@ashlar-blue/x402-trust 0.3.0

package/dist/types.js

@@ -0,0 +1,68 @@
+// GENERATED from src/x402/types.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/**
+ * x402 protocol wire types — EMITS v1, PARSES v1 and v2.
+ *
+ * Shapes follow the x402 spec (Coinbase/x402 Foundation): a resource
+ * server answers 402 with `PaymentRequiredResponse`; the client retries
+ * with an `X-PAYMENT` header carrying base64(JSON(PaymentPayload)); the
+ * facilitator verifies and settles; the server attaches
+ * `X-PAYMENT-RESPONSE` = base64(JSON(SettleResponse)).
+ *
+ * FlareClaw is the first x402 facilitator on Flare (Coston2 first —
+ * network id "coston2", eip155:114).
+ */
+/**
+ * The version we EMIT in our own 402 challenges.
+ *
+ * We accept v2 payloads too (see `normalizeRequirements` /
+ * `decodePaymentHeader`) — being a co-author of x402 extensions while
+ * silently refusing the ecosystem's current wire format would be an
+ * embarrassing kind of wrong. Emission stays on v1 until every one of
+ * our own clients is v2-ready; acceptance is widened first, because
+ * accepting more than you emit is the only safe direction to move a
+ * protocol version.
+ */
+export const X402_VERSION = 1;
+/** Versions this implementation can PARSE. */
+export const SUPPORTED_X402_VERSIONS = [1, 2];
+export const PAYMENT_HEADER = 'X-PAYMENT';
+/**
+ * v2 servers may deliver the challenge in a RESPONSE HEADER with a null body
+ * instead of in the body. Measured on a live commercial deployment
+ * (x402.glassnode.com, 2026-08-06): `payment-required:` base64, body `null`.
+ * A client that only reads the body sees nothing and cannot pay them.
+ */
+export const PAYMENT_REQUIRED_HEADER = 'payment-required';
+export const PAYMENT_RESPONSE_HEADER = 'X-PAYMENT-RESPONSE';
+/**
+ * The amount a requirement asks for, whichever version wrote it.
+ * Throws rather than defaulting: a missing price must never quietly
+ * become zero on a payment path.
+ */
+export function requirementAmount(r) {
+    const v = r.maxAmountRequired ?? r.amount;
+    if (v === undefined)
+        throw new Error('x402: requirement has neither maxAmountRequired (v1) nor amount (v2)');
+    return v;
+}
+/**
+ * The offered requirements of a 402 body.
+ *
+ * `accepts` is the spec field in BOTH versions. The `accepted` fallback exists
+ * only to tolerate servers that put the chosen-requirement field in a 402 by
+ * mistake; it is normalised to an array so no caller has to care.
+ */
+export function offeredRequirements(body) {
+    if (body.accepts)
+        return body.accepts;
+    if (!body.accepted)
+        return [];
+    return Array.isArray(body.accepted) ? body.accepted : [body.accepted];
+}
+/** Declared transfer method, defaulting per spec to `eip3009`. */
+export function transferMethod(r) {
+    return r.extra?.assetTransferMethod ?? 'eip3009';
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAU,CAAC;AAevD,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAmD5D;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAsB;IACpD,MAAM,CAAC,GAAG,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC7G,OAAO,CAAC,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC7D,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,CAAsB;IACjD,OAAO,CAAC,CAAC,KAAK,EAAE,mBAAmB,IAAI,SAAS,CAAC;AACrD,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@ashlar-blue/x402-trust",
+  "version": "0.3.0",
+  "description": "The institutional trust layer for autonomous AI agents: discover payment endpoints via DNS, verify TEE hardware quotes, and generate SCITT transparency receipts. Zero dependencies.",
+  "keywords": [
+    "x402",
+    "agents",
+    "payments",
+    "attestation",
+    "tee",
+    "discovery",
+    "scitt",
+    "flare",
+    "xrpl"
+  ],
+  "author": "Corrente Labs, Inc. <contact@correntelabs.com>",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "sync": "tsx ../../scripts/sdk/sync-sdk.ts",
+    "build": "npm run sync && tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/correntelabs/ashlar-blue.git"
+  },
+  "homepage": "https://ashlar.blue",
+  "bugs": {
+    "url": "https://github.com/correntelabs/ashlar-blue/issues"
+  }
+}