@bankofai/x402 0.5.9 → 0.6.0-beta.0

package/dist/facilitator/x402Facilitator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402Facilitator.js","sourceRoot":"","sources":["../../src/facilitator/x402Facilitator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AA+C7C,MAAM,aAAa,GAAsB;IACvC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;IACzE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;CAC5E,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,eAAe;IAC1B,mCAAmC;IAClB,UAAU,GAAG,IAAI,GAAG,EAA6C,CAAC;IAElE,MAAM,CAAoB;IAE3C,YAAY,IAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAkB,EAAE,SAA+B;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;gBACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,SAAS;QACP,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CACZ,OAA8B,EAC9B,OAAiC;QAEjC,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC5D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE,EAC5F,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,OAAuB,EACvB,YAAiC;QAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,+BAA+B,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE;aAC5F,CAAC;QACJ,CAAC;QACD,IAAI,UAA+B,CAAC;QACpC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;gBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,OAAuB,EACvB,YAAiC;QAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,WAAW,EAAE,+BAA+B,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE;aAC1F,CAAC;QACJ,CAAC;QACD,IAAI,UAA+B,CAAC;QACpC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,WAAW,EAAG,GAAa,CAAC,OAAO;aACpC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;gBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAG,GAAa,CAAC,OAAO;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,MAAc;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACK,wBAAwB,CAAC,IAAyB;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YACtD,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YACtD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACf,CAAC,CAAC;oBACE,GAAG,IAAI,CAAC,KAAK;oBACb,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;wBACjB,CAAC,CAAC;4BACE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG;4BACjB,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC;4BAC1E,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;gCAC3B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC;gCACvE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;yBAC1B;wBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;iBACnB;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,2BAA2B,CAAC,IAAyB;QAC3D,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,OAAe,EAAE,SAAiB;QAC9D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/http/client.d.ts

@@ -1,33 +1,82 @@
 /**
- * X402FetchClient - Fetch-based HTTP client with automatic 402 payment handling
+ * X402FetchClient — Fetch-based HTTP client with automatic 402 payment handling.
+ *
+ * Mirrors `bankofai.x402.clients.X402HttpClient` on the Python side. Wraps the
+ * global `fetch` (configurable for tests) so agent code can call any URL and
+ * have 402 challenges silently handled — challenge → sign → retry → return
+ * the final 200 response, with the settled payment receipt parseable via
+ * {@link parsePaymentResponseHeader}.
  */
-import { X402Client, PaymentRequirementsSelector } from '../index.js';
+import { type PaymentRequirementsSelector, type SettleResponse, X402Client } from '../index.js';
+/** Wire-format header names. */
+export declare const PAYMENT_SIGNATURE_HEADER = "PAYMENT-SIGNATURE";
+export declare const PAYMENT_REQUIRED_HEADER = "PAYMENT-REQUIRED";
+export declare const PAYMENT_RESPONSE_HEADER = "PAYMENT-RESPONSE";
+/** Constructor options for {@link X402FetchClient}. */
+export interface X402FetchClientOptions {
+    /** Custom payment requirements selector (defaults to library default). */
+    selector?: PaymentRequirementsSelector;
+    /** Custom fetch implementation (defaults to global `fetch`). Useful for tests. */
+    fetchImpl?: typeof fetch;
+}
 /**
- * Fetch-based HTTP client with automatic 402 payment handling
+ * Fetch-based HTTP client with automatic 402 payment handling.
+ *
+ * @example
+ * ```ts
+ * const x402Client = new X402Client(...).register(mechanism);
+ * const httpClient = new X402FetchClient(x402Client);
+ *
+ * const res = await httpClient.get('https://api.example.com/llm');
+ * if (res.ok) {
+ *   const settled = parsePaymentResponseHeader(res);
+ *   console.log('paid via tx', settled?.transaction);
+ * }
+ * ```
  */
 export declare class X402FetchClient {
-    private x402Client;
-    private selector?;
-    constructor(x402Client: X402Client, selector?: PaymentRequirementsSelector);
+    private readonly x402Client;
+    private readonly selector?;
+    private readonly fetchImpl;
+    constructor(x402Client: X402Client, selectorOrOptions?: PaymentRequirementsSelector | X402FetchClientOptions);
     /**
-     * Make request with automatic 402 payment handling
+     * Issue a request with automatic 402 → pay → retry handling.
+     *
+     * If the server returns a non-402 status, the response is passed through.
+     * If the 402 cannot be parsed (no PAYMENT-REQUIRED header and no parseable
+     * body), the original 402 is returned to the caller for inspection.
      */
     request(url: string, init?: RequestInit): Promise<Response>;
-    /**
-     * GET request with payment handling
-     */
+    /** GET shorthand. */
     get(url: string, init?: RequestInit): Promise<Response>;
-    /**
-     * POST request with payment handling
-     */
+    /** POST shorthand. */
     post(url: string, body?: RequestInit['body'], init?: RequestInit): Promise<Response>;
+    /** PUT shorthand. */
+    put(url: string, body?: RequestInit['body'], init?: RequestInit): Promise<Response>;
+    /** PATCH shorthand. */
+    patch(url: string, body?: RequestInit['body'], init?: RequestInit): Promise<Response>;
+    /** DELETE shorthand. */
+    delete(url: string, init?: RequestInit): Promise<Response>;
     /**
-     * Parse PaymentRequired from 402 response
+     * Try to parse a `PaymentRequired` from the 402 response.
+     *
+     * Order:
+     * 1. `PAYMENT-REQUIRED` header (base64 JSON).
+     * 2. JSON body fallback when header is missing or undecodable.
+     *
+     * Returns `null` if neither path yields a recognizable shape.
      */
     private parsePaymentRequired;
-    /**
-     * Retry request with payment payload
-     */
+    /** Re-issue the original request with the encoded payment payload header. */
     private retryWithPayment;
 }
+/**
+ * Pull the {@link SettleResponse} out of a 200 response's PAYMENT-RESPONSE header.
+ *
+ * Servers attach this on success so the client can record the settlement tx
+ * hash / network without making a separate facilitator call.
+ *
+ * @returns The decoded settle response, or `null` if the header is absent or malformed.
+ */
+export declare function parsePaymentResponseHeader(response: Response): SettleResponse | null;
 //# sourceMappingURL=client.d.ts.map

package/dist/http/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,UAAU,EAGV,2BAA2B,EAG5B,MAAM,aAAa,CAAC;AAOrB;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,QAAQ,CAAC,CAA8B;gBAG7C,UAAU,EAAE,UAAU,EACtB,QAAQ,CAAC,EAAE,2BAA2B;IAMxC;;OAEG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC;IAsBpB;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI7D;;OAEG;IACG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI1F;;OAEG;YACW,oBAAoB;IAsBlC;;OAEG;YACW,gBAAgB;CAe/B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAGL,KAAK,2BAA2B,EAChC,KAAK,cAAc,EACnB,UAAU,EAGX,MAAM,aAAa,CAAC;AAErB,gCAAgC;AAChC,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IACvC,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAA8B;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAGvC,UAAU,EAAE,UAAU,EACtB,iBAAiB,CAAC,EAAE,2BAA2B,GAAG,sBAAsB;IAY1E;;;;;;OAMG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqBjE,qBAAqB;IACf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI7D,sBAAsB;IAChB,IAAI,CACR,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC;IAIpB,qBAAqB;IACf,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC;IAIpB,uBAAuB;IACjB,KAAK,CACT,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC;IAIpB,wBAAwB;IAClB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIhE;;;;;;;;OAQG;YACW,oBAAoB;IAsBlC,6EAA6E;YAC/D,gBAAgB;CAU/B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,GAAG,cAAc,GAAG,IAAI,CAUpF"}

package/dist/http/client.js

@@ -1,26 +1,56 @@
 /**
- * X402FetchClient - Fetch-based HTTP client with automatic 402 payment handling
+ * X402FetchClient — Fetch-based HTTP client with automatic 402 payment handling.
+ *
+ * Mirrors `bankofai.x402.clients.X402HttpClient` on the Python side. Wraps the
+ * global `fetch` (configurable for tests) so agent code can call any URL and
+ * have 402 challenges silently handled — challenge → sign → retry → return
+ * the final 200 response, with the settled payment receipt parseable via
+ * {@link parsePaymentResponseHeader}.
  */
-import { encodePaymentPayload, decodePaymentPayload, } from '../index.js';
-/** HTTP headers for x402 protocol */
-const PAYMENT_SIGNATURE_HEADER = 'PAYMENT-SIGNATURE';
-const PAYMENT_REQUIRED_HEADER = 'PAYMENT-REQUIRED';
-const PAYMENT_RESPONSE_HEADER = 'PAYMENT-RESPONSE';
+import { decodePaymentPayload, encodePaymentPayload, } from '../index.js';
+/** Wire-format header names. */
+export const PAYMENT_SIGNATURE_HEADER = 'PAYMENT-SIGNATURE';
+export const PAYMENT_REQUIRED_HEADER = 'PAYMENT-REQUIRED';
+export const PAYMENT_RESPONSE_HEADER = 'PAYMENT-RESPONSE';
 /**
- * Fetch-based HTTP client with automatic 402 payment handling
+ * Fetch-based HTTP client with automatic 402 payment handling.
+ *
+ * @example
+ * ```ts
+ * const x402Client = new X402Client(...).register(mechanism);
+ * const httpClient = new X402FetchClient(x402Client);
+ *
+ * const res = await httpClient.get('https://api.example.com/llm');
+ * if (res.ok) {
+ *   const settled = parsePaymentResponseHeader(res);
+ *   console.log('paid via tx', settled?.transaction);
+ * }
+ * ```
  */
 export class X402FetchClient {
     x402Client;
     selector;
-    constructor(x402Client, selector) {
+    fetchImpl;
+    constructor(x402Client, selectorOrOptions) {
         this.x402Client = x402Client;
-        this.selector = selector;
+        if (typeof selectorOrOptions === 'function') {
+            this.selector = selectorOrOptions;
+            this.fetchImpl = fetch;
+        }
+        else {
+            this.selector = selectorOrOptions?.selector;
+            this.fetchImpl = selectorOrOptions?.fetchImpl ?? fetch;
+        }
     }
     /**
-     * Make request with automatic 402 payment handling
+     * Issue a request with automatic 402 → pay → retry handling.
+     *
+     * If the server returns a non-402 status, the response is passed through.
+     * If the 402 cannot be parsed (no PAYMENT-REQUIRED header and no parseable
+     * body), the original 402 is returned to the caller for inspection.
      */
     async request(url, init) {
-        const response = await fetch(url, init);
+        const response = await this.fetchImpl(url, init);
         if (response.status !== 402) {
             return response;
         }
@@ -31,20 +61,34 @@ export class X402FetchClient {
         const paymentPayload = await this.x402Client.handlePayment(paymentRequired.accepts, url, paymentRequired.extensions, this.selector);
         return this.retryWithPayment(url, init, paymentPayload);
     }
-    /**
-     * GET request with payment handling
-     */
+    /** GET shorthand. */
     async get(url, init) {
         return this.request(url, { ...init, method: 'GET' });
     }
-    /**
-     * POST request with payment handling
-     */
+    /** POST shorthand. */
     async post(url, body, init) {
         return this.request(url, { ...init, method: 'POST', body });
     }
+    /** PUT shorthand. */
+    async put(url, body, init) {
+        return this.request(url, { ...init, method: 'PUT', body });
+    }
+    /** PATCH shorthand. */
+    async patch(url, body, init) {
+        return this.request(url, { ...init, method: 'PATCH', body });
+    }
+    /** DELETE shorthand. */
+    async delete(url, init) {
+        return this.request(url, { ...init, method: 'DELETE' });
+    }
     /**
-     * Parse PaymentRequired from 402 response
+     * Try to parse a `PaymentRequired` from the 402 response.
+     *
+     * Order:
+     * 1. `PAYMENT-REQUIRED` header (base64 JSON).
+     * 2. JSON body fallback when header is missing or undecodable.
+     *
+     * Returns `null` if neither path yields a recognizable shape.
      */
     async parsePaymentRequired(response) {
         const headerValue = response.headers.get(PAYMENT_REQUIRED_HEADER);
@@ -53,31 +97,46 @@ export class X402FetchClient {
                 return decodePaymentPayload(headerValue);
             }
             catch {
-                // Continue to parse body
+                // Header malformed — fall through to body.
             }
         }
         try {
-            const body = await response.json();
-            if (body.accepts && Array.isArray(body.accepts)) {
+            const body = (await response.clone().json());
+            if (Array.isArray(body.accepts)) {
                 return body;
             }
         }
         catch {
-            // Unable to parse
+            // Body not parseable — give up.
         }
         return null;
     }
-    /**
-     * Retry request with payment payload
-     */
+    /** Re-issue the original request with the encoded payment payload header. */
     async retryWithPayment(url, init, paymentPayload) {
-        const encodedPayload = encodePaymentPayload(paymentPayload);
+        const encoded = encodePaymentPayload(paymentPayload);
         const headers = new Headers(init?.headers);
-        headers.set(PAYMENT_SIGNATURE_HEADER, encodedPayload);
-        return fetch(url, {
-            ...init,
-            headers,
-        });
+        headers.set(PAYMENT_SIGNATURE_HEADER, encoded);
+        return this.fetchImpl(url, { ...init, headers });
+    }
+}
+/**
+ * Pull the {@link SettleResponse} out of a 200 response's PAYMENT-RESPONSE header.
+ *
+ * Servers attach this on success so the client can record the settlement tx
+ * hash / network without making a separate facilitator call.
+ *
+ * @returns The decoded settle response, or `null` if the header is absent or malformed.
+ */
+export function parsePaymentResponseHeader(response) {
+    const headerValue = response.headers.get(PAYMENT_RESPONSE_HEADER);
+    if (!headerValue) {
+        return null;
+    }
+    try {
+        return decodePaymentPayload(headerValue);
+    }
+    catch {
+        return null;
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/http/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAKL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,qCAAqC;AACrC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AACrD,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,UAAU,CAAa;IACvB,QAAQ,CAA+B;IAE/C,YACE,UAAsB,EACtB,QAAsC;QAEtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,GAAW,EACX,IAAkB;QAElB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAExC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CACxD,eAAe,CAAC,OAAO,EACvB,GAAG,EACH,eAAe,CAAC,UAAU,EAC1B,IAAI,CAAC,QAAQ,CACd,CAAC;QAEF,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAkB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAA0B,EAAE,IAAkB;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,QAAkB;QACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAClE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,oBAAoB,CAAkB,WAAW,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;YAC9D,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAkC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,IAA6B,EAC7B,cAA8B;QAE9B,MAAM,cAAc,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC;QAEtD,OAAO,KAAK,CAAC,GAAG,EAAE;YAChB,GAAG,IAAI;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAML,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,gCAAgC;AAChC,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAU1D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,eAAe;IACT,UAAU,CAAa;IACvB,QAAQ,CAA+B;IACvC,SAAS,CAAe;IAEzC,YACE,UAAsB,EACtB,iBAAwE;QAExE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,OAAO,iBAAiB,KAAK,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,iBAAiB,EAAE,QAAQ,CAAC;YAC5C,IAAI,CAAC,SAAS,GAAG,iBAAiB,EAAE,SAAS,IAAI,KAAK,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAkB;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CACxD,eAAe,CAAC,OAAO,EACvB,GAAG,EACH,eAAe,CAAC,UAAU,EAC1B,IAAI,CAAC,QAAQ,CACd,CAAC;QAEF,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAkB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,IAAI,CACR,GAAW,EACX,IAA0B,EAC1B,IAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,GAAG,CACP,GAAW,EACX,IAA0B,EAC1B,IAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,KAAK,CACT,GAAW,EACX,IAA0B,EAC1B,IAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,IAAkB;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,oBAAoB,CAAC,QAAkB;QACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAClE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,oBAAoB,CAAkB,WAAW,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAA4B,CAAC;YACxE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,OAAO,IAAkC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,IAA6B,EAC7B,cAA8B;QAE9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAkB;IAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAiB,WAAW,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -12,8 +12,11 @@ export * from './errors.js';
 export * from './tokens.js';
 export * from './address.js';
 export * from './http/client.js';
+export * from './facilitator/index.js';
+export * from './server/index.js';
+export * from './middleware/index.js';
 export * from './mechanisms/index.js';
-export * from './mechanisms/exactEvm.js';
+export * from './mechanisms/evm/exact_permit/index.js';
 export * from './signers/signer.js';
 export * from './signers/evmSigner.js';
 export type { TronWeb, TypedDataDomain, TypedDataField, TronNetwork, TRON_CHAIN_IDS } from './signers/types.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAG7B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,qBAAqB,CAAC;AAEpC,cAAc,wBAAwB,CAAC;AACvC,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAG7B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,wCAAwC,CAAC;AAGvD,cAAc,qBAAqB,CAAC;AAEpC,cAAc,wBAAwB,CAAC;AACvC,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -14,10 +14,16 @@ export * from './tokens.js';
 export * from './address.js';
 // HTTP Client
 export * from './http/client.js';
+// Facilitator client (talks to remote /verify, /settle, /supported, /fee/quote)
+export * from './facilitator/index.js';
+// High-level server API (X402Server, ResourceConfig, ServerMechanism)
+export * from './server/index.js';
+// Server middleware (Hono / Express adapters + framework-agnostic core)
+export * from './middleware/index.js';
 // Mechanisms
 export * from './mechanisms/index.js';
 // EVM ExactPermit Mechanism
-export * from './mechanisms/exactEvm.js';
+export * from './mechanisms/evm/exact_permit/index.js';
 // TRON Signer
 export * from './signers/signer.js';
 // EVM Signer

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO;AACP,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAE7B,cAAc;AACd,cAAc,kBAAkB,CAAC;AAEjC,aAAa;AACb,cAAc,uBAAuB,CAAC;AAEtC,4BAA4B;AAC5B,cAAc,0BAA0B,CAAC;AAEzC,cAAc;AACd,cAAc,qBAAqB,CAAC;AACpC,aAAa;AACb,cAAc,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO;AACP,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAE7B,cAAc;AACd,cAAc,kBAAkB,CAAC;AAEjC,gFAAgF;AAChF,cAAc,wBAAwB,CAAC;AAEvC,sEAAsE;AACtE,cAAc,mBAAmB,CAAC;AAElC,wEAAwE;AACxE,cAAc,uBAAuB,CAAC;AAEtC,aAAa;AACb,cAAc,uBAAuB,CAAC;AAEtC,4BAA4B;AAC5B,cAAc,wCAAwC,CAAC;AAEvD,cAAc;AACd,cAAc,qBAAqB,CAAC;AACpC,aAAa;AACb,cAAc,wBAAwB,CAAC"}

package/dist/mechanisms/_base/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Base mechanism interfaces — mirrors Python `bankofai.x402.mechanisms._base`.
+ *
+ * The three role interfaces (`ClientMechanism`, `ServerMechanism`,
+ * `FacilitatorMechanism`) currently live close to where they're consumed:
+ *
+ * - `ClientMechanism`     → `src/client/x402Client.ts`
+ * - `ServerMechanism`     → `src/server/types.ts`
+ * - `FacilitatorMechanism` → `src/facilitator/x402Facilitator.ts`
+ *
+ * This file re-exports them under one mechanism-rooted location so that
+ * `mechanisms/<chain>/<scheme>/{client,server,facilitator}.ts` modules import
+ * their role contract from a single canonical path. Mirrors how Python's
+ * `_base/{client,server,facilitator}.py` are imported by concrete mechanisms.
+ */
+export type { ClientMechanism, ClientSigner } from '../../client/x402Client.js';
+export type { ServerMechanism } from '../../server/types.js';
+export type { FacilitatorMechanism, FacilitatorLogger, } from '../../facilitator/x402Facilitator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mechanisms/_base/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mechanisms/_base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAChF,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EACV,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sCAAsC,CAAC"}

package/dist/mechanisms/_base/index.js

@@ -0,0 +1,17 @@
+/**
+ * Base mechanism interfaces — mirrors Python `bankofai.x402.mechanisms._base`.
+ *
+ * The three role interfaces (`ClientMechanism`, `ServerMechanism`,
+ * `FacilitatorMechanism`) currently live close to where they're consumed:
+ *
+ * - `ClientMechanism`     → `src/client/x402Client.ts`
+ * - `ServerMechanism`     → `src/server/types.ts`
+ * - `FacilitatorMechanism` → `src/facilitator/x402Facilitator.ts`
+ *
+ * This file re-exports them under one mechanism-rooted location so that
+ * `mechanisms/<chain>/<scheme>/{client,server,facilitator}.ts` modules import
+ * their role contract from a single canonical path. Mirrors how Python's
+ * `_base/{client,server,facilitator}.py` are imported by concrete mechanisms.
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/mechanisms/_base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mechanisms/_base/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/mechanisms/_exact_base/adapter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * ChainAdapter — pluggable per-chain primitives for the `exact` scheme.
+ *
+ * Mirrors Python `mechanisms._exact_base.base.ChainAdapter`. Subclasses
+ * provide chain-specific parsing / validation / address normalization so
+ * `ExactBase{Client,Server,Facilitator}Mechanism` can stay chain-agnostic.
+ */
+export interface ChainAdapter {
+    /** Parse chain id from CAIP-2 network (e.g. `"eip155:97"` → `97`). */
+    parseChainId(network: string): number;
+    /** Check the CAIP-2 prefix is valid for this adapter (`"eip155:"` / `"tron:"`). */
+    validateNetwork(network: string): boolean;
+    /** Format check (no on-chain lookup). */
+    validateAddress(address: string): boolean;
+    /** Canonicalize for storage / comparison (lowercase EVM, Base58 TRON, ...). */
+    normalizeAddress(address: string): string;
+    /**
+     * Convert to the address representation used inside EIP-712 / TIP-712 typed
+     * data (0x-prefixed hex on both chains). Used by signing path.
+     */
+    toSigningAddress(address: string): string;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/mechanisms/_exact_base/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/mechanisms/_exact_base/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,mFAAmF;IACnF,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,yCAAyC;IACzC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,+EAA+E;IAC/E,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1C;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3C"}

package/dist/mechanisms/_exact_base/adapter.js

@@ -0,0 +1,9 @@
+/**
+ * ChainAdapter — pluggable per-chain primitives for the `exact` scheme.
+ *
+ * Mirrors Python `mechanisms._exact_base.base.ChainAdapter`. Subclasses
+ * provide chain-specific parsing / validation / address normalization so
+ * `ExactBase{Client,Server,Facilitator}Mechanism` can stay chain-agnostic.
+ */
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/mechanisms/_exact_base/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/mechanisms/_exact_base/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/mechanisms/_exact_base/evmAdapter.d.ts

@@ -0,0 +1,10 @@
+import type { ChainAdapter } from './adapter.js';
+/** EVM (`eip155:<chainId>`) ChainAdapter. */
+export declare class EvmChainAdapter implements ChainAdapter {
+    parseChainId(network: string): number;
+    validateNetwork(network: string): boolean;
+    validateAddress(address: string): boolean;
+    normalizeAddress(address: string): string;
+    toSigningAddress(address: string): string;
+}
+//# sourceMappingURL=evmAdapter.d.ts.map

package/dist/mechanisms/_exact_base/evmAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evmAdapter.d.ts","sourceRoot":"","sources":["../../../src/mechanisms/_exact_base/evmAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,6CAA6C;AAC7C,qBAAa,eAAgB,YAAW,YAAY;IAClD,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAYrC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIzC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIzC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAIzC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;CAG1C"}

package/dist/mechanisms/_exact_base/evmAdapter.js

@@ -0,0 +1,28 @@
+import { getAddress, isAddress } from 'viem';
+/** EVM (`eip155:<chainId>`) ChainAdapter. */
+export class EvmChainAdapter {
+    parseChainId(network) {
+        const parts = network.split(':');
+        if (parts.length !== 2 || parts[0] !== 'eip155') {
+            throw new Error(`Invalid EVM network identifier: ${network}`);
+        }
+        const id = parseInt(parts[1], 10);
+        if (!Number.isFinite(id) || id <= 0) {
+            throw new Error(`Invalid EVM chain id in ${network}`);
+        }
+        return id;
+    }
+    validateNetwork(network) {
+        return network.startsWith('eip155:');
+    }
+    validateAddress(address) {
+        return isAddress(address, { strict: false });
+    }
+    normalizeAddress(address) {
+        return this.validateAddress(address) ? address.toLowerCase() : address;
+    }
+    toSigningAddress(address) {
+        return this.validateAddress(address) ? getAddress(address) : address;
+    }
+}
+//# sourceMappingURL=evmAdapter.js.map

package/dist/mechanisms/_exact_base/evmAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evmAdapter.js","sourceRoot":"","sources":["../../../src/mechanisms/_exact_base/evmAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7C,6CAA6C;AAC7C,MAAM,OAAO,eAAe;IAC1B,YAAY,CAAC,OAAe;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,OAAO,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;CACF"}

package/dist/mechanisms/_exact_base/facilitator.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Shared base for `exact` scheme facilitator mechanisms.
+ *
+ * Mirrors Python `mechanisms._exact_base.base.ExactBaseFacilitatorMechanism`.
+ *
+ * Per-chain subclasses provide a {@link ChainAdapter} and the chain RPC client
+ * (viem PublicClient / tronweb instance). The base handles:
+ * - basic structural verification (asset / payTo / value match, time window)
+ * - dispatching feeQuote / verify / settle to the chain-specific impl
+ *
+ * Subclasses MUST implement chain interactions: signature recovery, balance
+ * check, transaction broadcast. The base provides defaults that return
+ * `null` / `false` so non-fully-implemented mechanisms remain visible at
+ * the structural level but don't pretend to verify on-chain state.
+ */
+import type { ChainAdapter } from './adapter.js';
+import type { FacilitatorMechanism } from '../../facilitator/x402Facilitator.js';
+import type { FeeQuoteResponse, PaymentPayload, PaymentRequirements, SettleResponse, VerifyResponse } from '../../types/index.js';
+export declare abstract class ExactBaseFacilitatorMechanism implements FacilitatorMechanism {
+    protected readonly adapter: ChainAdapter;
+    constructor(adapter: ChainAdapter);
+    scheme(): string;
+    /**
+     * `exact` scheme has no facilitator fee — return `null` to drop from the
+     * supported quote list. Permit-based schemes override this.
+     */
+    feeQuote(_accept: PaymentRequirements, _context?: Record<string, unknown>): Promise<FeeQuoteResponse | null>;
+    /**
+     * Off-chain verification: structural + timing checks. Chain-specific
+     * subclasses extend this to add signature recovery and balance check.
+     */
+    verify(payload: PaymentPayload, requirements: PaymentRequirements): Promise<VerifyResponse>;
+    /**
+     * Settle the authorization on-chain. Chain-specific — subclasses must
+     * implement using viem (EVM) or tronweb (TRON).
+     */
+    abstract settle(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse>;
+    /**
+     * Chain-specific signature recovery + balance check. Default returns
+     * `isValid: true` (trust upstream); subclasses MUST override for real
+     * signature verification. Marked protected so subclass can call super.
+     */
+    protected verifySignatureOnChain(_payload: PaymentPayload, _requirements: PaymentRequirements): Promise<VerifyResponse>;
+    protected extractAuthorization(payload: PaymentPayload): NonNullable<PaymentPayload['payload']['authorization']> | null;
+}
+//# sourceMappingURL=facilitator.d.ts.map

package/dist/mechanisms/_exact_base/facilitator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facilitator.d.ts","sourceRoot":"","sources":["../../../src/mechanisms/_exact_base/facilitator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,sBAAsB,CAAC;AAG9B,8BAAsB,6BAA8B,YAAW,oBAAoB;IACrE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY;gBAArB,OAAO,EAAE,YAAY;IAEpD,MAAM,IAAI,MAAM;IAIhB;;;OAGG;IACG,QAAQ,CACZ,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAInC;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,cAAc,CAAC;IAsC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CACb,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,cAAc,CAAC;IAE1B;;;;OAIG;cACa,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,mBAAmB,GACjC,OAAO,CAAC,cAAc,CAAC;IAI1B,SAAS,CAAC,oBAAoB,CAC5B,OAAO,EAAE,cAAc,GACtB,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI;CAKlE"}

package/dist/mechanisms/_exact_base/facilitator.js

@@ -0,0 +1,87 @@
+/**
+ * Shared base for `exact` scheme facilitator mechanisms.
+ *
+ * Mirrors Python `mechanisms._exact_base.base.ExactBaseFacilitatorMechanism`.
+ *
+ * Per-chain subclasses provide a {@link ChainAdapter} and the chain RPC client
+ * (viem PublicClient / tronweb instance). The base handles:
+ * - basic structural verification (asset / payTo / value match, time window)
+ * - dispatching feeQuote / verify / settle to the chain-specific impl
+ *
+ * Subclasses MUST implement chain interactions: signature recovery, balance
+ * check, transaction broadcast. The base provides defaults that return
+ * `null` / `false` so non-fully-implemented mechanisms remain visible at
+ * the structural level but don't pretend to verify on-chain state.
+ */
+import { SCHEME_EXACT } from './types.js';
+export class ExactBaseFacilitatorMechanism {
+    adapter;
+    constructor(adapter) {
+        this.adapter = adapter;
+    }
+    scheme() {
+        return SCHEME_EXACT;
+    }
+    /**
+     * `exact` scheme has no facilitator fee — return `null` to drop from the
+     * supported quote list. Permit-based schemes override this.
+     */
+    async feeQuote(_accept, _context) {
+        return null;
+    }
+    /**
+     * Off-chain verification: structural + timing checks. Chain-specific
+     * subclasses extend this to add signature recovery and balance check.
+     */
+    async verify(payload, requirements) {
+        const authorization = this.extractAuthorization(payload);
+        if (!authorization) {
+            return { isValid: false, invalidReason: 'missing_authorization' };
+        }
+        // Validate basic structural correctness
+        if (String(authorization.to).toLowerCase() !== String(requirements.payTo).toLowerCase()) {
+            return { isValid: false, invalidReason: 'payTo_mismatch' };
+        }
+        try {
+            if (BigInt(authorization.value) < BigInt(requirements.amount)) {
+                return { isValid: false, invalidReason: 'amount_too_low' };
+            }
+        }
+        catch {
+            return { isValid: false, invalidReason: 'invalid_value' };
+        }
+        // Validate time window
+        const now = Math.floor(Date.now() / 1000);
+        try {
+            if (BigInt(String(authorization.validBefore ?? '0')) < BigInt(now)) {
+                return { isValid: false, invalidReason: 'expired' };
+            }
+            if (BigInt(String(authorization.validAfter ?? now)) > BigInt(now)) {
+                return { isValid: false, invalidReason: 'not_yet_valid' };
+            }
+        }
+        catch {
+            return { isValid: false, invalidReason: 'invalid_time_window' };
+        }
+        // Chain-specific signature + balance check (overridable)
+        const sigResult = await this.verifySignatureOnChain(payload, requirements);
+        if (!sigResult.isValid)
+            return sigResult;
+        return { isValid: true };
+    }
+    /**
+     * Chain-specific signature recovery + balance check. Default returns
+     * `isValid: true` (trust upstream); subclasses MUST override for real
+     * signature verification. Marked protected so subclass can call super.
+     */
+    async verifySignatureOnChain(_payload, _requirements) {
+        return { isValid: true };
+    }
+    extractAuthorization(payload) {
+        if (payload.payload.authorization)
+            return payload.payload.authorization;
+        const ext = (payload.extensions ?? {})['transferAuthorization'];
+        return ext ?? null;
+    }
+}
+//# sourceMappingURL=facilitator.js.map