@clawcash/forge 0.1.7 → 0.1.8

package/README.md

@@ -46,18 +46,24 @@ await mountAgentServices(app, [removeBackground], {
     repo: "my-app",
     baseUrl: process.env.FORGE_URL ?? "https://forge.clawca.sh",
   },
+  gateway: { handle: "my-app" },
 });
 
 app.listen(3000);
 ```
 
-Resolution order: `PAY_TO` env (optional override) → live Forge API → `payToFallback`.
+The only env var a deployed merchant needs is `FORGE_API_KEY` (per-project key from the Forge dashboard). Everything else resolves automatically:
+
+- **payTo** — `PAY_TO` env (optional override) → live Forge API → `payToFallback`.
+- **Gateway URL** — defaults to `https://gateway.clawca.sh` (`GATEWAY_URL` to override).
+- **Handle** — baked into the mount options by Forge codegen (`FORGE_HANDLE` to override).
+- **Public base URL** — `PUBLIC_BASE_URL` env → platform vars (Railway, Render, Vercel, Fly, Heroku) → inferred from the first inbound probe and self-verified (the SDK fetches its own `/forge/health` at the candidate URL and checks the per-boot instance nonce before trusting it).
 
 Agents call `POST /agent/remove-background` and pay via x402 when challenged with HTTP 402.
 
 After mount, the merchant also exposes liveliness probes:
 
-- `GET /forge/health` — process up + Forge mounted
+- `GET /forge/health` — process up + Forge mounted (includes the instance nonce)
 - `GET /forge/status` — readiness (`ready` needs fulfill secret + public URL + actions)
 - `GET /.well-known/clawcash.json` — discovery
 

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   FORGE_GATEWAY_USER_ID: () => FORGE_GATEWAY_USER_ID,
+  PublicBaseUrlResolver: () => PublicBaseUrlResolver,
   buildForgeSurfaceStatus: () => buildForgeSurfaceStatus,
   buildWellKnownDocument: () => buildWellKnownDocument,
   createContext: () => createContext,
@@ -38,6 +39,7 @@ __export(index_exports, {
   mountAgentServices: () => mountAgentServices,
   recordHeartbeatResult: () => recordHeartbeatResult,
   requireForgeGateway: () => requireForgeGateway,
+  resolveBaseUrlFromEnv: () => resolveBaseUrlFromEnv,
   resolvePayTo: () => resolvePayTo,
   toKebabCase: () => toKebabCase,
   waitUntil: () => waitUntil
@@ -88,6 +90,109 @@ var import_express2 = require("@x402/express");
 var import_server = require("@x402/core/server");
 var import_server2 = require("@x402/evm/exact/server");
 
+// src/base-url.ts
+var import_node_crypto = require("crypto");
+function resolveBaseUrlFromEnv(explicit) {
+  const fromExplicit = explicit?.trim();
+  if (fromExplicit) return stripSlash(fromExplicit);
+  const fromEnv = process.env.PUBLIC_BASE_URL?.trim();
+  if (fromEnv) return stripSlash(fromEnv);
+  const railway = process.env.RAILWAY_PUBLIC_DOMAIN?.trim();
+  if (railway) return `https://${stripSlash(railway)}`;
+  const render = process.env.RENDER_EXTERNAL_URL?.trim();
+  if (render) return stripSlash(render);
+  const vercel = process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim() || process.env.VERCEL_URL?.trim();
+  if (vercel) return `https://${stripSlash(vercel)}`;
+  const fly = process.env.FLY_APP_NAME?.trim();
+  if (fly) return `https://${fly}.fly.dev`;
+  const heroku = process.env.HEROKU_APP_NAME?.trim();
+  if (heroku) return `https://${heroku}.herokuapp.com`;
+  return null;
+}
+function stripSlash(url) {
+  return url.replace(/\/$/, "");
+}
+var MAX_VERIFY_ATTEMPTS = 5;
+var VERIFY_TIMEOUT_MS = 3e3;
+var PublicBaseUrlResolver = class {
+  /** Per-boot nonce, echoed by /forge/health for self-verification. */
+  instanceNonce;
+  resolved;
+  verifying = false;
+  rejected = /* @__PURE__ */ new Set();
+  attempts = 0;
+  onResolved;
+  constructor(opts) {
+    this.instanceNonce = (0, import_node_crypto.randomBytes)(16).toString("hex");
+    this.resolved = opts.initial;
+    this.onResolved = opts.onResolved ?? null;
+  }
+  get() {
+    return this.resolved;
+  }
+  /**
+   * Feed an inbound Forge-surface request. No-op once resolved. Kicks off
+   * async self-verification of the candidate URL derived from the request.
+   */
+  considerRequest(req) {
+    if (this.resolved || this.verifying) return;
+    if (this.attempts >= MAX_VERIFY_ATTEMPTS) return;
+    const candidate = candidateFromRequest(req);
+    if (!candidate || this.rejected.has(candidate)) return;
+    this.verifying = true;
+    this.attempts += 1;
+    void this.verify(candidate).then((ok) => {
+      if (ok) {
+        this.resolved = candidate;
+        console.log(`[forge] public base URL inferred and verified: ${candidate}`);
+        this.onResolved?.(candidate);
+      } else {
+        this.rejected.add(candidate);
+        console.warn(
+          `[forge] candidate base URL failed self-verification, ignoring: ${candidate}`
+        );
+      }
+    }).finally(() => {
+      this.verifying = false;
+    });
+  }
+  /** Fetch our own /forge/health at the candidate and match the boot nonce. */
+  async verify(candidate) {
+    try {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), VERIFY_TIMEOUT_MS);
+      const res = await fetch(`${candidate}/forge/health`, {
+        signal: controller.signal,
+        headers: { accept: "application/json" },
+        redirect: "manual"
+      });
+      clearTimeout(timer);
+      if (!res.ok) return false;
+      const json = await res.json();
+      return json.instance === this.instanceNonce;
+    } catch {
+      return false;
+    }
+  }
+};
+function candidateFromRequest(req) {
+  const host = firstHeaderValue(req.headers["x-forwarded-host"]) ?? req.headers.host;
+  if (!host || !isValidHost(host)) return null;
+  const proto = firstHeaderValue(req.headers["x-forwarded-proto"]) ?? (req.protocol || "http");
+  if (proto !== "https" && proto !== "http") return null;
+  const isLocal = /^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/i.test(host);
+  if (proto === "http" && !isLocal) return null;
+  return `${proto}://${host}`;
+}
+function firstHeaderValue(value) {
+  const raw = Array.isArray(value) ? value[0] : value;
+  const first = raw?.split(",")[0]?.trim();
+  return first || null;
+}
+function isValidHost(host) {
+  return /^[a-z0-9.-]+(:\d{1,5})?$/i.test(host) || /^\[[0-9a-f:]+\](:\d{1,5})?$/i.test(host);
+}
+
 // src/gateway.ts
 async function heartbeatGateway(opts) {
   const gateway = opts.gatewayUrl.replace(/\/$/, "");
@@ -209,7 +314,7 @@ async function resolvePayTo(opts) {
 }
 
 // src/status.ts
-var PACKAGE_VERSION = "0.1.7";
+var PACKAGE_VERSION = "0.1.8";
 var lastHeartbeat = {
   attempted: false,
   ok: null,
@@ -271,6 +376,7 @@ function forgeSdkVersion() {
 // src/mount.ts
 var DEFAULT_NETWORK = "eip155:8453";
 var DEFAULT_FACILITATOR_URL = "https://facilitator.xpay.sh";
+var DEFAULT_GATEWAY_URL = "https://gateway.clawca.sh";
 function asNetwork(value) {
   return value ?? DEFAULT_NETWORK;
 }
@@ -370,7 +476,7 @@ function mountFulfillmentRouter(app, services, options) {
 function mountForgeStatusRoutes(app, services, options, opts) {
   const getStatus = () => buildForgeSurfaceStatus({
     handle: opts.handle,
-    publicBaseUrl: opts.publicBaseUrl,
+    publicBaseUrl: opts.resolver.get(),
     gatewayUrl: opts.gatewayUrl,
     fulfillMounted: opts.fulfillMounted,
     fulfillPath: opts.fulfillPath,
@@ -382,7 +488,8 @@ function mountForgeStatusRoutes(app, services, options, opts) {
       price: s.payment.amount
     }))
   });
-  app.get("/forge/health", (_req, res) => {
+  app.get("/forge/health", (req, res) => {
+    opts.resolver.considerRequest(req);
     const status = getStatus();
     res.json({
       ok: true,
@@ -390,14 +497,18 @@ function mountForgeStatusRoutes(app, services, options, opts) {
       ready: status.ready,
       handle: status.handle,
       version: status.version,
+      // Per-boot nonce so this instance can self-verify an inferred base URL.
+      instance: opts.resolver.instanceNonce,
       actions: status.actions.map((a) => a.name)
     });
   });
-  app.get("/forge/status", (_req, res) => {
+  app.get("/forge/status", (req, res) => {
+    opts.resolver.considerRequest(req);
     const status = getStatus();
     res.status(status.ready ? 200 : 503).json(status);
   });
-  app.get("/.well-known/clawcash.json", (_req, res) => {
+  app.get("/.well-known/clawcash.json", (req, res) => {
+    opts.resolver.considerRequest(req);
     res.json(buildWellKnownDocument(getStatus()));
   });
   console.log(
@@ -472,23 +583,15 @@ async function mountAgentServices(app, services, options) {
     getForgeApiKey(options.gateway?.registerSecret)
   );
   mountFulfillmentRouter(app, services, options);
-  const gatewayUrl = options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || null;
+  const gatewayUrl = options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || DEFAULT_GATEWAY_URL;
   const handle = options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;
   const registerSecret = options.gateway?.registerSecret?.trim() || process.env.FORGE_API_KEY?.trim() || process.env.GATEWAY_REGISTER_SECRET?.trim();
-  const publicBaseUrl = options.gateway?.publicBaseUrl?.trim() || process.env.PUBLIC_BASE_URL?.trim() || (process.env.RAILWAY_PUBLIC_DOMAIN ? `https://${process.env.RAILWAY_PUBLIC_DOMAIN}` : "") || null;
-  mountForgeStatusRoutes(app, services, options, {
-    fulfillMounted,
-    fulfillPath,
-    agentBasePath: basePath,
-    handle,
-    publicBaseUrl,
-    gatewayUrl
-  });
-  if (gatewayUrl && handle && registerSecret && publicBaseUrl) {
+  const sendHeartbeat = (baseUrl) => {
+    if (!handle || !registerSecret) return;
     void heartbeatGateway({
       gatewayUrl,
       handle,
-      baseUrl: publicBaseUrl,
+      baseUrl,
       registerSecret
     }).then(() => {
       recordHeartbeatResult({ ok: true });
@@ -497,6 +600,23 @@ async function mountAgentServices(app, services, options) {
       recordHeartbeatResult({ ok: false, error: message });
       console.warn("[forge] gateway heartbeat skipped:", err);
     });
+  };
+  const resolver = new PublicBaseUrlResolver({
+    initial: resolveBaseUrlFromEnv(options.gateway?.publicBaseUrl),
+    // Base URL learned late (inferred from the first probe): heartbeat now.
+    onResolved: sendHeartbeat
+  });
+  mountForgeStatusRoutes(app, services, options, {
+    fulfillMounted,
+    fulfillPath,
+    agentBasePath: basePath,
+    handle,
+    resolver,
+    gatewayUrl
+  });
+  const bootBaseUrl = resolver.get();
+  if (bootBaseUrl) {
+    sendHeartbeat(bootBaseUrl);
   }
   return router;
 }
@@ -590,6 +710,7 @@ function generateSkillMarkdown(services, meta) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   FORGE_GATEWAY_USER_ID,
+  PublicBaseUrlResolver,
   buildForgeSurfaceStatus,
   buildWellKnownDocument,
   createContext,
@@ -607,6 +728,7 @@ function generateSkillMarkdown(services, meta) {
   mountAgentServices,
   recordHeartbeatResult,
   requireForgeGateway,
+  resolveBaseUrlFromEnv,
   resolvePayTo,
   toKebabCase,
   waitUntil

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/define.ts","../src/mount.ts","../src/gateway.ts","../src/gateway-auth.ts","../src/payto.ts","../src/status.ts","../src/skill.ts"],"sourcesContent":["export { defineAgentService, waitUntil, createContext, toKebabCase } from \"./define.js\";\nexport { mountAgentServices, createForgeRouter } from \"./mount.js\";\nexport { generateSkillMarkdown } from \"./skill.js\";\nexport { resolvePayTo, isZeroAddress } from \"./payto.js\";\nexport { heartbeatGateway } from \"./gateway.js\";\nexport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  forgeSdkVersion,\n  getLastHeartbeat,\n  recordHeartbeatResult,\n} from \"./status.js\";\nexport type { ForgeHeartbeatState, ForgeSurfaceStatus } from \"./status.js\";\nexport {\n  isForgeGatewayRequest,\n  requireForgeGateway,\n  getForgeApiKey,\n  getForgeGatewaySecret,\n  forgeGatewayLoopbackHeaders,\n  FORGE_GATEWAY_USER_ID,\n} from \"./gateway-auth.js\";\nexport type {\n  SchemaFieldType,\n  InputSchema,\n  OutputSchema,\n  PaymentConfig,\n  WaitUntilOptions,\n  AgentServiceContext,\n  AgentServiceConfig,\n  DefinedAgentService,\n  MountOptions,\n  ForgePayToSource,\n  SkillMeta,\n} from \"./types.js\";\n","import type {\n  AgentServiceConfig,\n  AgentServiceContext,\n  DefinedAgentService,\n  WaitUntilOptions,\n} from \"./types.js\";\n\nexport async function waitUntil<T>(options: WaitUntilOptions<T>): Promise<T> {\n  const intervalMs = options.intervalMs ?? 500;\n  const timeoutMs = options.timeoutMs ?? 60_000;\n  const started = Date.now();\n\n  for (;;) {\n    const value = await options.run();\n    if (options.completedWhen(value)) {\n      return value;\n    }\n    if (Date.now() - started >= timeoutMs) {\n      throw new Error(`waitUntil timed out after ${timeoutMs}ms`);\n    }\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function createContext(): AgentServiceContext {\n  return {\n    waitUntil,\n  };\n}\n\n/** Convert snake_case or camelCase service name to kebab-case path segment. */\nexport function toKebabCase(name: string): string {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1-$2\")\n    .replace(/_/g, \"-\")\n    .toLowerCase();\n}\n\nexport function defineAgentService<\n  TInput extends Record<string, unknown> = Record<string, unknown>,\n  TOutput extends Record<string, unknown> = Record<string, unknown>,\n>(\n  config: AgentServiceConfig<TInput, TOutput>,\n): DefinedAgentService<TInput, TOutput> {\n  if (!config.name?.trim()) {\n    throw new Error(\"defineAgentService: name is required\");\n  }\n  if (!config.execute) {\n    throw new Error(\"defineAgentService: execute is required\");\n  }\n\n  return {\n    ...config,\n    __forge: true,\n    path: toKebabCase(config.name),\n  };\n}\n","import type { Application, Request, Response, NextFunction, Router } from \"express\";\nimport { Router as createRouter } from \"express\";\nimport { paymentMiddleware, x402ResourceServer } from \"@x402/express\";\nimport type { Network } from \"@x402/express\";\nimport { HTTPFacilitatorClient } from \"@x402/core/server\";\nimport type { RoutesConfig } from \"@x402/core/server\";\nimport { ExactEvmScheme } from \"@x402/evm/exact/server\";\nimport { createContext } from \"./define.js\";\nimport { heartbeatGateway } from \"./gateway.js\";\nimport {\n  getForgeApiKey,\n  requireForgeGateway,\n} from \"./gateway-auth.js\";\nimport { isZeroAddress, resolvePayTo } from \"./payto.js\";\nimport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  recordHeartbeatResult,\n} from \"./status.js\";\nimport type {\n  DefinedAgentService,\n  InputSchema,\n  MountOptions,\n  SchemaFieldType,\n} from \"./types.js\";\n\n/** Base mainnet — settled via the public XPay facilitator (no API keys). */\nconst DEFAULT_NETWORK = \"eip155:8453\" as const satisfies Network;\n/** Open facilitator: Base mainnet + Sepolia, no API keys. https://github.com/xpaysh/xpay-x402 */\nconst DEFAULT_FACILITATOR_URL = \"https://facilitator.xpay.sh\";\n\nfunction asNetwork(value: string | undefined): Network {\n  return (value ?? DEFAULT_NETWORK) as Network;\n}\n\nfunction createFacilitatorClient(options: MountOptions): HTTPFacilitatorClient {\n  return new HTTPFacilitatorClient({\n    url: options.facilitatorUrl ?? DEFAULT_FACILITATOR_URL,\n    createAuthHeaders: options.createAuthHeaders,\n  });\n}\n\nfunction validateInput(\n  body: unknown,\n  schema: InputSchema,\n): { ok: true; value: Record<string, unknown> } | { ok: false; error: string } {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return { ok: false, error: \"Request body must be a JSON object\" };\n  }\n\n  const input = body as Record<string, unknown>;\n  const value: Record<string, unknown> = {};\n\n  for (const [key, type] of Object.entries(schema)) {\n    if (!(key in input) || input[key] === undefined || input[key] === null) {\n      return { ok: false, error: `Missing required field: ${key}` };\n    }\n    const err = checkType(key, input[key], type);\n    if (err) return { ok: false, error: err };\n    value[key] = input[key];\n  }\n\n  return { ok: true, value };\n}\n\nfunction checkType(key: string, value: unknown, type: SchemaFieldType): string | null {\n  switch (type) {\n    case \"string\":\n    case \"url\":\n      if (typeof value !== \"string\" || !value.trim()) {\n        return `Field ${key} must be a non-empty string`;\n      }\n      if (type === \"url\") {\n        try {\n          new URL(value);\n        } catch {\n          return `Field ${key} must be a valid URL`;\n        }\n      }\n      return null;\n    case \"number\":\n      if (typeof value !== \"number\" || Number.isNaN(value)) {\n        return `Field ${key} must be a number`;\n      }\n      return null;\n    case \"boolean\":\n      if (typeof value !== \"boolean\") {\n        return `Field ${key} must be a boolean`;\n      }\n      return null;\n    default:\n      return null;\n  }\n}\n\nfunction formatPrice(amount: string): string {\n  const normalized = amount.startsWith(\"$\") ? amount.slice(1) : amount;\n  return `$${normalized}`;\n}\n\nfunction mountFulfillmentRouter(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): void {\n  const secret = getForgeApiKey(options.gateway?.registerSecret);\n  if (!secret) {\n    console.warn(\n      \"[forge] /forge/fulfill not mounted — set FORGE_API_KEY (from Forge dashboard, min 16 chars) so the gateway can fulfill after payment\",\n    );\n    return;\n  }\n\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n  const gate = requireForgeGateway(secret);\n\n  for (const service of services) {\n    router.post(\n      `/${service.path}`,\n      gate,\n      async (req: Request, res: Response) => {\n        try {\n          const validated = validateInput(req.body, service.input);\n          if (!validated.ok) {\n            res.status(400).json({ error: validated.error });\n            return;\n          }\n          const output = await service.execute(validated.value, context);\n          res.json(output);\n        } catch (err) {\n          const message = err instanceof Error ? err.message : \"Internal error\";\n          console.error(`[forge] fulfill ${service.name} failed:`, err);\n          res.status(500).json({ error: message });\n        }\n      },\n    );\n  }\n\n  app.use(fulfillPath, router);\n  console.log(\n    `[forge] fulfillment mounted at POST ${fulfillPath}/{action} (gateway secret)`,\n  );\n}\n\nfunction mountForgeStatusRoutes(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n  opts: {\n    fulfillMounted: boolean;\n    fulfillPath: string;\n    agentBasePath: string;\n    handle: string | null;\n    publicBaseUrl: string | null;\n    gatewayUrl: string | null;\n  },\n): void {\n  const getStatus = () =>\n    buildForgeSurfaceStatus({\n      handle: opts.handle,\n      publicBaseUrl: opts.publicBaseUrl,\n      gatewayUrl: opts.gatewayUrl,\n      fulfillMounted: opts.fulfillMounted,\n      fulfillPath: opts.fulfillPath,\n      agentBasePath: opts.agentBasePath,\n      skipPayment: Boolean(options.skipPayment),\n      actions: services.map((s) => ({\n        name: s.name,\n        path: s.path,\n        price: s.payment.amount,\n      })),\n    });\n\n  app.get(\"/forge/health\", (_req: Request, res: Response) => {\n    const status = getStatus();\n    res.json({\n      ok: true,\n      forge: true as const,\n      ready: status.ready,\n      handle: status.handle,\n      version: status.version,\n      actions: status.actions.map((a) => a.name),\n    });\n  });\n\n  app.get(\"/forge/status\", (_req: Request, res: Response) => {\n    const status = getStatus();\n    res.status(status.ready ? 200 : 503).json(status);\n  });\n\n  app.get(\"/.well-known/clawcash.json\", (_req: Request, res: Response) => {\n    res.json(buildWellKnownDocument(getStatus()));\n  });\n\n  console.log(\n    \"[forge] liveliness: GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json\",\n  );\n}\n\n/**\n * Mount Forge agent services on an Express app.\n * - GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json — liveliness\n * - POST {basePath}/{kebab-name} — optional public x402 agent surface\n * - POST /forge/fulfill/{kebab-name} — private gateway fulfillment after payment\n *\n * payTo resolves automatically: PAY_TO env (optional) → Forge API → baked fallback.\n */\nexport async function mountAgentServices(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): Promise<Router> {\n  let payTo = \"\";\n  if (!options.skipPayment) {\n    const fallback =\n      options.payToFallback?.trim() || options.payTo?.trim() || \"\";\n    payTo = await resolvePayTo({\n      fallback,\n      payTo: options.payTo,\n      forge: options.forge,\n    });\n    if (isZeroAddress(payTo)) {\n      throw new Error(\n        \"mountAgentServices: resolved payTo is the zero address. Re-run Forge to provision a wallet.\",\n      );\n    }\n  }\n\n  const basePath = (options.basePath ?? \"/agent\").replace(/\\/$/, \"\") || \"/agent\";\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n\n  const routes: RoutesConfig = {};\n\n  for (const service of services) {\n    const routePath = `/${service.path}`;\n    const fullPath = `${basePath}${routePath}`;\n    const network = asNetwork(service.payment.network);\n\n    if (!options.skipPayment) {\n      routes[`POST ${fullPath}`] = {\n        accepts: {\n          scheme: \"exact\",\n          price: formatPrice(service.payment.amount),\n          network,\n          payTo,\n        },\n        description: service.description,\n        mimeType: \"application/json\",\n      };\n    }\n\n    router.post(routePath, async (req: Request, res: Response) => {\n      try {\n        const validated = validateInput(req.body, service.input);\n        if (!validated.ok) {\n          res.status(400).json({ error: validated.error });\n          return;\n        }\n\n        const output = await service.execute(validated.value, context);\n        res.json(output);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Internal error\";\n        console.error(`[forge] ${service.name} failed:`, err);\n        res.status(500).json({ error: message });\n      }\n    });\n  }\n\n  if (!options.skipPayment && Object.keys(routes).length > 0) {\n    const facilitator = createFacilitatorClient(options);\n    const networks = new Set(\n      services.map((s) => asNetwork(s.payment.network)),\n    );\n    const resourceServer = new x402ResourceServer(facilitator);\n    for (const network of networks) {\n      resourceServer.register(network, new ExactEvmScheme());\n    }\n    app.use(paymentMiddleware(routes, resourceServer, undefined, undefined, true));\n  }\n\n  app.use(basePath, router);\n  const fulfillMounted = Boolean(\n    getForgeApiKey(options.gateway?.registerSecret),\n  );\n  mountFulfillmentRouter(app, services, options);\n\n  const gatewayUrl =\n    options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || null;\n  const handle =\n    options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;\n  const registerSecret =\n    options.gateway?.registerSecret?.trim() ||\n    process.env.FORGE_API_KEY?.trim() ||\n    process.env.GATEWAY_REGISTER_SECRET?.trim();\n  const publicBaseUrl =\n    options.gateway?.publicBaseUrl?.trim() ||\n    process.env.PUBLIC_BASE_URL?.trim() ||\n    (process.env.RAILWAY_PUBLIC_DOMAIN\n      ? `https://${process.env.RAILWAY_PUBLIC_DOMAIN}`\n      : \"\") ||\n    null;\n\n  mountForgeStatusRoutes(app, services, options, {\n    fulfillMounted,\n    fulfillPath,\n    agentBasePath: basePath,\n    handle,\n    publicBaseUrl,\n    gatewayUrl,\n  });\n\n  if (gatewayUrl && handle && registerSecret && publicBaseUrl) {\n    void heartbeatGateway({\n      gatewayUrl,\n      handle,\n      baseUrl: publicBaseUrl,\n      registerSecret,\n    })\n      .then(() => {\n        recordHeartbeatResult({ ok: true });\n      })\n      .catch((err) => {\n        const message = err instanceof Error ? err.message : String(err);\n        recordHeartbeatResult({ ok: false, error: message });\n        console.warn(\"[forge] gateway heartbeat skipped:\", err);\n      });\n  }\n\n  return router;\n}\n\nexport function createForgeRouter(\n  services: DefinedAgentService[],\n  options: MountOptions,\n): (app: Application) => Promise<Router> {\n  return (app) => mountAgentServices(app, services, options);\n}\n\nexport function forgeErrorHandler(\n  err: unknown,\n  _req: Request,\n  res: Response,\n  _next: NextFunction,\n): void {\n  const message = err instanceof Error ? err.message : \"Internal error\";\n  res.status(500).json({ error: message });\n}\n","/**\n * Notify ClawCash gateway of this merchant's live public base URL.\n * Full action registration still happens from Forge \"Go live\".\n */\nexport async function heartbeatGateway(opts: {\n  gatewayUrl: string;\n  handle: string;\n  baseUrl: string;\n  registerSecret: string;\n}): Promise<void> {\n  const gateway = opts.gatewayUrl.replace(/\\/$/, \"\");\n  const res = await fetch(`${gateway}/register/heartbeat`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${opts.registerSecret}`,\n    },\n    body: JSON.stringify({\n      handle: opts.handle.trim().toLowerCase(),\n      baseUrl: opts.baseUrl.replace(/\\/$/, \"\"),\n    }),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(\n      `gateway heartbeat failed (${res.status}): ${text.slice(0, 240)}`,\n    );\n  }\n}\n","import type { NextFunction, Request, Response } from \"express\";\n\n/**\n * Per-project Forge API key for gateway → merchant fulfillment.\n * Merchants set FORGE_API_KEY from the Forge dashboard (never the shared\n * GATEWAY_REGISTER_SECRET — that is Forge↔gateway platform auth only).\n *\n * GATEWAY_REGISTER_SECRET is accepted as a deprecated fallback for older deploys.\n */\nexport function getForgeApiKey(explicit?: string | null): string | null {\n  const value =\n    (explicit ?? process.env.FORGE_API_KEY ?? process.env.GATEWAY_REGISTER_SECRET)?.trim();\n  if (!value || value.length < 16) return null;\n  return value;\n}\n\n/** @deprecated Use getForgeApiKey */\nexport function getForgeGatewaySecret(\n  explicit?: string | null,\n): string | null {\n  return getForgeApiKey(explicit);\n}\n\nexport function isForgeGatewayRequest(\n  req: Request,\n  secret?: string | null,\n): boolean {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return false;\n  const header = req.header(\"authorization\") ?? \"\";\n  const bearer = header.toLowerCase().startsWith(\"bearer \")\n    ? header.slice(7).trim()\n    : \"\";\n  const alt =\n    req.header(\"x-forge-api-key\")?.trim() ||\n    req.header(\"x-clawcash-gateway\")?.trim() ||\n    \"\";\n  return bearer === expected || alt === expected;\n}\n\n/** Synthetic user id for DB rows created by gateway-driven fulfillment. */\nexport const FORGE_GATEWAY_USER_ID = \"forge_gateway_agent\";\n\nexport function requireForgeGateway(\n  secret?: string | null,\n): (req: Request, res: Response, next: NextFunction) => void {\n  return (req, res, next) => {\n    if (!isForgeGatewayRequest(req, secret)) {\n      res.status(401).json({\n        error:\n          \"Unauthorized — Forge API key required (FORGE_API_KEY from Forge dashboard)\",\n      });\n      return;\n    }\n    next();\n  };\n}\n\n/** Headers merchant execute() should send on loopback calls during fulfillment. */\nexport function forgeGatewayLoopbackHeaders(\n  secret?: string | null,\n): Record<string, string> {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return {};\n  return {\n    Authorization: `Bearer ${expected}`,\n    \"X-Forge-Api-Key\": expected,\n  };\n}\n","import type { ForgePayToSource } from \"./types.js\";\n\nexport type { ForgePayToSource };\n\nconst ZERO = /^0x0{40}$/i;\n\nexport function isZeroAddress(address: string | undefined | null): boolean {\n  if (!address) return true;\n  return ZERO.test(address.trim());\n}\n\nfunction normalizeBaseUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction pickForgeBaseUrl(source?: ForgePayToSource): string | null {\n  const fromEnv = process.env.FORGE_URL?.trim();\n  if (fromEnv) return normalizeBaseUrl(fromEnv);\n\n  const fromOpts = source?.baseUrl?.trim();\n  if (!fromOpts) return null;\n\n  const normalized = normalizeBaseUrl(fromOpts);\n  // Never call a laptop Forge from a deployed merchant app.\n  if (\n    /localhost|127\\.0\\.0\\.1/i.test(normalized) &&\n    process.env.NODE_ENV === \"production\"\n  ) {\n    return null;\n  }\n  return normalized;\n}\n\n/**\n * Resolve merchant payTo with minimal host config:\n * 1. `PAY_TO` env (optional override)\n * 2. Live address from Forge public API (when reachable)\n * 3. Baked-in fallback from the Forge PR\n */\nexport async function resolvePayTo(opts: {\n  /** Baked-in address from Forge codegen (required fallback). */\n  fallback: string;\n  /** Optional explicit override (usually process.env.PAY_TO). */\n  payTo?: string;\n  forge?: ForgePayToSource;\n  /** Fetch timeout ms. Defaults to 2500. */\n  timeoutMs?: number;\n}): Promise<string> {\n  const envOverride = process.env.PAY_TO?.trim();\n  if (envOverride && !isZeroAddress(envOverride)) {\n    return envOverride;\n  }\n\n  const explicit = opts.payTo?.trim();\n  if (explicit && !isZeroAddress(explicit) && !opts.forge) {\n    return explicit;\n  }\n\n  const baseUrl = pickForgeBaseUrl(opts.forge);\n  if (baseUrl && opts.forge) {\n    const url = `${baseUrl}/api/public/pay-to/${encodeURIComponent(opts.forge.owner)}/${encodeURIComponent(opts.forge.repo)}`;\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(\n        () => controller.abort(),\n        opts.timeoutMs ?? 2500,\n      );\n      const res = await fetch(url, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n      });\n      clearTimeout(timer);\n      if (res.ok) {\n        const json = (await res.json()) as { address?: string };\n        if (json.address && !isZeroAddress(json.address)) {\n          return json.address.trim();\n        }\n      }\n    } catch (err) {\n      console.warn(\"[forge] live payTo fetch failed, using fallback:\", err);\n    }\n  }\n\n  if (explicit && !isZeroAddress(explicit)) return explicit;\n  if (opts.fallback && !isZeroAddress(opts.fallback)) return opts.fallback;\n\n  throw new Error(\n    \"resolvePayTo: no usable address (set Forge wallet / PAY_TO, or re-run Forge PR)\",\n  );\n}\n","/**\n * Merchant-side Forge surface status — public probes for deploy / go-live checks.\n */\n\nexport type ForgeHeartbeatState = {\n  attempted: boolean;\n  ok: boolean | null;\n  at: string | null;\n  error: string | null;\n};\n\nexport type ForgeSurfaceStatus = {\n  ok: boolean;\n  forge: true;\n  version: string;\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  /** True when FORGE_API_KEY is set so /forge/fulfill is mounted. */\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n  /** Env + fulfill ready — merchant can accept gateway fulfillment. */\n  ready: boolean;\n  heartbeat: ForgeHeartbeatState;\n  endpoints: {\n    health: string;\n    status: string;\n    wellKnown: string;\n    fulfill: string;\n    agent: string;\n  };\n};\n\nconst PACKAGE_VERSION = \"0.1.7\";\n\nlet lastHeartbeat: ForgeHeartbeatState = {\n  attempted: false,\n  ok: null,\n  at: null,\n  error: null,\n};\n\nexport function recordHeartbeatResult(\n  result: { ok: true } | { ok: false; error: string },\n): void {\n  lastHeartbeat = {\n    attempted: true,\n    ok: result.ok,\n    at: new Date().toISOString(),\n    error: result.ok ? null : result.error,\n  };\n}\n\nexport function getLastHeartbeat(): ForgeHeartbeatState {\n  return { ...lastHeartbeat };\n}\n\nexport function buildForgeSurfaceStatus(opts: {\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n}): ForgeSurfaceStatus {\n  const fulfillPath = opts.fulfillPath.replace(/\\/$/, \"\") || \"/forge/fulfill\";\n  const agentBasePath = opts.agentBasePath.replace(/\\/$/, \"\") || \"/agent\";\n  const ready =\n    opts.fulfillMounted &&\n    Boolean(opts.publicBaseUrl) &&\n    opts.actions.length > 0;\n\n  return {\n    ok: true,\n    forge: true,\n    version: PACKAGE_VERSION,\n    handle: opts.handle,\n    publicBaseUrl: opts.publicBaseUrl,\n    gatewayUrl: opts.gatewayUrl,\n    fulfillMounted: opts.fulfillMounted,\n    fulfillPath,\n    agentBasePath,\n    skipPayment: opts.skipPayment,\n    actions: opts.actions,\n    ready,\n    heartbeat: getLastHeartbeat(),\n    endpoints: {\n      health: \"/forge/health\",\n      status: \"/forge/status\",\n      wellKnown: \"/.well-known/clawcash.json\",\n      fulfill: fulfillPath,\n      agent: agentBasePath,\n    },\n  };\n}\n\nexport function buildWellKnownDocument(status: ForgeSurfaceStatus): {\n  forge: true;\n  version: string;\n  health: string;\n  status: string;\n  handle: string | null;\n  ready: boolean;\n} {\n  return {\n    forge: true,\n    version: status.version,\n    health: status.endpoints.health,\n    status: status.endpoints.status,\n    handle: status.handle,\n    ready: status.ready,\n  };\n}\n\nexport function forgeSdkVersion(): string {\n  return PACKAGE_VERSION;\n}\n","import type { DefinedAgentService, SkillMeta } from \"./types.js\";\n\n/**\n * Generate a SKILL.md document for agents from defined Forge services.\n */\nexport function generateSkillMarkdown(\n  services: DefinedAgentService[],\n  meta: SkillMeta,\n): string {\n  const base = meta.baseUrl.replace(/\\/$/, \"\");\n  const lines: string[] = [\n    `---`,\n    `name: ${meta.name}`,\n    `description: ${meta.description}`,\n    `---`,\n    ``,\n    `# ${meta.name}`,\n    ``,\n    meta.description,\n    ``,\n  ];\n\n  if (meta.homepage) {\n    lines.push(`Homepage: ${meta.homepage}`, ``);\n  }\n\n  lines.push(\n    `## How to use`,\n    ``,\n    `1. Read this skill.`,\n    `2. Call the agent endpoint with a JSON body matching the input schema.`,\n    `3. If you receive HTTP 402, pay via x402 (USDC) and retry with the payment header.`,\n    `4. Use the returned output fields.`,\n    ``,\n    `## Services`,\n    ``,\n  );\n\n  for (const service of services) {\n    const path = `${base}/agent/${service.path}`;\n    const price = service.payment.amount.startsWith(\"$\")\n      ? service.payment.amount\n      : `$${service.payment.amount}`;\n\n    lines.push(\n      `### \\`${service.name}\\``,\n      ``,\n      service.description,\n      ``,\n      `- **Method:** \\`POST\\``,\n      `- **URL:** \\`${path}\\``,\n      `- **Price:** ${price} ${service.payment.currency} via ${service.payment.protocols.join(\", \")}`,\n      ``,\n      `**Input**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Output**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.output).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Example**`,\n      ``,\n      \"```bash\",\n      `curl -X POST ${path} \\\\`,\n      `  -H \"Content-Type: application/json\" \\\\`,\n      `  -d '${JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [\n            k,\n            t === \"url\" ? \"https://example.com/image.png\" : `example-${k}`,\n          ]),\n        ),\n      )}'`,\n      \"```\",\n      ``,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOA,eAAsB,UAAa,SAA0C;AAC3E,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,UAAU,KAAK,IAAI;AAEzB,aAAS;AACP,UAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,QAAI,QAAQ,cAAc,KAAK,GAAG;AAChC,aAAO;AAAA,IACT;AACA,QAAI,KAAK,IAAI,IAAI,WAAW,WAAW;AACrC,YAAM,IAAI,MAAM,6BAA6B,SAAS,IAAI;AAAA,IAC5D;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,gBAAqC;AACnD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,SAAS,YAAY,MAAsB;AAChD,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,MAAM,GAAG,EACjB,YAAY;AACjB;AAEO,SAAS,mBAId,QACsC;AACtC,MAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,IACT,MAAM,YAAY,OAAO,IAAI;AAAA,EAC/B;AACF;;;ACvDA,qBAAuC;AACvC,IAAAA,kBAAsD;AAEtD,oBAAsC;AAEtC,IAAAC,iBAA+B;;;ACF/B,eAAsB,iBAAiB,MAKrB;AAChB,QAAM,UAAU,KAAK,WAAW,QAAQ,OAAO,EAAE;AACjD,QAAM,MAAM,MAAM,MAAM,GAAG,OAAO,uBAAuB;AAAA,IACvD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,cAAc;AAAA,IAC9C;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,KAAK,OAAO,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI;AAAA,MACR,6BAA6B,IAAI,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;ACnBO,SAAS,eAAe,UAAyC;AACtE,QAAM,SACH,YAAY,QAAQ,IAAI,iBAAiB,QAAQ,IAAI,0BAA0B,KAAK;AACvF,MAAI,CAAC,SAAS,MAAM,SAAS,GAAI,QAAO;AACxC,SAAO;AACT;AAGO,SAAS,sBACd,UACe;AACf,SAAO,eAAe,QAAQ;AAChC;AAEO,SAAS,sBACd,KACA,QACS;AACT,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,SAAS,IAAI,OAAO,eAAe,KAAK;AAC9C,QAAM,SAAS,OAAO,YAAY,EAAE,WAAW,SAAS,IACpD,OAAO,MAAM,CAAC,EAAE,KAAK,IACrB;AACJ,QAAM,MACJ,IAAI,OAAO,iBAAiB,GAAG,KAAK,KACpC,IAAI,OAAO,oBAAoB,GAAG,KAAK,KACvC;AACF,SAAO,WAAW,YAAY,QAAQ;AACxC;AAGO,IAAM,wBAAwB;AAE9B,SAAS,oBACd,QAC2D;AAC3D,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,QAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OACE;AAAA,MACJ,CAAC;AACD;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAGO,SAAS,4BACd,QACwB;AACxB,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,SAAO;AAAA,IACL,eAAe,UAAU,QAAQ;AAAA,IACjC,mBAAmB;AAAA,EACrB;AACF;;;AChEA,IAAM,OAAO;AAEN,SAAS,cAAc,SAA6C;AACzE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,KAAK,QAAQ,KAAK,CAAC;AACjC;AAEA,SAAS,iBAAiB,KAAqB;AAC7C,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAA0C;AAClE,QAAM,UAAU,QAAQ,IAAI,WAAW,KAAK;AAC5C,MAAI,QAAS,QAAO,iBAAiB,OAAO;AAE5C,QAAM,WAAW,QAAQ,SAAS,KAAK;AACvC,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,aAAa,iBAAiB,QAAQ;AAE5C,MACE,0BAA0B,KAAK,UAAU,KACzC,QAAQ,IAAI,aAAa,cACzB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,eAAsB,aAAa,MAQf;AAClB,QAAM,cAAc,QAAQ,IAAI,QAAQ,KAAK;AAC7C,MAAI,eAAe,CAAC,cAAc,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,OAAO,KAAK;AAClC,MAAI,YAAY,CAAC,cAAc,QAAQ,KAAK,CAAC,KAAK,OAAO;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,iBAAiB,KAAK,KAAK;AAC3C,MAAI,WAAW,KAAK,OAAO;AACzB,UAAM,MAAM,GAAG,OAAO,sBAAsB,mBAAmB,KAAK,MAAM,KAAK,CAAC,IAAI,mBAAmB,KAAK,MAAM,IAAI,CAAC;AACvH,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ;AAAA,QACZ,MAAM,WAAW,MAAM;AAAA,QACvB,KAAK,aAAa;AAAA,MACpB;AACA,YAAM,MAAM,MAAM,MAAM,KAAK;AAAA,QAC3B,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,IAAI,IAAI;AACV,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAI,KAAK,WAAW,CAAC,cAAc,KAAK,OAAO,GAAG;AAChD,iBAAO,KAAK,QAAQ,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,KAAK,oDAAoD,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,MAAI,YAAY,CAAC,cAAc,QAAQ,EAAG,QAAO;AACjD,MAAI,KAAK,YAAY,CAAC,cAAc,KAAK,QAAQ,EAAG,QAAO,KAAK;AAEhE,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;;;ACrDA,IAAM,kBAAkB;AAExB,IAAI,gBAAqC;AAAA,EACvC,WAAW;AAAA,EACX,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,OAAO;AACT;AAEO,SAAS,sBACd,QACM;AACN,kBAAgB;AAAA,IACd,WAAW;AAAA,IACX,IAAI,OAAO;AAAA,IACX,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,OAAO,OAAO,KAAK,OAAO,OAAO;AAAA,EACnC;AACF;AAEO,SAAS,mBAAwC;AACtD,SAAO,EAAE,GAAG,cAAc;AAC5B;AAEO,SAAS,wBAAwB,MASjB;AACrB,QAAM,cAAc,KAAK,YAAY,QAAQ,OAAO,EAAE,KAAK;AAC3D,QAAM,gBAAgB,KAAK,cAAc,QAAQ,OAAO,EAAE,KAAK;AAC/D,QAAM,QACJ,KAAK,kBACL,QAAQ,KAAK,aAAa,KAC1B,KAAK,QAAQ,SAAS;AAExB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,IACA,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd;AAAA,IACA,WAAW,iBAAiB;AAAA,IAC5B,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,QAOrC;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,EAChB;AACF;AAEO,SAAS,kBAA0B;AACxC,SAAO;AACT;;;AJ9FA,IAAM,kBAAkB;AAExB,IAAM,0BAA0B;AAEhC,SAAS,UAAU,OAAoC;AACrD,SAAQ,SAAS;AACnB;AAEA,SAAS,wBAAwB,SAA8C;AAC7E,SAAO,IAAI,oCAAsB;AAAA,IAC/B,KAAK,QAAQ,kBAAkB;AAAA,IAC/B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AACH;AAEA,SAAS,cACP,MACA,QAC6E;AAC7E,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,WAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAAA,EAClE;AAEA,QAAM,QAAQ;AACd,QAAM,QAAiC,CAAC;AAExC,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG;AAChD,QAAI,EAAE,OAAO,UAAU,MAAM,GAAG,MAAM,UAAa,MAAM,GAAG,MAAM,MAAM;AACtE,aAAO,EAAE,IAAI,OAAO,OAAO,2BAA2B,GAAG,GAAG;AAAA,IAC9D;AACA,UAAM,MAAM,UAAU,KAAK,MAAM,GAAG,GAAG,IAAI;AAC3C,QAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,IAAI;AACxC,UAAM,GAAG,IAAI,MAAM,GAAG;AAAA,EACxB;AAEA,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;AAEA,SAAS,UAAU,KAAa,OAAgB,MAAsC;AACpF,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAC9C,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,UAAI,SAAS,OAAO;AAClB,YAAI;AACF,cAAI,IAAI,KAAK;AAAA,QACf,QAAQ;AACN,iBAAO,SAAS,GAAG;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,GAAG;AACpD,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,WAAW;AAC9B,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,YAAY,QAAwB;AAC3C,QAAM,aAAa,OAAO,WAAW,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI;AAC9D,SAAO,IAAI,UAAU;AACvB;AAEA,SAAS,uBACP,KACA,UACA,SACM;AACN,QAAM,SAAS,eAAe,QAAQ,SAAS,cAAc;AAC7D,MAAI,CAAC,QAAQ;AACX,YAAQ;AAAA,MACN;AAAA,IACF;AACA;AAAA,EACF;AAEA,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,aAAS,eAAAC,QAAa;AAC5B,QAAM,UAAU,cAAc;AAC9B,QAAM,OAAO,oBAAoB,MAAM;AAEvC,aAAW,WAAW,UAAU;AAC9B,WAAO;AAAA,MACL,IAAI,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,OAAO,KAAc,QAAkB;AACrC,YAAI;AACF,gBAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,cAAI,CAAC,UAAU,IAAI;AACjB,gBAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,UACF;AACA,gBAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,cAAI,KAAK,MAAM;AAAA,QACjB,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,kBAAQ,MAAM,mBAAmB,QAAQ,IAAI,YAAY,GAAG;AAC5D,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,aAAa,MAAM;AAC3B,UAAQ;AAAA,IACN,uCAAuC,WAAW;AAAA,EACpD;AACF;AAEA,SAAS,uBACP,KACA,UACA,SACA,MAQM;AACN,QAAM,YAAY,MAChB,wBAAwB;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB,aAAa,KAAK;AAAA,IAClB,eAAe,KAAK;AAAA,IACpB,aAAa,QAAQ,QAAQ,WAAW;AAAA,IACxC,SAAS,SAAS,IAAI,CAAC,OAAO;AAAA,MAC5B,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,OAAO,EAAE,QAAQ;AAAA,IACnB,EAAE;AAAA,EACJ,CAAC;AAEH,MAAI,IAAI,iBAAiB,CAAC,MAAe,QAAkB;AACzD,UAAM,SAAS,UAAU;AACzB,QAAI,KAAK;AAAA,MACP,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AAED,MAAI,IAAI,iBAAiB,CAAC,MAAe,QAAkB;AACzD,UAAM,SAAS,UAAU;AACzB,QAAI,OAAO,OAAO,QAAQ,MAAM,GAAG,EAAE,KAAK,MAAM;AAAA,EAClD,CAAC;AAED,MAAI,IAAI,8BAA8B,CAAC,MAAe,QAAkB;AACtE,QAAI,KAAK,uBAAuB,UAAU,CAAC,CAAC;AAAA,EAC9C,CAAC;AAED,UAAQ;AAAA,IACN;AAAA,EACF;AACF;AAUA,eAAsB,mBACpB,KACA,UACA,SACiB;AACjB,MAAI,QAAQ;AACZ,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,WACJ,QAAQ,eAAe,KAAK,KAAK,QAAQ,OAAO,KAAK,KAAK;AAC5D,YAAQ,MAAM,aAAa;AAAA,MACzB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,CAAC;AACD,QAAI,cAAc,KAAK,GAAG;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ,OAAO,EAAE,KAAK;AACtE,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,aAAS,eAAAA,QAAa;AAC5B,QAAM,UAAU,cAAc;AAE9B,QAAM,SAAuB,CAAC;AAE9B,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,IAAI,QAAQ,IAAI;AAClC,UAAM,WAAW,GAAG,QAAQ,GAAG,SAAS;AACxC,UAAM,UAAU,UAAU,QAAQ,QAAQ,OAAO;AAEjD,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO,QAAQ,QAAQ,EAAE,IAAI;AAAA,QAC3B,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,OAAO,YAAY,QAAQ,QAAQ,MAAM;AAAA,UACzC;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO,KAAK,WAAW,OAAO,KAAc,QAAkB;AAC5D,UAAI;AACF,cAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,YAAI,CAAC,UAAU,IAAI;AACjB,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,YAAI,KAAK,MAAM;AAAA,MACjB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,gBAAQ,MAAM,WAAW,QAAQ,IAAI,YAAY,GAAG;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,eAAe,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC1D,UAAM,cAAc,wBAAwB,OAAO;AACnD,UAAM,WAAW,IAAI;AAAA,MACnB,SAAS,IAAI,CAAC,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAClD;AACA,UAAM,iBAAiB,IAAI,mCAAmB,WAAW;AACzD,eAAW,WAAW,UAAU;AAC9B,qBAAe,SAAS,SAAS,IAAI,8BAAe,CAAC;AAAA,IACvD;AACA,QAAI,QAAI,mCAAkB,QAAQ,gBAAgB,QAAW,QAAW,IAAI,CAAC;AAAA,EAC/E;AAEA,MAAI,IAAI,UAAU,MAAM;AACxB,QAAM,iBAAiB;AAAA,IACrB,eAAe,QAAQ,SAAS,cAAc;AAAA,EAChD;AACA,yBAAuB,KAAK,UAAU,OAAO;AAE7C,QAAM,aACJ,QAAQ,SAAS,KAAK,KAAK,KAAK,QAAQ,IAAI,aAAa,KAAK,KAAK;AACrE,QAAM,SACJ,QAAQ,SAAS,QAAQ,KAAK,KAAK,QAAQ,IAAI,cAAc,KAAK,KAAK;AACzE,QAAM,iBACJ,QAAQ,SAAS,gBAAgB,KAAK,KACtC,QAAQ,IAAI,eAAe,KAAK,KAChC,QAAQ,IAAI,yBAAyB,KAAK;AAC5C,QAAM,gBACJ,QAAQ,SAAS,eAAe,KAAK,KACrC,QAAQ,IAAI,iBAAiB,KAAK,MACjC,QAAQ,IAAI,wBACT,WAAW,QAAQ,IAAI,qBAAqB,KAC5C,OACJ;AAEF,yBAAuB,KAAK,UAAU,SAAS;AAAA,IAC7C;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,cAAc,UAAU,kBAAkB,eAAe;AAC3D,SAAK,iBAAiB;AAAA,MACpB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF,CAAC,EACE,KAAK,MAAM;AACV,4BAAsB,EAAE,IAAI,KAAK,CAAC;AAAA,IACpC,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,4BAAsB,EAAE,IAAI,OAAO,OAAO,QAAQ,CAAC;AACnD,cAAQ,KAAK,sCAAsC,GAAG;AAAA,IACxD,CAAC;AAAA,EACL;AAEA,SAAO;AACT;AAEO,SAAS,kBACd,UACA,SACuC;AACvC,SAAO,CAAC,QAAQ,mBAAmB,KAAK,UAAU,OAAO;AAC3D;;;AKpVO,SAAS,sBACd,UACA,MACQ;AACR,QAAM,OAAO,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,SAAS,KAAK,IAAI;AAAA,IAClB,gBAAgB,KAAK,WAAW;AAAA,IAChC;AAAA,IACA;AAAA,IACA,KAAK,KAAK,IAAI;AAAA,IACd;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AAEA,MAAI,KAAK,UAAU;AACjB,UAAM,KAAK,aAAa,KAAK,QAAQ,IAAI,EAAE;AAAA,EAC7C;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,WAAW,UAAU;AAC9B,UAAM,OAAO,GAAG,IAAI,UAAU,QAAQ,IAAI;AAC1C,UAAM,QAAQ,QAAQ,QAAQ,OAAO,WAAW,GAAG,IAC/C,QAAQ,QAAQ,SAChB,IAAI,QAAQ,QAAQ,MAAM;AAE9B,UAAM;AAAA,MACJ,SAAS,QAAQ,IAAI;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,gBAAgB,KAAK,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,MAC7F;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC9D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,KAAK;AAAA,QACZ,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,YAC5C;AAAA,YACA,MAAM,QAAQ,kCAAkC,WAAW,CAAC;AAAA,UAC9D,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":["import_express","import_server","createRouter"]}
+{"version":3,"sources":["../src/index.ts","../src/define.ts","../src/mount.ts","../src/base-url.ts","../src/gateway.ts","../src/gateway-auth.ts","../src/payto.ts","../src/status.ts","../src/skill.ts"],"sourcesContent":["export { defineAgentService, waitUntil, createContext, toKebabCase } from \"./define.js\";\nexport { mountAgentServices, createForgeRouter } from \"./mount.js\";\nexport { generateSkillMarkdown } from \"./skill.js\";\nexport { resolvePayTo, isZeroAddress } from \"./payto.js\";\nexport { resolveBaseUrlFromEnv, PublicBaseUrlResolver } from \"./base-url.js\";\nexport { heartbeatGateway } from \"./gateway.js\";\nexport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  forgeSdkVersion,\n  getLastHeartbeat,\n  recordHeartbeatResult,\n} from \"./status.js\";\nexport type { ForgeHeartbeatState, ForgeSurfaceStatus } from \"./status.js\";\nexport {\n  isForgeGatewayRequest,\n  requireForgeGateway,\n  getForgeApiKey,\n  getForgeGatewaySecret,\n  forgeGatewayLoopbackHeaders,\n  FORGE_GATEWAY_USER_ID,\n} from \"./gateway-auth.js\";\nexport type {\n  SchemaFieldType,\n  InputSchema,\n  OutputSchema,\n  PaymentConfig,\n  WaitUntilOptions,\n  AgentServiceContext,\n  AgentServiceConfig,\n  DefinedAgentService,\n  MountOptions,\n  ForgePayToSource,\n  SkillMeta,\n} from \"./types.js\";\n","import type {\n  AgentServiceConfig,\n  AgentServiceContext,\n  DefinedAgentService,\n  WaitUntilOptions,\n} from \"./types.js\";\n\nexport async function waitUntil<T>(options: WaitUntilOptions<T>): Promise<T> {\n  const intervalMs = options.intervalMs ?? 500;\n  const timeoutMs = options.timeoutMs ?? 60_000;\n  const started = Date.now();\n\n  for (;;) {\n    const value = await options.run();\n    if (options.completedWhen(value)) {\n      return value;\n    }\n    if (Date.now() - started >= timeoutMs) {\n      throw new Error(`waitUntil timed out after ${timeoutMs}ms`);\n    }\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function createContext(): AgentServiceContext {\n  return {\n    waitUntil,\n  };\n}\n\n/** Convert snake_case or camelCase service name to kebab-case path segment. */\nexport function toKebabCase(name: string): string {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1-$2\")\n    .replace(/_/g, \"-\")\n    .toLowerCase();\n}\n\nexport function defineAgentService<\n  TInput extends Record<string, unknown> = Record<string, unknown>,\n  TOutput extends Record<string, unknown> = Record<string, unknown>,\n>(\n  config: AgentServiceConfig<TInput, TOutput>,\n): DefinedAgentService<TInput, TOutput> {\n  if (!config.name?.trim()) {\n    throw new Error(\"defineAgentService: name is required\");\n  }\n  if (!config.execute) {\n    throw new Error(\"defineAgentService: execute is required\");\n  }\n\n  return {\n    ...config,\n    __forge: true,\n    path: toKebabCase(config.name),\n  };\n}\n","import type { Application, Request, Response, NextFunction, Router } from \"express\";\nimport { Router as createRouter } from \"express\";\nimport { paymentMiddleware, x402ResourceServer } from \"@x402/express\";\nimport type { Network } from \"@x402/express\";\nimport { HTTPFacilitatorClient } from \"@x402/core/server\";\nimport type { RoutesConfig } from \"@x402/core/server\";\nimport { ExactEvmScheme } from \"@x402/evm/exact/server\";\nimport {\n  PublicBaseUrlResolver,\n  resolveBaseUrlFromEnv,\n} from \"./base-url.js\";\nimport { createContext } from \"./define.js\";\nimport { heartbeatGateway } from \"./gateway.js\";\nimport {\n  getForgeApiKey,\n  requireForgeGateway,\n} from \"./gateway-auth.js\";\nimport { isZeroAddress, resolvePayTo } from \"./payto.js\";\nimport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  recordHeartbeatResult,\n} from \"./status.js\";\nimport type {\n  DefinedAgentService,\n  InputSchema,\n  MountOptions,\n  SchemaFieldType,\n} from \"./types.js\";\n\n/** Base mainnet — settled via the public XPay facilitator (no API keys). */\nconst DEFAULT_NETWORK = \"eip155:8453\" as const satisfies Network;\n/** Open facilitator: Base mainnet + Sepolia, no API keys. https://github.com/xpaysh/xpay-x402 */\nconst DEFAULT_FACILITATOR_URL = \"https://facilitator.xpay.sh\";\n/** ClawCash gateway — override with GATEWAY_URL or options.gateway.url. */\nconst DEFAULT_GATEWAY_URL = \"https://gateway.clawca.sh\";\n\nfunction asNetwork(value: string | undefined): Network {\n  return (value ?? DEFAULT_NETWORK) as Network;\n}\n\nfunction createFacilitatorClient(options: MountOptions): HTTPFacilitatorClient {\n  return new HTTPFacilitatorClient({\n    url: options.facilitatorUrl ?? DEFAULT_FACILITATOR_URL,\n    createAuthHeaders: options.createAuthHeaders,\n  });\n}\n\nfunction validateInput(\n  body: unknown,\n  schema: InputSchema,\n): { ok: true; value: Record<string, unknown> } | { ok: false; error: string } {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return { ok: false, error: \"Request body must be a JSON object\" };\n  }\n\n  const input = body as Record<string, unknown>;\n  const value: Record<string, unknown> = {};\n\n  for (const [key, type] of Object.entries(schema)) {\n    if (!(key in input) || input[key] === undefined || input[key] === null) {\n      return { ok: false, error: `Missing required field: ${key}` };\n    }\n    const err = checkType(key, input[key], type);\n    if (err) return { ok: false, error: err };\n    value[key] = input[key];\n  }\n\n  return { ok: true, value };\n}\n\nfunction checkType(key: string, value: unknown, type: SchemaFieldType): string | null {\n  switch (type) {\n    case \"string\":\n    case \"url\":\n      if (typeof value !== \"string\" || !value.trim()) {\n        return `Field ${key} must be a non-empty string`;\n      }\n      if (type === \"url\") {\n        try {\n          new URL(value);\n        } catch {\n          return `Field ${key} must be a valid URL`;\n        }\n      }\n      return null;\n    case \"number\":\n      if (typeof value !== \"number\" || Number.isNaN(value)) {\n        return `Field ${key} must be a number`;\n      }\n      return null;\n    case \"boolean\":\n      if (typeof value !== \"boolean\") {\n        return `Field ${key} must be a boolean`;\n      }\n      return null;\n    default:\n      return null;\n  }\n}\n\nfunction formatPrice(amount: string): string {\n  const normalized = amount.startsWith(\"$\") ? amount.slice(1) : amount;\n  return `$${normalized}`;\n}\n\nfunction mountFulfillmentRouter(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): void {\n  const secret = getForgeApiKey(options.gateway?.registerSecret);\n  if (!secret) {\n    console.warn(\n      \"[forge] /forge/fulfill not mounted — set FORGE_API_KEY (from Forge dashboard, min 16 chars) so the gateway can fulfill after payment\",\n    );\n    return;\n  }\n\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n  const gate = requireForgeGateway(secret);\n\n  for (const service of services) {\n    router.post(\n      `/${service.path}`,\n      gate,\n      async (req: Request, res: Response) => {\n        try {\n          const validated = validateInput(req.body, service.input);\n          if (!validated.ok) {\n            res.status(400).json({ error: validated.error });\n            return;\n          }\n          const output = await service.execute(validated.value, context);\n          res.json(output);\n        } catch (err) {\n          const message = err instanceof Error ? err.message : \"Internal error\";\n          console.error(`[forge] fulfill ${service.name} failed:`, err);\n          res.status(500).json({ error: message });\n        }\n      },\n    );\n  }\n\n  app.use(fulfillPath, router);\n  console.log(\n    `[forge] fulfillment mounted at POST ${fulfillPath}/{action} (gateway secret)`,\n  );\n}\n\nfunction mountForgeStatusRoutes(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n  opts: {\n    fulfillMounted: boolean;\n    fulfillPath: string;\n    agentBasePath: string;\n    handle: string | null;\n    resolver: PublicBaseUrlResolver;\n    gatewayUrl: string | null;\n  },\n): void {\n  const getStatus = () =>\n    buildForgeSurfaceStatus({\n      handle: opts.handle,\n      publicBaseUrl: opts.resolver.get(),\n      gatewayUrl: opts.gatewayUrl,\n      fulfillMounted: opts.fulfillMounted,\n      fulfillPath: opts.fulfillPath,\n      agentBasePath: opts.agentBasePath,\n      skipPayment: Boolean(options.skipPayment),\n      actions: services.map((s) => ({\n        name: s.name,\n        path: s.path,\n        price: s.payment.amount,\n      })),\n    });\n\n  app.get(\"/forge/health\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    const status = getStatus();\n    res.json({\n      ok: true,\n      forge: true as const,\n      ready: status.ready,\n      handle: status.handle,\n      version: status.version,\n      // Per-boot nonce so this instance can self-verify an inferred base URL.\n      instance: opts.resolver.instanceNonce,\n      actions: status.actions.map((a) => a.name),\n    });\n  });\n\n  app.get(\"/forge/status\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    const status = getStatus();\n    res.status(status.ready ? 200 : 503).json(status);\n  });\n\n  app.get(\"/.well-known/clawcash.json\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    res.json(buildWellKnownDocument(getStatus()));\n  });\n\n  console.log(\n    \"[forge] liveliness: GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json\",\n  );\n}\n\n/**\n * Mount Forge agent services on an Express app.\n * - GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json — liveliness\n * - POST {basePath}/{kebab-name} — optional public x402 agent surface\n * - POST /forge/fulfill/{kebab-name} — private gateway fulfillment after payment\n *\n * payTo resolves automatically: PAY_TO env (optional) → Forge API → baked fallback.\n */\nexport async function mountAgentServices(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): Promise<Router> {\n  let payTo = \"\";\n  if (!options.skipPayment) {\n    const fallback =\n      options.payToFallback?.trim() || options.payTo?.trim() || \"\";\n    payTo = await resolvePayTo({\n      fallback,\n      payTo: options.payTo,\n      forge: options.forge,\n    });\n    if (isZeroAddress(payTo)) {\n      throw new Error(\n        \"mountAgentServices: resolved payTo is the zero address. Re-run Forge to provision a wallet.\",\n      );\n    }\n  }\n\n  const basePath = (options.basePath ?? \"/agent\").replace(/\\/$/, \"\") || \"/agent\";\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n\n  const routes: RoutesConfig = {};\n\n  for (const service of services) {\n    const routePath = `/${service.path}`;\n    const fullPath = `${basePath}${routePath}`;\n    const network = asNetwork(service.payment.network);\n\n    if (!options.skipPayment) {\n      routes[`POST ${fullPath}`] = {\n        accepts: {\n          scheme: \"exact\",\n          price: formatPrice(service.payment.amount),\n          network,\n          payTo,\n        },\n        description: service.description,\n        mimeType: \"application/json\",\n      };\n    }\n\n    router.post(routePath, async (req: Request, res: Response) => {\n      try {\n        const validated = validateInput(req.body, service.input);\n        if (!validated.ok) {\n          res.status(400).json({ error: validated.error });\n          return;\n        }\n\n        const output = await service.execute(validated.value, context);\n        res.json(output);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Internal error\";\n        console.error(`[forge] ${service.name} failed:`, err);\n        res.status(500).json({ error: message });\n      }\n    });\n  }\n\n  if (!options.skipPayment && Object.keys(routes).length > 0) {\n    const facilitator = createFacilitatorClient(options);\n    const networks = new Set(\n      services.map((s) => asNetwork(s.payment.network)),\n    );\n    const resourceServer = new x402ResourceServer(facilitator);\n    for (const network of networks) {\n      resourceServer.register(network, new ExactEvmScheme());\n    }\n    app.use(paymentMiddleware(routes, resourceServer, undefined, undefined, true));\n  }\n\n  app.use(basePath, router);\n  const fulfillMounted = Boolean(\n    getForgeApiKey(options.gateway?.registerSecret),\n  );\n  mountFulfillmentRouter(app, services, options);\n\n  const gatewayUrl =\n    options.gateway?.url?.trim() ||\n    process.env.GATEWAY_URL?.trim() ||\n    DEFAULT_GATEWAY_URL;\n  const handle =\n    options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;\n  const registerSecret =\n    options.gateway?.registerSecret?.trim() ||\n    process.env.FORGE_API_KEY?.trim() ||\n    process.env.GATEWAY_REGISTER_SECRET?.trim();\n\n  const sendHeartbeat = (baseUrl: string) => {\n    if (!handle || !registerSecret) return;\n    void heartbeatGateway({\n      gatewayUrl,\n      handle,\n      baseUrl,\n      registerSecret,\n    })\n      .then(() => {\n        recordHeartbeatResult({ ok: true });\n      })\n      .catch((err) => {\n        const message = err instanceof Error ? err.message : String(err);\n        recordHeartbeatResult({ ok: false, error: message });\n        console.warn(\"[forge] gateway heartbeat skipped:\", err);\n      });\n  };\n\n  const resolver = new PublicBaseUrlResolver({\n    initial: resolveBaseUrlFromEnv(options.gateway?.publicBaseUrl),\n    // Base URL learned late (inferred from the first probe): heartbeat now.\n    onResolved: sendHeartbeat,\n  });\n\n  mountForgeStatusRoutes(app, services, options, {\n    fulfillMounted,\n    fulfillPath,\n    agentBasePath: basePath,\n    handle,\n    resolver,\n    gatewayUrl,\n  });\n\n  const bootBaseUrl = resolver.get();\n  if (bootBaseUrl) {\n    sendHeartbeat(bootBaseUrl);\n  }\n\n  return router;\n}\n\nexport function createForgeRouter(\n  services: DefinedAgentService[],\n  options: MountOptions,\n): (app: Application) => Promise<Router> {\n  return (app) => mountAgentServices(app, services, options);\n}\n\nexport function forgeErrorHandler(\n  err: unknown,\n  _req: Request,\n  res: Response,\n  _next: NextFunction,\n): void {\n  const message = err instanceof Error ? err.message : \"Internal error\";\n  res.status(500).json({ error: message });\n}\n","import { randomBytes } from \"node:crypto\";\nimport type { Request } from \"express\";\n\n/**\n * Public base URL resolution, in trust order:\n * 1. PUBLIC_BASE_URL env — explicit override.\n * 2. Platform-provided vars (Railway, Render, Vercel, Fly, Heroku) — set by\n *    the host, not by request input, so safe to trust as-is.\n * 3. Lazy inference from the first inbound request to the Forge surface\n *    (X-Forwarded-Proto + Host). Host is attacker-controlled, so a candidate\n *    is only accepted after self-verification: we fetch our own\n *    /forge/health at the candidate URL and check it returns this\n *    instance's boot nonce.\n */\n\nexport function resolveBaseUrlFromEnv(explicit?: string): string | null {\n  const fromExplicit = explicit?.trim();\n  if (fromExplicit) return stripSlash(fromExplicit);\n\n  const fromEnv = process.env.PUBLIC_BASE_URL?.trim();\n  if (fromEnv) return stripSlash(fromEnv);\n\n  const railway = process.env.RAILWAY_PUBLIC_DOMAIN?.trim();\n  if (railway) return `https://${stripSlash(railway)}`;\n\n  const render = process.env.RENDER_EXTERNAL_URL?.trim();\n  if (render) return stripSlash(render);\n\n  const vercel =\n    process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim() ||\n    process.env.VERCEL_URL?.trim();\n  if (vercel) return `https://${stripSlash(vercel)}`;\n\n  const fly = process.env.FLY_APP_NAME?.trim();\n  if (fly) return `https://${fly}.fly.dev`;\n\n  const heroku = process.env.HEROKU_APP_NAME?.trim();\n  if (heroku) return `https://${heroku}.herokuapp.com`;\n\n  return null;\n}\n\nfunction stripSlash(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nconst MAX_VERIFY_ATTEMPTS = 5;\nconst VERIFY_TIMEOUT_MS = 3000;\n\nexport class PublicBaseUrlResolver {\n  /** Per-boot nonce, echoed by /forge/health for self-verification. */\n  readonly instanceNonce: string;\n\n  private resolved: string | null;\n  private verifying = false;\n  private rejected = new Set<string>();\n  private attempts = 0;\n  private onResolved: ((baseUrl: string) => void) | null;\n\n  constructor(opts: {\n    /** URL already known from env/platform vars (trusted, no verification). */\n    initial: string | null;\n    /** Called once when a base URL first becomes known via inference. */\n    onResolved?: (baseUrl: string) => void;\n  }) {\n    this.instanceNonce = randomBytes(16).toString(\"hex\");\n    this.resolved = opts.initial;\n    this.onResolved = opts.onResolved ?? null;\n  }\n\n  get(): string | null {\n    return this.resolved;\n  }\n\n  /**\n   * Feed an inbound Forge-surface request. No-op once resolved. Kicks off\n   * async self-verification of the candidate URL derived from the request.\n   */\n  considerRequest(req: Request): void {\n    if (this.resolved || this.verifying) return;\n    if (this.attempts >= MAX_VERIFY_ATTEMPTS) return;\n\n    const candidate = candidateFromRequest(req);\n    if (!candidate || this.rejected.has(candidate)) return;\n\n    this.verifying = true;\n    this.attempts += 1;\n    void this.verify(candidate)\n      .then((ok) => {\n        if (ok) {\n          this.resolved = candidate;\n          console.log(`[forge] public base URL inferred and verified: ${candidate}`);\n          this.onResolved?.(candidate);\n        } else {\n          this.rejected.add(candidate);\n          console.warn(\n            `[forge] candidate base URL failed self-verification, ignoring: ${candidate}`,\n          );\n        }\n      })\n      .finally(() => {\n        this.verifying = false;\n      });\n  }\n\n  /** Fetch our own /forge/health at the candidate and match the boot nonce. */\n  private async verify(candidate: string): Promise<boolean> {\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), VERIFY_TIMEOUT_MS);\n      const res = await fetch(`${candidate}/forge/health`, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n        redirect: \"manual\",\n      });\n      clearTimeout(timer);\n      if (!res.ok) return false;\n      const json = (await res.json()) as { instance?: string };\n      return json.instance === this.instanceNonce;\n    } catch {\n      return false;\n    }\n  }\n}\n\nfunction candidateFromRequest(req: Request): string | null {\n  const host = firstHeaderValue(req.headers[\"x-forwarded-host\"]) ?? req.headers.host;\n  if (!host || !isValidHost(host)) return null;\n\n  const proto =\n    firstHeaderValue(req.headers[\"x-forwarded-proto\"]) ??\n    (req.protocol || \"http\");\n  if (proto !== \"https\" && proto !== \"http\") return null;\n\n  const isLocal = /^(localhost|127\\.0\\.0\\.1|\\[::1\\])(:\\d+)?$/i.test(host);\n  // A deployed merchant is always behind HTTPS; only allow http locally.\n  if (proto === \"http\" && !isLocal) return null;\n\n  return `${proto}://${host}`;\n}\n\nfunction firstHeaderValue(value: string | string[] | undefined): string | null {\n  const raw = Array.isArray(value) ? value[0] : value;\n  const first = raw?.split(\",\")[0]?.trim();\n  return first || null;\n}\n\nfunction isValidHost(host: string): boolean {\n  // hostname with optional port; rejects paths, spaces, credentials\n  return /^[a-z0-9.-]+(:\\d{1,5})?$/i.test(host) || /^\\[[0-9a-f:]+\\](:\\d{1,5})?$/i.test(host);\n}\n","/**\n * Notify ClawCash gateway of this merchant's live public base URL.\n * Full action registration still happens from Forge \"Go live\".\n */\nexport async function heartbeatGateway(opts: {\n  gatewayUrl: string;\n  handle: string;\n  baseUrl: string;\n  registerSecret: string;\n}): Promise<void> {\n  const gateway = opts.gatewayUrl.replace(/\\/$/, \"\");\n  const res = await fetch(`${gateway}/register/heartbeat`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${opts.registerSecret}`,\n    },\n    body: JSON.stringify({\n      handle: opts.handle.trim().toLowerCase(),\n      baseUrl: opts.baseUrl.replace(/\\/$/, \"\"),\n    }),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(\n      `gateway heartbeat failed (${res.status}): ${text.slice(0, 240)}`,\n    );\n  }\n}\n","import type { NextFunction, Request, Response } from \"express\";\n\n/**\n * Per-project Forge API key for gateway → merchant fulfillment.\n * Merchants set FORGE_API_KEY from the Forge dashboard (never the shared\n * GATEWAY_REGISTER_SECRET — that is Forge↔gateway platform auth only).\n *\n * GATEWAY_REGISTER_SECRET is accepted as a deprecated fallback for older deploys.\n */\nexport function getForgeApiKey(explicit?: string | null): string | null {\n  const value =\n    (explicit ?? process.env.FORGE_API_KEY ?? process.env.GATEWAY_REGISTER_SECRET)?.trim();\n  if (!value || value.length < 16) return null;\n  return value;\n}\n\n/** @deprecated Use getForgeApiKey */\nexport function getForgeGatewaySecret(\n  explicit?: string | null,\n): string | null {\n  return getForgeApiKey(explicit);\n}\n\nexport function isForgeGatewayRequest(\n  req: Request,\n  secret?: string | null,\n): boolean {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return false;\n  const header = req.header(\"authorization\") ?? \"\";\n  const bearer = header.toLowerCase().startsWith(\"bearer \")\n    ? header.slice(7).trim()\n    : \"\";\n  const alt =\n    req.header(\"x-forge-api-key\")?.trim() ||\n    req.header(\"x-clawcash-gateway\")?.trim() ||\n    \"\";\n  return bearer === expected || alt === expected;\n}\n\n/** Synthetic user id for DB rows created by gateway-driven fulfillment. */\nexport const FORGE_GATEWAY_USER_ID = \"forge_gateway_agent\";\n\nexport function requireForgeGateway(\n  secret?: string | null,\n): (req: Request, res: Response, next: NextFunction) => void {\n  return (req, res, next) => {\n    if (!isForgeGatewayRequest(req, secret)) {\n      res.status(401).json({\n        error:\n          \"Unauthorized — Forge API key required (FORGE_API_KEY from Forge dashboard)\",\n      });\n      return;\n    }\n    next();\n  };\n}\n\n/** Headers merchant execute() should send on loopback calls during fulfillment. */\nexport function forgeGatewayLoopbackHeaders(\n  secret?: string | null,\n): Record<string, string> {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return {};\n  return {\n    Authorization: `Bearer ${expected}`,\n    \"X-Forge-Api-Key\": expected,\n  };\n}\n","import type { ForgePayToSource } from \"./types.js\";\n\nexport type { ForgePayToSource };\n\nconst ZERO = /^0x0{40}$/i;\n\nexport function isZeroAddress(address: string | undefined | null): boolean {\n  if (!address) return true;\n  return ZERO.test(address.trim());\n}\n\nfunction normalizeBaseUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction pickForgeBaseUrl(source?: ForgePayToSource): string | null {\n  const fromEnv = process.env.FORGE_URL?.trim();\n  if (fromEnv) return normalizeBaseUrl(fromEnv);\n\n  const fromOpts = source?.baseUrl?.trim();\n  if (!fromOpts) return null;\n\n  const normalized = normalizeBaseUrl(fromOpts);\n  // Never call a laptop Forge from a deployed merchant app.\n  if (\n    /localhost|127\\.0\\.0\\.1/i.test(normalized) &&\n    process.env.NODE_ENV === \"production\"\n  ) {\n    return null;\n  }\n  return normalized;\n}\n\n/**\n * Resolve merchant payTo with minimal host config:\n * 1. `PAY_TO` env (optional override)\n * 2. Live address from Forge public API (when reachable)\n * 3. Baked-in fallback from the Forge PR\n */\nexport async function resolvePayTo(opts: {\n  /** Baked-in address from Forge codegen (required fallback). */\n  fallback: string;\n  /** Optional explicit override (usually process.env.PAY_TO). */\n  payTo?: string;\n  forge?: ForgePayToSource;\n  /** Fetch timeout ms. Defaults to 2500. */\n  timeoutMs?: number;\n}): Promise<string> {\n  const envOverride = process.env.PAY_TO?.trim();\n  if (envOverride && !isZeroAddress(envOverride)) {\n    return envOverride;\n  }\n\n  const explicit = opts.payTo?.trim();\n  if (explicit && !isZeroAddress(explicit) && !opts.forge) {\n    return explicit;\n  }\n\n  const baseUrl = pickForgeBaseUrl(opts.forge);\n  if (baseUrl && opts.forge) {\n    const url = `${baseUrl}/api/public/pay-to/${encodeURIComponent(opts.forge.owner)}/${encodeURIComponent(opts.forge.repo)}`;\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(\n        () => controller.abort(),\n        opts.timeoutMs ?? 2500,\n      );\n      const res = await fetch(url, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n      });\n      clearTimeout(timer);\n      if (res.ok) {\n        const json = (await res.json()) as { address?: string };\n        if (json.address && !isZeroAddress(json.address)) {\n          return json.address.trim();\n        }\n      }\n    } catch (err) {\n      console.warn(\"[forge] live payTo fetch failed, using fallback:\", err);\n    }\n  }\n\n  if (explicit && !isZeroAddress(explicit)) return explicit;\n  if (opts.fallback && !isZeroAddress(opts.fallback)) return opts.fallback;\n\n  throw new Error(\n    \"resolvePayTo: no usable address (set Forge wallet / PAY_TO, or re-run Forge PR)\",\n  );\n}\n","/**\n * Merchant-side Forge surface status — public probes for deploy / go-live checks.\n */\n\nexport type ForgeHeartbeatState = {\n  attempted: boolean;\n  ok: boolean | null;\n  at: string | null;\n  error: string | null;\n};\n\nexport type ForgeSurfaceStatus = {\n  ok: boolean;\n  forge: true;\n  version: string;\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  /** True when FORGE_API_KEY is set so /forge/fulfill is mounted. */\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n  /** Env + fulfill ready — merchant can accept gateway fulfillment. */\n  ready: boolean;\n  heartbeat: ForgeHeartbeatState;\n  endpoints: {\n    health: string;\n    status: string;\n    wellKnown: string;\n    fulfill: string;\n    agent: string;\n  };\n};\n\nconst PACKAGE_VERSION = \"0.1.8\";\n\nlet lastHeartbeat: ForgeHeartbeatState = {\n  attempted: false,\n  ok: null,\n  at: null,\n  error: null,\n};\n\nexport function recordHeartbeatResult(\n  result: { ok: true } | { ok: false; error: string },\n): void {\n  lastHeartbeat = {\n    attempted: true,\n    ok: result.ok,\n    at: new Date().toISOString(),\n    error: result.ok ? null : result.error,\n  };\n}\n\nexport function getLastHeartbeat(): ForgeHeartbeatState {\n  return { ...lastHeartbeat };\n}\n\nexport function buildForgeSurfaceStatus(opts: {\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n}): ForgeSurfaceStatus {\n  const fulfillPath = opts.fulfillPath.replace(/\\/$/, \"\") || \"/forge/fulfill\";\n  const agentBasePath = opts.agentBasePath.replace(/\\/$/, \"\") || \"/agent\";\n  const ready =\n    opts.fulfillMounted &&\n    Boolean(opts.publicBaseUrl) &&\n    opts.actions.length > 0;\n\n  return {\n    ok: true,\n    forge: true,\n    version: PACKAGE_VERSION,\n    handle: opts.handle,\n    publicBaseUrl: opts.publicBaseUrl,\n    gatewayUrl: opts.gatewayUrl,\n    fulfillMounted: opts.fulfillMounted,\n    fulfillPath,\n    agentBasePath,\n    skipPayment: opts.skipPayment,\n    actions: opts.actions,\n    ready,\n    heartbeat: getLastHeartbeat(),\n    endpoints: {\n      health: \"/forge/health\",\n      status: \"/forge/status\",\n      wellKnown: \"/.well-known/clawcash.json\",\n      fulfill: fulfillPath,\n      agent: agentBasePath,\n    },\n  };\n}\n\nexport function buildWellKnownDocument(status: ForgeSurfaceStatus): {\n  forge: true;\n  version: string;\n  health: string;\n  status: string;\n  handle: string | null;\n  ready: boolean;\n} {\n  return {\n    forge: true,\n    version: status.version,\n    health: status.endpoints.health,\n    status: status.endpoints.status,\n    handle: status.handle,\n    ready: status.ready,\n  };\n}\n\nexport function forgeSdkVersion(): string {\n  return PACKAGE_VERSION;\n}\n","import type { DefinedAgentService, SkillMeta } from \"./types.js\";\n\n/**\n * Generate a SKILL.md document for agents from defined Forge services.\n */\nexport function generateSkillMarkdown(\n  services: DefinedAgentService[],\n  meta: SkillMeta,\n): string {\n  const base = meta.baseUrl.replace(/\\/$/, \"\");\n  const lines: string[] = [\n    `---`,\n    `name: ${meta.name}`,\n    `description: ${meta.description}`,\n    `---`,\n    ``,\n    `# ${meta.name}`,\n    ``,\n    meta.description,\n    ``,\n  ];\n\n  if (meta.homepage) {\n    lines.push(`Homepage: ${meta.homepage}`, ``);\n  }\n\n  lines.push(\n    `## How to use`,\n    ``,\n    `1. Read this skill.`,\n    `2. Call the agent endpoint with a JSON body matching the input schema.`,\n    `3. If you receive HTTP 402, pay via x402 (USDC) and retry with the payment header.`,\n    `4. Use the returned output fields.`,\n    ``,\n    `## Services`,\n    ``,\n  );\n\n  for (const service of services) {\n    const path = `${base}/agent/${service.path}`;\n    const price = service.payment.amount.startsWith(\"$\")\n      ? service.payment.amount\n      : `$${service.payment.amount}`;\n\n    lines.push(\n      `### \\`${service.name}\\``,\n      ``,\n      service.description,\n      ``,\n      `- **Method:** \\`POST\\``,\n      `- **URL:** \\`${path}\\``,\n      `- **Price:** ${price} ${service.payment.currency} via ${service.payment.protocols.join(\", \")}`,\n      ``,\n      `**Input**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Output**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.output).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Example**`,\n      ``,\n      \"```bash\",\n      `curl -X POST ${path} \\\\`,\n      `  -H \"Content-Type: application/json\" \\\\`,\n      `  -d '${JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [\n            k,\n            t === \"url\" ? \"https://example.com/image.png\" : `example-${k}`,\n          ]),\n        ),\n      )}'`,\n      \"```\",\n      ``,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOA,eAAsB,UAAa,SAA0C;AAC3E,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,UAAU,KAAK,IAAI;AAEzB,aAAS;AACP,UAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,QAAI,QAAQ,cAAc,KAAK,GAAG;AAChC,aAAO;AAAA,IACT;AACA,QAAI,KAAK,IAAI,IAAI,WAAW,WAAW;AACrC,YAAM,IAAI,MAAM,6BAA6B,SAAS,IAAI;AAAA,IAC5D;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,gBAAqC;AACnD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,SAAS,YAAY,MAAsB;AAChD,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,MAAM,GAAG,EACjB,YAAY;AACjB;AAEO,SAAS,mBAId,QACsC;AACtC,MAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,IACT,MAAM,YAAY,OAAO,IAAI;AAAA,EAC/B;AACF;;;ACvDA,qBAAuC;AACvC,IAAAA,kBAAsD;AAEtD,oBAAsC;AAEtC,IAAAC,iBAA+B;;;ACN/B,yBAA4B;AAerB,SAAS,sBAAsB,UAAkC;AACtE,QAAM,eAAe,UAAU,KAAK;AACpC,MAAI,aAAc,QAAO,WAAW,YAAY;AAEhD,QAAM,UAAU,QAAQ,IAAI,iBAAiB,KAAK;AAClD,MAAI,QAAS,QAAO,WAAW,OAAO;AAEtC,QAAM,UAAU,QAAQ,IAAI,uBAAuB,KAAK;AACxD,MAAI,QAAS,QAAO,WAAW,WAAW,OAAO,CAAC;AAElD,QAAM,SAAS,QAAQ,IAAI,qBAAqB,KAAK;AACrD,MAAI,OAAQ,QAAO,WAAW,MAAM;AAEpC,QAAM,SACJ,QAAQ,IAAI,+BAA+B,KAAK,KAChD,QAAQ,IAAI,YAAY,KAAK;AAC/B,MAAI,OAAQ,QAAO,WAAW,WAAW,MAAM,CAAC;AAEhD,QAAM,MAAM,QAAQ,IAAI,cAAc,KAAK;AAC3C,MAAI,IAAK,QAAO,WAAW,GAAG;AAE9B,QAAM,SAAS,QAAQ,IAAI,iBAAiB,KAAK;AACjD,MAAI,OAAQ,QAAO,WAAW,MAAM;AAEpC,SAAO;AACT;AAEA,SAAS,WAAW,KAAqB;AACvC,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAEnB,IAAM,wBAAN,MAA4B;AAAA;AAAA,EAExB;AAAA,EAED;AAAA,EACA,YAAY;AAAA,EACZ,WAAW,oBAAI,IAAY;AAAA,EAC3B,WAAW;AAAA,EACX;AAAA,EAER,YAAY,MAKT;AACD,SAAK,oBAAgB,gCAAY,EAAE,EAAE,SAAS,KAAK;AACnD,SAAK,WAAW,KAAK;AACrB,SAAK,aAAa,KAAK,cAAc;AAAA,EACvC;AAAA,EAEA,MAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,KAAoB;AAClC,QAAI,KAAK,YAAY,KAAK,UAAW;AACrC,QAAI,KAAK,YAAY,oBAAqB;AAE1C,UAAM,YAAY,qBAAqB,GAAG;AAC1C,QAAI,CAAC,aAAa,KAAK,SAAS,IAAI,SAAS,EAAG;AAEhD,SAAK,YAAY;AACjB,SAAK,YAAY;AACjB,SAAK,KAAK,OAAO,SAAS,EACvB,KAAK,CAAC,OAAO;AACZ,UAAI,IAAI;AACN,aAAK,WAAW;AAChB,gBAAQ,IAAI,kDAAkD,SAAS,EAAE;AACzE,aAAK,aAAa,SAAS;AAAA,MAC7B,OAAO;AACL,aAAK,SAAS,IAAI,SAAS;AAC3B,gBAAQ;AAAA,UACN,kEAAkE,SAAS;AAAA,QAC7E;AAAA,MACF;AAAA,IACF,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,YAAY;AAAA,IACnB,CAAC;AAAA,EACL;AAAA;AAAA,EAGA,MAAc,OAAO,WAAqC;AACxD,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,iBAAiB;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,SAAS,iBAAiB;AAAA,QACnD,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,QACtC,UAAU;AAAA,MACZ,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK,aAAa,KAAK;AAAA,IAChC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,KAA6B;AACzD,QAAM,OAAO,iBAAiB,IAAI,QAAQ,kBAAkB,CAAC,KAAK,IAAI,QAAQ;AAC9E,MAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAG,QAAO;AAExC,QAAM,QACJ,iBAAiB,IAAI,QAAQ,mBAAmB,CAAC,MAChD,IAAI,YAAY;AACnB,MAAI,UAAU,WAAW,UAAU,OAAQ,QAAO;AAElD,QAAM,UAAU,6CAA6C,KAAK,IAAI;AAEtE,MAAI,UAAU,UAAU,CAAC,QAAS,QAAO;AAEzC,SAAO,GAAG,KAAK,MAAM,IAAI;AAC3B;AAEA,SAAS,iBAAiB,OAAqD;AAC7E,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AACvC,SAAO,SAAS;AAClB;AAEA,SAAS,YAAY,MAAuB;AAE1C,SAAO,4BAA4B,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI;AAC3F;;;AClJA,eAAsB,iBAAiB,MAKrB;AAChB,QAAM,UAAU,KAAK,WAAW,QAAQ,OAAO,EAAE;AACjD,QAAM,MAAM,MAAM,MAAM,GAAG,OAAO,uBAAuB;AAAA,IACvD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,cAAc;AAAA,IAC9C;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,KAAK,OAAO,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI;AAAA,MACR,6BAA6B,IAAI,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;ACnBO,SAAS,eAAe,UAAyC;AACtE,QAAM,SACH,YAAY,QAAQ,IAAI,iBAAiB,QAAQ,IAAI,0BAA0B,KAAK;AACvF,MAAI,CAAC,SAAS,MAAM,SAAS,GAAI,QAAO;AACxC,SAAO;AACT;AAGO,SAAS,sBACd,UACe;AACf,SAAO,eAAe,QAAQ;AAChC;AAEO,SAAS,sBACd,KACA,QACS;AACT,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,SAAS,IAAI,OAAO,eAAe,KAAK;AAC9C,QAAM,SAAS,OAAO,YAAY,EAAE,WAAW,SAAS,IACpD,OAAO,MAAM,CAAC,EAAE,KAAK,IACrB;AACJ,QAAM,MACJ,IAAI,OAAO,iBAAiB,GAAG,KAAK,KACpC,IAAI,OAAO,oBAAoB,GAAG,KAAK,KACvC;AACF,SAAO,WAAW,YAAY,QAAQ;AACxC;AAGO,IAAM,wBAAwB;AAE9B,SAAS,oBACd,QAC2D;AAC3D,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,QAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OACE;AAAA,MACJ,CAAC;AACD;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAGO,SAAS,4BACd,QACwB;AACxB,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,SAAO;AAAA,IACL,eAAe,UAAU,QAAQ;AAAA,IACjC,mBAAmB;AAAA,EACrB;AACF;;;AChEA,IAAM,OAAO;AAEN,SAAS,cAAc,SAA6C;AACzE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,KAAK,QAAQ,KAAK,CAAC;AACjC;AAEA,SAAS,iBAAiB,KAAqB;AAC7C,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAA0C;AAClE,QAAM,UAAU,QAAQ,IAAI,WAAW,KAAK;AAC5C,MAAI,QAAS,QAAO,iBAAiB,OAAO;AAE5C,QAAM,WAAW,QAAQ,SAAS,KAAK;AACvC,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,aAAa,iBAAiB,QAAQ;AAE5C,MACE,0BAA0B,KAAK,UAAU,KACzC,QAAQ,IAAI,aAAa,cACzB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,eAAsB,aAAa,MAQf;AAClB,QAAM,cAAc,QAAQ,IAAI,QAAQ,KAAK;AAC7C,MAAI,eAAe,CAAC,cAAc,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,OAAO,KAAK;AAClC,MAAI,YAAY,CAAC,cAAc,QAAQ,KAAK,CAAC,KAAK,OAAO;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,iBAAiB,KAAK,KAAK;AAC3C,MAAI,WAAW,KAAK,OAAO;AACzB,UAAM,MAAM,GAAG,OAAO,sBAAsB,mBAAmB,KAAK,MAAM,KAAK,CAAC,IAAI,mBAAmB,KAAK,MAAM,IAAI,CAAC;AACvH,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ;AAAA,QACZ,MAAM,WAAW,MAAM;AAAA,QACvB,KAAK,aAAa;AAAA,MACpB;AACA,YAAM,MAAM,MAAM,MAAM,KAAK;AAAA,QAC3B,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,IAAI,IAAI;AACV,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAI,KAAK,WAAW,CAAC,cAAc,KAAK,OAAO,GAAG;AAChD,iBAAO,KAAK,QAAQ,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,KAAK,oDAAoD,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,MAAI,YAAY,CAAC,cAAc,QAAQ,EAAG,QAAO;AACjD,MAAI,KAAK,YAAY,CAAC,cAAc,KAAK,QAAQ,EAAG,QAAO,KAAK;AAEhE,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;;;ACrDA,IAAM,kBAAkB;AAExB,IAAI,gBAAqC;AAAA,EACvC,WAAW;AAAA,EACX,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,OAAO;AACT;AAEO,SAAS,sBACd,QACM;AACN,kBAAgB;AAAA,IACd,WAAW;AAAA,IACX,IAAI,OAAO;AAAA,IACX,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,OAAO,OAAO,KAAK,OAAO,OAAO;AAAA,EACnC;AACF;AAEO,SAAS,mBAAwC;AACtD,SAAO,EAAE,GAAG,cAAc;AAC5B;AAEO,SAAS,wBAAwB,MASjB;AACrB,QAAM,cAAc,KAAK,YAAY,QAAQ,OAAO,EAAE,KAAK;AAC3D,QAAM,gBAAgB,KAAK,cAAc,QAAQ,OAAO,EAAE,KAAK;AAC/D,QAAM,QACJ,KAAK,kBACL,QAAQ,KAAK,aAAa,KAC1B,KAAK,QAAQ,SAAS;AAExB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,IACA,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd;AAAA,IACA,WAAW,iBAAiB;AAAA,IAC5B,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,QAOrC;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,EAChB;AACF;AAEO,SAAS,kBAA0B;AACxC,SAAO;AACT;;;AL1FA,IAAM,kBAAkB;AAExB,IAAM,0BAA0B;AAEhC,IAAM,sBAAsB;AAE5B,SAAS,UAAU,OAAoC;AACrD,SAAQ,SAAS;AACnB;AAEA,SAAS,wBAAwB,SAA8C;AAC7E,SAAO,IAAI,oCAAsB;AAAA,IAC/B,KAAK,QAAQ,kBAAkB;AAAA,IAC/B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AACH;AAEA,SAAS,cACP,MACA,QAC6E;AAC7E,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,WAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAAA,EAClE;AAEA,QAAM,QAAQ;AACd,QAAM,QAAiC,CAAC;AAExC,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG;AAChD,QAAI,EAAE,OAAO,UAAU,MAAM,GAAG,MAAM,UAAa,MAAM,GAAG,MAAM,MAAM;AACtE,aAAO,EAAE,IAAI,OAAO,OAAO,2BAA2B,GAAG,GAAG;AAAA,IAC9D;AACA,UAAM,MAAM,UAAU,KAAK,MAAM,GAAG,GAAG,IAAI;AAC3C,QAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,IAAI;AACxC,UAAM,GAAG,IAAI,MAAM,GAAG;AAAA,EACxB;AAEA,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;AAEA,SAAS,UAAU,KAAa,OAAgB,MAAsC;AACpF,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAC9C,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,UAAI,SAAS,OAAO;AAClB,YAAI;AACF,cAAI,IAAI,KAAK;AAAA,QACf,QAAQ;AACN,iBAAO,SAAS,GAAG;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,GAAG;AACpD,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,WAAW;AAC9B,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,YAAY,QAAwB;AAC3C,QAAM,aAAa,OAAO,WAAW,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI;AAC9D,SAAO,IAAI,UAAU;AACvB;AAEA,SAAS,uBACP,KACA,UACA,SACM;AACN,QAAM,SAAS,eAAe,QAAQ,SAAS,cAAc;AAC7D,MAAI,CAAC,QAAQ;AACX,YAAQ;AAAA,MACN;AAAA,IACF;AACA;AAAA,EACF;AAEA,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,aAAS,eAAAC,QAAa;AAC5B,QAAM,UAAU,cAAc;AAC9B,QAAM,OAAO,oBAAoB,MAAM;AAEvC,aAAW,WAAW,UAAU;AAC9B,WAAO;AAAA,MACL,IAAI,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,OAAO,KAAc,QAAkB;AACrC,YAAI;AACF,gBAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,cAAI,CAAC,UAAU,IAAI;AACjB,gBAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,UACF;AACA,gBAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,cAAI,KAAK,MAAM;AAAA,QACjB,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,kBAAQ,MAAM,mBAAmB,QAAQ,IAAI,YAAY,GAAG;AAC5D,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,aAAa,MAAM;AAC3B,UAAQ;AAAA,IACN,uCAAuC,WAAW;AAAA,EACpD;AACF;AAEA,SAAS,uBACP,KACA,UACA,SACA,MAQM;AACN,QAAM,YAAY,MAChB,wBAAwB;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,SAAS,IAAI;AAAA,IACjC,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB,aAAa,KAAK;AAAA,IAClB,eAAe,KAAK;AAAA,IACpB,aAAa,QAAQ,QAAQ,WAAW;AAAA,IACxC,SAAS,SAAS,IAAI,CAAC,OAAO;AAAA,MAC5B,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,OAAO,EAAE,QAAQ;AAAA,IACnB,EAAE;AAAA,EACJ,CAAC;AAEH,MAAI,IAAI,iBAAiB,CAAC,KAAc,QAAkB;AACxD,SAAK,SAAS,gBAAgB,GAAG;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,KAAK;AAAA,MACP,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA;AAAA,MAEhB,UAAU,KAAK,SAAS;AAAA,MACxB,SAAS,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AAED,MAAI,IAAI,iBAAiB,CAAC,KAAc,QAAkB;AACxD,SAAK,SAAS,gBAAgB,GAAG;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,OAAO,OAAO,QAAQ,MAAM,GAAG,EAAE,KAAK,MAAM;AAAA,EAClD,CAAC;AAED,MAAI,IAAI,8BAA8B,CAAC,KAAc,QAAkB;AACrE,SAAK,SAAS,gBAAgB,GAAG;AACjC,QAAI,KAAK,uBAAuB,UAAU,CAAC,CAAC;AAAA,EAC9C,CAAC;AAED,UAAQ;AAAA,IACN;AAAA,EACF;AACF;AAUA,eAAsB,mBACpB,KACA,UACA,SACiB;AACjB,MAAI,QAAQ;AACZ,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,WACJ,QAAQ,eAAe,KAAK,KAAK,QAAQ,OAAO,KAAK,KAAK;AAC5D,YAAQ,MAAM,aAAa;AAAA,MACzB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,CAAC;AACD,QAAI,cAAc,KAAK,GAAG;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ,OAAO,EAAE,KAAK;AACtE,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,aAAS,eAAAA,QAAa;AAC5B,QAAM,UAAU,cAAc;AAE9B,QAAM,SAAuB,CAAC;AAE9B,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,IAAI,QAAQ,IAAI;AAClC,UAAM,WAAW,GAAG,QAAQ,GAAG,SAAS;AACxC,UAAM,UAAU,UAAU,QAAQ,QAAQ,OAAO;AAEjD,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO,QAAQ,QAAQ,EAAE,IAAI;AAAA,QAC3B,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,OAAO,YAAY,QAAQ,QAAQ,MAAM;AAAA,UACzC;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO,KAAK,WAAW,OAAO,KAAc,QAAkB;AAC5D,UAAI;AACF,cAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,YAAI,CAAC,UAAU,IAAI;AACjB,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,YAAI,KAAK,MAAM;AAAA,MACjB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,gBAAQ,MAAM,WAAW,QAAQ,IAAI,YAAY,GAAG;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,eAAe,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC1D,UAAM,cAAc,wBAAwB,OAAO;AACnD,UAAM,WAAW,IAAI;AAAA,MACnB,SAAS,IAAI,CAAC,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAClD;AACA,UAAM,iBAAiB,IAAI,mCAAmB,WAAW;AACzD,eAAW,WAAW,UAAU;AAC9B,qBAAe,SAAS,SAAS,IAAI,8BAAe,CAAC;AAAA,IACvD;AACA,QAAI,QAAI,mCAAkB,QAAQ,gBAAgB,QAAW,QAAW,IAAI,CAAC;AAAA,EAC/E;AAEA,MAAI,IAAI,UAAU,MAAM;AACxB,QAAM,iBAAiB;AAAA,IACrB,eAAe,QAAQ,SAAS,cAAc;AAAA,EAChD;AACA,yBAAuB,KAAK,UAAU,OAAO;AAE7C,QAAM,aACJ,QAAQ,SAAS,KAAK,KAAK,KAC3B,QAAQ,IAAI,aAAa,KAAK,KAC9B;AACF,QAAM,SACJ,QAAQ,SAAS,QAAQ,KAAK,KAAK,QAAQ,IAAI,cAAc,KAAK,KAAK;AACzE,QAAM,iBACJ,QAAQ,SAAS,gBAAgB,KAAK,KACtC,QAAQ,IAAI,eAAe,KAAK,KAChC,QAAQ,IAAI,yBAAyB,KAAK;AAE5C,QAAM,gBAAgB,CAAC,YAAoB;AACzC,QAAI,CAAC,UAAU,CAAC,eAAgB;AAChC,SAAK,iBAAiB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EACE,KAAK,MAAM;AACV,4BAAsB,EAAE,IAAI,KAAK,CAAC;AAAA,IACpC,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,4BAAsB,EAAE,IAAI,OAAO,OAAO,QAAQ,CAAC;AACnD,cAAQ,KAAK,sCAAsC,GAAG;AAAA,IACxD,CAAC;AAAA,EACL;AAEA,QAAM,WAAW,IAAI,sBAAsB;AAAA,IACzC,SAAS,sBAAsB,QAAQ,SAAS,aAAa;AAAA;AAAA,IAE7D,YAAY;AAAA,EACd,CAAC;AAED,yBAAuB,KAAK,UAAU,SAAS;AAAA,IAC7C;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,cAAc,SAAS,IAAI;AACjC,MAAI,aAAa;AACf,kBAAc,WAAW;AAAA,EAC3B;AAEA,SAAO;AACT;AAEO,SAAS,kBACd,UACA,SACuC;AACvC,SAAO,CAAC,QAAQ,mBAAmB,KAAK,UAAU,OAAO;AAC3D;;;AMtWO,SAAS,sBACd,UACA,MACQ;AACR,QAAM,OAAO,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,SAAS,KAAK,IAAI;AAAA,IAClB,gBAAgB,KAAK,WAAW;AAAA,IAChC;AAAA,IACA;AAAA,IACA,KAAK,KAAK,IAAI;AAAA,IACd;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AAEA,MAAI,KAAK,UAAU;AACjB,UAAM,KAAK,aAAa,KAAK,QAAQ,IAAI,EAAE;AAAA,EAC7C;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,WAAW,UAAU;AAC9B,UAAM,OAAO,GAAG,IAAI,UAAU,QAAQ,IAAI;AAC1C,UAAM,QAAQ,QAAQ,QAAQ,OAAO,WAAW,GAAG,IAC/C,QAAQ,QAAQ,SAChB,IAAI,QAAQ,QAAQ,MAAM;AAE9B,UAAM;AAAA,MACJ,SAAS,QAAQ,IAAI;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,gBAAgB,KAAK,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,MAC7F;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC9D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,KAAK;AAAA,QACZ,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,YAC5C;AAAA,YACA,MAAM,QAAQ,kCAAkC,WAAW,CAAC;AAAA,UAC9D,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":["import_express","import_server","createRouter"]}

package/dist/index.d.cts

@@ -72,15 +72,19 @@ interface MountOptions {
     /** Skip x402 (local dev only). Defaults to false. */
     skipPayment?: boolean;
     /**
-     * Optional gateway heartbeat after mount.
-     * Prefer env: GATEWAY_URL, FORGE_HANDLE, FORGE_API_KEY, PUBLIC_BASE_URL.
+     * Gateway heartbeat after mount. Only FORGE_API_KEY is required as env;
+     * the URL defaults to the ClawCash gateway, the handle is baked by Forge
+     * codegen, and the public base URL is resolved from platform vars or
+     * inferred (self-verified) from the first inbound probe.
      */
     gateway?: {
+        /** Defaults to https://gateway.clawca.sh (or GATEWAY_URL env). */
         url?: string;
+        /** Merchant handle — baked by Forge codegen (or FORGE_HANDLE env). */
         handle?: string;
         /** @deprecated Prefer FORGE_API_KEY env — per-project key from Forge dashboard. */
         registerSecret?: string;
-        /** Merchant public base URL for fulfillment. */
+        /** Merchant public base URL. Usually omitted — resolved automatically. */
         publicBaseUrl?: string;
     };
     /**
@@ -135,6 +139,42 @@ declare function resolvePayTo(opts: {
     timeoutMs?: number;
 }): Promise<string>;
 
+/**
+ * Public base URL resolution, in trust order:
+ * 1. PUBLIC_BASE_URL env — explicit override.
+ * 2. Platform-provided vars (Railway, Render, Vercel, Fly, Heroku) — set by
+ *    the host, not by request input, so safe to trust as-is.
+ * 3. Lazy inference from the first inbound request to the Forge surface
+ *    (X-Forwarded-Proto + Host). Host is attacker-controlled, so a candidate
+ *    is only accepted after self-verification: we fetch our own
+ *    /forge/health at the candidate URL and check it returns this
+ *    instance's boot nonce.
+ */
+declare function resolveBaseUrlFromEnv(explicit?: string): string | null;
+declare class PublicBaseUrlResolver {
+    /** Per-boot nonce, echoed by /forge/health for self-verification. */
+    readonly instanceNonce: string;
+    private resolved;
+    private verifying;
+    private rejected;
+    private attempts;
+    private onResolved;
+    constructor(opts: {
+        /** URL already known from env/platform vars (trusted, no verification). */
+        initial: string | null;
+        /** Called once when a base URL first becomes known via inference. */
+        onResolved?: (baseUrl: string) => void;
+    });
+    get(): string | null;
+    /**
+     * Feed an inbound Forge-surface request. No-op once resolved. Kicks off
+     * async self-verification of the candidate URL derived from the request.
+     */
+    considerRequest(req: Request): void;
+    /** Fetch our own /forge/health at the candidate and match the boot nonce. */
+    private verify;
+}
+
 /**
  * Notify ClawCash gateway of this merchant's live public base URL.
  * Full action registration still happens from Forge "Go live".
@@ -231,4 +271,4 @@ declare function requireForgeGateway(secret?: string | null): (req: Request, res
 /** Headers merchant execute() should send on loopback calls during fulfillment. */
 declare function forgeGatewayLoopbackHeaders(secret?: string | null): Record<string, string>;
 
-export { type AgentServiceConfig, type AgentServiceContext, type DefinedAgentService, FORGE_GATEWAY_USER_ID, type ForgeHeartbeatState, type ForgePayToSource, type ForgeSurfaceStatus, type InputSchema, type MountOptions, type OutputSchema, type PaymentConfig, type SchemaFieldType, type SkillMeta, type WaitUntilOptions, buildForgeSurfaceStatus, buildWellKnownDocument, createContext, createForgeRouter, defineAgentService, forgeGatewayLoopbackHeaders, forgeSdkVersion, generateSkillMarkdown, getForgeApiKey, getForgeGatewaySecret, getLastHeartbeat, heartbeatGateway, isForgeGatewayRequest, isZeroAddress, mountAgentServices, recordHeartbeatResult, requireForgeGateway, resolvePayTo, toKebabCase, waitUntil };
+export { type AgentServiceConfig, type AgentServiceContext, type DefinedAgentService, FORGE_GATEWAY_USER_ID, type ForgeHeartbeatState, type ForgePayToSource, type ForgeSurfaceStatus, type InputSchema, type MountOptions, type OutputSchema, type PaymentConfig, PublicBaseUrlResolver, type SchemaFieldType, type SkillMeta, type WaitUntilOptions, buildForgeSurfaceStatus, buildWellKnownDocument, createContext, createForgeRouter, defineAgentService, forgeGatewayLoopbackHeaders, forgeSdkVersion, generateSkillMarkdown, getForgeApiKey, getForgeGatewaySecret, getLastHeartbeat, heartbeatGateway, isForgeGatewayRequest, isZeroAddress, mountAgentServices, recordHeartbeatResult, requireForgeGateway, resolveBaseUrlFromEnv, resolvePayTo, toKebabCase, waitUntil };

package/dist/index.d.ts

@@ -72,15 +72,19 @@ interface MountOptions {
     /** Skip x402 (local dev only). Defaults to false. */
     skipPayment?: boolean;
     /**
-     * Optional gateway heartbeat after mount.
-     * Prefer env: GATEWAY_URL, FORGE_HANDLE, FORGE_API_KEY, PUBLIC_BASE_URL.
+     * Gateway heartbeat after mount. Only FORGE_API_KEY is required as env;
+     * the URL defaults to the ClawCash gateway, the handle is baked by Forge
+     * codegen, and the public base URL is resolved from platform vars or
+     * inferred (self-verified) from the first inbound probe.
      */
     gateway?: {
+        /** Defaults to https://gateway.clawca.sh (or GATEWAY_URL env). */
         url?: string;
+        /** Merchant handle — baked by Forge codegen (or FORGE_HANDLE env). */
         handle?: string;
         /** @deprecated Prefer FORGE_API_KEY env — per-project key from Forge dashboard. */
         registerSecret?: string;
-        /** Merchant public base URL for fulfillment. */
+        /** Merchant public base URL. Usually omitted — resolved automatically. */
         publicBaseUrl?: string;
     };
     /**
@@ -135,6 +139,42 @@ declare function resolvePayTo(opts: {
     timeoutMs?: number;
 }): Promise<string>;
 
+/**
+ * Public base URL resolution, in trust order:
+ * 1. PUBLIC_BASE_URL env — explicit override.
+ * 2. Platform-provided vars (Railway, Render, Vercel, Fly, Heroku) — set by
+ *    the host, not by request input, so safe to trust as-is.
+ * 3. Lazy inference from the first inbound request to the Forge surface
+ *    (X-Forwarded-Proto + Host). Host is attacker-controlled, so a candidate
+ *    is only accepted after self-verification: we fetch our own
+ *    /forge/health at the candidate URL and check it returns this
+ *    instance's boot nonce.
+ */
+declare function resolveBaseUrlFromEnv(explicit?: string): string | null;
+declare class PublicBaseUrlResolver {
+    /** Per-boot nonce, echoed by /forge/health for self-verification. */
+    readonly instanceNonce: string;
+    private resolved;
+    private verifying;
+    private rejected;
+    private attempts;
+    private onResolved;
+    constructor(opts: {
+        /** URL already known from env/platform vars (trusted, no verification). */
+        initial: string | null;
+        /** Called once when a base URL first becomes known via inference. */
+        onResolved?: (baseUrl: string) => void;
+    });
+    get(): string | null;
+    /**
+     * Feed an inbound Forge-surface request. No-op once resolved. Kicks off
+     * async self-verification of the candidate URL derived from the request.
+     */
+    considerRequest(req: Request): void;
+    /** Fetch our own /forge/health at the candidate and match the boot nonce. */
+    private verify;
+}
+
 /**
  * Notify ClawCash gateway of this merchant's live public base URL.
  * Full action registration still happens from Forge "Go live".
@@ -231,4 +271,4 @@ declare function requireForgeGateway(secret?: string | null): (req: Request, res
 /** Headers merchant execute() should send on loopback calls during fulfillment. */
 declare function forgeGatewayLoopbackHeaders(secret?: string | null): Record<string, string>;
 
-export { type AgentServiceConfig, type AgentServiceContext, type DefinedAgentService, FORGE_GATEWAY_USER_ID, type ForgeHeartbeatState, type ForgePayToSource, type ForgeSurfaceStatus, type InputSchema, type MountOptions, type OutputSchema, type PaymentConfig, type SchemaFieldType, type SkillMeta, type WaitUntilOptions, buildForgeSurfaceStatus, buildWellKnownDocument, createContext, createForgeRouter, defineAgentService, forgeGatewayLoopbackHeaders, forgeSdkVersion, generateSkillMarkdown, getForgeApiKey, getForgeGatewaySecret, getLastHeartbeat, heartbeatGateway, isForgeGatewayRequest, isZeroAddress, mountAgentServices, recordHeartbeatResult, requireForgeGateway, resolvePayTo, toKebabCase, waitUntil };
+export { type AgentServiceConfig, type AgentServiceContext, type DefinedAgentService, FORGE_GATEWAY_USER_ID, type ForgeHeartbeatState, type ForgePayToSource, type ForgeSurfaceStatus, type InputSchema, type MountOptions, type OutputSchema, type PaymentConfig, PublicBaseUrlResolver, type SchemaFieldType, type SkillMeta, type WaitUntilOptions, buildForgeSurfaceStatus, buildWellKnownDocument, createContext, createForgeRouter, defineAgentService, forgeGatewayLoopbackHeaders, forgeSdkVersion, generateSkillMarkdown, getForgeApiKey, getForgeGatewaySecret, getLastHeartbeat, heartbeatGateway, isForgeGatewayRequest, isZeroAddress, mountAgentServices, recordHeartbeatResult, requireForgeGateway, resolveBaseUrlFromEnv, resolvePayTo, toKebabCase, waitUntil };

package/dist/index.js

@@ -42,6 +42,109 @@ import { paymentMiddleware, x402ResourceServer } from "@x402/express";
 import { HTTPFacilitatorClient } from "@x402/core/server";
 import { ExactEvmScheme } from "@x402/evm/exact/server";
 
+// src/base-url.ts
+import { randomBytes } from "crypto";
+function resolveBaseUrlFromEnv(explicit) {
+  const fromExplicit = explicit?.trim();
+  if (fromExplicit) return stripSlash(fromExplicit);
+  const fromEnv = process.env.PUBLIC_BASE_URL?.trim();
+  if (fromEnv) return stripSlash(fromEnv);
+  const railway = process.env.RAILWAY_PUBLIC_DOMAIN?.trim();
+  if (railway) return `https://${stripSlash(railway)}`;
+  const render = process.env.RENDER_EXTERNAL_URL?.trim();
+  if (render) return stripSlash(render);
+  const vercel = process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim() || process.env.VERCEL_URL?.trim();
+  if (vercel) return `https://${stripSlash(vercel)}`;
+  const fly = process.env.FLY_APP_NAME?.trim();
+  if (fly) return `https://${fly}.fly.dev`;
+  const heroku = process.env.HEROKU_APP_NAME?.trim();
+  if (heroku) return `https://${heroku}.herokuapp.com`;
+  return null;
+}
+function stripSlash(url) {
+  return url.replace(/\/$/, "");
+}
+var MAX_VERIFY_ATTEMPTS = 5;
+var VERIFY_TIMEOUT_MS = 3e3;
+var PublicBaseUrlResolver = class {
+  /** Per-boot nonce, echoed by /forge/health for self-verification. */
+  instanceNonce;
+  resolved;
+  verifying = false;
+  rejected = /* @__PURE__ */ new Set();
+  attempts = 0;
+  onResolved;
+  constructor(opts) {
+    this.instanceNonce = randomBytes(16).toString("hex");
+    this.resolved = opts.initial;
+    this.onResolved = opts.onResolved ?? null;
+  }
+  get() {
+    return this.resolved;
+  }
+  /**
+   * Feed an inbound Forge-surface request. No-op once resolved. Kicks off
+   * async self-verification of the candidate URL derived from the request.
+   */
+  considerRequest(req) {
+    if (this.resolved || this.verifying) return;
+    if (this.attempts >= MAX_VERIFY_ATTEMPTS) return;
+    const candidate = candidateFromRequest(req);
+    if (!candidate || this.rejected.has(candidate)) return;
+    this.verifying = true;
+    this.attempts += 1;
+    void this.verify(candidate).then((ok) => {
+      if (ok) {
+        this.resolved = candidate;
+        console.log(`[forge] public base URL inferred and verified: ${candidate}`);
+        this.onResolved?.(candidate);
+      } else {
+        this.rejected.add(candidate);
+        console.warn(
+          `[forge] candidate base URL failed self-verification, ignoring: ${candidate}`
+        );
+      }
+    }).finally(() => {
+      this.verifying = false;
+    });
+  }
+  /** Fetch our own /forge/health at the candidate and match the boot nonce. */
+  async verify(candidate) {
+    try {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), VERIFY_TIMEOUT_MS);
+      const res = await fetch(`${candidate}/forge/health`, {
+        signal: controller.signal,
+        headers: { accept: "application/json" },
+        redirect: "manual"
+      });
+      clearTimeout(timer);
+      if (!res.ok) return false;
+      const json = await res.json();
+      return json.instance === this.instanceNonce;
+    } catch {
+      return false;
+    }
+  }
+};
+function candidateFromRequest(req) {
+  const host = firstHeaderValue(req.headers["x-forwarded-host"]) ?? req.headers.host;
+  if (!host || !isValidHost(host)) return null;
+  const proto = firstHeaderValue(req.headers["x-forwarded-proto"]) ?? (req.protocol || "http");
+  if (proto !== "https" && proto !== "http") return null;
+  const isLocal = /^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/i.test(host);
+  if (proto === "http" && !isLocal) return null;
+  return `${proto}://${host}`;
+}
+function firstHeaderValue(value) {
+  const raw = Array.isArray(value) ? value[0] : value;
+  const first = raw?.split(",")[0]?.trim();
+  return first || null;
+}
+function isValidHost(host) {
+  return /^[a-z0-9.-]+(:\d{1,5})?$/i.test(host) || /^\[[0-9a-f:]+\](:\d{1,5})?$/i.test(host);
+}
+
 // src/gateway.ts
 async function heartbeatGateway(opts) {
   const gateway = opts.gatewayUrl.replace(/\/$/, "");
@@ -163,7 +266,7 @@ async function resolvePayTo(opts) {
 }
 
 // src/status.ts
-var PACKAGE_VERSION = "0.1.7";
+var PACKAGE_VERSION = "0.1.8";
 var lastHeartbeat = {
   attempted: false,
   ok: null,
@@ -225,6 +328,7 @@ function forgeSdkVersion() {
 // src/mount.ts
 var DEFAULT_NETWORK = "eip155:8453";
 var DEFAULT_FACILITATOR_URL = "https://facilitator.xpay.sh";
+var DEFAULT_GATEWAY_URL = "https://gateway.clawca.sh";
 function asNetwork(value) {
   return value ?? DEFAULT_NETWORK;
 }
@@ -324,7 +428,7 @@ function mountFulfillmentRouter(app, services, options) {
 function mountForgeStatusRoutes(app, services, options, opts) {
   const getStatus = () => buildForgeSurfaceStatus({
     handle: opts.handle,
-    publicBaseUrl: opts.publicBaseUrl,
+    publicBaseUrl: opts.resolver.get(),
     gatewayUrl: opts.gatewayUrl,
     fulfillMounted: opts.fulfillMounted,
     fulfillPath: opts.fulfillPath,
@@ -336,7 +440,8 @@ function mountForgeStatusRoutes(app, services, options, opts) {
       price: s.payment.amount
     }))
   });
-  app.get("/forge/health", (_req, res) => {
+  app.get("/forge/health", (req, res) => {
+    opts.resolver.considerRequest(req);
     const status = getStatus();
     res.json({
       ok: true,
@@ -344,14 +449,18 @@ function mountForgeStatusRoutes(app, services, options, opts) {
       ready: status.ready,
       handle: status.handle,
       version: status.version,
+      // Per-boot nonce so this instance can self-verify an inferred base URL.
+      instance: opts.resolver.instanceNonce,
       actions: status.actions.map((a) => a.name)
     });
   });
-  app.get("/forge/status", (_req, res) => {
+  app.get("/forge/status", (req, res) => {
+    opts.resolver.considerRequest(req);
     const status = getStatus();
     res.status(status.ready ? 200 : 503).json(status);
   });
-  app.get("/.well-known/clawcash.json", (_req, res) => {
+  app.get("/.well-known/clawcash.json", (req, res) => {
+    opts.resolver.considerRequest(req);
     res.json(buildWellKnownDocument(getStatus()));
   });
   console.log(
@@ -426,23 +535,15 @@ async function mountAgentServices(app, services, options) {
     getForgeApiKey(options.gateway?.registerSecret)
   );
   mountFulfillmentRouter(app, services, options);
-  const gatewayUrl = options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || null;
+  const gatewayUrl = options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || DEFAULT_GATEWAY_URL;
   const handle = options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;
   const registerSecret = options.gateway?.registerSecret?.trim() || process.env.FORGE_API_KEY?.trim() || process.env.GATEWAY_REGISTER_SECRET?.trim();
-  const publicBaseUrl = options.gateway?.publicBaseUrl?.trim() || process.env.PUBLIC_BASE_URL?.trim() || (process.env.RAILWAY_PUBLIC_DOMAIN ? `https://${process.env.RAILWAY_PUBLIC_DOMAIN}` : "") || null;
-  mountForgeStatusRoutes(app, services, options, {
-    fulfillMounted,
-    fulfillPath,
-    agentBasePath: basePath,
-    handle,
-    publicBaseUrl,
-    gatewayUrl
-  });
-  if (gatewayUrl && handle && registerSecret && publicBaseUrl) {
+  const sendHeartbeat = (baseUrl) => {
+    if (!handle || !registerSecret) return;
     void heartbeatGateway({
       gatewayUrl,
       handle,
-      baseUrl: publicBaseUrl,
+      baseUrl,
       registerSecret
     }).then(() => {
       recordHeartbeatResult({ ok: true });
@@ -451,6 +552,23 @@ async function mountAgentServices(app, services, options) {
       recordHeartbeatResult({ ok: false, error: message });
       console.warn("[forge] gateway heartbeat skipped:", err);
     });
+  };
+  const resolver = new PublicBaseUrlResolver({
+    initial: resolveBaseUrlFromEnv(options.gateway?.publicBaseUrl),
+    // Base URL learned late (inferred from the first probe): heartbeat now.
+    onResolved: sendHeartbeat
+  });
+  mountForgeStatusRoutes(app, services, options, {
+    fulfillMounted,
+    fulfillPath,
+    agentBasePath: basePath,
+    handle,
+    resolver,
+    gatewayUrl
+  });
+  const bootBaseUrl = resolver.get();
+  if (bootBaseUrl) {
+    sendHeartbeat(bootBaseUrl);
   }
   return router;
 }
@@ -543,6 +661,7 @@ function generateSkillMarkdown(services, meta) {
 }
 export {
   FORGE_GATEWAY_USER_ID,
+  PublicBaseUrlResolver,
   buildForgeSurfaceStatus,
   buildWellKnownDocument,
   createContext,
@@ -560,6 +679,7 @@ export {
   mountAgentServices,
   recordHeartbeatResult,
   requireForgeGateway,
+  resolveBaseUrlFromEnv,
   resolvePayTo,
   toKebabCase,
   waitUntil

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/define.ts","../src/mount.ts","../src/gateway.ts","../src/gateway-auth.ts","../src/payto.ts","../src/status.ts","../src/skill.ts"],"sourcesContent":["import type {\n  AgentServiceConfig,\n  AgentServiceContext,\n  DefinedAgentService,\n  WaitUntilOptions,\n} from \"./types.js\";\n\nexport async function waitUntil<T>(options: WaitUntilOptions<T>): Promise<T> {\n  const intervalMs = options.intervalMs ?? 500;\n  const timeoutMs = options.timeoutMs ?? 60_000;\n  const started = Date.now();\n\n  for (;;) {\n    const value = await options.run();\n    if (options.completedWhen(value)) {\n      return value;\n    }\n    if (Date.now() - started >= timeoutMs) {\n      throw new Error(`waitUntil timed out after ${timeoutMs}ms`);\n    }\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function createContext(): AgentServiceContext {\n  return {\n    waitUntil,\n  };\n}\n\n/** Convert snake_case or camelCase service name to kebab-case path segment. */\nexport function toKebabCase(name: string): string {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1-$2\")\n    .replace(/_/g, \"-\")\n    .toLowerCase();\n}\n\nexport function defineAgentService<\n  TInput extends Record<string, unknown> = Record<string, unknown>,\n  TOutput extends Record<string, unknown> = Record<string, unknown>,\n>(\n  config: AgentServiceConfig<TInput, TOutput>,\n): DefinedAgentService<TInput, TOutput> {\n  if (!config.name?.trim()) {\n    throw new Error(\"defineAgentService: name is required\");\n  }\n  if (!config.execute) {\n    throw new Error(\"defineAgentService: execute is required\");\n  }\n\n  return {\n    ...config,\n    __forge: true,\n    path: toKebabCase(config.name),\n  };\n}\n","import type { Application, Request, Response, NextFunction, Router } from \"express\";\nimport { Router as createRouter } from \"express\";\nimport { paymentMiddleware, x402ResourceServer } from \"@x402/express\";\nimport type { Network } from \"@x402/express\";\nimport { HTTPFacilitatorClient } from \"@x402/core/server\";\nimport type { RoutesConfig } from \"@x402/core/server\";\nimport { ExactEvmScheme } from \"@x402/evm/exact/server\";\nimport { createContext } from \"./define.js\";\nimport { heartbeatGateway } from \"./gateway.js\";\nimport {\n  getForgeApiKey,\n  requireForgeGateway,\n} from \"./gateway-auth.js\";\nimport { isZeroAddress, resolvePayTo } from \"./payto.js\";\nimport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  recordHeartbeatResult,\n} from \"./status.js\";\nimport type {\n  DefinedAgentService,\n  InputSchema,\n  MountOptions,\n  SchemaFieldType,\n} from \"./types.js\";\n\n/** Base mainnet — settled via the public XPay facilitator (no API keys). */\nconst DEFAULT_NETWORK = \"eip155:8453\" as const satisfies Network;\n/** Open facilitator: Base mainnet + Sepolia, no API keys. https://github.com/xpaysh/xpay-x402 */\nconst DEFAULT_FACILITATOR_URL = \"https://facilitator.xpay.sh\";\n\nfunction asNetwork(value: string | undefined): Network {\n  return (value ?? DEFAULT_NETWORK) as Network;\n}\n\nfunction createFacilitatorClient(options: MountOptions): HTTPFacilitatorClient {\n  return new HTTPFacilitatorClient({\n    url: options.facilitatorUrl ?? DEFAULT_FACILITATOR_URL,\n    createAuthHeaders: options.createAuthHeaders,\n  });\n}\n\nfunction validateInput(\n  body: unknown,\n  schema: InputSchema,\n): { ok: true; value: Record<string, unknown> } | { ok: false; error: string } {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return { ok: false, error: \"Request body must be a JSON object\" };\n  }\n\n  const input = body as Record<string, unknown>;\n  const value: Record<string, unknown> = {};\n\n  for (const [key, type] of Object.entries(schema)) {\n    if (!(key in input) || input[key] === undefined || input[key] === null) {\n      return { ok: false, error: `Missing required field: ${key}` };\n    }\n    const err = checkType(key, input[key], type);\n    if (err) return { ok: false, error: err };\n    value[key] = input[key];\n  }\n\n  return { ok: true, value };\n}\n\nfunction checkType(key: string, value: unknown, type: SchemaFieldType): string | null {\n  switch (type) {\n    case \"string\":\n    case \"url\":\n      if (typeof value !== \"string\" || !value.trim()) {\n        return `Field ${key} must be a non-empty string`;\n      }\n      if (type === \"url\") {\n        try {\n          new URL(value);\n        } catch {\n          return `Field ${key} must be a valid URL`;\n        }\n      }\n      return null;\n    case \"number\":\n      if (typeof value !== \"number\" || Number.isNaN(value)) {\n        return `Field ${key} must be a number`;\n      }\n      return null;\n    case \"boolean\":\n      if (typeof value !== \"boolean\") {\n        return `Field ${key} must be a boolean`;\n      }\n      return null;\n    default:\n      return null;\n  }\n}\n\nfunction formatPrice(amount: string): string {\n  const normalized = amount.startsWith(\"$\") ? amount.slice(1) : amount;\n  return `$${normalized}`;\n}\n\nfunction mountFulfillmentRouter(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): void {\n  const secret = getForgeApiKey(options.gateway?.registerSecret);\n  if (!secret) {\n    console.warn(\n      \"[forge] /forge/fulfill not mounted — set FORGE_API_KEY (from Forge dashboard, min 16 chars) so the gateway can fulfill after payment\",\n    );\n    return;\n  }\n\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n  const gate = requireForgeGateway(secret);\n\n  for (const service of services) {\n    router.post(\n      `/${service.path}`,\n      gate,\n      async (req: Request, res: Response) => {\n        try {\n          const validated = validateInput(req.body, service.input);\n          if (!validated.ok) {\n            res.status(400).json({ error: validated.error });\n            return;\n          }\n          const output = await service.execute(validated.value, context);\n          res.json(output);\n        } catch (err) {\n          const message = err instanceof Error ? err.message : \"Internal error\";\n          console.error(`[forge] fulfill ${service.name} failed:`, err);\n          res.status(500).json({ error: message });\n        }\n      },\n    );\n  }\n\n  app.use(fulfillPath, router);\n  console.log(\n    `[forge] fulfillment mounted at POST ${fulfillPath}/{action} (gateway secret)`,\n  );\n}\n\nfunction mountForgeStatusRoutes(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n  opts: {\n    fulfillMounted: boolean;\n    fulfillPath: string;\n    agentBasePath: string;\n    handle: string | null;\n    publicBaseUrl: string | null;\n    gatewayUrl: string | null;\n  },\n): void {\n  const getStatus = () =>\n    buildForgeSurfaceStatus({\n      handle: opts.handle,\n      publicBaseUrl: opts.publicBaseUrl,\n      gatewayUrl: opts.gatewayUrl,\n      fulfillMounted: opts.fulfillMounted,\n      fulfillPath: opts.fulfillPath,\n      agentBasePath: opts.agentBasePath,\n      skipPayment: Boolean(options.skipPayment),\n      actions: services.map((s) => ({\n        name: s.name,\n        path: s.path,\n        price: s.payment.amount,\n      })),\n    });\n\n  app.get(\"/forge/health\", (_req: Request, res: Response) => {\n    const status = getStatus();\n    res.json({\n      ok: true,\n      forge: true as const,\n      ready: status.ready,\n      handle: status.handle,\n      version: status.version,\n      actions: status.actions.map((a) => a.name),\n    });\n  });\n\n  app.get(\"/forge/status\", (_req: Request, res: Response) => {\n    const status = getStatus();\n    res.status(status.ready ? 200 : 503).json(status);\n  });\n\n  app.get(\"/.well-known/clawcash.json\", (_req: Request, res: Response) => {\n    res.json(buildWellKnownDocument(getStatus()));\n  });\n\n  console.log(\n    \"[forge] liveliness: GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json\",\n  );\n}\n\n/**\n * Mount Forge agent services on an Express app.\n * - GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json — liveliness\n * - POST {basePath}/{kebab-name} — optional public x402 agent surface\n * - POST /forge/fulfill/{kebab-name} — private gateway fulfillment after payment\n *\n * payTo resolves automatically: PAY_TO env (optional) → Forge API → baked fallback.\n */\nexport async function mountAgentServices(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): Promise<Router> {\n  let payTo = \"\";\n  if (!options.skipPayment) {\n    const fallback =\n      options.payToFallback?.trim() || options.payTo?.trim() || \"\";\n    payTo = await resolvePayTo({\n      fallback,\n      payTo: options.payTo,\n      forge: options.forge,\n    });\n    if (isZeroAddress(payTo)) {\n      throw new Error(\n        \"mountAgentServices: resolved payTo is the zero address. Re-run Forge to provision a wallet.\",\n      );\n    }\n  }\n\n  const basePath = (options.basePath ?? \"/agent\").replace(/\\/$/, \"\") || \"/agent\";\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n\n  const routes: RoutesConfig = {};\n\n  for (const service of services) {\n    const routePath = `/${service.path}`;\n    const fullPath = `${basePath}${routePath}`;\n    const network = asNetwork(service.payment.network);\n\n    if (!options.skipPayment) {\n      routes[`POST ${fullPath}`] = {\n        accepts: {\n          scheme: \"exact\",\n          price: formatPrice(service.payment.amount),\n          network,\n          payTo,\n        },\n        description: service.description,\n        mimeType: \"application/json\",\n      };\n    }\n\n    router.post(routePath, async (req: Request, res: Response) => {\n      try {\n        const validated = validateInput(req.body, service.input);\n        if (!validated.ok) {\n          res.status(400).json({ error: validated.error });\n          return;\n        }\n\n        const output = await service.execute(validated.value, context);\n        res.json(output);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Internal error\";\n        console.error(`[forge] ${service.name} failed:`, err);\n        res.status(500).json({ error: message });\n      }\n    });\n  }\n\n  if (!options.skipPayment && Object.keys(routes).length > 0) {\n    const facilitator = createFacilitatorClient(options);\n    const networks = new Set(\n      services.map((s) => asNetwork(s.payment.network)),\n    );\n    const resourceServer = new x402ResourceServer(facilitator);\n    for (const network of networks) {\n      resourceServer.register(network, new ExactEvmScheme());\n    }\n    app.use(paymentMiddleware(routes, resourceServer, undefined, undefined, true));\n  }\n\n  app.use(basePath, router);\n  const fulfillMounted = Boolean(\n    getForgeApiKey(options.gateway?.registerSecret),\n  );\n  mountFulfillmentRouter(app, services, options);\n\n  const gatewayUrl =\n    options.gateway?.url?.trim() || process.env.GATEWAY_URL?.trim() || null;\n  const handle =\n    options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;\n  const registerSecret =\n    options.gateway?.registerSecret?.trim() ||\n    process.env.FORGE_API_KEY?.trim() ||\n    process.env.GATEWAY_REGISTER_SECRET?.trim();\n  const publicBaseUrl =\n    options.gateway?.publicBaseUrl?.trim() ||\n    process.env.PUBLIC_BASE_URL?.trim() ||\n    (process.env.RAILWAY_PUBLIC_DOMAIN\n      ? `https://${process.env.RAILWAY_PUBLIC_DOMAIN}`\n      : \"\") ||\n    null;\n\n  mountForgeStatusRoutes(app, services, options, {\n    fulfillMounted,\n    fulfillPath,\n    agentBasePath: basePath,\n    handle,\n    publicBaseUrl,\n    gatewayUrl,\n  });\n\n  if (gatewayUrl && handle && registerSecret && publicBaseUrl) {\n    void heartbeatGateway({\n      gatewayUrl,\n      handle,\n      baseUrl: publicBaseUrl,\n      registerSecret,\n    })\n      .then(() => {\n        recordHeartbeatResult({ ok: true });\n      })\n      .catch((err) => {\n        const message = err instanceof Error ? err.message : String(err);\n        recordHeartbeatResult({ ok: false, error: message });\n        console.warn(\"[forge] gateway heartbeat skipped:\", err);\n      });\n  }\n\n  return router;\n}\n\nexport function createForgeRouter(\n  services: DefinedAgentService[],\n  options: MountOptions,\n): (app: Application) => Promise<Router> {\n  return (app) => mountAgentServices(app, services, options);\n}\n\nexport function forgeErrorHandler(\n  err: unknown,\n  _req: Request,\n  res: Response,\n  _next: NextFunction,\n): void {\n  const message = err instanceof Error ? err.message : \"Internal error\";\n  res.status(500).json({ error: message });\n}\n","/**\n * Notify ClawCash gateway of this merchant's live public base URL.\n * Full action registration still happens from Forge \"Go live\".\n */\nexport async function heartbeatGateway(opts: {\n  gatewayUrl: string;\n  handle: string;\n  baseUrl: string;\n  registerSecret: string;\n}): Promise<void> {\n  const gateway = opts.gatewayUrl.replace(/\\/$/, \"\");\n  const res = await fetch(`${gateway}/register/heartbeat`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${opts.registerSecret}`,\n    },\n    body: JSON.stringify({\n      handle: opts.handle.trim().toLowerCase(),\n      baseUrl: opts.baseUrl.replace(/\\/$/, \"\"),\n    }),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(\n      `gateway heartbeat failed (${res.status}): ${text.slice(0, 240)}`,\n    );\n  }\n}\n","import type { NextFunction, Request, Response } from \"express\";\n\n/**\n * Per-project Forge API key for gateway → merchant fulfillment.\n * Merchants set FORGE_API_KEY from the Forge dashboard (never the shared\n * GATEWAY_REGISTER_SECRET — that is Forge↔gateway platform auth only).\n *\n * GATEWAY_REGISTER_SECRET is accepted as a deprecated fallback for older deploys.\n */\nexport function getForgeApiKey(explicit?: string | null): string | null {\n  const value =\n    (explicit ?? process.env.FORGE_API_KEY ?? process.env.GATEWAY_REGISTER_SECRET)?.trim();\n  if (!value || value.length < 16) return null;\n  return value;\n}\n\n/** @deprecated Use getForgeApiKey */\nexport function getForgeGatewaySecret(\n  explicit?: string | null,\n): string | null {\n  return getForgeApiKey(explicit);\n}\n\nexport function isForgeGatewayRequest(\n  req: Request,\n  secret?: string | null,\n): boolean {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return false;\n  const header = req.header(\"authorization\") ?? \"\";\n  const bearer = header.toLowerCase().startsWith(\"bearer \")\n    ? header.slice(7).trim()\n    : \"\";\n  const alt =\n    req.header(\"x-forge-api-key\")?.trim() ||\n    req.header(\"x-clawcash-gateway\")?.trim() ||\n    \"\";\n  return bearer === expected || alt === expected;\n}\n\n/** Synthetic user id for DB rows created by gateway-driven fulfillment. */\nexport const FORGE_GATEWAY_USER_ID = \"forge_gateway_agent\";\n\nexport function requireForgeGateway(\n  secret?: string | null,\n): (req: Request, res: Response, next: NextFunction) => void {\n  return (req, res, next) => {\n    if (!isForgeGatewayRequest(req, secret)) {\n      res.status(401).json({\n        error:\n          \"Unauthorized — Forge API key required (FORGE_API_KEY from Forge dashboard)\",\n      });\n      return;\n    }\n    next();\n  };\n}\n\n/** Headers merchant execute() should send on loopback calls during fulfillment. */\nexport function forgeGatewayLoopbackHeaders(\n  secret?: string | null,\n): Record<string, string> {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return {};\n  return {\n    Authorization: `Bearer ${expected}`,\n    \"X-Forge-Api-Key\": expected,\n  };\n}\n","import type { ForgePayToSource } from \"./types.js\";\n\nexport type { ForgePayToSource };\n\nconst ZERO = /^0x0{40}$/i;\n\nexport function isZeroAddress(address: string | undefined | null): boolean {\n  if (!address) return true;\n  return ZERO.test(address.trim());\n}\n\nfunction normalizeBaseUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction pickForgeBaseUrl(source?: ForgePayToSource): string | null {\n  const fromEnv = process.env.FORGE_URL?.trim();\n  if (fromEnv) return normalizeBaseUrl(fromEnv);\n\n  const fromOpts = source?.baseUrl?.trim();\n  if (!fromOpts) return null;\n\n  const normalized = normalizeBaseUrl(fromOpts);\n  // Never call a laptop Forge from a deployed merchant app.\n  if (\n    /localhost|127\\.0\\.0\\.1/i.test(normalized) &&\n    process.env.NODE_ENV === \"production\"\n  ) {\n    return null;\n  }\n  return normalized;\n}\n\n/**\n * Resolve merchant payTo with minimal host config:\n * 1. `PAY_TO` env (optional override)\n * 2. Live address from Forge public API (when reachable)\n * 3. Baked-in fallback from the Forge PR\n */\nexport async function resolvePayTo(opts: {\n  /** Baked-in address from Forge codegen (required fallback). */\n  fallback: string;\n  /** Optional explicit override (usually process.env.PAY_TO). */\n  payTo?: string;\n  forge?: ForgePayToSource;\n  /** Fetch timeout ms. Defaults to 2500. */\n  timeoutMs?: number;\n}): Promise<string> {\n  const envOverride = process.env.PAY_TO?.trim();\n  if (envOverride && !isZeroAddress(envOverride)) {\n    return envOverride;\n  }\n\n  const explicit = opts.payTo?.trim();\n  if (explicit && !isZeroAddress(explicit) && !opts.forge) {\n    return explicit;\n  }\n\n  const baseUrl = pickForgeBaseUrl(opts.forge);\n  if (baseUrl && opts.forge) {\n    const url = `${baseUrl}/api/public/pay-to/${encodeURIComponent(opts.forge.owner)}/${encodeURIComponent(opts.forge.repo)}`;\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(\n        () => controller.abort(),\n        opts.timeoutMs ?? 2500,\n      );\n      const res = await fetch(url, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n      });\n      clearTimeout(timer);\n      if (res.ok) {\n        const json = (await res.json()) as { address?: string };\n        if (json.address && !isZeroAddress(json.address)) {\n          return json.address.trim();\n        }\n      }\n    } catch (err) {\n      console.warn(\"[forge] live payTo fetch failed, using fallback:\", err);\n    }\n  }\n\n  if (explicit && !isZeroAddress(explicit)) return explicit;\n  if (opts.fallback && !isZeroAddress(opts.fallback)) return opts.fallback;\n\n  throw new Error(\n    \"resolvePayTo: no usable address (set Forge wallet / PAY_TO, or re-run Forge PR)\",\n  );\n}\n","/**\n * Merchant-side Forge surface status — public probes for deploy / go-live checks.\n */\n\nexport type ForgeHeartbeatState = {\n  attempted: boolean;\n  ok: boolean | null;\n  at: string | null;\n  error: string | null;\n};\n\nexport type ForgeSurfaceStatus = {\n  ok: boolean;\n  forge: true;\n  version: string;\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  /** True when FORGE_API_KEY is set so /forge/fulfill is mounted. */\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n  /** Env + fulfill ready — merchant can accept gateway fulfillment. */\n  ready: boolean;\n  heartbeat: ForgeHeartbeatState;\n  endpoints: {\n    health: string;\n    status: string;\n    wellKnown: string;\n    fulfill: string;\n    agent: string;\n  };\n};\n\nconst PACKAGE_VERSION = \"0.1.7\";\n\nlet lastHeartbeat: ForgeHeartbeatState = {\n  attempted: false,\n  ok: null,\n  at: null,\n  error: null,\n};\n\nexport function recordHeartbeatResult(\n  result: { ok: true } | { ok: false; error: string },\n): void {\n  lastHeartbeat = {\n    attempted: true,\n    ok: result.ok,\n    at: new Date().toISOString(),\n    error: result.ok ? null : result.error,\n  };\n}\n\nexport function getLastHeartbeat(): ForgeHeartbeatState {\n  return { ...lastHeartbeat };\n}\n\nexport function buildForgeSurfaceStatus(opts: {\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n}): ForgeSurfaceStatus {\n  const fulfillPath = opts.fulfillPath.replace(/\\/$/, \"\") || \"/forge/fulfill\";\n  const agentBasePath = opts.agentBasePath.replace(/\\/$/, \"\") || \"/agent\";\n  const ready =\n    opts.fulfillMounted &&\n    Boolean(opts.publicBaseUrl) &&\n    opts.actions.length > 0;\n\n  return {\n    ok: true,\n    forge: true,\n    version: PACKAGE_VERSION,\n    handle: opts.handle,\n    publicBaseUrl: opts.publicBaseUrl,\n    gatewayUrl: opts.gatewayUrl,\n    fulfillMounted: opts.fulfillMounted,\n    fulfillPath,\n    agentBasePath,\n    skipPayment: opts.skipPayment,\n    actions: opts.actions,\n    ready,\n    heartbeat: getLastHeartbeat(),\n    endpoints: {\n      health: \"/forge/health\",\n      status: \"/forge/status\",\n      wellKnown: \"/.well-known/clawcash.json\",\n      fulfill: fulfillPath,\n      agent: agentBasePath,\n    },\n  };\n}\n\nexport function buildWellKnownDocument(status: ForgeSurfaceStatus): {\n  forge: true;\n  version: string;\n  health: string;\n  status: string;\n  handle: string | null;\n  ready: boolean;\n} {\n  return {\n    forge: true,\n    version: status.version,\n    health: status.endpoints.health,\n    status: status.endpoints.status,\n    handle: status.handle,\n    ready: status.ready,\n  };\n}\n\nexport function forgeSdkVersion(): string {\n  return PACKAGE_VERSION;\n}\n","import type { DefinedAgentService, SkillMeta } from \"./types.js\";\n\n/**\n * Generate a SKILL.md document for agents from defined Forge services.\n */\nexport function generateSkillMarkdown(\n  services: DefinedAgentService[],\n  meta: SkillMeta,\n): string {\n  const base = meta.baseUrl.replace(/\\/$/, \"\");\n  const lines: string[] = [\n    `---`,\n    `name: ${meta.name}`,\n    `description: ${meta.description}`,\n    `---`,\n    ``,\n    `# ${meta.name}`,\n    ``,\n    meta.description,\n    ``,\n  ];\n\n  if (meta.homepage) {\n    lines.push(`Homepage: ${meta.homepage}`, ``);\n  }\n\n  lines.push(\n    `## How to use`,\n    ``,\n    `1. Read this skill.`,\n    `2. Call the agent endpoint with a JSON body matching the input schema.`,\n    `3. If you receive HTTP 402, pay via x402 (USDC) and retry with the payment header.`,\n    `4. Use the returned output fields.`,\n    ``,\n    `## Services`,\n    ``,\n  );\n\n  for (const service of services) {\n    const path = `${base}/agent/${service.path}`;\n    const price = service.payment.amount.startsWith(\"$\")\n      ? service.payment.amount\n      : `$${service.payment.amount}`;\n\n    lines.push(\n      `### \\`${service.name}\\``,\n      ``,\n      service.description,\n      ``,\n      `- **Method:** \\`POST\\``,\n      `- **URL:** \\`${path}\\``,\n      `- **Price:** ${price} ${service.payment.currency} via ${service.payment.protocols.join(\", \")}`,\n      ``,\n      `**Input**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Output**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.output).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Example**`,\n      ``,\n      \"```bash\",\n      `curl -X POST ${path} \\\\`,\n      `  -H \"Content-Type: application/json\" \\\\`,\n      `  -d '${JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [\n            k,\n            t === \"url\" ? \"https://example.com/image.png\" : `example-${k}`,\n          ]),\n        ),\n      )}'`,\n      \"```\",\n      ``,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n"],"mappings":";AAOA,eAAsB,UAAa,SAA0C;AAC3E,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,UAAU,KAAK,IAAI;AAEzB,aAAS;AACP,UAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,QAAI,QAAQ,cAAc,KAAK,GAAG;AAChC,aAAO;AAAA,IACT;AACA,QAAI,KAAK,IAAI,IAAI,WAAW,WAAW;AACrC,YAAM,IAAI,MAAM,6BAA6B,SAAS,IAAI;AAAA,IAC5D;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,gBAAqC;AACnD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,SAAS,YAAY,MAAsB;AAChD,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,MAAM,GAAG,EACjB,YAAY;AACjB;AAEO,SAAS,mBAId,QACsC;AACtC,MAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,IACT,MAAM,YAAY,OAAO,IAAI;AAAA,EAC/B;AACF;;;ACvDA,SAAS,UAAU,oBAAoB;AACvC,SAAS,mBAAmB,0BAA0B;AAEtD,SAAS,6BAA6B;AAEtC,SAAS,sBAAsB;;;ACF/B,eAAsB,iBAAiB,MAKrB;AAChB,QAAM,UAAU,KAAK,WAAW,QAAQ,OAAO,EAAE;AACjD,QAAM,MAAM,MAAM,MAAM,GAAG,OAAO,uBAAuB;AAAA,IACvD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,cAAc;AAAA,IAC9C;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,KAAK,OAAO,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI;AAAA,MACR,6BAA6B,IAAI,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;ACnBO,SAAS,eAAe,UAAyC;AACtE,QAAM,SACH,YAAY,QAAQ,IAAI,iBAAiB,QAAQ,IAAI,0BAA0B,KAAK;AACvF,MAAI,CAAC,SAAS,MAAM,SAAS,GAAI,QAAO;AACxC,SAAO;AACT;AAGO,SAAS,sBACd,UACe;AACf,SAAO,eAAe,QAAQ;AAChC;AAEO,SAAS,sBACd,KACA,QACS;AACT,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,SAAS,IAAI,OAAO,eAAe,KAAK;AAC9C,QAAM,SAAS,OAAO,YAAY,EAAE,WAAW,SAAS,IACpD,OAAO,MAAM,CAAC,EAAE,KAAK,IACrB;AACJ,QAAM,MACJ,IAAI,OAAO,iBAAiB,GAAG,KAAK,KACpC,IAAI,OAAO,oBAAoB,GAAG,KAAK,KACvC;AACF,SAAO,WAAW,YAAY,QAAQ;AACxC;AAGO,IAAM,wBAAwB;AAE9B,SAAS,oBACd,QAC2D;AAC3D,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,QAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OACE;AAAA,MACJ,CAAC;AACD;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAGO,SAAS,4BACd,QACwB;AACxB,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,SAAO;AAAA,IACL,eAAe,UAAU,QAAQ;AAAA,IACjC,mBAAmB;AAAA,EACrB;AACF;;;AChEA,IAAM,OAAO;AAEN,SAAS,cAAc,SAA6C;AACzE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,KAAK,QAAQ,KAAK,CAAC;AACjC;AAEA,SAAS,iBAAiB,KAAqB;AAC7C,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAA0C;AAClE,QAAM,UAAU,QAAQ,IAAI,WAAW,KAAK;AAC5C,MAAI,QAAS,QAAO,iBAAiB,OAAO;AAE5C,QAAM,WAAW,QAAQ,SAAS,KAAK;AACvC,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,aAAa,iBAAiB,QAAQ;AAE5C,MACE,0BAA0B,KAAK,UAAU,KACzC,QAAQ,IAAI,aAAa,cACzB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,eAAsB,aAAa,MAQf;AAClB,QAAM,cAAc,QAAQ,IAAI,QAAQ,KAAK;AAC7C,MAAI,eAAe,CAAC,cAAc,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,OAAO,KAAK;AAClC,MAAI,YAAY,CAAC,cAAc,QAAQ,KAAK,CAAC,KAAK,OAAO;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,iBAAiB,KAAK,KAAK;AAC3C,MAAI,WAAW,KAAK,OAAO;AACzB,UAAM,MAAM,GAAG,OAAO,sBAAsB,mBAAmB,KAAK,MAAM,KAAK,CAAC,IAAI,mBAAmB,KAAK,MAAM,IAAI,CAAC;AACvH,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ;AAAA,QACZ,MAAM,WAAW,MAAM;AAAA,QACvB,KAAK,aAAa;AAAA,MACpB;AACA,YAAM,MAAM,MAAM,MAAM,KAAK;AAAA,QAC3B,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,IAAI,IAAI;AACV,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAI,KAAK,WAAW,CAAC,cAAc,KAAK,OAAO,GAAG;AAChD,iBAAO,KAAK,QAAQ,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,KAAK,oDAAoD,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,MAAI,YAAY,CAAC,cAAc,QAAQ,EAAG,QAAO;AACjD,MAAI,KAAK,YAAY,CAAC,cAAc,KAAK,QAAQ,EAAG,QAAO,KAAK;AAEhE,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;;;ACrDA,IAAM,kBAAkB;AAExB,IAAI,gBAAqC;AAAA,EACvC,WAAW;AAAA,EACX,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,OAAO;AACT;AAEO,SAAS,sBACd,QACM;AACN,kBAAgB;AAAA,IACd,WAAW;AAAA,IACX,IAAI,OAAO;AAAA,IACX,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,OAAO,OAAO,KAAK,OAAO,OAAO;AAAA,EACnC;AACF;AAEO,SAAS,mBAAwC;AACtD,SAAO,EAAE,GAAG,cAAc;AAC5B;AAEO,SAAS,wBAAwB,MASjB;AACrB,QAAM,cAAc,KAAK,YAAY,QAAQ,OAAO,EAAE,KAAK;AAC3D,QAAM,gBAAgB,KAAK,cAAc,QAAQ,OAAO,EAAE,KAAK;AAC/D,QAAM,QACJ,KAAK,kBACL,QAAQ,KAAK,aAAa,KAC1B,KAAK,QAAQ,SAAS;AAExB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,IACA,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd;AAAA,IACA,WAAW,iBAAiB;AAAA,IAC5B,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,QAOrC;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,EAChB;AACF;AAEO,SAAS,kBAA0B;AACxC,SAAO;AACT;;;AJ9FA,IAAM,kBAAkB;AAExB,IAAM,0BAA0B;AAEhC,SAAS,UAAU,OAAoC;AACrD,SAAQ,SAAS;AACnB;AAEA,SAAS,wBAAwB,SAA8C;AAC7E,SAAO,IAAI,sBAAsB;AAAA,IAC/B,KAAK,QAAQ,kBAAkB;AAAA,IAC/B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AACH;AAEA,SAAS,cACP,MACA,QAC6E;AAC7E,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,WAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAAA,EAClE;AAEA,QAAM,QAAQ;AACd,QAAM,QAAiC,CAAC;AAExC,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG;AAChD,QAAI,EAAE,OAAO,UAAU,MAAM,GAAG,MAAM,UAAa,MAAM,GAAG,MAAM,MAAM;AACtE,aAAO,EAAE,IAAI,OAAO,OAAO,2BAA2B,GAAG,GAAG;AAAA,IAC9D;AACA,UAAM,MAAM,UAAU,KAAK,MAAM,GAAG,GAAG,IAAI;AAC3C,QAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,IAAI;AACxC,UAAM,GAAG,IAAI,MAAM,GAAG;AAAA,EACxB;AAEA,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;AAEA,SAAS,UAAU,KAAa,OAAgB,MAAsC;AACpF,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAC9C,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,UAAI,SAAS,OAAO;AAClB,YAAI;AACF,cAAI,IAAI,KAAK;AAAA,QACf,QAAQ;AACN,iBAAO,SAAS,GAAG;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,GAAG;AACpD,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,WAAW;AAC9B,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,YAAY,QAAwB;AAC3C,QAAM,aAAa,OAAO,WAAW,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI;AAC9D,SAAO,IAAI,UAAU;AACvB;AAEA,SAAS,uBACP,KACA,UACA,SACM;AACN,QAAM,SAAS,eAAe,QAAQ,SAAS,cAAc;AAC7D,MAAI,CAAC,QAAQ;AACX,YAAQ;AAAA,MACN;AAAA,IACF;AACA;AAAA,EACF;AAEA,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,cAAc;AAC9B,QAAM,OAAO,oBAAoB,MAAM;AAEvC,aAAW,WAAW,UAAU;AAC9B,WAAO;AAAA,MACL,IAAI,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,OAAO,KAAc,QAAkB;AACrC,YAAI;AACF,gBAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,cAAI,CAAC,UAAU,IAAI;AACjB,gBAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,UACF;AACA,gBAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,cAAI,KAAK,MAAM;AAAA,QACjB,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,kBAAQ,MAAM,mBAAmB,QAAQ,IAAI,YAAY,GAAG;AAC5D,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,aAAa,MAAM;AAC3B,UAAQ;AAAA,IACN,uCAAuC,WAAW;AAAA,EACpD;AACF;AAEA,SAAS,uBACP,KACA,UACA,SACA,MAQM;AACN,QAAM,YAAY,MAChB,wBAAwB;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB,aAAa,KAAK;AAAA,IAClB,eAAe,KAAK;AAAA,IACpB,aAAa,QAAQ,QAAQ,WAAW;AAAA,IACxC,SAAS,SAAS,IAAI,CAAC,OAAO;AAAA,MAC5B,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,OAAO,EAAE,QAAQ;AAAA,IACnB,EAAE;AAAA,EACJ,CAAC;AAEH,MAAI,IAAI,iBAAiB,CAAC,MAAe,QAAkB;AACzD,UAAM,SAAS,UAAU;AACzB,QAAI,KAAK;AAAA,MACP,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AAED,MAAI,IAAI,iBAAiB,CAAC,MAAe,QAAkB;AACzD,UAAM,SAAS,UAAU;AACzB,QAAI,OAAO,OAAO,QAAQ,MAAM,GAAG,EAAE,KAAK,MAAM;AAAA,EAClD,CAAC;AAED,MAAI,IAAI,8BAA8B,CAAC,MAAe,QAAkB;AACtE,QAAI,KAAK,uBAAuB,UAAU,CAAC,CAAC;AAAA,EAC9C,CAAC;AAED,UAAQ;AAAA,IACN;AAAA,EACF;AACF;AAUA,eAAsB,mBACpB,KACA,UACA,SACiB;AACjB,MAAI,QAAQ;AACZ,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,WACJ,QAAQ,eAAe,KAAK,KAAK,QAAQ,OAAO,KAAK,KAAK;AAC5D,YAAQ,MAAM,aAAa;AAAA,MACzB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,CAAC;AACD,QAAI,cAAc,KAAK,GAAG;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ,OAAO,EAAE,KAAK;AACtE,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,cAAc;AAE9B,QAAM,SAAuB,CAAC;AAE9B,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,IAAI,QAAQ,IAAI;AAClC,UAAM,WAAW,GAAG,QAAQ,GAAG,SAAS;AACxC,UAAM,UAAU,UAAU,QAAQ,QAAQ,OAAO;AAEjD,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO,QAAQ,QAAQ,EAAE,IAAI;AAAA,QAC3B,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,OAAO,YAAY,QAAQ,QAAQ,MAAM;AAAA,UACzC;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO,KAAK,WAAW,OAAO,KAAc,QAAkB;AAC5D,UAAI;AACF,cAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,YAAI,CAAC,UAAU,IAAI;AACjB,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,YAAI,KAAK,MAAM;AAAA,MACjB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,gBAAQ,MAAM,WAAW,QAAQ,IAAI,YAAY,GAAG;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,eAAe,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC1D,UAAM,cAAc,wBAAwB,OAAO;AACnD,UAAM,WAAW,IAAI;AAAA,MACnB,SAAS,IAAI,CAAC,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAClD;AACA,UAAM,iBAAiB,IAAI,mBAAmB,WAAW;AACzD,eAAW,WAAW,UAAU;AAC9B,qBAAe,SAAS,SAAS,IAAI,eAAe,CAAC;AAAA,IACvD;AACA,QAAI,IAAI,kBAAkB,QAAQ,gBAAgB,QAAW,QAAW,IAAI,CAAC;AAAA,EAC/E;AAEA,MAAI,IAAI,UAAU,MAAM;AACxB,QAAM,iBAAiB;AAAA,IACrB,eAAe,QAAQ,SAAS,cAAc;AAAA,EAChD;AACA,yBAAuB,KAAK,UAAU,OAAO;AAE7C,QAAM,aACJ,QAAQ,SAAS,KAAK,KAAK,KAAK,QAAQ,IAAI,aAAa,KAAK,KAAK;AACrE,QAAM,SACJ,QAAQ,SAAS,QAAQ,KAAK,KAAK,QAAQ,IAAI,cAAc,KAAK,KAAK;AACzE,QAAM,iBACJ,QAAQ,SAAS,gBAAgB,KAAK,KACtC,QAAQ,IAAI,eAAe,KAAK,KAChC,QAAQ,IAAI,yBAAyB,KAAK;AAC5C,QAAM,gBACJ,QAAQ,SAAS,eAAe,KAAK,KACrC,QAAQ,IAAI,iBAAiB,KAAK,MACjC,QAAQ,IAAI,wBACT,WAAW,QAAQ,IAAI,qBAAqB,KAC5C,OACJ;AAEF,yBAAuB,KAAK,UAAU,SAAS;AAAA,IAC7C;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,cAAc,UAAU,kBAAkB,eAAe;AAC3D,SAAK,iBAAiB;AAAA,MACpB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF,CAAC,EACE,KAAK,MAAM;AACV,4BAAsB,EAAE,IAAI,KAAK,CAAC;AAAA,IACpC,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,4BAAsB,EAAE,IAAI,OAAO,OAAO,QAAQ,CAAC;AACnD,cAAQ,KAAK,sCAAsC,GAAG;AAAA,IACxD,CAAC;AAAA,EACL;AAEA,SAAO;AACT;AAEO,SAAS,kBACd,UACA,SACuC;AACvC,SAAO,CAAC,QAAQ,mBAAmB,KAAK,UAAU,OAAO;AAC3D;;;AKpVO,SAAS,sBACd,UACA,MACQ;AACR,QAAM,OAAO,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,SAAS,KAAK,IAAI;AAAA,IAClB,gBAAgB,KAAK,WAAW;AAAA,IAChC;AAAA,IACA;AAAA,IACA,KAAK,KAAK,IAAI;AAAA,IACd;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AAEA,MAAI,KAAK,UAAU;AACjB,UAAM,KAAK,aAAa,KAAK,QAAQ,IAAI,EAAE;AAAA,EAC7C;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,WAAW,UAAU;AAC9B,UAAM,OAAO,GAAG,IAAI,UAAU,QAAQ,IAAI;AAC1C,UAAM,QAAQ,QAAQ,QAAQ,OAAO,WAAW,GAAG,IAC/C,QAAQ,QAAQ,SAChB,IAAI,QAAQ,QAAQ,MAAM;AAE9B,UAAM;AAAA,MACJ,SAAS,QAAQ,IAAI;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,gBAAgB,KAAK,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,MAC7F;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC9D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,KAAK;AAAA,QACZ,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,YAC5C;AAAA,YACA,MAAM,QAAQ,kCAAkC,WAAW,CAAC;AAAA,UAC9D,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}
+{"version":3,"sources":["../src/define.ts","../src/mount.ts","../src/base-url.ts","../src/gateway.ts","../src/gateway-auth.ts","../src/payto.ts","../src/status.ts","../src/skill.ts"],"sourcesContent":["import type {\n  AgentServiceConfig,\n  AgentServiceContext,\n  DefinedAgentService,\n  WaitUntilOptions,\n} from \"./types.js\";\n\nexport async function waitUntil<T>(options: WaitUntilOptions<T>): Promise<T> {\n  const intervalMs = options.intervalMs ?? 500;\n  const timeoutMs = options.timeoutMs ?? 60_000;\n  const started = Date.now();\n\n  for (;;) {\n    const value = await options.run();\n    if (options.completedWhen(value)) {\n      return value;\n    }\n    if (Date.now() - started >= timeoutMs) {\n      throw new Error(`waitUntil timed out after ${timeoutMs}ms`);\n    }\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function createContext(): AgentServiceContext {\n  return {\n    waitUntil,\n  };\n}\n\n/** Convert snake_case or camelCase service name to kebab-case path segment. */\nexport function toKebabCase(name: string): string {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1-$2\")\n    .replace(/_/g, \"-\")\n    .toLowerCase();\n}\n\nexport function defineAgentService<\n  TInput extends Record<string, unknown> = Record<string, unknown>,\n  TOutput extends Record<string, unknown> = Record<string, unknown>,\n>(\n  config: AgentServiceConfig<TInput, TOutput>,\n): DefinedAgentService<TInput, TOutput> {\n  if (!config.name?.trim()) {\n    throw new Error(\"defineAgentService: name is required\");\n  }\n  if (!config.execute) {\n    throw new Error(\"defineAgentService: execute is required\");\n  }\n\n  return {\n    ...config,\n    __forge: true,\n    path: toKebabCase(config.name),\n  };\n}\n","import type { Application, Request, Response, NextFunction, Router } from \"express\";\nimport { Router as createRouter } from \"express\";\nimport { paymentMiddleware, x402ResourceServer } from \"@x402/express\";\nimport type { Network } from \"@x402/express\";\nimport { HTTPFacilitatorClient } from \"@x402/core/server\";\nimport type { RoutesConfig } from \"@x402/core/server\";\nimport { ExactEvmScheme } from \"@x402/evm/exact/server\";\nimport {\n  PublicBaseUrlResolver,\n  resolveBaseUrlFromEnv,\n} from \"./base-url.js\";\nimport { createContext } from \"./define.js\";\nimport { heartbeatGateway } from \"./gateway.js\";\nimport {\n  getForgeApiKey,\n  requireForgeGateway,\n} from \"./gateway-auth.js\";\nimport { isZeroAddress, resolvePayTo } from \"./payto.js\";\nimport {\n  buildForgeSurfaceStatus,\n  buildWellKnownDocument,\n  recordHeartbeatResult,\n} from \"./status.js\";\nimport type {\n  DefinedAgentService,\n  InputSchema,\n  MountOptions,\n  SchemaFieldType,\n} from \"./types.js\";\n\n/** Base mainnet — settled via the public XPay facilitator (no API keys). */\nconst DEFAULT_NETWORK = \"eip155:8453\" as const satisfies Network;\n/** Open facilitator: Base mainnet + Sepolia, no API keys. https://github.com/xpaysh/xpay-x402 */\nconst DEFAULT_FACILITATOR_URL = \"https://facilitator.xpay.sh\";\n/** ClawCash gateway — override with GATEWAY_URL or options.gateway.url. */\nconst DEFAULT_GATEWAY_URL = \"https://gateway.clawca.sh\";\n\nfunction asNetwork(value: string | undefined): Network {\n  return (value ?? DEFAULT_NETWORK) as Network;\n}\n\nfunction createFacilitatorClient(options: MountOptions): HTTPFacilitatorClient {\n  return new HTTPFacilitatorClient({\n    url: options.facilitatorUrl ?? DEFAULT_FACILITATOR_URL,\n    createAuthHeaders: options.createAuthHeaders,\n  });\n}\n\nfunction validateInput(\n  body: unknown,\n  schema: InputSchema,\n): { ok: true; value: Record<string, unknown> } | { ok: false; error: string } {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return { ok: false, error: \"Request body must be a JSON object\" };\n  }\n\n  const input = body as Record<string, unknown>;\n  const value: Record<string, unknown> = {};\n\n  for (const [key, type] of Object.entries(schema)) {\n    if (!(key in input) || input[key] === undefined || input[key] === null) {\n      return { ok: false, error: `Missing required field: ${key}` };\n    }\n    const err = checkType(key, input[key], type);\n    if (err) return { ok: false, error: err };\n    value[key] = input[key];\n  }\n\n  return { ok: true, value };\n}\n\nfunction checkType(key: string, value: unknown, type: SchemaFieldType): string | null {\n  switch (type) {\n    case \"string\":\n    case \"url\":\n      if (typeof value !== \"string\" || !value.trim()) {\n        return `Field ${key} must be a non-empty string`;\n      }\n      if (type === \"url\") {\n        try {\n          new URL(value);\n        } catch {\n          return `Field ${key} must be a valid URL`;\n        }\n      }\n      return null;\n    case \"number\":\n      if (typeof value !== \"number\" || Number.isNaN(value)) {\n        return `Field ${key} must be a number`;\n      }\n      return null;\n    case \"boolean\":\n      if (typeof value !== \"boolean\") {\n        return `Field ${key} must be a boolean`;\n      }\n      return null;\n    default:\n      return null;\n  }\n}\n\nfunction formatPrice(amount: string): string {\n  const normalized = amount.startsWith(\"$\") ? amount.slice(1) : amount;\n  return `$${normalized}`;\n}\n\nfunction mountFulfillmentRouter(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): void {\n  const secret = getForgeApiKey(options.gateway?.registerSecret);\n  if (!secret) {\n    console.warn(\n      \"[forge] /forge/fulfill not mounted — set FORGE_API_KEY (from Forge dashboard, min 16 chars) so the gateway can fulfill after payment\",\n    );\n    return;\n  }\n\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n  const gate = requireForgeGateway(secret);\n\n  for (const service of services) {\n    router.post(\n      `/${service.path}`,\n      gate,\n      async (req: Request, res: Response) => {\n        try {\n          const validated = validateInput(req.body, service.input);\n          if (!validated.ok) {\n            res.status(400).json({ error: validated.error });\n            return;\n          }\n          const output = await service.execute(validated.value, context);\n          res.json(output);\n        } catch (err) {\n          const message = err instanceof Error ? err.message : \"Internal error\";\n          console.error(`[forge] fulfill ${service.name} failed:`, err);\n          res.status(500).json({ error: message });\n        }\n      },\n    );\n  }\n\n  app.use(fulfillPath, router);\n  console.log(\n    `[forge] fulfillment mounted at POST ${fulfillPath}/{action} (gateway secret)`,\n  );\n}\n\nfunction mountForgeStatusRoutes(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n  opts: {\n    fulfillMounted: boolean;\n    fulfillPath: string;\n    agentBasePath: string;\n    handle: string | null;\n    resolver: PublicBaseUrlResolver;\n    gatewayUrl: string | null;\n  },\n): void {\n  const getStatus = () =>\n    buildForgeSurfaceStatus({\n      handle: opts.handle,\n      publicBaseUrl: opts.resolver.get(),\n      gatewayUrl: opts.gatewayUrl,\n      fulfillMounted: opts.fulfillMounted,\n      fulfillPath: opts.fulfillPath,\n      agentBasePath: opts.agentBasePath,\n      skipPayment: Boolean(options.skipPayment),\n      actions: services.map((s) => ({\n        name: s.name,\n        path: s.path,\n        price: s.payment.amount,\n      })),\n    });\n\n  app.get(\"/forge/health\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    const status = getStatus();\n    res.json({\n      ok: true,\n      forge: true as const,\n      ready: status.ready,\n      handle: status.handle,\n      version: status.version,\n      // Per-boot nonce so this instance can self-verify an inferred base URL.\n      instance: opts.resolver.instanceNonce,\n      actions: status.actions.map((a) => a.name),\n    });\n  });\n\n  app.get(\"/forge/status\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    const status = getStatus();\n    res.status(status.ready ? 200 : 503).json(status);\n  });\n\n  app.get(\"/.well-known/clawcash.json\", (req: Request, res: Response) => {\n    opts.resolver.considerRequest(req);\n    res.json(buildWellKnownDocument(getStatus()));\n  });\n\n  console.log(\n    \"[forge] liveliness: GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json\",\n  );\n}\n\n/**\n * Mount Forge agent services on an Express app.\n * - GET /forge/health, GET /forge/status, GET /.well-known/clawcash.json — liveliness\n * - POST {basePath}/{kebab-name} — optional public x402 agent surface\n * - POST /forge/fulfill/{kebab-name} — private gateway fulfillment after payment\n *\n * payTo resolves automatically: PAY_TO env (optional) → Forge API → baked fallback.\n */\nexport async function mountAgentServices(\n  app: Application,\n  services: DefinedAgentService[],\n  options: MountOptions,\n): Promise<Router> {\n  let payTo = \"\";\n  if (!options.skipPayment) {\n    const fallback =\n      options.payToFallback?.trim() || options.payTo?.trim() || \"\";\n    payTo = await resolvePayTo({\n      fallback,\n      payTo: options.payTo,\n      forge: options.forge,\n    });\n    if (isZeroAddress(payTo)) {\n      throw new Error(\n        \"mountAgentServices: resolved payTo is the zero address. Re-run Forge to provision a wallet.\",\n      );\n    }\n  }\n\n  const basePath = (options.basePath ?? \"/agent\").replace(/\\/$/, \"\") || \"/agent\";\n  const fulfillPath =\n    (options.fulfillPath ?? \"/forge/fulfill\").replace(/\\/$/, \"\") ||\n    \"/forge/fulfill\";\n  const router = createRouter();\n  const context = createContext();\n\n  const routes: RoutesConfig = {};\n\n  for (const service of services) {\n    const routePath = `/${service.path}`;\n    const fullPath = `${basePath}${routePath}`;\n    const network = asNetwork(service.payment.network);\n\n    if (!options.skipPayment) {\n      routes[`POST ${fullPath}`] = {\n        accepts: {\n          scheme: \"exact\",\n          price: formatPrice(service.payment.amount),\n          network,\n          payTo,\n        },\n        description: service.description,\n        mimeType: \"application/json\",\n      };\n    }\n\n    router.post(routePath, async (req: Request, res: Response) => {\n      try {\n        const validated = validateInput(req.body, service.input);\n        if (!validated.ok) {\n          res.status(400).json({ error: validated.error });\n          return;\n        }\n\n        const output = await service.execute(validated.value, context);\n        res.json(output);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : \"Internal error\";\n        console.error(`[forge] ${service.name} failed:`, err);\n        res.status(500).json({ error: message });\n      }\n    });\n  }\n\n  if (!options.skipPayment && Object.keys(routes).length > 0) {\n    const facilitator = createFacilitatorClient(options);\n    const networks = new Set(\n      services.map((s) => asNetwork(s.payment.network)),\n    );\n    const resourceServer = new x402ResourceServer(facilitator);\n    for (const network of networks) {\n      resourceServer.register(network, new ExactEvmScheme());\n    }\n    app.use(paymentMiddleware(routes, resourceServer, undefined, undefined, true));\n  }\n\n  app.use(basePath, router);\n  const fulfillMounted = Boolean(\n    getForgeApiKey(options.gateway?.registerSecret),\n  );\n  mountFulfillmentRouter(app, services, options);\n\n  const gatewayUrl =\n    options.gateway?.url?.trim() ||\n    process.env.GATEWAY_URL?.trim() ||\n    DEFAULT_GATEWAY_URL;\n  const handle =\n    options.gateway?.handle?.trim() || process.env.FORGE_HANDLE?.trim() || null;\n  const registerSecret =\n    options.gateway?.registerSecret?.trim() ||\n    process.env.FORGE_API_KEY?.trim() ||\n    process.env.GATEWAY_REGISTER_SECRET?.trim();\n\n  const sendHeartbeat = (baseUrl: string) => {\n    if (!handle || !registerSecret) return;\n    void heartbeatGateway({\n      gatewayUrl,\n      handle,\n      baseUrl,\n      registerSecret,\n    })\n      .then(() => {\n        recordHeartbeatResult({ ok: true });\n      })\n      .catch((err) => {\n        const message = err instanceof Error ? err.message : String(err);\n        recordHeartbeatResult({ ok: false, error: message });\n        console.warn(\"[forge] gateway heartbeat skipped:\", err);\n      });\n  };\n\n  const resolver = new PublicBaseUrlResolver({\n    initial: resolveBaseUrlFromEnv(options.gateway?.publicBaseUrl),\n    // Base URL learned late (inferred from the first probe): heartbeat now.\n    onResolved: sendHeartbeat,\n  });\n\n  mountForgeStatusRoutes(app, services, options, {\n    fulfillMounted,\n    fulfillPath,\n    agentBasePath: basePath,\n    handle,\n    resolver,\n    gatewayUrl,\n  });\n\n  const bootBaseUrl = resolver.get();\n  if (bootBaseUrl) {\n    sendHeartbeat(bootBaseUrl);\n  }\n\n  return router;\n}\n\nexport function createForgeRouter(\n  services: DefinedAgentService[],\n  options: MountOptions,\n): (app: Application) => Promise<Router> {\n  return (app) => mountAgentServices(app, services, options);\n}\n\nexport function forgeErrorHandler(\n  err: unknown,\n  _req: Request,\n  res: Response,\n  _next: NextFunction,\n): void {\n  const message = err instanceof Error ? err.message : \"Internal error\";\n  res.status(500).json({ error: message });\n}\n","import { randomBytes } from \"node:crypto\";\nimport type { Request } from \"express\";\n\n/**\n * Public base URL resolution, in trust order:\n * 1. PUBLIC_BASE_URL env — explicit override.\n * 2. Platform-provided vars (Railway, Render, Vercel, Fly, Heroku) — set by\n *    the host, not by request input, so safe to trust as-is.\n * 3. Lazy inference from the first inbound request to the Forge surface\n *    (X-Forwarded-Proto + Host). Host is attacker-controlled, so a candidate\n *    is only accepted after self-verification: we fetch our own\n *    /forge/health at the candidate URL and check it returns this\n *    instance's boot nonce.\n */\n\nexport function resolveBaseUrlFromEnv(explicit?: string): string | null {\n  const fromExplicit = explicit?.trim();\n  if (fromExplicit) return stripSlash(fromExplicit);\n\n  const fromEnv = process.env.PUBLIC_BASE_URL?.trim();\n  if (fromEnv) return stripSlash(fromEnv);\n\n  const railway = process.env.RAILWAY_PUBLIC_DOMAIN?.trim();\n  if (railway) return `https://${stripSlash(railway)}`;\n\n  const render = process.env.RENDER_EXTERNAL_URL?.trim();\n  if (render) return stripSlash(render);\n\n  const vercel =\n    process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim() ||\n    process.env.VERCEL_URL?.trim();\n  if (vercel) return `https://${stripSlash(vercel)}`;\n\n  const fly = process.env.FLY_APP_NAME?.trim();\n  if (fly) return `https://${fly}.fly.dev`;\n\n  const heroku = process.env.HEROKU_APP_NAME?.trim();\n  if (heroku) return `https://${heroku}.herokuapp.com`;\n\n  return null;\n}\n\nfunction stripSlash(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nconst MAX_VERIFY_ATTEMPTS = 5;\nconst VERIFY_TIMEOUT_MS = 3000;\n\nexport class PublicBaseUrlResolver {\n  /** Per-boot nonce, echoed by /forge/health for self-verification. */\n  readonly instanceNonce: string;\n\n  private resolved: string | null;\n  private verifying = false;\n  private rejected = new Set<string>();\n  private attempts = 0;\n  private onResolved: ((baseUrl: string) => void) | null;\n\n  constructor(opts: {\n    /** URL already known from env/platform vars (trusted, no verification). */\n    initial: string | null;\n    /** Called once when a base URL first becomes known via inference. */\n    onResolved?: (baseUrl: string) => void;\n  }) {\n    this.instanceNonce = randomBytes(16).toString(\"hex\");\n    this.resolved = opts.initial;\n    this.onResolved = opts.onResolved ?? null;\n  }\n\n  get(): string | null {\n    return this.resolved;\n  }\n\n  /**\n   * Feed an inbound Forge-surface request. No-op once resolved. Kicks off\n   * async self-verification of the candidate URL derived from the request.\n   */\n  considerRequest(req: Request): void {\n    if (this.resolved || this.verifying) return;\n    if (this.attempts >= MAX_VERIFY_ATTEMPTS) return;\n\n    const candidate = candidateFromRequest(req);\n    if (!candidate || this.rejected.has(candidate)) return;\n\n    this.verifying = true;\n    this.attempts += 1;\n    void this.verify(candidate)\n      .then((ok) => {\n        if (ok) {\n          this.resolved = candidate;\n          console.log(`[forge] public base URL inferred and verified: ${candidate}`);\n          this.onResolved?.(candidate);\n        } else {\n          this.rejected.add(candidate);\n          console.warn(\n            `[forge] candidate base URL failed self-verification, ignoring: ${candidate}`,\n          );\n        }\n      })\n      .finally(() => {\n        this.verifying = false;\n      });\n  }\n\n  /** Fetch our own /forge/health at the candidate and match the boot nonce. */\n  private async verify(candidate: string): Promise<boolean> {\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), VERIFY_TIMEOUT_MS);\n      const res = await fetch(`${candidate}/forge/health`, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n        redirect: \"manual\",\n      });\n      clearTimeout(timer);\n      if (!res.ok) return false;\n      const json = (await res.json()) as { instance?: string };\n      return json.instance === this.instanceNonce;\n    } catch {\n      return false;\n    }\n  }\n}\n\nfunction candidateFromRequest(req: Request): string | null {\n  const host = firstHeaderValue(req.headers[\"x-forwarded-host\"]) ?? req.headers.host;\n  if (!host || !isValidHost(host)) return null;\n\n  const proto =\n    firstHeaderValue(req.headers[\"x-forwarded-proto\"]) ??\n    (req.protocol || \"http\");\n  if (proto !== \"https\" && proto !== \"http\") return null;\n\n  const isLocal = /^(localhost|127\\.0\\.0\\.1|\\[::1\\])(:\\d+)?$/i.test(host);\n  // A deployed merchant is always behind HTTPS; only allow http locally.\n  if (proto === \"http\" && !isLocal) return null;\n\n  return `${proto}://${host}`;\n}\n\nfunction firstHeaderValue(value: string | string[] | undefined): string | null {\n  const raw = Array.isArray(value) ? value[0] : value;\n  const first = raw?.split(\",\")[0]?.trim();\n  return first || null;\n}\n\nfunction isValidHost(host: string): boolean {\n  // hostname with optional port; rejects paths, spaces, credentials\n  return /^[a-z0-9.-]+(:\\d{1,5})?$/i.test(host) || /^\\[[0-9a-f:]+\\](:\\d{1,5})?$/i.test(host);\n}\n","/**\n * Notify ClawCash gateway of this merchant's live public base URL.\n * Full action registration still happens from Forge \"Go live\".\n */\nexport async function heartbeatGateway(opts: {\n  gatewayUrl: string;\n  handle: string;\n  baseUrl: string;\n  registerSecret: string;\n}): Promise<void> {\n  const gateway = opts.gatewayUrl.replace(/\\/$/, \"\");\n  const res = await fetch(`${gateway}/register/heartbeat`, {\n    method: \"POST\",\n    headers: {\n      \"content-type\": \"application/json\",\n      authorization: `Bearer ${opts.registerSecret}`,\n    },\n    body: JSON.stringify({\n      handle: opts.handle.trim().toLowerCase(),\n      baseUrl: opts.baseUrl.replace(/\\/$/, \"\"),\n    }),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(\n      `gateway heartbeat failed (${res.status}): ${text.slice(0, 240)}`,\n    );\n  }\n}\n","import type { NextFunction, Request, Response } from \"express\";\n\n/**\n * Per-project Forge API key for gateway → merchant fulfillment.\n * Merchants set FORGE_API_KEY from the Forge dashboard (never the shared\n * GATEWAY_REGISTER_SECRET — that is Forge↔gateway platform auth only).\n *\n * GATEWAY_REGISTER_SECRET is accepted as a deprecated fallback for older deploys.\n */\nexport function getForgeApiKey(explicit?: string | null): string | null {\n  const value =\n    (explicit ?? process.env.FORGE_API_KEY ?? process.env.GATEWAY_REGISTER_SECRET)?.trim();\n  if (!value || value.length < 16) return null;\n  return value;\n}\n\n/** @deprecated Use getForgeApiKey */\nexport function getForgeGatewaySecret(\n  explicit?: string | null,\n): string | null {\n  return getForgeApiKey(explicit);\n}\n\nexport function isForgeGatewayRequest(\n  req: Request,\n  secret?: string | null,\n): boolean {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return false;\n  const header = req.header(\"authorization\") ?? \"\";\n  const bearer = header.toLowerCase().startsWith(\"bearer \")\n    ? header.slice(7).trim()\n    : \"\";\n  const alt =\n    req.header(\"x-forge-api-key\")?.trim() ||\n    req.header(\"x-clawcash-gateway\")?.trim() ||\n    \"\";\n  return bearer === expected || alt === expected;\n}\n\n/** Synthetic user id for DB rows created by gateway-driven fulfillment. */\nexport const FORGE_GATEWAY_USER_ID = \"forge_gateway_agent\";\n\nexport function requireForgeGateway(\n  secret?: string | null,\n): (req: Request, res: Response, next: NextFunction) => void {\n  return (req, res, next) => {\n    if (!isForgeGatewayRequest(req, secret)) {\n      res.status(401).json({\n        error:\n          \"Unauthorized — Forge API key required (FORGE_API_KEY from Forge dashboard)\",\n      });\n      return;\n    }\n    next();\n  };\n}\n\n/** Headers merchant execute() should send on loopback calls during fulfillment. */\nexport function forgeGatewayLoopbackHeaders(\n  secret?: string | null,\n): Record<string, string> {\n  const expected = getForgeApiKey(secret);\n  if (!expected) return {};\n  return {\n    Authorization: `Bearer ${expected}`,\n    \"X-Forge-Api-Key\": expected,\n  };\n}\n","import type { ForgePayToSource } from \"./types.js\";\n\nexport type { ForgePayToSource };\n\nconst ZERO = /^0x0{40}$/i;\n\nexport function isZeroAddress(address: string | undefined | null): boolean {\n  if (!address) return true;\n  return ZERO.test(address.trim());\n}\n\nfunction normalizeBaseUrl(url: string): string {\n  return url.replace(/\\/$/, \"\");\n}\n\nfunction pickForgeBaseUrl(source?: ForgePayToSource): string | null {\n  const fromEnv = process.env.FORGE_URL?.trim();\n  if (fromEnv) return normalizeBaseUrl(fromEnv);\n\n  const fromOpts = source?.baseUrl?.trim();\n  if (!fromOpts) return null;\n\n  const normalized = normalizeBaseUrl(fromOpts);\n  // Never call a laptop Forge from a deployed merchant app.\n  if (\n    /localhost|127\\.0\\.0\\.1/i.test(normalized) &&\n    process.env.NODE_ENV === \"production\"\n  ) {\n    return null;\n  }\n  return normalized;\n}\n\n/**\n * Resolve merchant payTo with minimal host config:\n * 1. `PAY_TO` env (optional override)\n * 2. Live address from Forge public API (when reachable)\n * 3. Baked-in fallback from the Forge PR\n */\nexport async function resolvePayTo(opts: {\n  /** Baked-in address from Forge codegen (required fallback). */\n  fallback: string;\n  /** Optional explicit override (usually process.env.PAY_TO). */\n  payTo?: string;\n  forge?: ForgePayToSource;\n  /** Fetch timeout ms. Defaults to 2500. */\n  timeoutMs?: number;\n}): Promise<string> {\n  const envOverride = process.env.PAY_TO?.trim();\n  if (envOverride && !isZeroAddress(envOverride)) {\n    return envOverride;\n  }\n\n  const explicit = opts.payTo?.trim();\n  if (explicit && !isZeroAddress(explicit) && !opts.forge) {\n    return explicit;\n  }\n\n  const baseUrl = pickForgeBaseUrl(opts.forge);\n  if (baseUrl && opts.forge) {\n    const url = `${baseUrl}/api/public/pay-to/${encodeURIComponent(opts.forge.owner)}/${encodeURIComponent(opts.forge.repo)}`;\n    try {\n      const controller = new AbortController();\n      const timer = setTimeout(\n        () => controller.abort(),\n        opts.timeoutMs ?? 2500,\n      );\n      const res = await fetch(url, {\n        signal: controller.signal,\n        headers: { accept: \"application/json\" },\n      });\n      clearTimeout(timer);\n      if (res.ok) {\n        const json = (await res.json()) as { address?: string };\n        if (json.address && !isZeroAddress(json.address)) {\n          return json.address.trim();\n        }\n      }\n    } catch (err) {\n      console.warn(\"[forge] live payTo fetch failed, using fallback:\", err);\n    }\n  }\n\n  if (explicit && !isZeroAddress(explicit)) return explicit;\n  if (opts.fallback && !isZeroAddress(opts.fallback)) return opts.fallback;\n\n  throw new Error(\n    \"resolvePayTo: no usable address (set Forge wallet / PAY_TO, or re-run Forge PR)\",\n  );\n}\n","/**\n * Merchant-side Forge surface status — public probes for deploy / go-live checks.\n */\n\nexport type ForgeHeartbeatState = {\n  attempted: boolean;\n  ok: boolean | null;\n  at: string | null;\n  error: string | null;\n};\n\nexport type ForgeSurfaceStatus = {\n  ok: boolean;\n  forge: true;\n  version: string;\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  /** True when FORGE_API_KEY is set so /forge/fulfill is mounted. */\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n  /** Env + fulfill ready — merchant can accept gateway fulfillment. */\n  ready: boolean;\n  heartbeat: ForgeHeartbeatState;\n  endpoints: {\n    health: string;\n    status: string;\n    wellKnown: string;\n    fulfill: string;\n    agent: string;\n  };\n};\n\nconst PACKAGE_VERSION = \"0.1.8\";\n\nlet lastHeartbeat: ForgeHeartbeatState = {\n  attempted: false,\n  ok: null,\n  at: null,\n  error: null,\n};\n\nexport function recordHeartbeatResult(\n  result: { ok: true } | { ok: false; error: string },\n): void {\n  lastHeartbeat = {\n    attempted: true,\n    ok: result.ok,\n    at: new Date().toISOString(),\n    error: result.ok ? null : result.error,\n  };\n}\n\nexport function getLastHeartbeat(): ForgeHeartbeatState {\n  return { ...lastHeartbeat };\n}\n\nexport function buildForgeSurfaceStatus(opts: {\n  handle: string | null;\n  publicBaseUrl: string | null;\n  gatewayUrl: string | null;\n  fulfillMounted: boolean;\n  fulfillPath: string;\n  agentBasePath: string;\n  skipPayment: boolean;\n  actions: Array<{ name: string; path: string; price: string }>;\n}): ForgeSurfaceStatus {\n  const fulfillPath = opts.fulfillPath.replace(/\\/$/, \"\") || \"/forge/fulfill\";\n  const agentBasePath = opts.agentBasePath.replace(/\\/$/, \"\") || \"/agent\";\n  const ready =\n    opts.fulfillMounted &&\n    Boolean(opts.publicBaseUrl) &&\n    opts.actions.length > 0;\n\n  return {\n    ok: true,\n    forge: true,\n    version: PACKAGE_VERSION,\n    handle: opts.handle,\n    publicBaseUrl: opts.publicBaseUrl,\n    gatewayUrl: opts.gatewayUrl,\n    fulfillMounted: opts.fulfillMounted,\n    fulfillPath,\n    agentBasePath,\n    skipPayment: opts.skipPayment,\n    actions: opts.actions,\n    ready,\n    heartbeat: getLastHeartbeat(),\n    endpoints: {\n      health: \"/forge/health\",\n      status: \"/forge/status\",\n      wellKnown: \"/.well-known/clawcash.json\",\n      fulfill: fulfillPath,\n      agent: agentBasePath,\n    },\n  };\n}\n\nexport function buildWellKnownDocument(status: ForgeSurfaceStatus): {\n  forge: true;\n  version: string;\n  health: string;\n  status: string;\n  handle: string | null;\n  ready: boolean;\n} {\n  return {\n    forge: true,\n    version: status.version,\n    health: status.endpoints.health,\n    status: status.endpoints.status,\n    handle: status.handle,\n    ready: status.ready,\n  };\n}\n\nexport function forgeSdkVersion(): string {\n  return PACKAGE_VERSION;\n}\n","import type { DefinedAgentService, SkillMeta } from \"./types.js\";\n\n/**\n * Generate a SKILL.md document for agents from defined Forge services.\n */\nexport function generateSkillMarkdown(\n  services: DefinedAgentService[],\n  meta: SkillMeta,\n): string {\n  const base = meta.baseUrl.replace(/\\/$/, \"\");\n  const lines: string[] = [\n    `---`,\n    `name: ${meta.name}`,\n    `description: ${meta.description}`,\n    `---`,\n    ``,\n    `# ${meta.name}`,\n    ``,\n    meta.description,\n    ``,\n  ];\n\n  if (meta.homepage) {\n    lines.push(`Homepage: ${meta.homepage}`, ``);\n  }\n\n  lines.push(\n    `## How to use`,\n    ``,\n    `1. Read this skill.`,\n    `2. Call the agent endpoint with a JSON body matching the input schema.`,\n    `3. If you receive HTTP 402, pay via x402 (USDC) and retry with the payment header.`,\n    `4. Use the returned output fields.`,\n    ``,\n    `## Services`,\n    ``,\n  );\n\n  for (const service of services) {\n    const path = `${base}/agent/${service.path}`;\n    const price = service.payment.amount.startsWith(\"$\")\n      ? service.payment.amount\n      : `$${service.payment.amount}`;\n\n    lines.push(\n      `### \\`${service.name}\\``,\n      ``,\n      service.description,\n      ``,\n      `- **Method:** \\`POST\\``,\n      `- **URL:** \\`${path}\\``,\n      `- **Price:** ${price} ${service.payment.currency} via ${service.payment.protocols.join(\", \")}`,\n      ``,\n      `**Input**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Output**`,\n      ``,\n      \"```json\",\n      JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.output).map(([k, t]) => [k, `<${t}>`]),\n        ),\n        null,\n        2,\n      ),\n      \"```\",\n      ``,\n      `**Example**`,\n      ``,\n      \"```bash\",\n      `curl -X POST ${path} \\\\`,\n      `  -H \"Content-Type: application/json\" \\\\`,\n      `  -d '${JSON.stringify(\n        Object.fromEntries(\n          Object.entries(service.input).map(([k, t]) => [\n            k,\n            t === \"url\" ? \"https://example.com/image.png\" : `example-${k}`,\n          ]),\n        ),\n      )}'`,\n      \"```\",\n      ``,\n    );\n  }\n\n  return lines.join(\"\\n\");\n}\n"],"mappings":";AAOA,eAAsB,UAAa,SAA0C;AAC3E,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,UAAU,KAAK,IAAI;AAEzB,aAAS;AACP,UAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,QAAI,QAAQ,cAAc,KAAK,GAAG;AAChC,aAAO;AAAA,IACT;AACA,QAAI,KAAK,IAAI,IAAI,WAAW,WAAW;AACrC,YAAM,IAAI,MAAM,6BAA6B,SAAS,IAAI;AAAA,IAC5D;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,gBAAqC;AACnD,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,SAAS,YAAY,MAAsB;AAChD,SAAO,KACJ,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,MAAM,GAAG,EACjB,YAAY;AACjB;AAEO,SAAS,mBAId,QACsC;AACtC,MAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,IACT,MAAM,YAAY,OAAO,IAAI;AAAA,EAC/B;AACF;;;ACvDA,SAAS,UAAU,oBAAoB;AACvC,SAAS,mBAAmB,0BAA0B;AAEtD,SAAS,6BAA6B;AAEtC,SAAS,sBAAsB;;;ACN/B,SAAS,mBAAmB;AAerB,SAAS,sBAAsB,UAAkC;AACtE,QAAM,eAAe,UAAU,KAAK;AACpC,MAAI,aAAc,QAAO,WAAW,YAAY;AAEhD,QAAM,UAAU,QAAQ,IAAI,iBAAiB,KAAK;AAClD,MAAI,QAAS,QAAO,WAAW,OAAO;AAEtC,QAAM,UAAU,QAAQ,IAAI,uBAAuB,KAAK;AACxD,MAAI,QAAS,QAAO,WAAW,WAAW,OAAO,CAAC;AAElD,QAAM,SAAS,QAAQ,IAAI,qBAAqB,KAAK;AACrD,MAAI,OAAQ,QAAO,WAAW,MAAM;AAEpC,QAAM,SACJ,QAAQ,IAAI,+BAA+B,KAAK,KAChD,QAAQ,IAAI,YAAY,KAAK;AAC/B,MAAI,OAAQ,QAAO,WAAW,WAAW,MAAM,CAAC;AAEhD,QAAM,MAAM,QAAQ,IAAI,cAAc,KAAK;AAC3C,MAAI,IAAK,QAAO,WAAW,GAAG;AAE9B,QAAM,SAAS,QAAQ,IAAI,iBAAiB,KAAK;AACjD,MAAI,OAAQ,QAAO,WAAW,MAAM;AAEpC,SAAO;AACT;AAEA,SAAS,WAAW,KAAqB;AACvC,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAEnB,IAAM,wBAAN,MAA4B;AAAA;AAAA,EAExB;AAAA,EAED;AAAA,EACA,YAAY;AAAA,EACZ,WAAW,oBAAI,IAAY;AAAA,EAC3B,WAAW;AAAA,EACX;AAAA,EAER,YAAY,MAKT;AACD,SAAK,gBAAgB,YAAY,EAAE,EAAE,SAAS,KAAK;AACnD,SAAK,WAAW,KAAK;AACrB,SAAK,aAAa,KAAK,cAAc;AAAA,EACvC;AAAA,EAEA,MAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAAgB,KAAoB;AAClC,QAAI,KAAK,YAAY,KAAK,UAAW;AACrC,QAAI,KAAK,YAAY,oBAAqB;AAE1C,UAAM,YAAY,qBAAqB,GAAG;AAC1C,QAAI,CAAC,aAAa,KAAK,SAAS,IAAI,SAAS,EAAG;AAEhD,SAAK,YAAY;AACjB,SAAK,YAAY;AACjB,SAAK,KAAK,OAAO,SAAS,EACvB,KAAK,CAAC,OAAO;AACZ,UAAI,IAAI;AACN,aAAK,WAAW;AAChB,gBAAQ,IAAI,kDAAkD,SAAS,EAAE;AACzE,aAAK,aAAa,SAAS;AAAA,MAC7B,OAAO;AACL,aAAK,SAAS,IAAI,SAAS;AAC3B,gBAAQ;AAAA,UACN,kEAAkE,SAAS;AAAA,QAC7E;AAAA,MACF;AAAA,IACF,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,YAAY;AAAA,IACnB,CAAC;AAAA,EACL;AAAA;AAAA,EAGA,MAAc,OAAO,WAAqC;AACxD,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,iBAAiB;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,SAAS,iBAAiB;AAAA,QACnD,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,QACtC,UAAU;AAAA,MACZ,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK,aAAa,KAAK;AAAA,IAChC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,KAA6B;AACzD,QAAM,OAAO,iBAAiB,IAAI,QAAQ,kBAAkB,CAAC,KAAK,IAAI,QAAQ;AAC9E,MAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAG,QAAO;AAExC,QAAM,QACJ,iBAAiB,IAAI,QAAQ,mBAAmB,CAAC,MAChD,IAAI,YAAY;AACnB,MAAI,UAAU,WAAW,UAAU,OAAQ,QAAO;AAElD,QAAM,UAAU,6CAA6C,KAAK,IAAI;AAEtE,MAAI,UAAU,UAAU,CAAC,QAAS,QAAO;AAEzC,SAAO,GAAG,KAAK,MAAM,IAAI;AAC3B;AAEA,SAAS,iBAAiB,OAAqD;AAC7E,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AACvC,SAAO,SAAS;AAClB;AAEA,SAAS,YAAY,MAAuB;AAE1C,SAAO,4BAA4B,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI;AAC3F;;;AClJA,eAAsB,iBAAiB,MAKrB;AAChB,QAAM,UAAU,KAAK,WAAW,QAAQ,OAAO,EAAE;AACjD,QAAM,MAAM,MAAM,MAAM,GAAG,OAAO,uBAAuB;AAAA,IACvD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,KAAK,cAAc;AAAA,IAC9C;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,KAAK,OAAO,KAAK,EAAE,YAAY;AAAA,MACvC,SAAS,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAAA,IACzC,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI;AAAA,MACR,6BAA6B,IAAI,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,IACjE;AAAA,EACF;AACF;;;ACnBO,SAAS,eAAe,UAAyC;AACtE,QAAM,SACH,YAAY,QAAQ,IAAI,iBAAiB,QAAQ,IAAI,0BAA0B,KAAK;AACvF,MAAI,CAAC,SAAS,MAAM,SAAS,GAAI,QAAO;AACxC,SAAO;AACT;AAGO,SAAS,sBACd,UACe;AACf,SAAO,eAAe,QAAQ;AAChC;AAEO,SAAS,sBACd,KACA,QACS;AACT,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,SAAS,IAAI,OAAO,eAAe,KAAK;AAC9C,QAAM,SAAS,OAAO,YAAY,EAAE,WAAW,SAAS,IACpD,OAAO,MAAM,CAAC,EAAE,KAAK,IACrB;AACJ,QAAM,MACJ,IAAI,OAAO,iBAAiB,GAAG,KAAK,KACpC,IAAI,OAAO,oBAAoB,GAAG,KAAK,KACvC;AACF,SAAO,WAAW,YAAY,QAAQ;AACxC;AAGO,IAAM,wBAAwB;AAE9B,SAAS,oBACd,QAC2D;AAC3D,SAAO,CAAC,KAAK,KAAK,SAAS;AACzB,QAAI,CAAC,sBAAsB,KAAK,MAAM,GAAG;AACvC,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OACE;AAAA,MACJ,CAAC;AACD;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAGO,SAAS,4BACd,QACwB;AACxB,QAAM,WAAW,eAAe,MAAM;AACtC,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,SAAO;AAAA,IACL,eAAe,UAAU,QAAQ;AAAA,IACjC,mBAAmB;AAAA,EACrB;AACF;;;AChEA,IAAM,OAAO;AAEN,SAAS,cAAc,SAA6C;AACzE,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,KAAK,QAAQ,KAAK,CAAC;AACjC;AAEA,SAAS,iBAAiB,KAAqB;AAC7C,SAAO,IAAI,QAAQ,OAAO,EAAE;AAC9B;AAEA,SAAS,iBAAiB,QAA0C;AAClE,QAAM,UAAU,QAAQ,IAAI,WAAW,KAAK;AAC5C,MAAI,QAAS,QAAO,iBAAiB,OAAO;AAE5C,QAAM,WAAW,QAAQ,SAAS,KAAK;AACvC,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,aAAa,iBAAiB,QAAQ;AAE5C,MACE,0BAA0B,KAAK,UAAU,KACzC,QAAQ,IAAI,aAAa,cACzB;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAQA,eAAsB,aAAa,MAQf;AAClB,QAAM,cAAc,QAAQ,IAAI,QAAQ,KAAK;AAC7C,MAAI,eAAe,CAAC,cAAc,WAAW,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,OAAO,KAAK;AAClC,MAAI,YAAY,CAAC,cAAc,QAAQ,KAAK,CAAC,KAAK,OAAO;AACvD,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,iBAAiB,KAAK,KAAK;AAC3C,MAAI,WAAW,KAAK,OAAO;AACzB,UAAM,MAAM,GAAG,OAAO,sBAAsB,mBAAmB,KAAK,MAAM,KAAK,CAAC,IAAI,mBAAmB,KAAK,MAAM,IAAI,CAAC;AACvH,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ;AAAA,QACZ,MAAM,WAAW,MAAM;AAAA,QACvB,KAAK,aAAa;AAAA,MACpB;AACA,YAAM,MAAM,MAAM,MAAM,KAAK;AAAA,QAC3B,QAAQ,WAAW;AAAA,QACnB,SAAS,EAAE,QAAQ,mBAAmB;AAAA,MACxC,CAAC;AACD,mBAAa,KAAK;AAClB,UAAI,IAAI,IAAI;AACV,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,YAAI,KAAK,WAAW,CAAC,cAAc,KAAK,OAAO,GAAG;AAChD,iBAAO,KAAK,QAAQ,KAAK;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,KAAK,oDAAoD,GAAG;AAAA,IACtE;AAAA,EACF;AAEA,MAAI,YAAY,CAAC,cAAc,QAAQ,EAAG,QAAO;AACjD,MAAI,KAAK,YAAY,CAAC,cAAc,KAAK,QAAQ,EAAG,QAAO,KAAK;AAEhE,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;;;ACrDA,IAAM,kBAAkB;AAExB,IAAI,gBAAqC;AAAA,EACvC,WAAW;AAAA,EACX,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,OAAO;AACT;AAEO,SAAS,sBACd,QACM;AACN,kBAAgB;AAAA,IACd,WAAW;AAAA,IACX,IAAI,OAAO;AAAA,IACX,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC3B,OAAO,OAAO,KAAK,OAAO,OAAO;AAAA,EACnC;AACF;AAEO,SAAS,mBAAwC;AACtD,SAAO,EAAE,GAAG,cAAc;AAC5B;AAEO,SAAS,wBAAwB,MASjB;AACrB,QAAM,cAAc,KAAK,YAAY,QAAQ,OAAO,EAAE,KAAK;AAC3D,QAAM,gBAAgB,KAAK,cAAc,QAAQ,OAAO,EAAE,KAAK;AAC/D,QAAM,QACJ,KAAK,kBACL,QAAQ,KAAK,aAAa,KAC1B,KAAK,QAAQ,SAAS;AAExB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB;AAAA,IACA;AAAA,IACA,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd;AAAA,IACA,WAAW,iBAAiB;AAAA,IAC5B,WAAW;AAAA,MACT,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,QAOrC;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO,UAAU;AAAA,IACzB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,EAChB;AACF;AAEO,SAAS,kBAA0B;AACxC,SAAO;AACT;;;AL1FA,IAAM,kBAAkB;AAExB,IAAM,0BAA0B;AAEhC,IAAM,sBAAsB;AAE5B,SAAS,UAAU,OAAoC;AACrD,SAAQ,SAAS;AACnB;AAEA,SAAS,wBAAwB,SAA8C;AAC7E,SAAO,IAAI,sBAAsB;AAAA,IAC/B,KAAK,QAAQ,kBAAkB;AAAA,IAC/B,mBAAmB,QAAQ;AAAA,EAC7B,CAAC;AACH;AAEA,SAAS,cACP,MACA,QAC6E;AAC7E,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,WAAO,EAAE,IAAI,OAAO,OAAO,qCAAqC;AAAA,EAClE;AAEA,QAAM,QAAQ;AACd,QAAM,QAAiC,CAAC;AAExC,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG;AAChD,QAAI,EAAE,OAAO,UAAU,MAAM,GAAG,MAAM,UAAa,MAAM,GAAG,MAAM,MAAM;AACtE,aAAO,EAAE,IAAI,OAAO,OAAO,2BAA2B,GAAG,GAAG;AAAA,IAC9D;AACA,UAAM,MAAM,UAAU,KAAK,MAAM,GAAG,GAAG,IAAI;AAC3C,QAAI,IAAK,QAAO,EAAE,IAAI,OAAO,OAAO,IAAI;AACxC,UAAM,GAAG,IAAI,MAAM,GAAG;AAAA,EACxB;AAEA,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;AAEA,SAAS,UAAU,KAAa,OAAgB,MAAsC;AACpF,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAAG;AAC9C,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,UAAI,SAAS,OAAO;AAClB,YAAI;AACF,cAAI,IAAI,KAAK;AAAA,QACf,QAAQ;AACN,iBAAO,SAAS,GAAG;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,GAAG;AACpD,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT,KAAK;AACH,UAAI,OAAO,UAAU,WAAW;AAC9B,eAAO,SAAS,GAAG;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,YAAY,QAAwB;AAC3C,QAAM,aAAa,OAAO,WAAW,GAAG,IAAI,OAAO,MAAM,CAAC,IAAI;AAC9D,SAAO,IAAI,UAAU;AACvB;AAEA,SAAS,uBACP,KACA,UACA,SACM;AACN,QAAM,SAAS,eAAe,QAAQ,SAAS,cAAc;AAC7D,MAAI,CAAC,QAAQ;AACX,YAAQ;AAAA,MACN;AAAA,IACF;AACA;AAAA,EACF;AAEA,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,cAAc;AAC9B,QAAM,OAAO,oBAAoB,MAAM;AAEvC,aAAW,WAAW,UAAU;AAC9B,WAAO;AAAA,MACL,IAAI,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,OAAO,KAAc,QAAkB;AACrC,YAAI;AACF,gBAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,cAAI,CAAC,UAAU,IAAI;AACjB,gBAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,UACF;AACA,gBAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,cAAI,KAAK,MAAM;AAAA,QACjB,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,kBAAQ,MAAM,mBAAmB,QAAQ,IAAI,YAAY,GAAG;AAC5D,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,IAAI,aAAa,MAAM;AAC3B,UAAQ;AAAA,IACN,uCAAuC,WAAW;AAAA,EACpD;AACF;AAEA,SAAS,uBACP,KACA,UACA,SACA,MAQM;AACN,QAAM,YAAY,MAChB,wBAAwB;AAAA,IACtB,QAAQ,KAAK;AAAA,IACb,eAAe,KAAK,SAAS,IAAI;AAAA,IACjC,YAAY,KAAK;AAAA,IACjB,gBAAgB,KAAK;AAAA,IACrB,aAAa,KAAK;AAAA,IAClB,eAAe,KAAK;AAAA,IACpB,aAAa,QAAQ,QAAQ,WAAW;AAAA,IACxC,SAAS,SAAS,IAAI,CAAC,OAAO;AAAA,MAC5B,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,OAAO,EAAE,QAAQ;AAAA,IACnB,EAAE;AAAA,EACJ,CAAC;AAEH,MAAI,IAAI,iBAAiB,CAAC,KAAc,QAAkB;AACxD,SAAK,SAAS,gBAAgB,GAAG;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,KAAK;AAAA,MACP,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA;AAAA,MAEhB,UAAU,KAAK,SAAS;AAAA,MACxB,SAAS,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AAED,MAAI,IAAI,iBAAiB,CAAC,KAAc,QAAkB;AACxD,SAAK,SAAS,gBAAgB,GAAG;AACjC,UAAM,SAAS,UAAU;AACzB,QAAI,OAAO,OAAO,QAAQ,MAAM,GAAG,EAAE,KAAK,MAAM;AAAA,EAClD,CAAC;AAED,MAAI,IAAI,8BAA8B,CAAC,KAAc,QAAkB;AACrE,SAAK,SAAS,gBAAgB,GAAG;AACjC,QAAI,KAAK,uBAAuB,UAAU,CAAC,CAAC;AAAA,EAC9C,CAAC;AAED,UAAQ;AAAA,IACN;AAAA,EACF;AACF;AAUA,eAAsB,mBACpB,KACA,UACA,SACiB;AACjB,MAAI,QAAQ;AACZ,MAAI,CAAC,QAAQ,aAAa;AACxB,UAAM,WACJ,QAAQ,eAAe,KAAK,KAAK,QAAQ,OAAO,KAAK,KAAK;AAC5D,YAAQ,MAAM,aAAa;AAAA,MACzB;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ;AAAA,IACjB,CAAC;AACD,QAAI,cAAc,KAAK,GAAG;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ,OAAO,EAAE,KAAK;AACtE,QAAM,eACH,QAAQ,eAAe,kBAAkB,QAAQ,OAAO,EAAE,KAC3D;AACF,QAAM,SAAS,aAAa;AAC5B,QAAM,UAAU,cAAc;AAE9B,QAAM,SAAuB,CAAC;AAE9B,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,IAAI,QAAQ,IAAI;AAClC,UAAM,WAAW,GAAG,QAAQ,GAAG,SAAS;AACxC,UAAM,UAAU,UAAU,QAAQ,QAAQ,OAAO;AAEjD,QAAI,CAAC,QAAQ,aAAa;AACxB,aAAO,QAAQ,QAAQ,EAAE,IAAI;AAAA,QAC3B,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,OAAO,YAAY,QAAQ,QAAQ,MAAM;AAAA,UACzC;AAAA,UACA;AAAA,QACF;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO,KAAK,WAAW,OAAO,KAAc,QAAkB;AAC5D,UAAI;AACF,cAAM,YAAY,cAAc,IAAI,MAAM,QAAQ,KAAK;AACvD,YAAI,CAAC,UAAU,IAAI;AACjB,cAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,CAAC;AAC/C;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAC7D,YAAI,KAAK,MAAM;AAAA,MACjB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,gBAAQ,MAAM,WAAW,QAAQ,IAAI,YAAY,GAAG;AACpD,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,QAAQ,eAAe,OAAO,KAAK,MAAM,EAAE,SAAS,GAAG;AAC1D,UAAM,cAAc,wBAAwB,OAAO;AACnD,UAAM,WAAW,IAAI;AAAA,MACnB,SAAS,IAAI,CAAC,MAAM,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAClD;AACA,UAAM,iBAAiB,IAAI,mBAAmB,WAAW;AACzD,eAAW,WAAW,UAAU;AAC9B,qBAAe,SAAS,SAAS,IAAI,eAAe,CAAC;AAAA,IACvD;AACA,QAAI,IAAI,kBAAkB,QAAQ,gBAAgB,QAAW,QAAW,IAAI,CAAC;AAAA,EAC/E;AAEA,MAAI,IAAI,UAAU,MAAM;AACxB,QAAM,iBAAiB;AAAA,IACrB,eAAe,QAAQ,SAAS,cAAc;AAAA,EAChD;AACA,yBAAuB,KAAK,UAAU,OAAO;AAE7C,QAAM,aACJ,QAAQ,SAAS,KAAK,KAAK,KAC3B,QAAQ,IAAI,aAAa,KAAK,KAC9B;AACF,QAAM,SACJ,QAAQ,SAAS,QAAQ,KAAK,KAAK,QAAQ,IAAI,cAAc,KAAK,KAAK;AACzE,QAAM,iBACJ,QAAQ,SAAS,gBAAgB,KAAK,KACtC,QAAQ,IAAI,eAAe,KAAK,KAChC,QAAQ,IAAI,yBAAyB,KAAK;AAE5C,QAAM,gBAAgB,CAAC,YAAoB;AACzC,QAAI,CAAC,UAAU,CAAC,eAAgB;AAChC,SAAK,iBAAiB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EACE,KAAK,MAAM;AACV,4BAAsB,EAAE,IAAI,KAAK,CAAC;AAAA,IACpC,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,4BAAsB,EAAE,IAAI,OAAO,OAAO,QAAQ,CAAC;AACnD,cAAQ,KAAK,sCAAsC,GAAG;AAAA,IACxD,CAAC;AAAA,EACL;AAEA,QAAM,WAAW,IAAI,sBAAsB;AAAA,IACzC,SAAS,sBAAsB,QAAQ,SAAS,aAAa;AAAA;AAAA,IAE7D,YAAY;AAAA,EACd,CAAC;AAED,yBAAuB,KAAK,UAAU,SAAS;AAAA,IAC7C;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,cAAc,SAAS,IAAI;AACjC,MAAI,aAAa;AACf,kBAAc,WAAW;AAAA,EAC3B;AAEA,SAAO;AACT;AAEO,SAAS,kBACd,UACA,SACuC;AACvC,SAAO,CAAC,QAAQ,mBAAmB,KAAK,UAAU,OAAO;AAC3D;;;AMtWO,SAAS,sBACd,UACA,MACQ;AACR,QAAM,OAAO,KAAK,QAAQ,QAAQ,OAAO,EAAE;AAC3C,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA,SAAS,KAAK,IAAI;AAAA,IAClB,gBAAgB,KAAK,WAAW;AAAA,IAChC;AAAA,IACA;AAAA,IACA,KAAK,KAAK,IAAI;AAAA,IACd;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AAEA,MAAI,KAAK,UAAU;AACjB,UAAM,KAAK,aAAa,KAAK,QAAQ,IAAI,EAAE;AAAA,EAC7C;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,WAAW,UAAU;AAC9B,UAAM,OAAO,GAAG,IAAI,UAAU,QAAQ,IAAI;AAC1C,UAAM,QAAQ,QAAQ,QAAQ,OAAO,WAAW,GAAG,IAC/C,QAAQ,QAAQ,SAChB,IAAI,QAAQ,QAAQ,MAAM;AAE9B,UAAM;AAAA,MACJ,SAAS,QAAQ,IAAI;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB,gBAAgB,KAAK,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,MAC7F;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,QACH,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAAA,QAC9D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,KAAK;AAAA,QACZ,OAAO;AAAA,UACL,OAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,YAC5C;AAAA,YACA,MAAM,QAAQ,kCAAkC,WAAW,CAAC;AAAA,UAC9D,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,MACD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawcash/forge",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "ClawCash Forge — make existing SaaS agent-native (define, mount, x402, gateway fulfill, health)",
   "type": "module",
   "main": "./dist/index.cjs",