@apitoll/seller-sdk 0.1.0-beta.1

package/dist/middleware-express.d.ts

@@ -0,0 +1,43 @@
+import type { Request, Response, NextFunction } from "express";
+import { type SellerConfig, type EndpointConfig, type FeeBreakdown } from "@apitoll/shared";
+export interface PaymentMiddlewareOptions extends SellerConfig {
+}
+/**
+ * Express middleware that adds x402 payment requirements to protected endpoints.
+ * Now supports platform fee splitting — a percentage of each payment goes to the platform.
+ *
+ * Usage:
+ * ```ts
+ * import { paymentMiddleware } from "@apitoll/seller-sdk";
+ *
+ * app.use(paymentMiddleware({
+ *   walletAddress: "0xYourWallet...",
+ *   endpoints: {
+ *     "GET /api/data": {
+ *       price: "0.005",
+ *       chains: ["base", "solana"],
+ *       description: "Premium data feed",
+ *     },
+ *   },
+ *   platformFee: {
+ *     feeBps: 300, // 3%
+ *     platformWalletBase: "0xPlatformWallet...",
+ *   },
+ * }));
+ * ```
+ */
+export declare function paymentMiddleware(options: PaymentMiddlewareOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Helper to access the payment receipt from a request.
+ */
+export declare function getPaymentReceipt(req: Request): any;
+/**
+ * Helper to access full x402 context from a request (includes fee info).
+ */
+export declare function getX402Context(req: Request): {
+    receipt: ReturnType<typeof getPaymentReceipt>;
+    feeBreakdown?: FeeBreakdown;
+    endpoint: string;
+    config: EndpointConfig;
+} | null;
+//# sourceMappingURL=middleware-express.d.ts.map

package/dist/middleware-express.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-express.d.ts","sourceRoot":"","sources":["../src/middleware-express.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EAGnB,KAAK,YAAY,EAGlB,MAAM,iBAAiB,CAAC;AAUzB,MAAM,WAAW,wBAAyB,SAAQ,YAAY;CAAG;AAEjE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,IAoH/D,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAwIjB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,OAE7C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAC5C,OAAO,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,IAAI,CAEP"}

package/dist/middleware-express.js

@@ -0,0 +1,239 @@
+import { DEFAULT_CHAIN_CONFIGS, SECURITY_HEADERS, } from "@apitoll/shared";
+import { buildPaymentRequirements, encodePaymentRequired, verifyPayment, findEndpointConfig, getEndpointFeeBreakdown, } from "./payment";
+import { AnalyticsReporter } from "./analytics";
+/**
+ * Express middleware that adds x402 payment requirements to protected endpoints.
+ * Now supports platform fee splitting — a percentage of each payment goes to the platform.
+ *
+ * Usage:
+ * ```ts
+ * import { paymentMiddleware } from "@apitoll/seller-sdk";
+ *
+ * app.use(paymentMiddleware({
+ *   walletAddress: "0xYourWallet...",
+ *   endpoints: {
+ *     "GET /api/data": {
+ *       price: "0.005",
+ *       chains: ["base", "solana"],
+ *       description: "Premium data feed",
+ *     },
+ *   },
+ *   platformFee: {
+ *     feeBps: 300, // 3%
+ *     platformWalletBase: "0xPlatformWallet...",
+ *   },
+ * }));
+ * ```
+ */
+export function paymentMiddleware(options) {
+    const { walletAddress, endpoints, chainConfigs: customChainConfigs, facilitatorUrl, webhookUrl, platformApiKey, platformFee, } = options;
+    // Merge custom chain configs with defaults
+    const chainConfigs = {
+        base: { ...DEFAULT_CHAIN_CONFIGS.base, ...customChainConfigs?.base },
+        solana: { ...DEFAULT_CHAIN_CONFIGS.solana, ...customChainConfigs?.solana },
+    };
+    // Initialize analytics reporter
+    const reporter = new AnalyticsReporter({
+        apiKey: platformApiKey,
+        webhookUrl,
+        verbose: process.env.NODE_ENV !== "production",
+    });
+    // Rate limiting: Redis-backed distributed rate limiting with circuit breaker
+    const RATE_LIMIT_WINDOW_MS = 60_000; // 1 minute
+    const RATE_LIMIT_MAX = 120; // max requests per window per IP
+    // Circuit breaker state for Redis failures
+    let redisFailureCount = 0;
+    let circuitOpen = false;
+    let circuitOpenedAt = 0;
+    const CIRCUIT_FAILURE_THRESHOLD = 5; // Open circuit after 5 consecutive failures
+    const CIRCUIT_RESET_MS = 30_000; // Try again after 30 seconds
+    // Redis is optional — if not available, falls through to in-memory rate limiting
+    let redis = null;
+    try {
+        const Redis = require('redis');
+        redis = Redis.createClient({
+            host: process.env.REDIS_HOST || 'localhost',
+            port: parseInt(process.env.REDIS_PORT || '6379'),
+            retryStrategy: (times) => Math.min(times * 50, 2000),
+        });
+        redis.on('error', (err) => {
+            console.warn('Redis connection error, using in-memory rate limiting:', err.message);
+        });
+    }
+    catch {
+        // Redis not installed — start with circuit open to use in-memory fallback
+        circuitOpen = true;
+        circuitOpenedAt = Date.now();
+    }
+    // In-memory fallback rate limiter (used when Redis circuit is open)
+    const fallbackRateLimitMap = new Map();
+    function checkFallbackRateLimit(key, limit, windowMs) {
+        const now = Date.now();
+        const timestamps = fallbackRateLimitMap.get(key) || [];
+        const recent = timestamps.filter((t) => now - t < windowMs);
+        recent.push(now);
+        fallbackRateLimitMap.set(key, recent);
+        // Periodic cleanup to prevent memory leaks
+        if (fallbackRateLimitMap.size > 10_000) {
+            for (const [k, v] of fallbackRateLimitMap) {
+                if (v.every((t) => now - t > windowMs)) {
+                    fallbackRateLimitMap.delete(k);
+                }
+            }
+        }
+        return recent.length <= limit;
+    }
+    async function checkRateLimit(key, limit) {
+        // If circuit is open, check if enough time has passed to try again
+        if (circuitOpen) {
+            if (Date.now() - circuitOpenedAt > CIRCUIT_RESET_MS) {
+                // Half-open: try Redis again
+                circuitOpen = false;
+                redisFailureCount = 0;
+            }
+            else {
+                // Circuit still open — use in-memory fallback
+                return checkFallbackRateLimit(key, limit, RATE_LIMIT_WINDOW_MS);
+            }
+        }
+        try {
+            if (!redis)
+                throw new Error('Redis not available');
+            const count = await redis.incr(key);
+            if (count === 1) {
+                await redis.expire(key, Math.ceil(RATE_LIMIT_WINDOW_MS / 1000));
+            }
+            // Success — reset failure counter
+            redisFailureCount = 0;
+            return count <= limit;
+        }
+        catch (e) {
+            console.error('Rate limit Redis error:', e);
+            redisFailureCount++;
+            if (redisFailureCount >= CIRCUIT_FAILURE_THRESHOLD) {
+                circuitOpen = true;
+                circuitOpenedAt = Date.now();
+                console.warn(`⚠️  Redis circuit breaker OPEN after ${redisFailureCount} failures. ` +
+                    `Falling back to in-memory rate limiting for ${CIRCUIT_RESET_MS / 1000}s.`);
+            }
+            // Fallback to in-memory rate limiting (never fail open)
+            return checkFallbackRateLimit(key, limit, RATE_LIMIT_WINDOW_MS);
+        }
+    }
+    return async function x402PaymentMiddleware(req, res, next) {
+        const startTime = Date.now();
+        // Apply security headers
+        for (const [header, value] of Object.entries(SECURITY_HEADERS)) {
+            res.setHeader(header, value);
+        }
+        // Rate limiting by IP (Redis-backed, distributed)
+        const clientIp = req.ip || req.socket.remoteAddress || "unknown";
+        const key = `ratelimit:${clientIp}:${Math.floor(Date.now() / 60000)}`;
+        const allowed = await checkRateLimit(key, RATE_LIMIT_MAX);
+        if (!allowed) {
+            res.status(429);
+            res.json({
+                error: "Too Many Requests",
+                message: "Rate limit exceeded. Try again later.",
+                retryAfter: Math.ceil(RATE_LIMIT_WINDOW_MS / 1000),
+            });
+            return;
+        }
+        // Check if this route requires payment
+        const match = findEndpointConfig(req.method, req.path, endpoints);
+        if (!match) {
+            // Not a paid endpoint — pass through
+            return next();
+        }
+        const { pattern, config } = match;
+        // Validate Content-Type for POST/PUT/PATCH
+        if (["POST", "PUT", "PATCH"].includes(req.method)) {
+            const contentType = req.headers["content-type"];
+            if (contentType && !contentType.includes("application/json")) {
+                res.status(415);
+                res.json({
+                    error: "Unsupported Media Type",
+                    message: "Content-Type must be application/json",
+                });
+                return;
+            }
+        }
+        // Check for X-PAYMENT header (client already paid)
+        const paymentHeader = req.headers["x-payment"];
+        if (!paymentHeader) {
+            // No payment provided — return 402 with payment requirements
+            const requirements = buildPaymentRequirements(config, walletAddress, chainConfigs, platformFee);
+            const feeBreakdown = getEndpointFeeBreakdown(config, platformFee);
+            res.status(402);
+            res.setHeader("PAYMENT-REQUIRED", encodePaymentRequired(requirements));
+            res.setHeader("Content-Type", "application/json");
+            res.json({
+                error: "Payment Required",
+                paymentRequirements: requirements,
+                description: config.description,
+                feeBreakdown: platformFee ? feeBreakdown : undefined,
+            });
+            return;
+        }
+        // Payment provided — verify it
+        const requirements = buildPaymentRequirements(config, walletAddress, chainConfigs, platformFee);
+        const resolvedFacilitatorUrl = facilitatorUrl || chainConfigs.base.facilitatorUrl;
+        const verification = await verifyPayment({
+            paymentHeader,
+            requirements,
+            facilitatorUrl: resolvedFacilitatorUrl,
+        }, platformFee);
+        if (!verification.valid) {
+            await reporter.reportRejection(pattern, req.method, verification.error || "unknown");
+            res.status(402);
+            res.json({
+                error: "Payment Invalid",
+                message: verification.error,
+            });
+            return;
+        }
+        // Payment verified — attach receipt + fee info to request and continue
+        req.paymentReceipt = verification.receipt;
+        req.x402 = {
+            receipt: verification.receipt,
+            feeBreakdown: verification.feeBreakdown,
+            endpoint: pattern,
+            config,
+        };
+        // Intercept response to report analytics (including fee data)
+        const originalEnd = res.end.bind(res);
+        res.end = function (chunk, encoding, cb) {
+            const latencyMs = Date.now() - startTime;
+            if (verification.receipt) {
+                reporter.report({
+                    endpoint: pattern,
+                    method: req.method,
+                    receipt: verification.receipt,
+                    responseStatus: res.statusCode,
+                    latencyMs,
+                    feeBreakdown: verification.feeBreakdown,
+                });
+            }
+            if (typeof encoding === 'function') {
+                return originalEnd(chunk, encoding);
+            }
+            else {
+                return originalEnd(chunk, encoding, cb);
+            }
+        };
+        next();
+    };
+}
+/**
+ * Helper to access the payment receipt from a request.
+ */
+export function getPaymentReceipt(req) {
+    return req.paymentReceipt || null;
+}
+/**
+ * Helper to access full x402 context from a request (includes fee info).
+ */
+export function getX402Context(req) {
+    return req.x402 || null;
+}
+//# sourceMappingURL=middleware-express.js.map

package/dist/middleware-express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-express.js","sourceRoot":"","sources":["../src/middleware-express.ts"],"names":[],"mappings":"AACA,OAAO,EAML,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,EACJ,aAAa,EACb,SAAS,EACT,YAAY,EAAE,kBAAkB,EAChC,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,GACZ,GAAG,OAAO,CAAC;IAEZ,2CAA2C;IAC3C,MAAM,YAAY,GAAwC;QACxD,IAAI,EAAE,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,GAAG,kBAAkB,EAAE,IAAI,EAAE;QACpE,MAAM,EAAE,EAAE,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,kBAAkB,EAAE,MAAM,EAAE;KAC3E,CAAC;IAEF,gCAAgC;IAChC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;QACrC,MAAM,EAAE,cAAc;QACtB,UAAU;QACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;KAC/C,CAAC,CAAC;IAEH,6EAA6E;IAC7E,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,WAAW;IAChD,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,iCAAiC;IAE7D,2CAA2C;IAC3C,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAG,4CAA4C;IACnF,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAO,6BAA6B;IAEpE,iFAAiF;IACjF,IAAI,KAAK,GAAQ,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;YAC3C,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;YAChD,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;SAC7D,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,OAAO,CAAC,IAAI,CAAC,wDAAwD,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,WAAW,GAAG,IAAI,CAAC;QACnB,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEzD,SAAS,sBAAsB,CAAC,GAAW,EAAE,KAAa,EAAE,QAAgB;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtC,2CAA2C;QAC3C,IAAI,oBAAoB,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC;gBAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;oBACvC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;IAChC,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAa;QACtD,mEAAmE;QACnE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC;gBACpD,6BAA6B;gBAC7B,WAAW,GAAG,KAAK,CAAC;gBACpB,iBAAiB,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,kCAAkC;YAClC,iBAAiB,GAAG,CAAC,CAAC;YACtB,OAAO,KAAK,IAAI,KAAK,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;YAC5C,iBAAiB,EAAE,CAAC;YAEpB,IAAI,iBAAiB,IAAI,yBAAyB,EAAE,CAAC;gBACnD,WAAW,GAAG,IAAI,CAAC;gBACnB,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CACV,wCAAwC,iBAAiB,aAAa;oBACtE,+CAA+C,gBAAgB,GAAG,IAAI,IAAI,CAC3E,CAAC;YACJ,CAAC;YAED,wDAAwD;YACxD,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,UAAU,qBAAqB,CACzC,GAAY,EACZ,GAAa,EACb,IAAkB;QAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,yBAAyB;QACzB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACjE,MAAM,GAAG,GAAG,aAAa,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAE1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,uCAAuC;gBAChD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,qCAAqC;YACrC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAElC,2CAA2C;QAC3C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK,EAAE,wBAAwB;oBAC/B,OAAO,EAAE,uCAAuC;iBACjD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAuB,CAAC;QAErE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,6DAA6D;YAC7D,MAAM,YAAY,GAAG,wBAAwB,CAC3C,MAAM,EACN,aAAa,EACb,YAAY,EACZ,WAAW,CACZ,CAAC;YAEF,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAElE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;YACvE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,kBAAkB;gBACzB,mBAAmB,EAAE,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,wBAAwB,CAC3C,MAAM,EACN,aAAa,EACb,YAAY,EACZ,WAAW,CACZ,CAAC;QAEF,MAAM,sBAAsB,GAC1B,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;QAErD,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC;YACE,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,sBAAsB;SACvC,EACD,WAAW,CACZ,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;YAErF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,YAAY,CAAC,KAAK;aAC5B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,uEAAuE;QACtE,GAAW,CAAC,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC;QAClD,GAAW,CAAC,IAAI,GAAG;YAClB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,QAAQ,EAAE,OAAO;YACjB,MAAM;SACP,CAAC;QAEF,8DAA8D;QAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,GAAW,CAAC,GAAG,GAAG,UAAU,KAAW,EAAE,QAAc,EAAE,EAAQ;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEzC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;gBACzB,QAAQ,CAAC,MAAM,CAAC;oBACd,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,cAAc,EAAE,GAAG,CAAC,UAAU;oBAC9B,SAAS;oBACT,YAAY,EAAE,YAAY,CAAC,YAAY;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAQ,CAAC;QAET,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,OAAQ,GAAW,CAAC,cAAc,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IAMzC,OAAQ,GAAW,CAAC,IAAI,IAAI,IAAI,CAAC;AACnC,CAAC"}

package/dist/middleware-hono.d.ts

@@ -0,0 +1,30 @@
+import type { MiddlewareHandler } from "hono";
+import { type SellerConfig } from "@apitoll/shared";
+/**
+ * Hono middleware for x402 payments with platform fee support.
+ *
+ * Usage:
+ * ```ts
+ * import { Hono } from "hono";
+ * import { paymentMiddleware } from "@apitoll/seller-sdk/hono";
+ *
+ * const app = new Hono();
+ *
+ * app.use("*", paymentMiddleware({
+ *   walletAddress: "0xYourWallet...",
+ *   endpoints: {
+ *     "GET /api/data": {
+ *       price: "0.005",
+ *       chains: ["base", "solana"],
+ *       description: "Premium data feed",
+ *     },
+ *   },
+ *   platformFee: {
+ *     feeBps: 300, // 3%
+ *     platformWalletBase: "0xPlatformWallet...",
+ *   },
+ * }));
+ * ```
+ */
+export declare function paymentMiddleware(options: SellerConfig): MiddlewareHandler;
+//# sourceMappingURL=middleware-hono.d.ts.map

package/dist/middleware-hono.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-hono.d.ts","sourceRoot":"","sources":["../src/middleware-hono.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC7D,OAAO,EACL,KAAK,YAAY,EAKlB,MAAM,iBAAiB,CAAC;AAUzB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,iBAAiB,CAsN1E"}

package/dist/middleware-hono.js

@@ -0,0 +1,192 @@
+import { DEFAULT_CHAIN_CONFIGS, SECURITY_HEADERS, } from "@apitoll/shared";
+import { buildPaymentRequirements, encodePaymentRequired, verifyPayment, findEndpointConfig, getEndpointFeeBreakdown, } from "./payment";
+import { AnalyticsReporter } from "./analytics";
+/**
+ * Hono middleware for x402 payments with platform fee support.
+ *
+ * Usage:
+ * ```ts
+ * import { Hono } from "hono";
+ * import { paymentMiddleware } from "@apitoll/seller-sdk/hono";
+ *
+ * const app = new Hono();
+ *
+ * app.use("*", paymentMiddleware({
+ *   walletAddress: "0xYourWallet...",
+ *   endpoints: {
+ *     "GET /api/data": {
+ *       price: "0.005",
+ *       chains: ["base", "solana"],
+ *       description: "Premium data feed",
+ *     },
+ *   },
+ *   platformFee: {
+ *     feeBps: 300, // 3%
+ *     platformWalletBase: "0xPlatformWallet...",
+ *   },
+ * }));
+ * ```
+ */
+export function paymentMiddleware(options) {
+    const { walletAddress, endpoints, chainConfigs: customChainConfigs, facilitatorUrl, webhookUrl, platformApiKey, platformFee, } = options;
+    const chainConfigs = {
+        base: { ...DEFAULT_CHAIN_CONFIGS.base, ...customChainConfigs?.base },
+        solana: { ...DEFAULT_CHAIN_CONFIGS.solana, ...customChainConfigs?.solana },
+    };
+    const reporter = new AnalyticsReporter({
+        apiKey: platformApiKey,
+        webhookUrl,
+        verbose: process.env.NODE_ENV !== "production",
+    });
+    // Rate limiting: Redis-backed with circuit breaker fallback
+    const RATE_LIMIT_WINDOW_MS = 60_000;
+    const RATE_LIMIT_MAX = 120;
+    let redis = null;
+    try {
+        const Redis = require('redis');
+        redis = Redis.createClient({
+            host: process.env.REDIS_HOST || 'localhost',
+            port: parseInt(process.env.REDIS_PORT || '6379'),
+            retryStrategy: (times) => Math.min(times * 50, 2000),
+        });
+    }
+    catch {
+        console.warn('Redis not available for Hono middleware, using in-memory rate limiting');
+    }
+    // Circuit breaker state
+    let redisFailureCount = 0;
+    let circuitOpen = false;
+    let circuitOpenedAt = 0;
+    const CIRCUIT_FAILURE_THRESHOLD = 5;
+    const CIRCUIT_RESET_MS = 30_000;
+    // In-memory fallback
+    const fallbackRateLimitMap = new Map();
+    function checkFallbackRateLimit(key, limit, windowMs) {
+        const now = Date.now();
+        const timestamps = fallbackRateLimitMap.get(key) || [];
+        const recent = timestamps.filter((t) => now - t < windowMs);
+        recent.push(now);
+        fallbackRateLimitMap.set(key, recent);
+        if (fallbackRateLimitMap.size > 10_000) {
+            for (const [k, v] of fallbackRateLimitMap) {
+                if (v.every((t) => now - t > windowMs)) {
+                    fallbackRateLimitMap.delete(k);
+                }
+            }
+        }
+        return recent.length <= limit;
+    }
+    async function checkRateLimit(key, limit) {
+        if (!redis) {
+            return checkFallbackRateLimit(key, limit, RATE_LIMIT_WINDOW_MS);
+        }
+        if (circuitOpen) {
+            if (Date.now() - circuitOpenedAt > CIRCUIT_RESET_MS) {
+                circuitOpen = false;
+                redisFailureCount = 0;
+            }
+            else {
+                return checkFallbackRateLimit(key, limit, RATE_LIMIT_WINDOW_MS);
+            }
+        }
+        try {
+            const count = await redis.incr(key);
+            if (count === 1) {
+                await redis.expire(key, Math.ceil(RATE_LIMIT_WINDOW_MS / 1000));
+            }
+            redisFailureCount = 0;
+            return count <= limit;
+        }
+        catch (e) {
+            console.error('Rate limit Redis error (Hono):', e);
+            redisFailureCount++;
+            if (redisFailureCount >= CIRCUIT_FAILURE_THRESHOLD) {
+                circuitOpen = true;
+                circuitOpenedAt = Date.now();
+                console.warn(`⚠️  Redis circuit breaker OPEN (Hono). Falling back to in-memory rate limiting.`);
+            }
+            return checkFallbackRateLimit(key, limit, RATE_LIMIT_WINDOW_MS);
+        }
+    }
+    return async (c, next) => {
+        const startTime = Date.now();
+        const url = new URL(c.req.url);
+        const method = c.req.method;
+        const path = url.pathname;
+        // Apply security headers
+        for (const [header, value] of Object.entries(SECURITY_HEADERS)) {
+            c.header(header, value);
+        }
+        // Rate limiting by IP (Redis-backed with circuit breaker)
+        const clientIp = c.req.header("x-forwarded-for") || "unknown";
+        const key = `ratelimit:${clientIp}:${Math.floor(Date.now() / 60000)}`;
+        const allowed = await checkRateLimit(key, RATE_LIMIT_MAX);
+        if (!allowed) {
+            return c.json({
+                error: "Too Many Requests",
+                message: "Rate limit exceeded. Try again later.",
+                retryAfter: Math.ceil(RATE_LIMIT_WINDOW_MS / 1000),
+            }, 429);
+        }
+        // Check if this route requires payment
+        const match = findEndpointConfig(method, path, endpoints);
+        if (!match) {
+            return next();
+        }
+        const { pattern, config } = match;
+        // Validate Content-Type for mutation methods
+        if (["POST", "PUT", "PATCH"].includes(method)) {
+            const contentType = c.req.header("content-type");
+            if (contentType && !contentType.includes("application/json")) {
+                return c.json({ error: "Unsupported Media Type", message: "Content-Type must be application/json" }, 415);
+            }
+        }
+        const paymentHeader = c.req.header("x-payment");
+        if (!paymentHeader) {
+            const requirements = buildPaymentRequirements(config, walletAddress, chainConfigs, platformFee);
+            const feeBreakdown = getEndpointFeeBreakdown(config, platformFee);
+            return c.json({
+                error: "Payment Required",
+                paymentRequirements: requirements,
+                description: config.description,
+                feeBreakdown: platformFee ? feeBreakdown : undefined,
+            }, 402, {
+                "PAYMENT-REQUIRED": encodePaymentRequired(requirements),
+            });
+        }
+        // Verify payment
+        const requirements = buildPaymentRequirements(config, walletAddress, chainConfigs, platformFee);
+        const resolvedFacilitatorUrl = facilitatorUrl || chainConfigs.base.facilitatorUrl;
+        const verification = await verifyPayment({
+            paymentHeader,
+            requirements,
+            facilitatorUrl: resolvedFacilitatorUrl,
+        }, platformFee);
+        if (!verification.valid) {
+            await reporter.reportRejection(pattern, method, verification.error || "unknown");
+            return c.json({ error: "Payment Invalid", message: verification.error }, 402);
+        }
+        // Attach receipt + fee info to context
+        c.set("paymentReceipt", verification.receipt);
+        c.set("x402", {
+            receipt: verification.receipt,
+            feeBreakdown: verification.feeBreakdown,
+            endpoint: pattern,
+            config,
+        });
+        await next();
+        // Report after response (including fee data)
+        const latencyMs = Date.now() - startTime;
+        if (verification.receipt) {
+            reporter.report({
+                endpoint: pattern,
+                method,
+                receipt: verification.receipt,
+                responseStatus: c.res.status,
+                latencyMs,
+                feeBreakdown: verification.feeBreakdown,
+            });
+        }
+    };
+}
+//# sourceMappingURL=middleware-hono.js.map

package/dist/middleware-hono.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-hono.js","sourceRoot":"","sources":["../src/middleware-hono.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACrD,MAAM,EACJ,aAAa,EACb,SAAS,EACT,YAAY,EAAE,kBAAkB,EAChC,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,GACZ,GAAG,OAAO,CAAC;IAEZ,MAAM,YAAY,GAAwC;QACxD,IAAI,EAAE,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,GAAG,kBAAkB,EAAE,IAAI,EAAE;QACpE,MAAM,EAAE,EAAE,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,kBAAkB,EAAE,MAAM,EAAE;KAC3E,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;QACrC,MAAM,EAAE,cAAc;QACtB,UAAU;QACV,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;KAC/C,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,oBAAoB,GAAG,MAAM,CAAC;IACpC,MAAM,cAAc,GAAG,GAAG,CAAC;IAE3B,IAAI,KAAK,GAAQ,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;YAC3C,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;YAChD,aAAa,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACzF,CAAC;IAED,wBAAwB;IACxB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,yBAAyB,GAAG,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;IAEhC,qBAAqB;IACrB,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEzD,SAAS,sBAAsB,CAAC,GAAW,EAAE,KAAa,EAAE,QAAgB;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEtC,IAAI,oBAAoB,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC;gBAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;oBACvC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;IAChC,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAa;QACtD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,gBAAgB,EAAE,CAAC;gBACpD,WAAW,GAAG,KAAK,CAAC;gBACpB,iBAAiB,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,iBAAiB,GAAG,CAAC,CAAC;YACtB,OAAO,KAAK,IAAI,KAAK,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,CAAC,CAAC,CAAC;YACnD,iBAAiB,EAAE,CAAC;YAEpB,IAAI,iBAAiB,IAAI,yBAAyB,EAAE,CAAC;gBACnD,WAAW,GAAG,IAAI,CAAC;gBACnB,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CACV,iFAAiF,CAClF,CAAC;YACJ,CAAC;YAED,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE1B,yBAAyB;QACzB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/D,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;QAC9D,MAAM,GAAG,GAAG,aAAa,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAE1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,uCAAuC;gBAChD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;aACnD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAElC,6CAA6C;QAC7C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACjD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,uCAAuC,EAAE,EACrF,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAChG,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAElE,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kBAAkB;gBACzB,mBAAmB,EAAE,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;aACrD,EACD,GAAG,EACH;gBACE,kBAAkB,EAAE,qBAAqB,CAAC,YAAY,CAAC;aACxD,CACF,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAChG,MAAM,sBAAsB,GAAG,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;QAElF,MAAM,YAAY,GAAG,MAAM,aAAa,CACtC;YACE,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,sBAAsB;SACvC,EACD,WAAW,CACZ,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,EACzD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;YACZ,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,QAAQ,EAAE,OAAO;YACjB,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,IAAI,EAAE,CAAC;QAEb,6CAA6C;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACzC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,CAAC;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;gBAC5B,SAAS;gBACT,YAAY,EAAE,YAAY,CAAC,YAAY;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/payment.d.ts

@@ -0,0 +1,42 @@
+import { type SupportedChain, type PaymentRequirement, type PaymentReceipt, type EndpointConfig, type ChainConfig, type PlatformFeeConfig, type FeeBreakdown } from "@apitoll/shared";
+/**
+ * Build the PaymentRequired response body for a given endpoint config.
+ * Returns an array of PaymentRequirement objects (one per supported chain).
+ * When platform fees are configured, the response includes fee metadata.
+ */
+export declare function buildPaymentRequirements(endpoint: EndpointConfig, sellerWallet: string, chainConfigs: Record<SupportedChain, ChainConfig>, platformFee?: PlatformFeeConfig): PaymentRequirement[];
+/**
+ * Get the fee breakdown for an endpoint price.
+ */
+export declare function getEndpointFeeBreakdown(endpoint: EndpointConfig, platformFee?: PlatformFeeConfig): FeeBreakdown;
+/**
+ * Build the base64-encoded PAYMENT-REQUIRED header value.
+ */
+export declare function encodePaymentRequired(requirements: PaymentRequirement[]): string;
+export interface VerifyPaymentOptions {
+    /** The X-PAYMENT header value from the client */
+    paymentHeader: string;
+    /** The payment requirements that were sent in the 402 response */
+    requirements: PaymentRequirement[];
+    /** Facilitator URL for verification */
+    facilitatorUrl: string;
+}
+export interface VerificationResult {
+    valid: boolean;
+    receipt?: PaymentReceipt;
+    feeBreakdown?: FeeBreakdown;
+    error?: string;
+}
+/**
+ * Verify a payment by calling the x402 facilitator.
+ * The facilitator checks on-chain that the payment is valid and settles it.
+ */
+export declare function verifyPayment(options: VerifyPaymentOptions, platformFee?: PlatformFeeConfig): Promise<VerificationResult>;
+/**
+ * Find the matching endpoint config for a given request.
+ */
+export declare function findEndpointConfig(method: string, path: string, endpoints: Record<string, EndpointConfig>): {
+    pattern: string;
+    config: EndpointConfig;
+} | null;
+//# sourceMappingURL=payment.d.ts.map

package/dist/payment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../src/payment.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAQlB,MAAM,iBAAiB,CAAC;AAIzB;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,EACjD,WAAW,CAAC,EAAE,iBAAiB,GAC9B,kBAAkB,EAAE,CA+BtB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,cAAc,EACxB,WAAW,CAAC,EAAE,iBAAiB,GAC9B,YAAY,CAEd;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAEhF;AAID,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,uCAAuC;IACvC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,EAC7B,WAAW,CAAC,EAAE,iBAAiB,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAuE7B;AAaD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GACxC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAAG,IAAI,CAOpD"}