/C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,0EAA0E;IAC1E,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,CAAA;AAEhD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,eAAe,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;CACrB;AAwED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;GAIG;AACH,qBAAa,YAAY;IAGM,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFlD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;gBAE3B,OAAO,EAAE,MAAM,EAAmB,IAAI,GAAE,MAAM,MAAyB;IASnF,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,QAAQ;IAYhB,SAAS,CAAC,KAAK,EAAE;QACf,KAAK,EAAE,MAAM,CAAA;QACb,aAAa,EAAE,MAAM,CAAA;QACrB,MAAM,EAAE,WAAW,CAAA;QACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,YAAY,CAAC,EAAE,OAAO,CAAA;KACvB,GAAG;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAazC;;;;OAIG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY;IAgBhD;;;;OAIG;IACH,oBAAoB,IAAI,YAAY,GAAG,IAAI;IAK3C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKpD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKvC,QAAQ,IAAI,YAAY,EAAE;IAK1B,eAAe,IAAI,MAAM;IAIzB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,YAAY;IASjE,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY;IAM3D,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY;IAOnC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAM1B,YAAY,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI;IAO9C,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAK3F,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAQzE,4EAA4E;IAC5E,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO;IAmBnD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAc,GAAG,WAAW;IAW1D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,aAAa;CAwBpD"}

package/dist/gateway/store.js

@@ -0,0 +1,253 @@
+import { DEFAULT_BUYER_IDENTITY } from '@antseed/node';
+import Database from 'better-sqlite3';
+import { mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { generateApiKey, hashApiKey, apiKeyHint, newKeyId } from './keys.js';
+import { LIMIT_PERIODS, periodStart } from './limits.js';
+const MIGRATIONS = [
+    `
+  CREATE TABLE api_keys (
+    id TEXT PRIMARY KEY,
+    label TEXT NOT NULL,
+    key_hash TEXT NOT NULL UNIQUE,
+    key_hint TEXT NOT NULL,
+    buyer_identity TEXT NOT NULL,
+    source TEXT NOT NULL DEFAULT 'created',
+    status TEXT NOT NULL DEFAULT 'active',
+    daily_limit_usdc INTEGER,
+    monthly_limit_usdc INTEGER,
+    total_limit_usdc INTEGER,
+    expires_at INTEGER,
+    created_at INTEGER NOT NULL,
+    revoked_at INTEGER,
+    last_used_at INTEGER
+  );
+  CREATE TABLE gateway_requests (
+    tag TEXT PRIMARY KEY,
+    key_id TEXT NOT NULL,
+    buyer_identity TEXT NOT NULL,
+    method TEXT NOT NULL,
+    path TEXT NOT NULL,
+    model TEXT,
+    status INTEGER,
+    buyer_request_id TEXT,
+    started_at INTEGER NOT NULL,
+    finished_at INTEGER
+  );
+  CREATE INDEX gateway_requests_key_time ON gateway_requests(key_id, started_at);
+  CREATE TABLE ledger_entries (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    kind TEXT NOT NULL CHECK (kind IN ('spend', 'credit')),
+    key_id TEXT NOT NULL,
+    buyer_identity TEXT NOT NULL,
+    amount_usdc INTEGER NOT NULL,
+    external_ref TEXT NOT NULL UNIQUE,
+    request_tag TEXT,
+    seller_peer_id TEXT,
+    input_tokens INTEGER NOT NULL DEFAULT 0,
+    cached_input_tokens INTEGER NOT NULL DEFAULT 0,
+    output_tokens INTEGER NOT NULL DEFAULT 0,
+    note TEXT,
+    created_at INTEGER NOT NULL
+  );
+  CREATE INDEX ledger_entries_key_time ON ledger_entries(key_id, kind, created_at);
+  `,
+    `
+  ALTER TABLE api_keys ADD COLUMN topup_enabled INTEGER NOT NULL DEFAULT 0;
+  `,
+];
+export function gatewayDir(dataDir) {
+    return join(dataDir, 'gateway');
+}
+/**
+ * Durable state for the API-key gateway: keys, request log and the per-key
+ * ledger. SQLite in WAL mode so `antseed gateway key …`
+ * commands can change keys while a gateway process is serving them.
+ */
+export class GatewayStore {
+    _now;
+    _db;
+    constructor(dataDir, _now = () => Date.now()) {
+        this._now = _now;
+        mkdirSync(gatewayDir(dataDir), { recursive: true });
+        this._db = new Database(join(gatewayDir(dataDir), 'gateway.db'));
+        this._db.pragma('journal_mode = WAL');
+        this._db.pragma('busy_timeout = 5000');
+        this._db.pragma('foreign_keys = ON');
+        this._migrate();
+    }
+    close() {
+        this._db.close();
+    }
+    _migrate() {
+        const version = this._db.pragma('user_version', { simple: true });
+        for (let index = version; index < MIGRATIONS.length; index += 1) {
+            this._db.transaction(() => {
+                this._db.exec(MIGRATIONS[index]);
+                this._db.pragma(`user_version = ${index + 1}`);
+            })();
+        }
+    }
+    // ── Keys ────────────────────────────────────────────────────────────────
+    createKey(input) {
+        const generated = generateApiKey();
+        const id = newKeyId();
+        this._db.prepare(`
+      INSERT INTO api_keys (id, label, key_hash, key_hint, buyer_identity, source, daily_limit_usdc, monthly_limit_usdc, total_limit_usdc, topup_enabled, expires_at, created_at)
+      VALUES (?, ?, ?, ?, ?, 'created', ?, ?, ?, ?, ?, ?)
+    `).run(id, input.label, generated.hash, generated.hint, input.buyerIdentity, input.limits.daily, input.limits.monthly, input.limits.total, input.topupEnabled ? 1 : 0, input.expiresAt, this._now());
+        return { key: this.getKey(id), secret: generated.secret };
+    }
+    /**
+     * The single key `antseed tunnel start` used to take from
+     * ANTSEED_TUNNEL_API_KEY becomes an unlimited key on the default identity,
+     * so existing tunnel clients keep working. A changed env key replaces it.
+     */
+    syncEnvironmentKey(secret) {
+        const hash = hashApiKey(secret);
+        const existing = this._db.prepare("SELECT id FROM api_keys WHERE source = 'tunnel-env'").get();
+        if (existing) {
+            this._db.prepare("UPDATE api_keys SET key_hash = ?, key_hint = ?, status = 'active', revoked_at = NULL WHERE id = ?")
+                .run(hash, apiKeyHint(secret), existing.id);
+            return this.getKey(existing.id);
+        }
+        const id = newKeyId();
+        this._db.prepare(`
+      INSERT INTO api_keys (id, label, key_hash, key_hint, buyer_identity, source, created_at)
+      VALUES (?, 'Tunnel key', ?, ?, ?, 'tunnel-env', ?)
+    `).run(id, hash, apiKeyHint(secret), DEFAULT_BUYER_IDENTITY, this._now());
+        return this.getKey(id);
+    }
+    /**
+     * Revokes the ANTSEED_TUNNEL_API_KEY key once the tunnel starts without the
+     * env var, so unsetting it retires the shared unlimited key. Returns the
+     * revoked key, or null when there was no active one.
+     */
+    retireEnvironmentKey() {
+        const existing = this._db.prepare("SELECT id FROM api_keys WHERE source = 'tunnel-env' AND status = 'active'").get();
+        return existing ? this.revokeKey(existing.id) : null;
+    }
+    findKeyBySecret(secret) {
+        const row = this._db.prepare('SELECT * FROM api_keys WHERE key_hash = ?').get(hashApiKey(secret));
+        return row ? toKey(row) : null;
+    }
+    getKey(id) {
+        const row = this._db.prepare('SELECT * FROM api_keys WHERE id = ?').get(id);
+        return row ? toKey(row) : null;
+    }
+    listKeys() {
+        const rows = this._db.prepare('SELECT * FROM api_keys ORDER BY created_at, id').all();
+        return rows.map(toKey);
+    }
+    countActiveKeys() {
+        return this._db.prepare("SELECT COUNT(*) AS count FROM api_keys WHERE status = 'active'").get().count;
+    }
+    setLimits(id, limits) {
+        const key = this.getKey(id);
+        if (!key)
+            throw new Error(`Unknown key "${id}".`);
+        const next = { ...key.limits, ...limits };
+        this._db.prepare('UPDATE api_keys SET daily_limit_usdc = ?, monthly_limit_usdc = ?, total_limit_usdc = ? WHERE id = ?')
+            .run(next.daily, next.monthly, next.total, id);
+        return this.getKey(id);
+    }
+    setTopupEnabled(id, enabled) {
+        const result = this._db.prepare('UPDATE api_keys SET topup_enabled = ? WHERE id = ?').run(enabled ? 1 : 0, id);
+        if (result.changes === 0)
+            throw new Error(`Unknown key "${id}".`);
+        return this.getKey(id);
+    }
+    revokeKey(id) {
+        const result = this._db.prepare("UPDATE api_keys SET status = 'revoked', revoked_at = ? WHERE id = ? AND status = 'active'")
+            .run(this._now(), id);
+        if (result.changes === 0 && !this.getKey(id))
+            throw new Error(`Unknown key "${id}".`);
+        return this.getKey(id);
+    }
+    touchKey(id) {
+        this._db.prepare('UPDATE api_keys SET last_used_at = ? WHERE id = ?').run(this._now(), id);
+    }
+    // ── Requests ────────────────────────────────────────────────────────────
+    startRequest(input) {
+        this._db.prepare(`
+      INSERT INTO gateway_requests (tag, key_id, buyer_identity, method, path, model, started_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `).run(input.tag, input.keyId, input.buyerIdentity, input.method, input.path, input.model, input.startedAt);
+    }
+    finishRequest(tag, result) {
+        this._db.prepare('UPDATE gateway_requests SET status = ?, buyer_request_id = ?, finished_at = ? WHERE tag = ?')
+            .run(result.status, result.buyerRequestId, this._now(), tag);
+    }
+    findRequest(tag) {
+        const row = this._db.prepare('SELECT key_id, buyer_identity FROM gateway_requests WHERE tag = ?').get(tag);
+        return row ? { keyId: row.key_id, buyerIdentity: row.buyer_identity } : null;
+    }
+    // ── Ledger ──────────────────────────────────────────────────────────────
+    /** Returns false when the entry was already recorded (same externalRef). */
+    recordLedgerEntry(entry) {
+        if (!Number.isSafeInteger(entry.amountUsdc) || entry.amountUsdc < 0) {
+            throw new Error('Ledger amounts are non-negative integer USDC base units; the kind sets the sign.');
+        }
+        const signed = entry.kind === 'spend' ? -entry.amountUsdc : entry.amountUsdc;
+        const result = this._db.prepare(`
+      INSERT OR IGNORE INTO ledger_entries
+        (kind, key_id, buyer_identity, amount_usdc, external_ref, request_tag, seller_peer_id,
+         input_tokens, cached_input_tokens, output_tokens, note, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(entry.kind, entry.keyId, entry.buyerIdentity, signed, entry.externalRef, entry.requestTag ?? null, entry.sellerPeerId ?? null, entry.inputTokens ?? 0, entry.cachedInputTokens ?? 0, entry.outputTokens ?? 0, entry.note ?? null, entry.createdAt);
+        return result.changes > 0;
+    }
+    periodSpend(keyId, now = this._now()) {
+        const statement = this._db.prepare("SELECT COALESCE(-SUM(amount_usdc), 0) AS spent FROM ledger_entries WHERE key_id = ? AND kind = 'spend' AND created_at >= ?");
+        const spend = {};
+        for (const period of LIMIT_PERIODS) {
+            spend[period] = statement.get(keyId, periodStart(period, now)).spent;
+        }
+        return spend;
+    }
+    usageStats(keyId, since = 0) {
+        const requests = this._db.prepare(`
+      SELECT COUNT(*) AS requests,
+             COALESCE(SUM(CASE WHEN status IS NULL OR status >= 400 THEN 1 ELSE 0 END), 0) AS failed
+      FROM gateway_requests WHERE key_id = ? AND started_at >= ?
+    `).get(keyId, since);
+        const ledger = this._db.prepare(`
+      SELECT COALESCE(-SUM(CASE WHEN kind = 'spend' THEN amount_usdc ELSE 0 END), 0) AS spent,
+             COALESCE(SUM(CASE WHEN kind = 'credit' THEN amount_usdc ELSE 0 END), 0) AS credited,
+             COALESCE(SUM(input_tokens), 0) AS input_tokens,
+             COALESCE(SUM(cached_input_tokens), 0) AS cached_input_tokens,
+             COALESCE(SUM(output_tokens), 0) AS output_tokens
+      FROM ledger_entries WHERE key_id = ? AND created_at >= ?
+    `).get(keyId, since);
+        return {
+            requests: requests.requests,
+            failedRequests: requests.failed,
+            spentUsdc: ledger.spent,
+            creditedUsdc: ledger.credited,
+            inputTokens: ledger.input_tokens,
+            cachedInputTokens: ledger.cached_input_tokens,
+            outputTokens: ledger.output_tokens,
+        };
+    }
+}
+function toKey(row) {
+    return {
+        id: row.id,
+        label: row.label,
+        hint: row.key_hint,
+        buyerIdentity: row.buyer_identity,
+        source: row.source,
+        status: row.status,
+        limits: {
+            daily: row.daily_limit_usdc,
+            monthly: row.monthly_limit_usdc,
+            total: row.total_limit_usdc,
+        },
+        topupEnabled: row.topup_enabled === 1,
+        expiresAt: row.expires_at,
+        createdAt: row.created_at,
+        revokedAt: row.revoked_at,
+        lastUsedAt: row.last_used_at,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/gateway/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/gateway/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,WAAW,EAAsC,MAAM,aAAa,CAAA;AAiF5F,MAAM,UAAU,GAAsB;IACpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CC;IACD;;GAEC;CACF,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAGuB;IAF7B,GAAG,CAAmB;IAEvC,YAAY,OAAe,EAAmB,OAAqB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAArC,SAAI,GAAJ,IAAI,CAAiC;QACjF,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;QAChE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACtC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAA;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC;IAEO,QAAQ;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAW,CAAA;QAC3E,KAAK,IAAI,KAAK,GAAG,OAAO,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE;gBACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;gBACjC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;YAChD,CAAC,CAAC,EAAE,CAAA;QACN,CAAC;IACH,CAAC;IAED,2EAA2E;IAE3E,SAAS,CAAC,KAMT;QACC,MAAM,SAAS,GAAG,cAAc,EAAE,CAAA;QAClC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACrB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAGhB,CAAC,CAAC,GAAG,CACJ,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,EACpE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CACvH,CAAA;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,EAAgC,CAAA;QAC5H,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mGAAmG,CAAC;iBAClH,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAA;QAClC,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;QACrB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAGhB,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,EAAgC,CAAA;QAClJ,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtD,CAAC;IAED,eAAe,CAAC,MAAc;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAuB,CAAA;QACvH,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChC,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAuB,CAAA;QACjG,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChC,CAAC;IAED,QAAQ;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,EAAc,CAAA;QACjG,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,eAAe;QACb,OAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAA;IAC9H,CAAC;IAED,SAAS,CAAC,EAAU,EAAE,MAA4B;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;QACzC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qGAAqG,CAAC;aACpH,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,CAAA;IACzB,CAAC;IAED,eAAe,CAAC,EAAU,EAAE,OAAgB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9G,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,CAAA;IACzB,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2FAA2F,CAAC;aACzH,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QACvB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QACrF,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,CAAA;IACzB,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,2EAA2E;IAE3E,YAAY,CAAC,KAA0B;QACrC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;KAGhB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAC7G,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,MAAyD;QAClF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,6FAA6F,CAAC;aAC5G,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;IAChE,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAC,GAAG,CACjD,CAAA;QACxD,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9E,CAAC;IAED,2EAA2E;IAE3E,4EAA4E;IAC5E,iBAAiB,CAAC,KAAuB;QACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;QACrG,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAA;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;;;KAK/B,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EACvE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,EACpD,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,KAAK,CAAC,iBAAiB,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC,EAC7E,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,KAAK,CAAC,SAAS,CACpC,CAAA;QACD,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAChC,4HAA4H,CAC7H,CAAA;QACD,MAAM,KAAK,GAAG,EAAiB,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,GAAI,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAuB,CAAC,KAAK,CAAA;QAC7F,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,KAAK,GAAG,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;;KAIjC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAyC,CAAA;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;;;;;;;KAO/B,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAkH,CAAA;QACrI,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,MAAM,CAAC,QAAQ;YAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;YAC7C,YAAY,EAAE,MAAM,CAAC,aAAa;SACnC,CAAA;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,CAAC,gBAAgB;YAC3B,OAAO,EAAE,GAAG,CAAC,kBAAkB;YAC/B,KAAK,EAAE,GAAG,CAAC,gBAAgB;SAC5B;QACD,YAAY,EAAE,GAAG,CAAC,aAAa,KAAK,CAAC;QACrC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,YAAY;KAC7B,CAAA;AACH,CAAC"}

package/dist/gateway/x402.d.ts

@@ -0,0 +1,95 @@
+/**
+ * x402 v2 over HTTP, `exact` scheme with EIP-3009 USDC transfers: the
+ * gateway names a payee and amount in `PAYMENT-REQUIRED`, the client signs a
+ * `transferWithAuthorization` and sends it as `PAYMENT-SIGNATURE`, and a
+ * facilitator settles it on-chain. See https://github.com/coinbase/x402.
+ */
+export declare const X402_VERSION = 2;
+export declare const PAYMENT_REQUIRED_HEADER = "payment-required";
+export declare const PAYMENT_SIGNATURE_HEADER = "payment-signature";
+export declare const PAYMENT_RESPONSE_HEADER = "payment-response";
+export interface X402Asset {
+    /** CAIP-2 network id, e.g. `eip155:8453` for Base. */
+    network: string;
+    chainId: number;
+    /** USDC contract address. */
+    address: string;
+    /** EIP-712 domain of the token, as `transferWithAuthorization` checks it. */
+    name: string;
+    version: string;
+}
+export interface PaymentRequirements {
+    scheme: 'exact';
+    network: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    maxTimeoutSeconds: number;
+    extra: {
+        assetTransferMethod: 'eip3009';
+        name: string;
+        version: string;
+    };
+}
+export interface PaymentRequired {
+    x402Version: number;
+    error?: string;
+    resource: {
+        url: string;
+        description: string;
+        mimeType: string;
+    };
+    accepts: PaymentRequirements[];
+}
+export interface Eip3009Authorization {
+    from: string;
+    to: string;
+    value: string;
+    validAfter: string;
+    validBefore: string;
+    nonce: string;
+}
+export interface PaymentPayload {
+    x402Version: number;
+    resource?: PaymentRequired['resource'];
+    accepted: PaymentRequirements;
+    payload: {
+        signature: string;
+        authorization: Eip3009Authorization;
+    };
+}
+export interface SettlementResponse {
+    success: boolean;
+    transaction: string;
+    network: string;
+    payer: string;
+    errorReason?: string;
+}
+export declare function encodeHeaderJson(value: unknown): string;
+export declare function decodeHeaderJson<T>(value: string): T | null;
+export declare function buildPaymentRequirements(asset: X402Asset, payTo: string, amountUsdc: number): PaymentRequirements;
+/**
+ * Checks the gateway can make before asking a facilitator: the payment pays
+ * exactly what was asked, to the key's wallet, inside its validity window,
+ * and is signed by the payer it names. Balance and nonce use are left to the
+ * facilitator's on-chain simulation. Returns an x402 error reason, or null.
+ */
+export declare function checkPaymentPayload(payment: PaymentPayload, required: PaymentRequirements, asset: X402Asset, nowSeconds: number): string | null;
+export interface FacilitatorOptions {
+    url: string;
+    /** Authorization header for a call to `endpointUrl`, for facilitators that need one. */
+    authorize?: (endpointUrl: string) => string;
+    fetchImpl?: typeof fetch;
+}
+/** Client for the standard facilitator `/verify` and `/settle` endpoints. */
+export declare class X402Facilitator {
+    private readonly _options;
+    constructor(_options: FacilitatorOptions);
+    verify(payment: PaymentPayload, requirements: PaymentRequirements): Promise<{
+        isValid: boolean;
+        invalidReason?: string;
+    }>;
+    settle(payment: PaymentPayload, requirements: PaymentRequirements): Promise<SettlementResponse>;
+    private _post;
+}
+//# sourceMappingURL=x402.d.ts.map

package/dist/gateway/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../../src/gateway/x402.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,eAAO,MAAM,uBAAuB,qBAAqB,CAAA;AACzD,eAAO,MAAM,wBAAwB,sBAAsB,CAAA;AAC3D,eAAO,MAAM,uBAAuB,qBAAqB,CAAA;AAIzD,MAAM,WAAW,SAAS;IACxB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB,EAAE,MAAM,CAAA;IACzB,KAAK,EAAE;QAAE,mBAAmB,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACzE;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,OAAO,EAAE,mBAAmB,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAA;IACtC,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,oBAAoB,CAAA;KAAE,CAAA;CACpE;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAM3D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAUjH;AAiBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CA+Bf;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,wFAAwF;IACxF,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAA;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,6EAA6E;AAC7E,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,kBAAkB;IAEnD,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAIzH,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAIvF,KAAK;CAgBpB"}

package/dist/gateway/x402.js

@@ -0,0 +1,120 @@
+import { getAddress, verifyTypedData } from 'ethers';
+/**
+ * x402 v2 over HTTP, `exact` scheme with EIP-3009 USDC transfers: the
+ * gateway names a payee and amount in `PAYMENT-REQUIRED`, the client signs a
+ * `transferWithAuthorization` and sends it as `PAYMENT-SIGNATURE`, and a
+ * facilitator settles it on-chain. See https://github.com/coinbase/x402.
+ */
+export const X402_VERSION = 2;
+export const PAYMENT_REQUIRED_HEADER = 'payment-required';
+export const PAYMENT_SIGNATURE_HEADER = 'payment-signature';
+export const PAYMENT_RESPONSE_HEADER = 'payment-response';
+const DEFAULT_MAX_TIMEOUT_SECONDS = 300;
+export function encodeHeaderJson(value) {
+    return Buffer.from(JSON.stringify(value), 'utf8').toString('base64');
+}
+export function decodeHeaderJson(value) {
+    try {
+        return JSON.parse(Buffer.from(value, 'base64').toString('utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function buildPaymentRequirements(asset, payTo, amountUsdc) {
+    return {
+        scheme: 'exact',
+        network: asset.network,
+        amount: String(amountUsdc),
+        asset: asset.address,
+        payTo: getAddress(payTo),
+        maxTimeoutSeconds: DEFAULT_MAX_TIMEOUT_SECONDS,
+        extra: { assetTransferMethod: 'eip3009', name: asset.name, version: asset.version },
+    };
+}
+const TRANSFER_WITH_AUTHORIZATION_TYPES = {
+    TransferWithAuthorization: [
+        { name: 'from', type: 'address' },
+        { name: 'to', type: 'address' },
+        { name: 'value', type: 'uint256' },
+        { name: 'validAfter', type: 'uint256' },
+        { name: 'validBefore', type: 'uint256' },
+        { name: 'nonce', type: 'bytes32' },
+    ],
+};
+function sameAddress(a, b) {
+    return a.toLowerCase() === b.toLowerCase();
+}
+/**
+ * Checks the gateway can make before asking a facilitator: the payment pays
+ * exactly what was asked, to the key's wallet, inside its validity window,
+ * and is signed by the payer it names. Balance and nonce use are left to the
+ * facilitator's on-chain simulation. Returns an x402 error reason, or null.
+ */
+export function checkPaymentPayload(payment, required, asset, nowSeconds) {
+    if (payment.x402Version !== X402_VERSION)
+        return 'invalid_x402_version';
+    const accepted = payment.accepted;
+    if (!accepted || accepted.scheme !== 'exact')
+        return 'unsupported_scheme';
+    if (accepted.network !== required.network)
+        return 'invalid_network';
+    if (!sameAddress(accepted.asset, required.asset) || !sameAddress(accepted.payTo, required.payTo)) {
+        return 'invalid_payment_requirements';
+    }
+    const authorization = payment.payload?.authorization;
+    const signature = payment.payload?.signature;
+    if (!authorization || typeof signature !== 'string')
+        return 'invalid_payload';
+    if (!sameAddress(authorization.to, required.payTo))
+        return 'invalid_exact_evm_payload_recipient_mismatch';
+    if (authorization.value !== required.amount)
+        return 'invalid_exact_evm_payload_authorization_value_mismatch';
+    if (!/^\d+$/.test(String(authorization.validAfter)) || !/^\d+$/.test(String(authorization.validBefore))) {
+        return 'invalid_payload';
+    }
+    if (Number(authorization.validAfter) > nowSeconds)
+        return 'invalid_exact_evm_payload_authorization_valid_after';
+    // Leave the facilitator enough time to land the transaction.
+    if (Number(authorization.validBefore) < nowSeconds + 6)
+        return 'invalid_exact_evm_payload_authorization_valid_before';
+    let signer;
+    try {
+        signer = verifyTypedData({ name: asset.name, version: asset.version, chainId: asset.chainId, verifyingContract: asset.address }, TRANSFER_WITH_AUTHORIZATION_TYPES, authorization, signature);
+    }
+    catch {
+        return 'invalid_exact_evm_payload_signature';
+    }
+    return sameAddress(signer, authorization.from) ? null : 'invalid_exact_evm_payload_signature';
+}
+/** Client for the standard facilitator `/verify` and `/settle` endpoints. */
+export class X402Facilitator {
+    _options;
+    constructor(_options) {
+        this._options = _options;
+    }
+    async verify(payment, requirements) {
+        return this._post('verify', payment, requirements);
+    }
+    async settle(payment, requirements) {
+        return this._post('settle', payment, requirements);
+    }
+    async _post(path, payment, requirements) {
+        const fetchImpl = this._options.fetchImpl ?? fetch;
+        const endpointUrl = `${this._options.url.replace(/\/+$/, '')}/${path}`;
+        const response = await fetchImpl(endpointUrl, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                ...(this._options.authorize ? { authorization: this._options.authorize(endpointUrl) } : {}),
+            },
+            body: JSON.stringify({ x402Version: X402_VERSION, paymentPayload: payment, paymentRequirements: requirements }),
+            signal: AbortSignal.timeout(path === 'settle' ? 90_000 : 15_000),
+        });
+        const body = await response.json().catch(() => null);
+        if (!body || typeof body !== 'object')
+            throw new Error(`Facilitator /${path} answered ${response.status} without a JSON body`);
+        return body;
+    }
+}
+//# sourceMappingURL=x402.js.map

package/dist/gateway/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../src/gateway/x402.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAA;AAC7B,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAA;AACzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAA;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAA;AAEzD,MAAM,2BAA2B,GAAG,GAAG,CAAA;AAsDvC,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAI,KAAa;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAgB,EAAE,KAAa,EAAE,UAAkB;IAC1F,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;QAC1B,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;QACxB,iBAAiB,EAAE,2BAA2B;QAC9C,KAAK,EAAE,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KACpF,CAAA;AACH,CAAC;AAED,MAAM,iCAAiC,GAAG;IACxC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACF,CAAA;AAED,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,QAA6B,EAC7B,KAAgB,EAChB,UAAkB;IAElB,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY;QAAE,OAAO,sBAAsB,CAAA;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAA;IACzE,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAA;IACnE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjG,OAAO,8BAA8B,CAAA;IACvC,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAA;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAA;IAC5C,IAAI,CAAC,aAAa,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAA;IAC7E,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,8CAA8C,CAAA;IACzG,IAAI,aAAa,CAAC,KAAK,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,wDAAwD,CAAA;IAC5G,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,UAAU;QAAE,OAAO,qDAAqD,CAAA;IAC/G,6DAA6D;IAC7D,IAAI,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,UAAU,GAAG,CAAC;QAAE,OAAO,sDAAsD,CAAA;IACrH,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CACtB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE,EACtG,iCAAiC,EACjC,aAAa,EACb,SAAS,CACV,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qCAAqC,CAAA;IAC9C,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qCAAqC,CAAA;AAC/F,CAAC;AASD,6EAA6E;AAC7E,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,QAA4B;QAA5B,aAAQ,GAAR,QAAQ,CAAoB;IAAG,CAAC;IAE7D,KAAK,CAAC,MAAM,CAAC,OAAuB,EAAE,YAAiC;QACrE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAA0D,CAAA;IAC7G,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAuB,EAAE,YAAiC;QACrE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAgC,CAAA;IACnF,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,IAAyB,EAAE,OAAuB,EAAE,YAAiC;QACvG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAA;QAClD,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAA;QACtE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5F;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;YAC/G,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;SACjE,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,aAAa,QAAQ,CAAC,MAAM,sBAAsB,CAAC,CAAA;QAC9H,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/dist/proxy/buyer-proxy.d.ts

@@ -1,4 +1,5 @@
 import { type AntseedNode, type PeerInfo, type ModelRoutingPreferences, type SerializedHttpResponse, type SweepReceiptPayload } from '@antseed/node';
+import { BuyerIdentityLoader } from '../buyer-identities/loader.js';
 import type { DepositWatcher } from './deposit-watcher.js';
 import { type VerifierPolicy, type SellerReach } from '../plugins/verifier.js';
 export { selectCandidatePeersForRouting, type CandidatePeerRouteSelection } from './routing.js';
@@ -41,6 +42,8 @@ export interface BuyerProxyConfig {
     now?: () => number;
     /** Verifier-SDK policy: which verifier the buyer commits to + whether it is required. */
     verifier?: VerifierPolicy;
+    /** Loads stored buyer identities on demand; defaults to one reading `dataDir`. */
+    buyerIdentities?: BuyerIdentityLoader;
 }
 /**
  * Detect a "model not served" rejection: the seller's own pre-payment 400
@@ -111,6 +114,7 @@ export declare class BuyerProxy {
      */
     private _lastModelActivityAt;
     private readonly _verifier?;
+    private readonly _buyerIdentities;
     private readonly _teeVerification;
     private readonly _teeControl;
     private _stateWatchDebounce;
@@ -157,9 +161,18 @@ export declare class BuyerProxy {
      * deltas (buyer- and seller-initiated auth both advance the cumulative).
      */
     private readonly _requestConversations;
+    /** Signed spend for requests a local gateway tagged, polled over the control plane. */
+    private readonly _spendAttribution;
     constructor(config: BuyerProxyConfig);
     /** Roll a signed spend delta into the conversation that triggered it. */
     private _attributeSpend;
+    /**
+     * Identity named by a request: null for the default, the name when it is
+     * (or can be) loaded, undefined when no stored identity has that name.
+     */
+    private _resolveBuyerIdentity;
+    /** `?identity=` on control-plane reads; undefined when it names no stored identity. */
+    private _controlPlaneIdentity;
     /**
      * Remember which chat a request belongs to for the life of the request plus
      * a grace window — the seller-initiated auth path can land just after the