@cryptonly/x402 0.1.1 → 0.4.0

package/README.md

@@ -6,7 +6,7 @@
 
 Facilitator client for x402 payments.
 
-[Website](https://cryptonly.net) · [Documentation](https://cryptonly.gitbook.io/docs) · [Contact](https://cryptonly.net/contact/)
+[Website](https://cryptonly.net) · [Documentation](https://docs.cryptonly.net/api-reference/openapi/operations/x402supported/) · [Contact](https://cryptonly.net/contact/)
 
 </div>
 
@@ -35,10 +35,105 @@ const server = new x402ResourceServer(facilitator).register(
 );
 ```
 
-`apiKey` is your Cryptonly API key. It is sent as `x-tenant-api-key` on verify and settle.
+## Options
+
+| Option | Default | |
+| --- | --- | --- |
+| `apiKey` | required | Your Cryptonly API key, with the `x402.verify` and `x402.settle` scopes. Sent as `x-tenant-api-key` on every facilitator call. |
+| `sandbox` | `false` | Use the sandbox facilitator, which settles on Base Sepolia (`eip155:84532`). |
+| `baseUrl` | — | Merchant API origin, for example a local API. `/x402` is appended. Takes precedence over `sandbox`. |
 
 ```ts
+// Sandbox: Base Sepolia, with test USDC from the Circle faucet.
 const facilitator = new CryptonlyFacilitatorClient({
   apiKey: process.env.CRYPTONLY_API_KEY!,
+  sandbox: true,
 });
+const server = new x402ResourceServer(facilitator).register(
+  'eip155:84532',
+  new ExactEvmScheme(),
+);
+```
+
+## Dashboard-configured routes
+
+`@cryptonly/x402/express` reads your paid resources, prices and payout address from the Cryptonly dashboard, so you do not write routes in code. A price change in the dashboard reaches production within a minute, without a deploy.
+
+```bash
+npm install @cryptonly/x402 @x402/core @x402/express @x402/evm express
+```
+
+```ts
+import express from 'express';
+import { cryptonlyPaymentMiddleware } from '@cryptonly/x402/express';
+
+const app = express();
+
+app.get('/health', (_req, res) => res.send('ok')); // free routes first
+
+const payments = cryptonlyPaymentMiddleware({
+  apiKey: process.env.CRYPTONLY_API_KEY!, // scopes x402.verify and x402.settle
+});
+app.use(payments);
+
+// Priced in the dashboard as `GET /weather/:city`.
+app.get('/weather/:city', (req, res) => {
+  res.json({ city: req.params.city, temperatureC: 21 });
+});
+
+await payments.ready(); // optional: fail at startup if the config cannot load
+app.listen(4021);
 ```
+
+How it works:
+
+- It loads `GET /x402/config` with your API key on the first request (or on `ready()`), then every minute.
+- It turns each resource into a stock `@x402/express` route: `METHOD /path` (or just `/path` for method `*`), the price in atomic units of the chosen asset, your `payTo`, and the token's EIP-712 domain in `extra`. A Permit2-only token gets `assetTransferMethod: 'permit2'` and EIP-2612 gas sponsoring.
+- Resources marked discoverable get the bazaar discovery extension, with their input and output schemas, when `@x402/extensions` is installed.
+- It rebuilds the stock middleware only when the routes change.
+
+It fails closed, so paid endpoints are never served for free:
+
+- If the first load fails, every request through the middleware answers `503` with `Retry-After` until a load succeeds. This covers a bad key, an account that is not active, or no payout address. Mount the middleware after your free routes.
+- If a refresh fails, the last good routes stay in use and a warning is logged.
+
+| Option | Default | |
+| --- | --- | --- |
+| `apiKey` | required | Same key as for `CryptonlyFacilitatorClient`. It also needs `x402.verify` for `GET /x402/config`. |
+| `sandbox`, `baseUrl` | production | As for `CryptonlyFacilitatorClient`. |
+| `refreshIntervalMs` | `60000` | How often to reload the configuration. `0` turns refreshing off. |
+| `schemes` | `[new ExactEvmScheme()]` | Scheme servers registered on the account's Base network. Resources with another scheme are skipped. |
+| `svmSchemes` | `[new ExactSvmScheme()]` when `@x402/svm` is installed, else none | Scheme servers registered on the account's Solana network. Without one, Solana-priced resources are skipped. |
+| `paywallConfig` | — | Passed to the stock `paymentMiddleware`. |
+| `logger` | `console` | Receives refresh failures and skipped resources. |
+| `createMiddleware` | stock `paymentMiddleware` | Builds the inner middleware for a set of routes, for example to add hooks. |
+
+The returned middleware also has these methods:
+
+- `ready()`: load now.
+- `refresh()`: reload now. It resolves `true` when the routes changed.
+- `routes()`: the routes in use.
+- `close()`: stop refreshing. The refresh timer is `unref()`ed and never keeps the process alive.
+
+For another framework, build the routes yourself with `fetchX402Config()` and `routesFromConfig()` from `@cryptonly/x402`, and pass them to its stock x402 middleware.
+
+### Discovery
+
+`CryptonlyFacilitatorClient` also sends the key on bazaar calls:
+
+```ts
+import { withBazaar } from '@x402/extensions/bazaar';
+
+const client = withBazaar(new CryptonlyFacilitatorClient({ apiKey }));
+const { items } = await client.extensions.bazaar.listResources();
+```
+
+## Networks and assets
+
+Production settles on Base (`eip155:8453`) and Solana (`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`); sandbox on Base Sepolia (`eip155:84532`) and Solana Devnet (`solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1`). On Base, USDC and EURC settle with EIP-3009, and allowlisted tokens also through Permit2. On Solana, USDC and USDT settle with the `exact` SVM scheme: the buyer signs a token transfer and Cryptonly co-signs it as fee payer (`extra.feePayer` in `GET /x402/supported`). The buyer never needs ETH or SOL. `GET /x402/supported` lists what the facilitator accepts.
+
+To take Solana payments with `cryptonlyPaymentMiddleware`, install `@x402/svm` and `@solana/kit` next to it and price resources in a Solana asset in the dashboard. Payouts are set up per network, so the account also needs a Solana `payTo`.
+
+## Settlement results
+
+USDC goes straight from the buyer to your `payTo` address; Cryptonly never holds it. If the transaction has not mined when `/settle` answers, the answer is `settlement_pending` with the transaction hash. List your settlements, including their final status, with `GET /x402/settlements` (scope `x402.list`) or `client.x402Settlements.list()` in `@cryptonly/sdk`.

package/dist/client.d.ts

@@ -5,15 +5,29 @@ export type CryptonlyFacilitatorConfig = {
      * Cryptonly API key.
      */
     apiKey: string;
+    /**
+     * Merchant API origin, with no path (as `baseUrl` in `@cryptonly/sdk`).
+     * `/x402` is appended. Takes precedence over {@link sandbox}.
+     */
+    baseUrl?: string;
     /**
      * When `true`, uses the sandbox facilitator. Defaults to production.
+     * Ignored when {@link baseUrl} is set.
      */
     sandbox?: boolean;
 };
+/**
+ * Merchant API origin for a config, with no trailing slash.
+ *
+ * Same priority as `new Cryptonly(...)`: `baseUrl`, then `sandbox`, then
+ * production.
+ */
+export declare function resolveMerchantApiOrigin(config: Pick<CryptonlyFacilitatorConfig, 'baseUrl' | 'sandbox'>): string;
 /**
  * Cryptonly facilitator client for the x402 protocol.
  *
- * Extends `HTTPFacilitatorClient` from `@x402/core/server`.
+ * Extends `HTTPFacilitatorClient` from `@x402/core/server`. The API key goes
+ * on `/verify`, `/settle`, `/supported` and the bazaar discovery calls.
  *
  * @example
  * ```ts

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAO1D,4DAA4D;AAC5D,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AASF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,qBAAqB;gBACvD,MAAM,EAAE,0BAA0B;CAc/C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAO1D,4DAA4D;AAC5D,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,0BAA0B,EAAE,SAAS,GAAG,SAAS,CAAC,GAC9D,MAAM,CAQR;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,0BAA2B,SAAQ,qBAAqB;gBACvD,MAAM,EAAE,0BAA0B;CAgB/C"}

package/dist/client.js

@@ -1,18 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CryptonlyFacilitatorClient = void 0;
+exports.resolveMerchantApiOrigin = resolveMerchantApiOrigin;
 const server_1 = require("@x402/core/server");
 const constants_js_1 = require("./constants.js");
+/**
+ * Merchant API origin for a config, with no trailing slash.
+ *
+ * Same priority as `new Cryptonly(...)`: `baseUrl`, then `sandbox`, then
+ * production.
+ */
+function resolveMerchantApiOrigin(config) {
+    const origin = typeof config.baseUrl === 'string' && config.baseUrl.length > 0
+        ? config.baseUrl
+        : config.sandbox
+            ? constants_js_1.SANDBOX_MERCHANT_API_BASE_URL
+            : constants_js_1.MERCHANT_API_BASE_URL;
+    return origin.replace(/\/+$/, '');
+}
 function resolveFacilitatorUrl(config) {
-    const origin = config.sandbox
-        ? constants_js_1.SANDBOX_MERCHANT_API_BASE_URL
-        : constants_js_1.MERCHANT_API_BASE_URL;
-    return `${origin}/x402`;
+    return `${resolveMerchantApiOrigin(config)}/x402`;
 }
 /**
  * Cryptonly facilitator client for the x402 protocol.
  *
- * Extends `HTTPFacilitatorClient` from `@x402/core/server`.
+ * Extends `HTTPFacilitatorClient` from `@x402/core/server`. The API key goes
+ * on `/verify`, `/settle`, `/supported` and the bazaar discovery calls.
  *
  * @example
  * ```ts
@@ -38,6 +51,8 @@ class CryptonlyFacilitatorClient extends server_1.HTTPFacilitatorClient {
                 verify: headers,
                 settle: headers,
                 supported: headers,
+                // `withBazaar(client).extensions.bazaar.listResources()`.
+                bazaar: headers,
             }),
         });
     }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,8CAA0D;AAC1D,iDAIwB;AAcxB,SAAS,qBAAqB,CAAC,MAAkC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO;QAC3B,CAAC,CAAC,4CAA6B;QAC/B,CAAC,CAAC,oCAAqB,CAAC;IAC1B,OAAO,GAAG,MAAM,OAAO,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,0BAA2B,SAAQ,8BAAqB;IACnE,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,sCAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7D,KAAK,CAAC;YACJ,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC;YAClC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC9B,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO;aACnB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF;AAfD,gEAeC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AA+BA,4DAUC;AAzCD,8CAA0D;AAC1D,iDAIwB;AAoBxB;;;;;GAKG;AACH,SAAgB,wBAAwB,CACtC,MAA+D;IAE/D,MAAM,MAAM,GACV,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO;YACd,CAAC,CAAC,4CAA6B;YAC/B,CAAC,CAAC,oCAAqB,CAAC;IAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkC;IAC/D,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,0BAA2B,SAAQ,8BAAqB;IACnE,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,sCAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7D,KAAK,CAAC;YACJ,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC;YAClC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC9B,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO;gBAClB,0DAA0D;gBAC1D,MAAM,EAAE,OAAO;aAChB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF;AAjBD,gEAiBC"}

package/dist/config.d.ts

@@ -0,0 +1,174 @@
+import type { RouteConfig } from '@x402/core/server';
+import type { Network } from '@x402/core/types';
+import { type CryptonlyFacilitatorConfig } from './client.js';
+/**
+ * `account.status` in `GET /x402/config`. Only `active` can be paid: x402 is
+ * on for every account unless Cryptonly suspended it or production still
+ * needs the business verification.
+ */
+export type X402AccountStatus = 'active' | 'suspended' | 'tenant_not_verified';
+/** An asset the account accepts, from `GET /x402/config`. */
+export type X402ConfigAsset = {
+    symbol: string;
+    currencyCode: string;
+    /** Token contract address (EVM) or SPL mint (Solana, base58). */
+    address: string;
+    decimals: number;
+    /**
+     * Transfer methods the facilitator settles for it: `eip3009`, `permit2`
+     * (EVM) or `spl` (Solana).
+     */
+    methods: string[];
+    /** Smallest price, in atomic units. */
+    minAmount: string;
+    /** CAIP-2 network of the asset. Older APIs omit it: {@link X402Config.network}. */
+    network?: Network;
+    /** `payTo` on the asset's network. Older APIs omit it: {@link X402Config.payTo}. */
+    payTo?: string | null;
+    /** EVM: EIP-712 domain of the token; goes into `extra`. */
+    eip712?: {
+        name: string;
+        version: string;
+    };
+    /** Solana: the facilitator's fee payer; goes into `extra.feePayer`. */
+    feePayer?: string;
+};
+/** A paid resource configured in the dashboard. */
+export type X402ConfigResource = {
+    id: string;
+    /** HTTP method, or `*` for any method. */
+    method: string;
+    /** Full URL as entered in the dashboard; may hold `:param` segments. */
+    url: string;
+    /** Path of {@link url}, the route pattern (`/weather/:city`). */
+    path: string;
+    price: {
+        /** Atomic units. */
+        amount: string;
+        /** Token contract address or SPL mint. */
+        asset: string;
+        currencyCode: string;
+        /** CAIP-2 network of the asset. */
+        network?: Network;
+    };
+    scheme: string;
+    maxTimeoutSeconds: number;
+    description: string | null;
+    mimeType: string | null;
+    /** Listed in the public discovery feed (bazaar). */
+    discoverable: boolean;
+    /** JSON Schema of the query (GET/HEAD/DELETE) or the JSON body. */
+    inputSchema: Record<string, unknown> | null;
+    outputSchema: Record<string, unknown> | null;
+};
+/** Response of `GET /x402/config`: the x402 setup of the key's account. */
+export type X402Config = {
+    account: {
+        id: string;
+        name: string;
+        status: X402AccountStatus;
+    };
+    environment: 'production' | 'sandbox';
+    /** CAIP-2 network of Base, such as `eip155:84532`. */
+    network: Network;
+    /** `payTo` on {@link network}. `balance` (Cryptonly balance) is Base only. */
+    payTo: {
+        mode: 'wallet' | 'balance';
+        address: string | null;
+    };
+    /** Every network the account can be paid on, with its `payTo`. */
+    networks?: Array<{
+        network: Network;
+        payTo: {
+            mode: 'wallet' | 'balance';
+            address: string | null;
+        };
+    }>;
+    assets: X402ConfigAsset[];
+    resources: X402ConfigResource[];
+    fees: Record<string, unknown>;
+    limits: {
+        dailyGasUsd: number;
+    };
+};
+/** Why {@link fetchX402Config} or {@link routesFromConfig} failed. */
+export type X402ConfigErrorCode = 'network_error' | 'http_error' | 'invalid_response' | 'account_not_active' | 'pay_to_missing';
+/** Thrown by {@link fetchX402Config} and {@link routesFromConfig}. */
+export declare class X402ConfigError extends Error {
+    readonly code: X402ConfigErrorCode;
+    /** HTTP status, for `http_error`. */
+    readonly status?: number;
+    constructor(code: X402ConfigErrorCode, message: string, options?: {
+        status?: number;
+        cause?: unknown;
+    });
+}
+/** Options for {@link fetchX402Config}. */
+export type FetchX402ConfigOptions = CryptonlyFacilitatorConfig & {
+    /** `fetch` implementation. Defaults to the global `fetch`. */
+    fetch?: typeof fetch;
+    /** Request timeout. Defaults to 10 s. */
+    timeoutMs?: number;
+};
+/**
+ * Loads `GET <base>/x402/config` with the API key (scope `x402.verify`).
+ *
+ * @throws {X402ConfigError} `network_error`, `http_error` or `invalid_response`.
+ */
+export declare function fetchX402Config(options: FetchX402ConfigOptions): Promise<X402Config>;
+/**
+ * Checks the shape of a `GET /x402/config` body.
+ *
+ * @throws {X402ConfigError} `invalid_response`.
+ */
+export declare function parseX402Config(body: unknown): X402Config;
+/**
+ * The parts of `@x402/extensions` that {@link routesFromConfig} uses.
+ * Typed structurally so that the package stays optional.
+ */
+export type X402ExtensionsModule = {
+    declareDiscoveryExtension(config: {
+        inputSchema?: Record<string, unknown>;
+        bodyType?: 'json';
+    }): Record<string, unknown>;
+    declareEip2612GasSponsoringExtension?(): Record<string, unknown>;
+};
+/** `@x402/extensions` when installed, else `null`. */
+export declare function loadX402Extensions(): X402ExtensionsModule | null;
+/** Options for {@link routesFromConfig}. */
+export type RoutesFromConfigOptions = {
+    /**
+     * Schemes the resource server has registered. Resources with another
+     * scheme are skipped (a 402 for them could not be verified). Default: all.
+     */
+    schemes?: readonly string[];
+    /**
+     * `@x402/extensions`, for the bazaar discovery and EIP-2612 extensions.
+     * Default: loaded when installed. `null` leaves extensions out.
+     */
+    extensions?: X402ExtensionsModule | null;
+    /** Called for each resource left out, with the reason. */
+    onSkip?: (resource: X402ConfigResource, reason: string) => void;
+};
+/** Route key of a resource: `METHOD /path`, or just `/path` for method `*`. */
+export declare function routeKey(resource: Pick<X402ConfigResource, 'method' | 'path'>): string;
+/** Solana CAIP-2 networks (`solana:<genesis>`). */
+export declare function isSolanaNetwork(network: string): boolean;
+/**
+ * Throws unless payments to this account can settle: the account is
+ * `active` and has a `payTo` address on at least one network.
+ *
+ * @throws {X402ConfigError} `account_not_active` or `pay_to_missing`.
+ */
+export declare function assertPayableConfig(config: X402Config): void;
+/**
+ * Builds stock `@x402/core` routes (for `paymentMiddleware` and
+ * `x402HTTPResourceServer`) from the dashboard configuration.
+ *
+ * Fails closed: an account that cannot be paid throws instead of yielding
+ * no routes, since no routes would serve paid endpoints for free.
+ *
+ * @throws {X402ConfigError} `account_not_active` or `pay_to_missing`.
+ */
+export declare function routesFromConfig(config: X402Config, options?: RoutesFromConfigOptions): Record<string, RouteConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAA4B,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAGxF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,WAAW,GAAG,qBAAqB,CAAC;AAE/E,6DAA6D;AAC7D,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,2DAA2D;IAC3D,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE;QACL,oBAAoB;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,0CAA0C;QAC1C,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,mCAAmC;QACnC,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oDAAoD;IACpD,YAAY,EAAE,OAAO,CAAC;IACtB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAA;KAAE,CAAC;IACjE,WAAW,EAAE,YAAY,GAAG,SAAS,CAAC;IACtC,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,KAAK,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9D,kEAAkE;IAClE,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE;YAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;YAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACjC,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAC7B,eAAe,GAAG,YAAY,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEhG,sEAAsE;AACtE,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAGvB,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAOjD;AAED,2CAA2C;AAC3C,MAAM,MAAM,sBAAsB,GAAG,0BAA0B,GAAG;IAChE,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAIF;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CA8C1F;AAqBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CA6BzD;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,yBAAyB,CAAC,MAAM,EAAE;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,oCAAoC,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClE,CAAC;AAIF,sDAAsD;AACtD,wBAAgB,kBAAkB,IAAI,oBAAoB,GAAG,IAAI,CAUhE;AAED,4CAA4C;AAC5C,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACzC,0DAA0D;IAC1D,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE,CAAC;AAIF,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,CAGtF;AAoDD,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAOD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAiB5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA+E7B"}

package/dist/config.js

@@ -0,0 +1,281 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.X402ConfigError = void 0;
+exports.fetchX402Config = fetchX402Config;
+exports.parseX402Config = parseX402Config;
+exports.loadX402Extensions = loadX402Extensions;
+exports.routeKey = routeKey;
+exports.isSolanaNetwork = isSolanaNetwork;
+exports.assertPayableConfig = assertPayableConfig;
+exports.routesFromConfig = routesFromConfig;
+const client_js_1 = require("./client.js");
+const constants_js_1 = require("./constants.js");
+/** Thrown by {@link fetchX402Config} and {@link routesFromConfig}. */
+class X402ConfigError extends Error {
+    code;
+    /** HTTP status, for `http_error`. */
+    status;
+    constructor(code, message, options) {
+        super(message, options?.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'X402ConfigError';
+        this.code = code;
+        if (options?.status !== undefined)
+            this.status = options.status;
+    }
+}
+exports.X402ConfigError = X402ConfigError;
+const DEFAULT_CONFIG_TIMEOUT_MS = 10_000;
+/**
+ * Loads `GET <base>/x402/config` with the API key (scope `x402.verify`).
+ *
+ * @throws {X402ConfigError} `network_error`, `http_error` or `invalid_response`.
+ */
+async function fetchX402Config(options) {
+    if (!options?.apiKey) {
+        throw new TypeError('fetchX402Config: `apiKey` is required');
+    }
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    if (typeof fetchImpl !== 'function') {
+        throw new TypeError('fetchX402Config: no global `fetch`; pass `fetch`');
+    }
+    const url = `${(0, client_js_1.resolveMerchantApiOrigin)(options)}/x402/config`;
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: 'GET',
+            headers: {
+                accept: 'application/json',
+                [constants_js_1.MERCHANT_API_KEY_HEADER]: options.apiKey,
+            },
+            signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_CONFIG_TIMEOUT_MS),
+        });
+    }
+    catch (cause) {
+        throw new X402ConfigError('network_error', `GET ${url} failed: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    }
+    const text = await response.text().catch(() => '');
+    if (!response.ok) {
+        throw new X402ConfigError('http_error', `GET ${url} answered ${response.status}${describeErrorBody(text)}`, { status: response.status });
+    }
+    let body;
+    try {
+        body = JSON.parse(text);
+    }
+    catch (cause) {
+        throw new X402ConfigError('invalid_response', `GET ${url} returned non-JSON`, {
+            cause,
+        });
+    }
+    return parseX402Config(body);
+}
+function describeErrorBody(text) {
+    if (!text)
+        return '';
+    try {
+        const parsed = JSON.parse(text);
+        const message = Array.isArray(parsed.message) ? parsed.message.join('; ') : parsed.message;
+        const parts = [parsed.code, message].filter((part) => typeof part === 'string' && part.length > 0);
+        if (parts.length > 0)
+            return `: ${parts.join(': ')}`;
+    }
+    catch {
+        // Not JSON; fall through.
+    }
+    return `: ${text.slice(0, 200)}`;
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Checks the shape of a `GET /x402/config` body.
+ *
+ * @throws {X402ConfigError} `invalid_response`.
+ */
+function parseX402Config(body) {
+    const invalid = (what) => new X402ConfigError('invalid_response', `x402 config: ${what}`);
+    if (!isObject(body))
+        throw invalid('not an object');
+    const { account, network, payTo, assets, resources } = body;
+    if (!isObject(account) || typeof account.status !== 'string') {
+        throw invalid('`account.status` missing');
+    }
+    if (typeof network !== 'string' || !/^[^:\s]+:\S+$/.test(network)) {
+        throw invalid('`network` is not a CAIP-2 id');
+    }
+    if (!isObject(payTo) || !(payTo.address === null || typeof payTo.address === 'string')) {
+        throw invalid('`payTo` missing');
+    }
+    if (!Array.isArray(assets))
+        throw invalid('`assets` is not an array');
+    if (!Array.isArray(resources))
+        throw invalid('`resources` is not an array');
+    for (const resource of resources) {
+        if (!isObject(resource) ||
+            typeof resource.method !== 'string' ||
+            typeof resource.path !== 'string' ||
+            !isObject(resource.price) ||
+            typeof resource.price.amount !== 'string' ||
+            typeof resource.price.asset !== 'string' ||
+            typeof resource.scheme !== 'string') {
+            throw invalid('a resource lacks `method`, `path`, `price` or `scheme`');
+        }
+    }
+    return body;
+}
+let extensionsModule;
+/** `@x402/extensions` when installed, else `null`. */
+function loadX402Extensions() {
+    if (extensionsModule === undefined) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            extensionsModule = require('@x402/extensions');
+        }
+        catch {
+            extensionsModule = null;
+        }
+    }
+    return extensionsModule;
+}
+const BODY_METHODS = new Set(['POST', 'PUT', 'PATCH']);
+/** Route key of a resource: `METHOD /path`, or just `/path` for method `*`. */
+function routeKey(resource) {
+    const method = resource.method.trim().toUpperCase();
+    return method === '*' || method === '' ? resource.path : `${method} ${resource.path}`;
+}
+/**
+ * Fits a dashboard resource's declaration (`{ bazaar: { info, schema } }`) to
+ * what the dashboard knows: the method and schemas, but no example values.
+ *
+ * - `declareDiscoveryExtension` puts an empty `queryParams` or `body` example
+ *   in `info`, which fails the merchant's schema when it requires fields, so
+ *   the example goes and the body stops being required.
+ * - It also drops `output` unless an example is given, so the output schema
+ *   is added here, under `output.example` as the package declares it.
+ */
+function withDashboardSchemas(method, declared, outputSchema) {
+    const bazaar = declared.bazaar;
+    const input = bazaar?.info?.input;
+    const properties = bazaar?.schema?.properties;
+    if (!bazaar?.info || !input || !properties)
+        return declared;
+    // Known here; the bazaar server extension would add it per request.
+    input.method = method;
+    delete input.queryParams;
+    delete input.body;
+    if (properties.input?.required) {
+        properties.input.required = properties.input.required.filter((key) => key !== 'body');
+    }
+    if (outputSchema) {
+        bazaar.info.output = { type: 'json' };
+        properties.output = {
+            type: 'object',
+            properties: {
+                type: { type: 'string' },
+                example: { type: 'object', ...outputSchema },
+            },
+            required: ['type'],
+        };
+    }
+    return declared;
+}
+/** Solana CAIP-2 networks (`solana:<genesis>`). */
+function isSolanaNetwork(network) {
+    return network.startsWith('solana:');
+}
+/** EVM addresses compare case-insensitively; base58 never does. */
+function sameAsset(network, a, b) {
+    return isSolanaNetwork(network) ? a === b : a.toLowerCase() === b.toLowerCase();
+}
+/**
+ * Throws unless payments to this account can settle: the account is
+ * `active` and has a `payTo` address on at least one network.
+ *
+ * @throws {X402ConfigError} `account_not_active` or `pay_to_missing`.
+ */
+function assertPayableConfig(config) {
+    if (config.account.status !== 'active') {
+        throw new X402ConfigError('account_not_active', `x402 account "${config.account.name}" is ${config.account.status}; ` +
+            'see Settings › General in the dashboard');
+    }
+    const payable = config.payTo.address || (config.networks ?? []).some((network) => network.payTo.address);
+    if (!payable) {
+        throw new X402ConfigError('pay_to_missing', `x402 account "${config.account.name}" has no payTo address; ` +
+            'set a payout wallet in the dashboard');
+    }
+}
+/**
+ * Builds stock `@x402/core` routes (for `paymentMiddleware` and
+ * `x402HTTPResourceServer`) from the dashboard configuration.
+ *
+ * Fails closed: an account that cannot be paid throws instead of yielding
+ * no routes, since no routes would serve paid endpoints for free.
+ *
+ * @throws {X402ConfigError} `account_not_active` or `pay_to_missing`.
+ */
+function routesFromConfig(config, options = {}) {
+    assertPayableConfig(config);
+    const extensions = options.extensions === undefined ? loadX402Extensions() : options.extensions;
+    const skip = (resource, reason) => options.onSkip?.(resource, reason);
+    const routes = {};
+    for (const resource of config.resources) {
+        if (options.schemes && !options.schemes.includes(resource.scheme)) {
+            skip(resource, `scheme "${resource.scheme}" is not registered`);
+            continue;
+        }
+        const network = resource.price.network ?? config.network;
+        const asset = config.assets.find((candidate) => (candidate.network ?? config.network) === network &&
+            sameAsset(network, candidate.address, resource.price.asset));
+        if (!asset) {
+            skip(resource, `asset ${resource.price.asset} is not accepted`);
+            continue;
+        }
+        const payTo = asset.network ? asset.payTo : config.payTo.address;
+        if (!payTo) {
+            skip(resource, `no payTo on ${network}; set one in the dashboard`);
+            continue;
+        }
+        const key = routeKey(resource);
+        if (routes[key]) {
+            skip(resource, `duplicate route "${key}"`);
+            continue;
+        }
+        const permit2Only = asset.methods.includes('permit2') && !asset.methods.includes('eip3009');
+        const method = resource.method.trim().toUpperCase();
+        const routeExtensions = {};
+        if (permit2Only && extensions?.declareEip2612GasSponsoringExtension) {
+            // A buyer without a Permit2 approval signs an EIP-2612 permit too.
+            Object.assign(routeExtensions, extensions.declareEip2612GasSponsoringExtension());
+        }
+        if (resource.discoverable && extensions) {
+            Object.assign(routeExtensions, withDashboardSchemas(method, extensions.declareDiscoveryExtension({
+                ...(resource.inputSchema ? { inputSchema: resource.inputSchema } : {}),
+                ...(BODY_METHODS.has(method) ? { bodyType: 'json' } : {}),
+            }), resource.outputSchema));
+        }
+        routes[key] = {
+            accepts: {
+                scheme: resource.scheme,
+                network: network,
+                payTo,
+                price: {
+                    asset: resource.price.asset,
+                    amount: resource.price.amount,
+                    extra: isSolanaNetwork(network)
+                        ? { ...(asset.feePayer ? { feePayer: asset.feePayer } : {}) }
+                        : {
+                            name: asset.eip712?.name,
+                            version: asset.eip712?.version,
+                            ...(permit2Only ? { assetTransferMethod: 'permit2' } : {}),
+                        },
+                },
+                maxTimeoutSeconds: resource.maxTimeoutSeconds,
+            },
+            ...(resource.description ? { description: resource.description } : {}),
+            ...(resource.mimeType ? { mimeType: resource.mimeType } : {}),
+            ...(resource.discoverable && config.account.name ? { serviceName: config.account.name } : {}),
+            ...(Object.keys(routeExtensions).length > 0 ? { extensions: routeExtensions } : {}),
+        };
+    }
+    return routes;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;AAyHA,0CA8CC;AA0BD,0CA6BC;AAiBD,gDAUC;AAqBD,4BAGC;AAqDD,0CAEC;AAaD,kDAiBC;AAWD,4CAkFC;AAjcD,2CAAwF;AACxF,iDAAyD;AAqFzD,sEAAsE;AACtE,MAAa,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAsB;IACnC,qCAAqC;IAC5B,MAAM,CAAU;IAEzB,YACE,IAAyB,EACzB,OAAe,EACf,OAA8C;QAE9C,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClE,CAAC;CACF;AAfD,0CAeC;AAUD,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,OAA+B;IACnE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAA,oCAAwB,EAAC,OAAO,CAAC,cAAc,CAAC;IAE/D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,CAAC,sCAAuB,CAAC,EAAE,OAAO,CAAC,MAAM;aAC1C;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,yBAAyB,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,OAAO,GAAG,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9E,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CACvB,YAAY,EACZ,OAAO,GAAG,aAAa,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAClE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,OAAO,GAAG,oBAAoB,EAAE;YAC5E,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAC;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3F,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CACzC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CACtE,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAAa;IAC3C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,kBAAkB,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;QACvF,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC5E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnB,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzB,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;YACzC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;YACxC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,EACnC,CAAC;YACD,MAAM,OAAO,CAAC,wDAAwD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,IAA6B,CAAC;AACvC,CAAC;AAcD,IAAI,gBAAyD,CAAC;AAE9D,sDAAsD;AACtD,SAAgB,kBAAkB;IAChC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,iEAAiE;YACjE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAyB,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAkBD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvD,+EAA+E;AAC/E,SAAgB,QAAQ,CAAC,QAAqD;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,MAAc,EACd,QAAiC,EACjC,YAA4C;IAE5C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAUX,CAAC;IACd,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IAC5D,oEAAoE;IACpE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,OAAO,KAAK,CAAC,WAAW,CAAC;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC;IAClB,IAAI,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACtC,UAAU,CAAC,MAAM,GAAG;YAClB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE;aAC7C;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mDAAmD;AACnD,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,OAAe,EAAE,CAAS,EAAE,CAAS;IACtD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,MAAkB;IACpD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,iBAAiB,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI;YACnE,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,iBAAiB,MAAM,CAAC,OAAO,CAAC,IAAI,0BAA0B;YAC5D,sCAAsC,CACzC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,MAAkB,EAClB,UAAmC,EAAE;IAErC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,QAA4B,EAAE,MAAc,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElG,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,QAAQ,EAAE,WAAW,QAAQ,CAAC,MAAM,qBAAqB,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAC9B,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO;YACjD,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,EAAE,SAAS,QAAQ,CAAC,KAAK,CAAC,KAAK,kBAAkB,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,EAAE,eAAe,OAAO,4BAA4B,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,oBAAoB,GAAG,GAAG,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpD,MAAM,eAAe,GAA4B,EAAE,CAAC;QACpD,IAAI,WAAW,IAAI,UAAU,EAAE,oCAAoC,EAAE,CAAC;YACpE,mEAAmE;YACnE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,oCAAoC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,CACX,eAAe,EACf,oBAAoB,CAClB,MAAM,EACN,UAAU,CAAC,yBAAyB,CAAC;gBACnC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,EACF,QAAQ,CAAC,YAAY,CACtB,CACF,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,OAAkB;gBAC3B,KAAK;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;oBAC3B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;oBAC7B,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC;wBAC7B,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;wBAC7D,CAAC,CAAC;4BACE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;4BACxB,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;4BAC9B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC3D;iBACN;gBACD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C;YACD,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/express.d.ts

@@ -0,0 +1,100 @@
+import type { NextFunction, Request, Response } from 'express';
+import type { RoutesConfig } from '@x402/core/server';
+import { type PaywallConfig, type SchemeNetworkServer } from '@x402/express';
+import { CryptonlyFacilitatorClient, type CryptonlyFacilitatorConfig } from './client.js';
+import { type X402Config, type X402ExtensionsModule } from './config.js';
+/** An Express middleware. */
+export type ExpressMiddleware = (req: Request, res: Response, next: NextFunction) => void | Promise<void>;
+/** What {@link InnerMiddlewareFactory} gets besides the routes. */
+export type InnerMiddlewareContext = {
+    config: X402Config;
+    facilitator: CryptonlyFacilitatorClient;
+    /** Registered on the account's EVM network. */
+    schemes: readonly SchemeNetworkServer[];
+    /** Registered on each Solana network of the account. */
+    svmSchemes: readonly SchemeNetworkServer[];
+    paywallConfig?: PaywallConfig;
+};
+/**
+ * Builds the payment middleware for one set of routes. The default is the
+ * stock `paymentMiddleware` from `@x402/express` over a fresh
+ * `x402ResourceServer`; replace it to add hooks, or in tests.
+ */
+export type InnerMiddlewareFactory = (routes: RoutesConfig, context: InnerMiddlewareContext) => ExpressMiddleware;
+/** Logger used for refresh failures and skipped resources. */
+export type CryptonlyMiddlewareLogger = Pick<Console, 'info' | 'warn' | 'error'>;
+/** Options for {@link cryptonlyPaymentMiddleware}. */
+export type CryptonlyPaymentMiddlewareOptions = CryptonlyFacilitatorConfig & {
+    /**
+     * How often to reload `GET /x402/config`. Defaults to 60 s; `0` turns
+     * refreshing off.
+     */
+    refreshIntervalMs?: number;
+    /**
+     * Scheme servers registered on the account's network. Defaults to
+     * `[new ExactEvmScheme()]`. Resources with another scheme are skipped.
+     */
+    schemes?: readonly SchemeNetworkServer[];
+    /**
+     * Scheme servers registered on the account's Solana networks. Defaults
+     * to `[new ExactSvmScheme()]` from `@x402/svm` when it is installed, and
+     * to none otherwise (Solana resources are then skipped).
+     */
+    svmSchemes?: readonly SchemeNetworkServer[];
+    /** Passed to the stock `paymentMiddleware` for the browser paywall. */
+    paywallConfig?: PaywallConfig;
+    /** `fetch` for `GET /x402/config`. Defaults to the global `fetch`. */
+    fetch?: typeof fetch;
+    /**
+     * After a failed first load, how long requests answer 503 before the
+     * next attempt. Defaults to 5 s.
+     */
+    retryAfterMs?: number;
+    /** Defaults to `console`. */
+    logger?: CryptonlyMiddlewareLogger;
+    /** `@x402/extensions` override; `null` leaves extensions out. */
+    extensions?: X402ExtensionsModule | null;
+    /** Builds the inner middleware. See {@link InnerMiddlewareFactory}. */
+    createMiddleware?: InnerMiddlewareFactory;
+};
+/** The middleware returned by {@link cryptonlyPaymentMiddleware}. */
+export type CryptonlyPaymentMiddleware = ((req: Request, res: Response, next: NextFunction) => Promise<void>) & {
+    /**
+     * Loads the configuration now (if not loaded yet) and starts refreshing.
+     * Rejects when the first load fails. Await it before `listen` to fail
+     * fast at startup.
+     */
+    ready(): Promise<void>;
+    /** Reloads the configuration now. Resolves `true` when the routes changed. */
+    refresh(): Promise<boolean>;
+    /** The routes in use, or `undefined` before the first successful load. */
+    routes(): RoutesConfig | undefined;
+    /** Stops refreshing. The last routes stay in use. */
+    close(): void;
+};
+/** The default {@link InnerMiddlewareFactory}: stock `@x402/express`. */
+export declare const stockPaymentMiddleware: InnerMiddlewareFactory;
+/**
+ * Express middleware whose paid routes and prices come from the Cryptonly
+ * dashboard (`GET /x402/config`), refreshed every minute, so a price change
+ * reaches production without a deploy.
+ *
+ * - The configuration loads on the first request (or on `ready()`), once.
+ * - Each refresh rebuilds the stock `@x402/express` middleware only when the
+ *   routes changed. A failed refresh keeps the last good routes.
+ * - Until a first load succeeds, every request through it answers 503
+ *   (fail closed): paid endpoints are never served for free. Mount it after
+ *   health checks and other free routes.
+ *
+ * @example
+ * ```ts
+ * import { cryptonlyPaymentMiddleware } from '@cryptonly/x402/express';
+ *
+ * app.use(cryptonlyPaymentMiddleware({ apiKey: process.env.CRYPTONLY_API_KEY! }));
+ * app.get('/weather', (req, res) => res.json({ temperatureC: 21 }));
+ * ```
+ */
+export declare function cryptonlyPaymentMiddleware(options: CryptonlyPaymentMiddlewareOptions): CryptonlyPaymentMiddleware;
+export { fetchX402Config, routesFromConfig } from './config.js';
+export type { X402Config } from './config.js';
+//# sourceMappingURL=express.d.ts.map

package/dist/express.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../src/express.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB,6BAA6B;AAC7B,MAAM,MAAM,iBAAiB,GAAG,CAC9B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,KACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,mEAAmE;AACnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,0BAA0B,CAAC;IACxC,+CAA+C;IAC/C,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxC,wDAAwD;IACxD,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC3C,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,sBAAsB,KAC5B,iBAAiB,CAAC;AAEvB,8DAA8D;AAC9D,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;AAEjF,sDAAsD;AACtD,MAAM,MAAM,iCAAiC,GAAG,0BAA0B,GAAG;IAC3E;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACzC;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5C,uEAAuE;IACvE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,iEAAiE;IACjE,UAAU,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACzC,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CACxC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG;IACpB;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,8EAA8E;IAC9E,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,YAAY,GAAG,SAAS,CAAC;IACnC,qDAAqD;IACrD,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAMF,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,EAAE,sBAgBpC,CAAC;AA6BF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CA+I5B;AAMD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/express.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.routesFromConfig = exports.fetchX402Config = exports.stockPaymentMiddleware = void 0;
+exports.cryptonlyPaymentMiddleware = cryptonlyPaymentMiddleware;
+const server_1 = require("@x402/evm/exact/server");
+const express_1 = require("@x402/express");
+const client_js_1 = require("./client.js");
+const config_js_1 = require("./config.js");
+const DEFAULT_REFRESH_INTERVAL_MS = 60_000;
+const DEFAULT_RETRY_AFTER_MS = 5_000;
+const LOG_PREFIX = '[@cryptonly/x402]';
+/** The default {@link InnerMiddlewareFactory}: stock `@x402/express`. */
+const stockPaymentMiddleware = (routes, { config, facilitator, schemes, svmSchemes, paywallConfig }) => {
+    // A fresh resource server per route set: `initialize()` on a shared one
+    // would clear its facilitator data under requests still in flight.
+    const server = new express_1.x402ResourceServer(facilitator);
+    for (const scheme of schemes) {
+        server.register(config.network, scheme);
+    }
+    for (const network of solanaNetworksOf(config)) {
+        for (const scheme of svmSchemes) {
+            server.register(network, scheme);
+        }
+    }
+    return (0, express_1.paymentMiddleware)(routes, server, paywallConfig);
+};
+exports.stockPaymentMiddleware = stockPaymentMiddleware;
+function solanaNetworksOf(config) {
+    const networks = new Set();
+    for (const entry of config.networks ?? []) {
+        if ((0, config_js_1.isSolanaNetwork)(entry.network))
+            networks.add(entry.network);
+    }
+    for (const asset of config.assets) {
+        if (asset.network && (0, config_js_1.isSolanaNetwork)(asset.network))
+            networks.add(asset.network);
+    }
+    return [...networks];
+}
+let svmModule;
+/** `@x402/svm`'s exact server scheme when installed (optional peer). */
+function defaultSvmSchemes() {
+    if (svmModule === undefined) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            svmModule = require('@x402/svm/exact/server');
+        }
+        catch {
+            svmModule = null;
+        }
+    }
+    return svmModule ? [new svmModule.ExactSvmScheme()] : [];
+}
+/**
+ * Express middleware whose paid routes and prices come from the Cryptonly
+ * dashboard (`GET /x402/config`), refreshed every minute, so a price change
+ * reaches production without a deploy.
+ *
+ * - The configuration loads on the first request (or on `ready()`), once.
+ * - Each refresh rebuilds the stock `@x402/express` middleware only when the
+ *   routes changed. A failed refresh keeps the last good routes.
+ * - Until a first load succeeds, every request through it answers 503
+ *   (fail closed): paid endpoints are never served for free. Mount it after
+ *   health checks and other free routes.
+ *
+ * @example
+ * ```ts
+ * import { cryptonlyPaymentMiddleware } from '@cryptonly/x402/express';
+ *
+ * app.use(cryptonlyPaymentMiddleware({ apiKey: process.env.CRYPTONLY_API_KEY! }));
+ * app.get('/weather', (req, res) => res.json({ temperatureC: 21 }));
+ * ```
+ */
+function cryptonlyPaymentMiddleware(options) {
+    const facilitator = new client_js_1.CryptonlyFacilitatorClient(options);
+    const schemes = options.schemes ?? [new server_1.ExactEvmScheme()];
+    const svmSchemes = options.svmSchemes ?? defaultSvmSchemes();
+    const createMiddleware = options.createMiddleware ?? exports.stockPaymentMiddleware;
+    const logger = options.logger ?? console;
+    const refreshIntervalMs = options.refreshIntervalMs ?? DEFAULT_REFRESH_INTERVAL_MS;
+    const retryAfterMs = options.retryAfterMs ?? DEFAULT_RETRY_AFTER_MS;
+    let current;
+    let inflight;
+    let firstLoad;
+    let lastFailureAt;
+    let lastFailure;
+    let timer;
+    let started = false;
+    let closed = false;
+    async function load() {
+        const config = await (0, config_js_1.fetchX402Config)({
+            apiKey: options.apiKey,
+            baseUrl: options.baseUrl,
+            sandbox: options.sandbox,
+            fetch: options.fetch,
+        });
+        const skipped = [];
+        // A route is servable when a scheme is registered for its network.
+        const evmNames = schemes.map((scheme) => scheme.scheme);
+        const svmNames = svmSchemes.map((scheme) => scheme.scheme);
+        const routes = (0, config_js_1.routesFromConfig)(config, {
+            schemes: [...new Set([...evmNames, ...svmNames])],
+            ...(options.extensions !== undefined ? { extensions: options.extensions } : {}),
+            onSkip: (resource, reason) => skipped.push(`${resource.method} ${resource.path}: ${reason}`),
+        });
+        for (const [key, route] of Object.entries(routes)) {
+            const accepts = Array.isArray(route.accepts) ? route.accepts[0] : route.accepts;
+            const names = (0, config_js_1.isSolanaNetwork)(accepts.network) ? svmNames : evmNames;
+            if (!names.includes(accepts.scheme)) {
+                skipped.push(`${key}: no ${accepts.scheme} scheme for ${accepts.network}`);
+                delete routes[key];
+            }
+        }
+        const key = JSON.stringify([config.network, routes]);
+        if (current?.key === key)
+            return false;
+        for (const line of skipped)
+            logger.warn(`${LOG_PREFIX} skipped ${line}`);
+        const handler = createMiddleware(routes, {
+            config,
+            facilitator,
+            schemes,
+            svmSchemes,
+            ...(options.paywallConfig ? { paywallConfig: options.paywallConfig } : {}),
+        });
+        const previous = current;
+        current = { key, routes, handler };
+        if (previous) {
+            logger.info(`${LOG_PREFIX} x402 routes updated: ${Object.keys(routes).join(', ') || '(none)'}`);
+        }
+        return true;
+    }
+    function refresh() {
+        inflight ??= load().finally(() => {
+            inflight = undefined;
+        });
+        return inflight;
+    }
+    function startRefreshing() {
+        if (started || closed)
+            return;
+        started = true;
+        if (!(refreshIntervalMs > 0) || !Number.isFinite(refreshIntervalMs))
+            return;
+        timer = setInterval(() => {
+            refresh().catch((error) => {
+                logger.warn(current
+                    ? `${LOG_PREFIX} config refresh failed; keeping the last routes: ${describe(error)}`
+                    : `${LOG_PREFIX} config load failed: ${describe(error)}`);
+            });
+        }, refreshIntervalMs);
+        timer.unref?.();
+    }
+    function ready() {
+        startRefreshing();
+        if (current)
+            return Promise.resolve();
+        if (!firstLoad) {
+            if (lastFailureAt !== undefined && Date.now() - lastFailureAt < retryAfterMs) {
+                return Promise.reject(lastFailure);
+            }
+            firstLoad = refresh().then(() => {
+                firstLoad = undefined;
+            }, (error) => {
+                firstLoad = undefined;
+                lastFailureAt = Date.now();
+                lastFailure = error;
+                logger.error(`${LOG_PREFIX} x402 config unavailable: ${describe(error)}`);
+                throw error;
+            });
+        }
+        return firstLoad;
+    }
+    const middleware = async (req, res, next) => {
+        if (!current) {
+            try {
+                await ready();
+            }
+            catch {
+                if (!res.headersSent) {
+                    res.setHeader('Retry-After', String(Math.ceil(retryAfterMs / 1000)));
+                    res.status(503).json({
+                        error: 'x402_config_unavailable',
+                        message: 'Payment configuration is unavailable; retry shortly.',
+                    });
+                }
+                return;
+            }
+        }
+        await current.handler(req, res, next);
+    };
+    return Object.assign(middleware, {
+        ready,
+        refresh: () => {
+            startRefreshing();
+            return refresh();
+        },
+        routes: () => current?.routes,
+        close: () => {
+            closed = true;
+            if (timer)
+                clearInterval(timer);
+            timer = undefined;
+        },
+    });
+}
+function describe(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+var config_js_2 = require("./config.js");
+Object.defineProperty(exports, "fetchX402Config", { enumerable: true, get: function () { return config_js_2.fetchX402Config; } });
+Object.defineProperty(exports, "routesFromConfig", { enumerable: true, get: function () { return config_js_2.routesFromConfig; } });
+//# sourceMappingURL=express.js.map

package/dist/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../src/express.ts"],"names":[],"mappings":";;;AA8KA,gEAiJC;AA7TD,mDAAwD;AACxD,2CAKuB;AACvB,2CAA0F;AAC1F,2CAMqB;AAwFrB,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,yEAAyE;AAClE,MAAM,sBAAsB,GAA2B,CAC5D,MAAM,EACN,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,EAC3D,EAAE;IACF,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,MAAM,GAAG,IAAI,4BAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,IAAA,2BAAiB,EAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC,CAAC;AAhBW,QAAA,sBAAsB,0BAgBjC;AAEF,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAA,2BAAe,EAAC,KAAK,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,IAAI,IAAA,2BAAe,EAAC,KAAK,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC;AAGD,IAAI,SAA6C,CAAC;AAElD,wEAAwE;AACxE,SAAS,iBAAiB;IACxB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,iEAAiE;YACjE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAoB,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,0BAA0B,CACxC,OAA0C;IAE1C,MAAM,WAAW,GAAG,IAAI,sCAA0B,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,uBAAc,EAAE,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,8BAAsB,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAEpE,IAAI,OAES,CAAC;IACd,IAAI,QAAsC,CAAC;IAC3C,IAAI,SAAoC,CAAC;IACzC,IAAI,aAAiC,CAAC;IACtC,IAAI,WAAoB,CAAC;IACzB,IAAI,KAAiD,CAAC;IACtD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,UAAU,IAAI;QACjB,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAe,EAAC;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,mEAAmE;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,MAAM,EAAE;YACtC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAChF,MAAM,KAAK,GAAG,IAAA,2BAAe,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,QAAQ,OAAO,CAAC,MAAM,eAAe,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,EAAE,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,YAAY,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE;YACvC,MAAM;YACN,WAAW;YACX,OAAO;YACP,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC;QACzB,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,GAAG,UAAU,yBAAyB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,OAAO;QACd,QAAQ,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC/B,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,SAAS,eAAe;QACtB,IAAI,OAAO,IAAI,MAAM;YAAE,OAAO;QAC9B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAAE,OAAO;QAC5E,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YACvB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACjC,MAAM,CAAC,IAAI,CACT,OAAO;oBACL,CAAC,CAAC,GAAG,UAAU,oDAAoD,QAAQ,CAAC,KAAK,CAAC,EAAE;oBACpF,CAAC,CAAC,GAAG,UAAU,wBAAwB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC3D,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;IAED,SAAS,KAAK;QACZ,eAAe,EAAE,CAAC;QAClB,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,YAAY,EAAE,CAAC;gBAC7E,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YACD,SAAS,GAAG,OAAO,EAAE,CAAC,IAAI,CACxB,GAAG,EAAE;gBACH,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,SAAS,GAAG,SAAS,CAAC;gBACtB,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,WAAW,GAAG,KAAK,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,6BAA6B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1E,MAAM,KAAK,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,yBAAyB;wBAChC,OAAO,EAAE,sDAAsD;qBAChE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,OAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;QAC/B,KAAK;QACL,OAAO,EAAE,GAAG,EAAE;YACZ,eAAe,EAAE,CAAC;YAClB,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM;QAC7B,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,yCAAgE;AAAvD,4GAAA,eAAe,OAAA;AAAE,6GAAA,gBAAgB,OAAA"}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
-export { CryptonlyFacilitatorClient } from './client.js';
+export { CryptonlyFacilitatorClient, resolveMerchantApiOrigin, } from './client.js';
 export type { CryptonlyFacilitatorConfig } from './client.js';
+export { X402ConfigError, assertPayableConfig, fetchX402Config, loadX402Extensions, parseX402Config, routeKey, routesFromConfig, } from './config.js';
+export type { FetchX402ConfigOptions, RoutesFromConfigOptions, X402AccountStatus, X402Config, X402ConfigAsset, X402ConfigErrorCode, X402ConfigResource, X402ExtensionsModule, } from './config.js';
 export { MERCHANT_API_BASE_URL, MERCHANT_API_KEY_HEADER, SANDBOX_MERCHANT_API_BASE_URL, } from './constants.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,QAAQ,EACR,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,8 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SANDBOX_MERCHANT_API_BASE_URL = exports.MERCHANT_API_KEY_HEADER = exports.MERCHANT_API_BASE_URL = exports.CryptonlyFacilitatorClient = void 0;
+exports.SANDBOX_MERCHANT_API_BASE_URL = exports.MERCHANT_API_KEY_HEADER = exports.MERCHANT_API_BASE_URL = exports.routesFromConfig = exports.routeKey = exports.parseX402Config = exports.loadX402Extensions = exports.fetchX402Config = exports.assertPayableConfig = exports.X402ConfigError = exports.resolveMerchantApiOrigin = exports.CryptonlyFacilitatorClient = void 0;
 var client_js_1 = require("./client.js");
 Object.defineProperty(exports, "CryptonlyFacilitatorClient", { enumerable: true, get: function () { return client_js_1.CryptonlyFacilitatorClient; } });
+Object.defineProperty(exports, "resolveMerchantApiOrigin", { enumerable: true, get: function () { return client_js_1.resolveMerchantApiOrigin; } });
+var config_js_1 = require("./config.js");
+Object.defineProperty(exports, "X402ConfigError", { enumerable: true, get: function () { return config_js_1.X402ConfigError; } });
+Object.defineProperty(exports, "assertPayableConfig", { enumerable: true, get: function () { return config_js_1.assertPayableConfig; } });
+Object.defineProperty(exports, "fetchX402Config", { enumerable: true, get: function () { return config_js_1.fetchX402Config; } });
+Object.defineProperty(exports, "loadX402Extensions", { enumerable: true, get: function () { return config_js_1.loadX402Extensions; } });
+Object.defineProperty(exports, "parseX402Config", { enumerable: true, get: function () { return config_js_1.parseX402Config; } });
+Object.defineProperty(exports, "routeKey", { enumerable: true, get: function () { return config_js_1.routeKey; } });
+Object.defineProperty(exports, "routesFromConfig", { enumerable: true, get: function () { return config_js_1.routesFromConfig; } });
 var constants_js_1 = require("./constants.js");
 Object.defineProperty(exports, "MERCHANT_API_BASE_URL", { enumerable: true, get: function () { return constants_js_1.MERCHANT_API_BASE_URL; } });
 Object.defineProperty(exports, "MERCHANT_API_KEY_HEADER", { enumerable: true, get: function () { return constants_js_1.MERCHANT_API_KEY_HEADER; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAyD;AAAhD,uHAAA,0BAA0B,OAAA;AAEnC,+CAIwB;AAHtB,qHAAA,qBAAqB,OAAA;AACrB,uHAAA,uBAAuB,OAAA;AACvB,6HAAA,6BAA6B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAGqB;AAFnB,uHAAA,0BAA0B,OAAA;AAC1B,qHAAA,wBAAwB,OAAA;AAG1B,yCAQqB;AAPnB,4GAAA,eAAe,OAAA;AACf,gHAAA,mBAAmB,OAAA;AACnB,4GAAA,eAAe,OAAA;AACf,+GAAA,kBAAkB,OAAA;AAClB,4GAAA,eAAe,OAAA;AACf,qGAAA,QAAQ,OAAA;AACR,6GAAA,gBAAgB,OAAA;AAYlB,+CAIwB;AAHtB,qHAAA,qBAAqB,OAAA;AACrB,uHAAA,uBAAuB,OAAA;AACvB,6HAAA,6BAA6B,OAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cryptonly/x402",
-  "version": "0.1.1",
-  "description": "Cryptonly facilitator client for the x402 payment protocol.",
+  "version": "0.4.0",
+  "description": "Cryptonly facilitator client and dashboard-configured payment middleware for the x402 protocol.",
   "license": "MIT",
   "private": false,
   "type": "commonjs",
@@ -11,7 +11,8 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/cryptonly-net/x402.git"
+    "url": "git+https://github.com/cryptonly-net/x402.git",
+    "directory": "typescript"
   },
   "homepage": "https://github.com/cryptonly-net/x402#readme",
   "bugs": {
@@ -23,7 +24,9 @@
     "facilitator",
     "payments",
     "client",
-    "typescript"
+    "typescript",
+    "express",
+    "middleware"
   ],
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -33,6 +36,20 @@
       "import": "./dist/index.js",
       "require": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./express": {
+      "types": "./dist/express.d.ts",
+      "import": "./dist/express.js",
+      "require": "./dist/express.js",
+      "default": "./dist/express.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "express": [
+        "./dist/express.d.ts"
+      ]
     }
   },
   "files": [
@@ -49,11 +66,40 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@x402/core": "^2"
+    "@x402/core": "^2",
+    "@x402/evm": "^2",
+    "@x402/express": "^2",
+    "@x402/extensions": "^2",
+    "@x402/svm": "^2",
+    "express": "^4 || ^5"
+  },
+  "peerDependenciesMeta": {
+    "@x402/evm": {
+      "optional": true
+    },
+    "@x402/express": {
+      "optional": true
+    },
+    "@x402/extensions": {
+      "optional": true
+    },
+    "express": {
+      "optional": true
+    },
+    "@x402/svm": {
+      "optional": true
+    }
   },
   "devDependencies": {
+    "@types/express": "^5.0.6",
     "@types/jest": "^29.5.14",
+    "@types/node": "^22.20.5",
     "@x402/core": "^2.28.0",
+    "@x402/evm": "^2.28.0",
+    "@x402/express": "^2.28.0",
+    "@x402/extensions": "^2.28.0",
+    "@x402/svm": "^2.28.0",
+    "express": "^5.3.0",
     "jest": "^29.7.0",
     "ts-jest": "^29.2.0",
     "typescript": "^5.9.3"

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) Cryptonly
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.