@devlab.group/agent-commerce 0.1.0-alpha.0 → 0.2.0-beta.0

package/README.md

@@ -13,7 +13,7 @@
   <img alt="Status" src="https://img.shields.io/badge/status-alpha-orange">
 </p>
 
-> **Alpha.** `v0.1.0-alpha` is experimental. Do not use it with production funds
+> **Beta.** `v0.2.0-beta` is experimental. Do not use it with production funds
 > without an independent review. See [SECURITY.md](SECURITY.md).
 
 ---
@@ -30,7 +30,7 @@ wallet — the gateway never holds it, and never holds your keys.
 
 ```text
 Your existing API → Agent Commerce Gateway → AI Agent
-                        MCP · x402 · receipts · doctor
+                MCP · x402 · receipts · doctor
 ```
 
 ## Demo
@@ -93,18 +93,18 @@ const { url } = await gateway.listen;
 ### Optional peers — install only the rails you use
 
 The MCP adapter and the x402 provider live on their own subpaths, because each
-needs a dependency the rest of the package does not. x402 alone pulls a browser
-wallet stack (wagmi, WalletConnect, Reown) worth ~572 MB, which a gateway
-serving a free HTTP resource has no business installing.
+needs a dependency the rest of the package does not — the x402 rail brings the
+whole EVM signing and RPC stack, which a gateway serving a free HTTP resource
+has no business installing.
 
 | You want                       | Install                        | Import                                     |
 | ------------------------------ | ------------------------------ | ------------------------------------------ |
 | gateway, config, receipts, CLI | `@devlab.group/agent-commerce` | `from '@devlab.group/agent-commerce'`      |
 | expose resources as MCP tools  | `+ @modelcontextprotocol/sdk`  | `from '@devlab.group/agent-commerce/mcp'`  |
-| accept x402 payments           | `+ x402 viem`                  | `from '@devlab.group/agent-commerce/x402'` |
+| accept x402 payments           | `+ @x402/core @x402/evm viem`  | `from '@devlab.group/agent-commerce/x402'` |
 
 ```bash
-npm install @devlab.group/agent-commerce @modelcontextprotocol/sdk x402 viem
+npm install @devlab.group/agent-commerce @modelcontextprotocol/sdk @x402/core @x402/evm viem
 ```
 
 ```ts
@@ -112,9 +112,9 @@ import { mcp } from '@devlab.group/agent-commerce/mcp';
 import { x402 } from '@devlab.group/agent-commerce/x402';
 ```
 
-Peers are pinned exactly: x402's
-schemas and EIP-712 domains cross this boundary, so a version skew is a
-correctness problem rather than a convenience one. Import a subpath without its
+Peers are pinned exactly: x402's schemas and EIP-712 domains cross this
+boundary, so a version skew is a correctness problem rather than a convenience
+one. Import a subpath without its
 peer installed and Node fails at load naming the missing package — deliberately,
 rather than starting a gateway that silently serves nothing.
 
@@ -154,7 +154,7 @@ To stop and wipe state: `docker compose down -v`.
         ┌──────────────────────────────────────────────────────┐
         │ AI Agent │
         └──────────────┬───────────────────────────────────────┘
-                       │ MCP · HTTP + X-PAYMENT
+                       │ MCP · HTTP + PAYMENT-SIGNATURE
         ┌──────────────▼───────────────────────────────────────┐
         │ Agent Commerce Gateway (yours) │
         │ │
@@ -209,7 +209,7 @@ See [docs/configuration.md](docs/configuration.md).
 | Protocol              | Status    | Pinned revision                    |
 | --------------------- | --------- | ---------------------------------- |
 | **MCP**               | Supported | `@modelcontextprotocol/sdk@1.30.0` |
-| **x402**              | Supported | `x402@1.2.0`, scheme `exact`, EVM  |
+| **x402**              | Supported | x402 v2 (`@x402/core`, `@x402/evm`), scheme `exact`, EVM |
 | **HTTP**              | Supported | native routes                      |
 | UCP                   | Planned   | —                                  |
 | ACP · MPP · A2A · AP2 | Planned   | —                                  |
@@ -244,7 +244,7 @@ PASS Config valid — 2 resource(s), merchant "Demo Data Store"
 PASS Gateway healthy and ready at http://127.0.0.1:8080
 PASS Backend 2/2 backend host(s) reachable
 PASS Protocols http=on mcp=on (/mcp)
-PASS Payments x402 enabled — network=base-sepolia, destination=0x7099…79C8, facilitator=local
+PASS Payments x402 v2 (scheme=exact) enabled — LOCAL on Base Sepolia (eip155:84532), destination=0x7099…79C8, facilitator=local
 INFO Payments (MPP) planned — not implemented in v0.1
 PASS Storage sqlite schema v1 writable; receipts=2
 PASS Protocol versions reported by gateway /.well-known/agent-commerce
@@ -277,14 +277,32 @@ reachable by anyone else, know the split:
 
 [SECURITY.md](SECURITY.md) states plainly what this does and does not protect.
 
-## Live settlement — not in this release
-
-**v0.1.0-alpha settles only against the local deterministic chain** (Anvil +
-MockUSDC). There is no live mode, no flag to enable one, and no partial path
-toward one: `facilitator.mode: "remote"` is rejected at config load, and the
-x402 provider's health check requires an Anvil-only RPC method, so `/ready`
-returns 503 against a real network. Settling real value is **planned**, not
-shipped — see [docs/payment-flow.md](docs/payment-flow.md).
+## Public networks
+
+**Base Sepolia settlement is demonstrated**, not merely configurable: USDC has
+moved from buyer to merchant through the public facilitator, with the gateway
+holding no key and paying no gas. The transaction is in
+[docs/testnet.md](docs/testnet.md). The deterministic local chain
+(Anvil + MockUSDC) is still what the default test suite covers.
+
+Base Sepolia (`eip155:84532`), Base mainnet (`eip155:8453`) and a remote HTTP
+facilitator can now be configured, with guardrails that refuse the combinations
+that lose money — mainnet needs an explicit `allowMainnet`, a remote
+facilitator over HTTPS with a credential, a non-development `payTo`, and the
+canonical USDC for the chain. Those are checked at config load, so
+`agent-commerce validate` catches them and the gateway will not start without
+them.
+
+A ready-to-run testnet config is in
+[`examples/base-sepolia/`](examples/base-sepolia/), and
+`npm run test:testnet` drives the whole flow against Base Sepolia and reads
+the balances and transaction receipt back off the chain to prove it. It needs
+a funded test wallet, skips itself without one, and is deliberately outside
+`npm test` and `npm run test:e2e` — both of those must stay offline.
+
+**Mainnet is a different claim, and it is not made.** `eip155:8453` is
+configurable and guarded, and no payment has been settled on it. See
+[docs/testnet.md](docs/testnet.md).
 
 ## Development
 
@@ -298,7 +316,7 @@ See [CONTRIBUTING.md](CONTRIBUTING.md).
 
 ## Roadmap
 
-**Now (v0.1.0-alpha)** — MCP, x402, receipts, doctor, deterministic demo.
+**Now (v0.2.0-beta)** — MCP, x402 v2, Base Sepolia settlement, receipts, doctor, deterministic demo.
 
 **Next** — OpenAPI import · a stronger conformance suite · a `doctor` GitHub
 Action · UCP · MPP · ACP · A2A · AP2 · Shopify and WooCommerce examples ·
@@ -315,6 +333,7 @@ discipline is a release requirement, not a mood.
 | [Payment flow](docs/payment-flow.md)           | the paid round trip, and every way it fails |
 | [Protocols](docs/protocols.md)                 | exactly what is and is not supported        |
 | [Configuration](docs/configuration.md)         | `config.yaml` reference                     |
+| [Base Sepolia](docs/testnet.md)                | running on a public testnet, and proving it |
 | [Security model](docs/security.md)             | trust boundaries, and what we do not defend |
 | [Contracts](docs/contracts.md)                 | the frozen cross-package contract           |
 | [Adapter guide](docs/contributing-adapters.md) | add a protocol or a payment rail            |

package/dist/{chunk-CZ6ZDAYD.js → chunk-ASK67X56.js}

@@ -18,8 +18,9 @@ var DEFAULT_BACKEND_TIMEOUT_MS = 1e4;
 
 // src/core/domain/wire.ts
 var PAYMENT_INPUT_FIELD = "_payment";
-var PAYMENT_HEADER = "x-payment";
-var PAYMENT_RESPONSE_HEADER = "x-payment-response";
+var PAYMENT_HEADER = "payment-signature";
+var PAYMENT_RESPONSE_HEADER = "payment-response";
+var PAYMENT_REQUIRED_HEADER = "payment-required";
 var DELIVERY_SUMMARY_META_KEY = "agent-commerce/delivery";
 function toDeliverySummary(outcome) {
   const p = outcome.payment;
@@ -56,7 +57,8 @@ function toPaymentRequiredEnvelope(outcome) {
       ...r.network !== void 0 ? { network: r.network } : {},
       ...r.asset !== void 0 ? { asset: r.asset } : {},
       ...r.expiresAt !== void 0 ? { expiresAt: r.expiresAt } : {},
-      accepts: r.challenge.accepts
+      accepts: r.challenge.accepts,
+      ...r.challenge.envelope !== void 0 ? { envelope: r.challenge.envelope } : {}
     }
   };
 }
@@ -185,8 +187,8 @@ var systemClock = {
   nowIso: () => (/* @__PURE__ */ new Date()).toISOString(),
   monotonicMs: () => performance.now()
 };
-var PACKAGE_VERSION = "0.1.0-alpha.0" ;
+var PACKAGE_VERSION = "0.2.0-beta.0" ;
 
-export { COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, NOOP_LOGGER, PACKAGE_VERSION, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_RESPONSE_HEADER, RETRYABLE_ERROR_CODES, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
-//# sourceMappingURL=chunk-CZ6ZDAYD.js.map
-//# sourceMappingURL=chunk-CZ6ZDAYD.js.map
+export { COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, NOOP_LOGGER, PACKAGE_VERSION, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, RETRYABLE_ERROR_CODES, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
+//# sourceMappingURL=chunk-ASK67X56.js.map
+//# sourceMappingURL=chunk-ASK67X56.js.map

package/dist/chunk-ASK67X56.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/domain/event.ts","../src/core/domain/resource.ts","../src/core/domain/wire.ts","../src/core/errors/codes.ts","../src/core/errors/commerce-error.ts","../src/core/interfaces/logger.ts","../src/core/interfaces/protocol-adapter.ts","../src/core/interfaces/runtime.ts","../src/version.ts"],"names":[],"mappings":";;;AAQO,IAAM,oBAAA,GAAuB;AAAA,EAClC,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;;;ACUO,IAAM,0BAAA,GAA6B;;;ACVnC,IAAM,mBAAA,GAAsB;AAU5B,IAAM,cAAA,GAAiB;AAGvB,IAAM,uBAAA,GAA0B;AAShC,IAAM,uBAAA,GAA0B;AAchC,IAAM,yBAAA,GAA4B;AAmElC,SAAS,kBAAkB,OAAA,EAA4C;AAC5E,EAAA,MAAM,IAAI,OAAA,CAAQ,OAAA;AAClB,EAAA,OAAO;AAAA,IACL,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,SAAA,EAAW,QAAQ,OAAA,CAAQ,EAAA;AAAA,IAC3B,WAAA,EAAa,QAAQ,OAAA,CAAQ,WAAA;AAAA,IAC7B,GAAI,MAAM,MAAA,GACN;AAAA,MACE,OAAA,EAAS;AAAA,QACP,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,GAAI,EAAE,iBAAA,KAAsB,MAAA,GACxB,EAAE,iBAAA,EAAmB,CAAA,CAAE,iBAAA,EAAkB,GACzC,EAAC;AAAA,QACL,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI;AAAC;AAC1D,QAEF;AAAC,GACP;AACF;AAEO,SAAS,0BACd,OAAA,EACyB;AACzB,EAAA,MAAM,IAAI,OAAA,CAAQ,WAAA;AAClB,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,kBAAA;AAAA,IACR,IAAA,EAAM,kBAAA;AAAA,IACN,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,OAAA,EAAS,CAAA,WAAA,EAAc,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,2BAAA,EAA8B,OAAA,CAAQ,UAAU,CAAA,gBAAA,EAAmB,CAAA,CAAE,QAAQ,CAAA,eAAA,CAAA;AAAA,IAC1H,OAAA,EAAS;AAAA,MACP,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,QAAQ,CAAA,CAAE,MAAA;AAAA,MACV,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI,EAAC;AAAA,MACxD,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,MAClD,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,MAC9D,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,GAAI,CAAA,CAAE,SAAA,CAAU,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,CAAA,CAAE,SAAA,CAAU,QAAA,EAAS,GAAI;AAAC;AACjF,GACF;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAqC;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,EAAO;AAC1B,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,IACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,IACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,GAChE;AACF;AAEO,SAAS,0BAA0B,KAAA,EAAkD;AAC1F,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,IAAA,IACT,MAAkC,MAAA,KAAW,kBAAA,IAC9C,OAAQ,KAAA,CAAkC,OAAA,KAAY,QAAA;AAE1D;;;ACvLO,IAAM,oBAAA,GAAuB;AAAA,EAClC,gBAAA;AAAA,EACA,oBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,8BAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAUO,IAAM,0BAAA,GAA0E;AAAA,EACrF,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,aAAA,EAAe,GAAA;AAAA,EACf,gBAAA,EAAkB,GAAA;AAAA,EAClB,eAAA,EAAiB,GAAA;AAAA,EACjB,gBAAA,EAAkB,GAAA;AAAA,EAClB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,yBAAA,EAA2B,GAAA;AAAA,EAC3B,eAAA,EAAiB,GAAA;AAAA,EACjB,aAAA,EAAe,GAAA;AAAA,EACf,oBAAA,EAAsB,GAAA;AAAA,EACtB,YAAA,EAAc,GAAA;AAAA,EACd,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB;AAClB;AAGO,IAAM,qBAAA,uBAA4D,GAAA,CAAI;AAAA,EAC3E,8BAAA;AAAA,EACA,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AACF,CAAC;;;AC3BM,IAAM,aAAA,GAAN,MAAM,cAAA,SAAsB,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAyB,OAAA,EAAiB,OAAA,GAAgC,EAAC,EAAG;AACxF,IAAA,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI,MAAS,CAAA;AACjF,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA,CAAQ,UAAA,IAAc,0BAAA,CAA2B,IAAI,CAAA;AACvE,IAAA,IAAA,CAAK,SAAA,GAAY,qBAAA,CAAsB,GAAA,CAAI,IAAI,CAAA;AAC/C,IAAA,IAAI,OAAA,CAAQ,OAAA,KAAY,MAAA,EAAW,IAAA,CAAK,UAAU,OAAA,CAAQ,OAAA;AAC1D,IAAA,IAAI,OAAA,CAAQ,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,aAAa,OAAA,CAAQ,UAAA;AAChE,IAAA,KAAA,CAAM,iBAAA,GAAoB,MAAM,cAAa,CAAA;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAA,GAA4B;AAC1B,IAAA,OAAO;AAAA,MACL,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,MACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,MACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,KAChE;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAwC;AACtE,EAAA,OAAO,KAAA,YAAiB,aAAA;AAC1B;AAsBO,SAAS,eAAA,CACd,KAAA,EACA,YAAA,GAAkC,gBAAA,EAClC,kBAAkB,2BAAA,EACH;AACf,EAAA,IAAI,eAAA,CAAgB,KAAK,CAAA,EAAG,OAAO,KAAA;AACnC,EAAA,OAAO,IAAI,aAAA,CAAc,YAAA,EAAc,iBAAiB,EAAE,KAAA,EAAO,OAAO,CAAA;AAC1E;;;ACjFO,IAAM,WAAA,GAAsB;AAAA,EACjC,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,OAAO,MAAM;AACf;;;ACiDO,SAAS,sBAAsB,OAAA,EAA0D;AAC9F,EAAA,OAAO,OAAQ,QAAgC,UAAA,KAAe,UAAA;AAChE;;;ACtDO,IAAM,WAAA,GAAqB;AAAA,EAChC,GAAA,EAAK,sBAAM,IAAI,IAAA,EAAK;AAAA,EACpB,MAAA,EAAQ,MAAA,iBAAM,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,EACrC,WAAA,EAAa,MAAM,WAAA,CAAY,GAAA;AACjC;ACOO,IAAM,eAAA,GACmC,cAAA","file":"chunk-ASK67X56.js","sourcesContent":["/**\n * Canonical commerce events.\n *\n * FROZEN CONTRACT. Every event in a single flow shares one `requestId` so that\n * logs, payment attempts, backend calls and receipts are correlatable.\n */\nimport type { IsoTimestamp } from './common.js';\n\nexport const COMMERCE_EVENT_TYPES = [\n  'resource.discovered',\n  'resource.requested',\n  'payment.required',\n  'payment.rejected',\n  'payment.verified',\n  'payment.settled',\n  'backend.called',\n  'backend.failed',\n  'resource.delivered',\n] as const;\n\nexport type CommerceEventType = (typeof COMMERCE_EVENT_TYPES)[number];\n\nexport interface CommerceEvent {\n  readonly id: string;\n  readonly type: CommerceEventType;\n  readonly requestId: string;\n  readonly resourceId?: string;\n  readonly at: IsoTimestamp;\n  /** Protocol adapter that originated the request, e.g. 'mcp' or 'http'. */\n  readonly adapter?: string;\n  readonly paymentProvider?: string;\n  readonly durationMs?: number;\n  readonly status?: 'ok' | 'error';\n  /** Non-secret, structured detail. Must never contain keys, headers or proofs. */\n  readonly data?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * Sink for canonical events.\n *\n * Implementations must be non-throwing from the caller's perspective: an event\n * sink failure must never fail an otherwise successful commerce flow.\n */\nexport interface EventSink {\n  emit(event: CommerceEvent): Promise<void>;\n}\n","/**\n * Canonical resource model.\n *\n * FROZEN CONTRACT.\n */\nimport type { DecimalAmount, JsonSchema, PaymentMethodName, ProtocolName } from './common.js';\n\n/** HTTP methods a backend handler may use. */\nexport type BackendMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n\n/**\n * Describes how the gateway calls the merchant's existing backend.\n *\n * Backend URLs are administrator-controlled configuration only. User- or\n * agent-controlled backend URLs are forbidden (see docs/security.md, SSRF).\n * Secret header values must come from `${ENV_VAR}` placeholders resolved by\n * the config loader, never from plaintext configuration.\n */\nexport interface BackendHandler {\n  readonly type: 'http';\n  readonly method: BackendMethod;\n  readonly url: string;\n  readonly headers?: Readonly<Record<string, string>>;\n  /** Hard upper bound on the backend call. Defaults to DEFAULT_BACKEND_TIMEOUT_MS. */\n  readonly timeoutMs?: number;\n}\n\n/** Default backend timeout when a resource does not specify one. */\nexport const DEFAULT_BACKEND_TIMEOUT_MS = 10_000;\n\n/**\n * Canonical pricing.\n *\n * `dynamic` exists in the type system for forward compatibility but is\n * REJECTED by config validation in this release.\n */\nexport type Pricing =\n  | { readonly type: 'free' }\n  | {\n      readonly type: 'fixed';\n      readonly amount: DecimalAmount;\n      readonly currency: string;\n    }\n  | {\n      readonly type: 'dynamic';\n      readonly resolver: string;\n    };\n\n/**\n * A merchant capability exposed to agents.\n *\n * The canonical resource is the single source of truth: protocol adapters map\n * it outward, they never define their own parallel notion of a resource.\n */\nexport interface CommerceResource {\n  readonly id: string;\n  readonly name: string;\n  readonly description?: string;\n  readonly inputSchema?: JsonSchema;\n  readonly outputSchema?: JsonSchema;\n  readonly handler: BackendHandler;\n  readonly pricing: Pricing;\n  readonly exposedVia: readonly ProtocolName[];\n  readonly paymentMethods: readonly PaymentMethodName[];\n}\n\n/** Read-only view of every configured resource. */\nexport interface ResourceRegistry {\n  get(id: string): CommerceResource | undefined;\n  list(): readonly CommerceResource[];\n  /** Resources exposed through a given protocol surface. */\n  listExposedVia(protocol: ProtocolName): readonly CommerceResource[];\n  has(id: string): boolean;\n}\n","/**\n * Gateway-defined wire envelopes.\n *\n * FROZEN CONTRACT. These are the *only* representations of \"payment required\"\n * and \"error\" that leave the gateway, whichever protocol carries them. The HTTP\n * routes, the MCP adapter and the demo buyer agent all use these helpers so the\n * three can never drift apart.\n */\n\nimport type { CommerceError, CommerceErrorCode } from '../errors/index.js';\nimport type { DecimalAmount, IsoTimestamp, PaymentMethodName } from './common.js';\nimport type { DeliveredOutcome, PaymentRequiredOutcome } from './request.js';\n\n/**\n * Reserved input property carrying a payment proof on protocols that have no\n * header channel (MCP tool calls). Over HTTP the `PAYMENT-SIGNATURE` header is\n * used.\n */\nexport const PAYMENT_INPUT_FIELD = '_payment';\n\n/**\n * HTTP request header carrying the payment proof.\n *\n * x402 v2 header names, lowercased because that is how Node presents incoming\n * headers. v1's `X-PAYMENT` / `X-PAYMENT-RESPONSE` pair is not accepted: this\n * gateway speaks one protocol version, and quietly honouring both would mean\n * two verification paths for the same money.\n */\nexport const PAYMENT_HEADER = 'payment-signature';\n\n/** HTTP response header carrying the settlement result. */\nexport const PAYMENT_RESPONSE_HEADER = 'payment-response';\n\n/**\n * HTTP response header carrying the base64 payment challenge on a 402.\n *\n * The 402 body still carries {@link PaymentRequiredEnvelope} — richer, and the\n * only channel MCP has — but an x402 v2 client reads the challenge from this\n * header and ignores the body, so both are sent.\n */\nexport const PAYMENT_REQUIRED_HEADER = 'payment-required';\n\n/**\n * Key under which a protocol adapter attaches a {@link DeliverySummary} to its\n * result metadata — MCP's `CallToolResult._meta`, and anywhere else a protocol\n * offers an out-of-band metadata channel.\n *\n * Frozen deliberately. The bug this whole mechanism exists to fix was two\n * surfaces disagreeing about what a payer gets back; a key name enforced only\n * by one side's tests would reintroduce exactly that drift. Producer and\n * consumer both import this constant.\n *\n * Follows MCP's `<namespace>/<name>` convention for `_meta` keys.\n */\nexport const DELIVERY_SUMMARY_META_KEY = 'agent-commerce/delivery';\n\nexport interface PaymentRequiredEnvelope {\n  readonly status: 'payment-required';\n  readonly code: 'PAYMENT_REQUIRED';\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly message: string;\n  readonly payment: {\n    readonly provider: PaymentMethodName;\n    readonly version: string;\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    readonly destination: string;\n    readonly network?: string;\n    readonly asset?: string;\n    readonly expiresAt?: IsoTimestamp;\n    /** Provider-native requirement objects, passed through verbatim. */\n    readonly accepts: readonly Readonly<Record<string, unknown>>[];\n    /**\n     * The provider's own challenge document, verbatim — see\n     * {@link PaymentChallenge.envelope}. Present for providers that have one;\n     * a buyer's protocol client can hand this straight to its SDK.\n     */\n    readonly envelope?: Readonly<Record<string, unknown>>;\n  };\n}\n\nexport interface ErrorEnvelope {\n  readonly status: 'error';\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * What a buyer learns about their own completed purchase.\n *\n * A payer is entitled to the record of their own transaction — the request it\n * belonged to, whether it settled, and the settlement reference they can check\n * on-chain. They are NOT entitled to the merchant's ledger, which is why\n * `/api/receipts` is an operator route behind `server.adminToken`.\n *\n * Before this existed the two surfaces disagreed: HTTP callers received a\n * settlement summary in the payment-response header while MCP callers received\n * nothing, so an MCP buyer's only route to their own receipt was the merchant's\n * ledger. Both surfaces now emit this same shape.\n */\nexport interface DeliverySummary {\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly receiptId: string;\n  readonly deliveredAt: IsoTimestamp;\n  readonly payment?: {\n    readonly status: 'verified' | 'settled' | 'rejected';\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    /** Settlement reference, e.g. an on-chain transaction hash. */\n    readonly externalReference?: string;\n    readonly network?: string;\n  };\n}\n\n/** Build the payer-facing summary of a delivered outcome. */\nexport function toDeliverySummary(outcome: DeliveredOutcome): DeliverySummary {\n  const p = outcome.payment;\n  return {\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    receiptId: outcome.receipt.id,\n    deliveredAt: outcome.receipt.deliveredAt,\n    ...(p !== undefined\n      ? {\n          payment: {\n            status: p.status,\n            amount: p.amount,\n            currency: p.currency,\n            ...(p.externalReference !== undefined\n              ? { externalReference: p.externalReference }\n              : {}),\n            ...(p.network !== undefined ? { network: p.network } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function toPaymentRequiredEnvelope(\n  outcome: PaymentRequiredOutcome,\n): PaymentRequiredEnvelope {\n  const r = outcome.requirement;\n  return {\n    status: 'payment-required',\n    code: 'PAYMENT_REQUIRED',\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    message: `Payment of ${r.amount} ${r.currency} is required for resource \"${outcome.resourceId}\". Retry with a ${r.provider} payment proof.`,\n    payment: {\n      provider: r.provider,\n      version: r.challenge.version,\n      amount: r.amount,\n      currency: r.currency,\n      destination: r.destination,\n      ...(r.network !== undefined ? { network: r.network } : {}),\n      ...(r.asset !== undefined ? { asset: r.asset } : {}),\n      ...(r.expiresAt !== undefined ? { expiresAt: r.expiresAt } : {}),\n      accepts: r.challenge.accepts,\n      ...(r.challenge.envelope !== undefined ? { envelope: r.challenge.envelope } : {}),\n    },\n  };\n}\n\nexport function toErrorEnvelope(error: CommerceError): ErrorEnvelope {\n  const info = error.toInfo();\n  return {\n    status: 'error',\n    code: info.code,\n    message: info.message,\n    retryable: info.retryable,\n    ...(info.requestId !== undefined ? { requestId: info.requestId } : {}),\n    ...(info.resourceId !== undefined ? { resourceId: info.resourceId } : {}),\n    ...(info.details !== undefined ? { details: info.details } : {}),\n  };\n}\n\nexport function isPaymentRequiredEnvelope(value: unknown): value is PaymentRequiredEnvelope {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as PaymentRequiredEnvelope).status === 'payment-required' &&\n    typeof (value as PaymentRequiredEnvelope).payment === 'object'\n  );\n}\n","/**\n * Typed domain error codes.\n *\n * FROZEN CONTRACT. Protocol adapters map these codes into their own response\n * format. Never throw a bare string or untyped Error across a package boundary.\n */\nexport const COMMERCE_ERROR_CODES = [\n  'CONFIG_INVALID',\n  'RESOURCE_NOT_FOUND',\n  'INPUT_INVALID',\n  'PAYMENT_REQUIRED',\n  'PAYMENT_INVALID',\n  'PAYMENT_REPLAYED',\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  'PAYMENT_SETTLEMENT_FAILED',\n  'BACKEND_TIMEOUT',\n  'BACKEND_ERROR',\n  'PROTOCOL_UNSUPPORTED',\n  'GATEWAY_BUSY',\n  'STORAGE_ERROR',\n  'INTERNAL_ERROR',\n] as const;\n\nexport type CommerceErrorCode = (typeof COMMERCE_ERROR_CODES)[number];\n\n/**\n * Canonical HTTP status for each error code.\n *\n * Paid resources fail closed: every payment failure maps to a 4xx/5xx status\n * and never to a successful delivery.\n */\nexport const COMMERCE_ERROR_HTTP_STATUS: Readonly<Record<CommerceErrorCode, number>> = {\n  CONFIG_INVALID: 500,\n  RESOURCE_NOT_FOUND: 404,\n  INPUT_INVALID: 400,\n  PAYMENT_REQUIRED: 402,\n  PAYMENT_INVALID: 402,\n  PAYMENT_REPLAYED: 409,\n  PAYMENT_PROVIDER_UNAVAILABLE: 503,\n  PAYMENT_SETTLEMENT_FAILED: 502,\n  BACKEND_TIMEOUT: 504,\n  BACKEND_ERROR: 502,\n  PROTOCOL_UNSUPPORTED: 501,\n  GATEWAY_BUSY: 503,\n  STORAGE_ERROR: 500,\n  INTERNAL_ERROR: 500,\n};\n\n/** Codes for which a client may reasonably retry the same request. */\nexport const RETRYABLE_ERROR_CODES: ReadonlySet<CommerceErrorCode> = new Set([\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  'BACKEND_TIMEOUT',\n  // Load shedding is transient by definition: the caller should back off and\n  // try again. Before this code existed the MCP adapter's queue-full path threw\n  // PROTOCOL_UNSUPPORTED — HTTP 501, retryable:false — so an agent framework\n  // keyed on the machine-readable flag (which exists precisely so clients need\n  // not parse prose) would read a momentary throttle as a permanent capability\n  // gap and stop calling the tool.\n  'GATEWAY_BUSY',\n]);\n","/**\n * The single error type crossing package boundaries.\n *\n * FROZEN CONTRACT.\n */\nimport {\n  COMMERCE_ERROR_HTTP_STATUS,\n  type CommerceErrorCode,\n  RETRYABLE_ERROR_CODES,\n} from './codes.js';\n\nexport interface CommerceErrorOptions {\n  /** Structured, non-secret detail safe to return to a client. */\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly cause?: unknown;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  /** Override the default HTTP status for this code. */\n  readonly httpStatus?: number;\n}\n\n/** Serialisable wire form of a CommerceError. */\nexport interface CommerceErrorInfo {\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\nexport class CommerceError extends Error {\n  readonly code: CommerceErrorCode;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n\n  constructor(code: CommerceErrorCode, message: string, options: CommerceErrorOptions = {}) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined);\n    this.name = 'CommerceError';\n    this.code = code;\n    this.httpStatus = options.httpStatus ?? COMMERCE_ERROR_HTTP_STATUS[code];\n    this.retryable = RETRYABLE_ERROR_CODES.has(code);\n    if (options.details !== undefined) this.details = options.details;\n    if (options.requestId !== undefined) this.requestId = options.requestId;\n    if (options.resourceId !== undefined) this.resourceId = options.resourceId;\n    Error.captureStackTrace?.(this, CommerceError);\n  }\n\n  /** Non-secret, client-safe representation. */\n  toInfo(): CommerceErrorInfo {\n    return {\n      code: this.code,\n      message: this.message,\n      httpStatus: this.httpStatus,\n      retryable: this.retryable,\n      ...(this.requestId !== undefined ? { requestId: this.requestId } : {}),\n      ...(this.resourceId !== undefined ? { resourceId: this.resourceId } : {}),\n      ...(this.details !== undefined ? { details: this.details } : {}),\n    };\n  }\n}\n\nexport function isCommerceError(value: unknown): value is CommerceError {\n  return value instanceof CommerceError;\n}\n\n/**\n * Normalise any thrown value into a CommerceError.\n *\n * Used at package boundaries so an unexpected failure never escapes untyped.\n *\n * SECURITY — do not \"improve\" this by propagating `value.message`.\n * `CommerceError.message` is client-visible: it is serialised by `toInfo()`\n * and `toErrorEnvelope()` and returned over HTTP and MCP. An arbitrary thrown\n * Error's message routinely carries internal detail — database connection\n * strings, internal hostnames, filesystem paths, backend URLs. Copying it into\n * a client-facing field turns every unexpected exception into an information\n * disclosure.\n *\n * The original value is preserved on `cause`, which is never serialised, so\n * logs and diagnostics keep the full detail while clients get only the\n * caller's deliberate, reviewed `fallbackMessage`.\n *\n * A caller that *wants* a specific client-facing message passes one:\n * toCommerceError(err, 'BACKEND_ERROR', 'Backend call failed')\n */\nexport function toCommerceError(\n  value: unknown,\n  fallbackCode: CommerceErrorCode = 'INTERNAL_ERROR',\n  fallbackMessage = 'Unexpected internal error',\n): CommerceError {\n  if (isCommerceError(value)) return value;\n  return new CommerceError(fallbackCode, fallbackMessage, { cause: value });\n}\n","/**\n * Minimal structural logger interface.\n *\n * Core must not depend on pino directly; the gateway injects a pino instance\n * that satisfies this shape. Never log secrets: private keys, seed phrases,\n * Authorization headers or payment authorisation payloads.\n */\nexport interface Logger {\n  debug(obj: Record<string, unknown>, msg?: string): void;\n  info(obj: Record<string, unknown>, msg?: string): void;\n  warn(obj: Record<string, unknown>, msg?: string): void;\n  error(obj: Record<string, unknown>, msg?: string): void;\n  child(bindings: Record<string, unknown>): Logger;\n}\n\n/** A logger that discards everything. Useful in unit tests. */\nexport const NOOP_LOGGER: Logger = {\n  debug: () => {},\n  info: () => {},\n  warn: () => {},\n  error: () => {},\n  child: () => NOOP_LOGGER,\n};\n","/**\n * Protocol adapter boundary.\n *\n * FROZEN CONTRACT. An adapter translates a protocol's wire format into a\n * `CanonicalRequest`, hands it to the execution pipeline and maps the outcome\n * back. It must not call merchant backends, implement payment logic, or hold\n * its own copy of the canonical model.\n *\n * Adapter isolation: a failure while starting or serving one adapter must not\n * prevent the others from operating.\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport type { AdapterDescriptor, AdapterHealth, ProtocolName } from '../domain/common.js';\nimport type { EventSink } from '../domain/event.js';\nimport type { ExecutionPipeline } from '../domain/request.js';\nimport type { ResourceRegistry } from '../domain/resource.js';\nimport type { Logger } from './logger.js';\nimport type { Clock, IdGenerator } from './runtime.js';\n\n/** Everything an adapter is given. Nothing else is available to it. */\nexport interface ProtocolAdapterContext {\n  readonly pipeline: ExecutionPipeline;\n  readonly resources: ResourceRegistry;\n  readonly events: EventSink;\n  readonly logger: Logger;\n  readonly clock: Clock;\n  readonly ids: IdGenerator;\n  /** Externally reachable base URL of the gateway, from config. */\n  readonly publicBaseUrl: string;\n}\n\nexport interface ProtocolAdapter {\n  readonly name: ProtocolName;\n  readonly descriptor: AdapterDescriptor;\n\n  start(context: ProtocolAdapterContext): Promise<void>;\n  health(): Promise<AdapterHealth>;\n  stop(): Promise<void>;\n}\n\n/**\n * A protocol adapter served over HTTP.\n *\n * The gateway mounts `handleHttp` at `mountPath` using raw Node request and\n * response objects, so adapters stay independent of the HTTP framework.\n *\n * GUARANTEE — the request body is **unconsumed**.\n *\n * `req` is handed over with its stream unread: the gateway suppresses every\n * body parser on this mount, so an adapter whose SDK reads the body itself\n * (MCP's Streamable HTTP transport does) can do so. The adapter owns reading,\n * size-limiting beyond the gateway's own cap, and parsing.\n *\n * This is load-bearing and easy to break silently. Fastify pre-registers\n * exact-match parsers for `application/json` and `text/plain` and prefers them\n * over a `'*'` wildcard, so registering only a wildcard no-op leaves the\n * built-in JSON parser draining the body first — the adapter then reads an\n * empty stream and every request fails to parse. That exact regression shipped\n * once and no unit test caught it, because adapter conformance suites drive\n * `handleHttp` over a bare `node:http` server and never traverse the gateway.\n *\n * Any change to how adapters are mounted must be covered by a test that POSTs\n * a real JSON body through the real gateway and asserts the adapter received\n * it intact.\n */\nexport interface HttpProtocolAdapter extends ProtocolAdapter {\n  /** Path prefix the gateway mounts this adapter at, e.g. '/mcp'. */\n  readonly mountPath: string;\n  handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void>;\n}\n\nexport function isHttpProtocolAdapter(adapter: ProtocolAdapter): adapter is HttpProtocolAdapter {\n  return typeof (adapter as HttpProtocolAdapter).handleHttp === 'function';\n}\n","/**\n * Injected runtime primitives.\n *\n * Everything non-deterministic (time, ids) is injected so tests can be exact.\n */\nimport type { IsoTimestamp } from '../domain/common.js';\n\nexport interface Clock {\n  now(): Date;\n  nowIso(): IsoTimestamp;\n  /** Milliseconds since an arbitrary origin; use for durations only. */\n  monotonicMs(): number;\n}\n\nexport interface IdGenerator {\n  /** Opaque, collision-resistant identifier. */\n  next(prefix?: string): string;\n}\n\nexport const systemClock: Clock = {\n  now: () => new Date(),\n  nowIso: () => new Date().toISOString(),\n  monotonicMs: () => performance.now(),\n};\n","/**\n * The package version, resolved once for the whole package.\n *\n * Two paths, deliberately:\n *\n * - **Development** reads the root manifest, so the number is always live.\n * - **The published bundle cannot.** tsup collapses `src/**` into\n * `dist/index.js` and `dist/cli/index.js`, so any `require('../../package.json')`\n * written against a source path resolves from the wrong depth once bundled —\n * which is exactly how this broke during the single-package refactor, and how\n * it earlier produced a CLI reporting `v0.0.0-unknown`. The build injects\n * `__OAC_PACKAGE_VERSION__` instead (see tsup.config.ts).\n *\n * `typeof` on an undeclared identifier is safe in JS, so the dev path is\n * unaffected by the constant not existing.\n */\nimport { createRequire } from 'node:module';\n\ndeclare const __OAC_PACKAGE_VERSION__: string | undefined;\n\nfunction readFromManifest(): string {\n  try {\n    const require = createRequire(import.meta.url);\n    // src/version.ts -> repository root\n    return (require('../package.json') as { version?: string }).version ?? '0.0.0-unknown';\n  } catch {\n    return '0.0.0-unknown';\n  }\n}\n\nexport const PACKAGE_VERSION: string =\n  typeof __OAC_PACKAGE_VERSION__ === 'string' ? __OAC_PACKAGE_VERSION__ : readFromManifest();\n"]}

package/dist/chunk-MQMKQGAB.js

@@ -0,0 +1,199 @@
+import { CommerceError } from './chunk-ASK67X56.js';
+
+// src/payments/x402/networks.ts
+var PROFILES = [
+  {
+    id: "eip155:84532",
+    chainId: 84532,
+    displayName: "Base Sepolia",
+    kind: "testnet",
+    canonicalAsset: { symbol: "USDC", address: "0x036CbD53842c5426634e7929541eC2318f3dCF7e" }
+  },
+  {
+    id: "eip155:8453",
+    chainId: 8453,
+    displayName: "Base",
+    kind: "mainnet",
+    canonicalAsset: { symbol: "USDC", address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913" }
+  }
+];
+var BY_ID = new Map(PROFILES.map((profile) => [profile.id, profile]));
+var SUPPORTED_NETWORK_IDS = PROFILES.map((p) => p.id);
+function requireNetworkProfile(id, path) {
+  const profile = BY_ID.get(id);
+  if (!profile) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `${path}: "${id}" is not a supported network. Supported CAIP-2 identifiers: ${SUPPORTED_NETWORK_IDS.join(", ")}`,
+      { details: { path, network: id } }
+    );
+  }
+  return profile;
+}
+function resolveDeploymentMode(profile, facilitatorMode) {
+  if (facilitatorMode === "local") return "local";
+  return profile.kind;
+}
+var LIVE_MAINNET_BANNER = "LIVE MAINNET MODE \u2014 REAL FUNDS";
+function describeDeploymentMode(mode) {
+  return mode === "mainnet" ? LIVE_MAINNET_BANNER : mode.toUpperCase();
+}
+
+// src/payments/x402/local-chain/accounts.ts
+var ANVIL_WELL_KNOWN_ACCOUNTS = [
+  {
+    address: "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+    privateKey: "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"
+  },
+  {
+    address: "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+    privateKey: "0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d"
+  },
+  {
+    address: "0x3C44CdDdB6a900fa2b585dd299e03d12FA4293BC",
+    privateKey: "0x5de4111afa1a4b94908f83103eb1f1706367c2e68ca870fc3fb9a804cdab365a"
+  }
+];
+
+// src/payments/x402/dev-key-guard.ts
+var WELL_KNOWN_DEV_KEYS = new Set(
+  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase())
+);
+var WELL_KNOWN_DEV_ADDRESSES = new Set(
+  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase())
+);
+var PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;
+function isWellKnownDevKey(privateKey) {
+  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());
+}
+function isWellKnownDevAddress(address) {
+  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());
+}
+function isLikelyLocalOrPrivateHost(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (h === "localhost" || h === "127.0.0.1" || h === "::1") return true;
+  if (/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^192\.168\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (!h.includes(".") && !h.includes(":")) return true;
+  return false;
+}
+function parseHostnameOrThrow(rpcUrl) {
+  try {
+    return new URL(rpcUrl).hostname;
+  } catch (cause) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `x402 provider: rpcUrl "${rpcUrl}" is not a valid URL`,
+      { cause }
+    );
+  }
+}
+function assertDevKeyIsLocalOnly(rpcUrl, signerPrivateKey) {
+  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key (expected "0x" followed by exactly 64 hex characters).'
+    );
+  }
+  if (!isWellKnownDevKey(signerPrivateKey)) return;
+  const hostname = parseHostnameOrThrow(rpcUrl);
+  if (!isLikelyLocalOrPrivateHost(hostname)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl "${rpcUrl}" does not look like a local/private chain. A public dev key must never sign against a public network \u2014 it is instantly drainable and can grief real settlements via nonce exhaustion. Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.`
+    );
+  }
+}
+function assertPayToIsNotDevAddress(rpcUrl, payTo) {
+  if (!isWellKnownDevAddress(payTo)) return;
+  const hostname = parseHostnameOrThrow(rpcUrl);
+  if (!isLikelyLocalOrPrivateHost(hostname)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `x402 provider: "payTo" (${payTo}) is a well-known Anvil development address, but rpcUrl "${rpcUrl}" does not look like a local/private chain. The private key behind that address is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set "payTo" to your own merchant wallet for any non-local RPC, or point rpcUrl at your local/dev chain.`
+    );
+  }
+}
+
+// src/payments/x402/guardrails.ts
+function invalid(message, path) {
+  return new CommerceError("CONFIG_INVALID", message, { details: { path } });
+}
+function resolveX402Deployment(input) {
+  const profile = requireNetworkProfile(input.network, "payments.x402.network");
+  const mode = resolveDeploymentMode(profile, input.facilitator.mode);
+  if (profile.kind === "mainnet" && input.facilitator.mode === "local") {
+    throw invalid(
+      `payments.x402: network "${profile.id}" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode "local". A mainnet deployment must settle through a remote facilitator.`,
+      "payments.x402.facilitator.mode"
+    );
+  }
+  if (mode === "mainnet" && input.allowMainnet !== true) {
+    throw invalid(
+      `payments.x402: network "${profile.id}" (${profile.displayName}) settles real funds. Set payments.x402.allowMainnet: true to acknowledge this explicitly \u2014 it is never the default.`,
+      "payments.x402.allowMainnet"
+    );
+  }
+  if (input.facilitator.mode === "remote") {
+    assertFacilitatorUrlIsSafe(input.facilitator.url, mode);
+    if (mode === "mainnet" && input.facilitator.auth.type === "none") {
+      throw invalid(
+        "payments.x402: a mainnet facilitator must be authenticated. Set payments.x402.facilitator.auth to a supported type \u2014 an unauthenticated production facilitator is refused.",
+        "payments.x402.facilitator.auth"
+      );
+    }
+    if (input.facilitator.auth.type === "bearer" && input.facilitator.auth.token.trim() === "") {
+      throw invalid(
+        'payments.x402: facilitator.auth.type is "bearer" but the token is empty. An empty credential is refused rather than sent.',
+        "payments.x402.facilitator.auth.token"
+      );
+    }
+  }
+  if (mode !== "local" && isWellKnownDevAddress(input.payTo)) {
+    throw invalid(
+      `payments.x402: "payTo" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set payTo to your own merchant wallet.`,
+      "payments.x402.payTo"
+    );
+  }
+  const canonical = profile.canonicalAsset;
+  if (mode === "mainnet" && canonical && !sameAddress(input.asset, canonical.address)) {
+    throw invalid(
+      `payments.x402: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). Settling a mainnet payment in an unintended token is refused.`,
+      "payments.x402.asset"
+    );
+  }
+  return { profile, mode };
+}
+function assertFacilitatorUrlIsSafe(url, mode) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch (cause) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `payments.x402: facilitator.url "${url}" is not a valid URL`,
+      { cause, details: { path: "payments.x402.facilitator.url" } }
+    );
+  }
+  if (parsed.protocol === "https:") return;
+  if (parsed.protocol !== "http:") {
+    throw invalid(
+      `payments.x402: facilitator.url must be https (or http on a local/private host); got "${parsed.protocol}//"`,
+      "payments.x402.facilitator.url"
+    );
+  }
+  if (mode !== "mainnet" && isLikelyLocalOrPrivateHost(parsed.hostname)) return;
+  throw invalid(
+    `payments.x402: facilitator.url "${url}" uses plain HTTP. Payment authorisations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,
+    "payments.x402.facilitator.url"
+  );
+}
+function sameAddress(a, b) {
+  return a.toLowerCase() === b.toLowerCase();
+}
+
+export { SUPPORTED_NETWORK_IDS, assertDevKeyIsLocalOnly, assertPayToIsNotDevAddress, describeDeploymentMode, requireNetworkProfile, resolveDeploymentMode, resolveX402Deployment };
+//# sourceMappingURL=chunk-MQMKQGAB.js.map
+//# sourceMappingURL=chunk-MQMKQGAB.js.map

package/dist/chunk-MQMKQGAB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/payments/x402/networks.ts","../src/payments/x402/local-chain/accounts.ts","../src/payments/x402/dev-key-guard.ts","../src/payments/x402/guardrails.ts"],"names":[],"mappings":";;;AAqCA,IAAM,QAAA,GAAsC;AAAA,EAC1C;AAAA,IACE,EAAA,EAAI,cAAA;AAAA,IACJ,OAAA,EAAS,KAAA;AAAA,IACT,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,4CAAA;AAA6C,GAC1F;AAAA,EACA;AAAA,IACE,EAAA,EAAI,aAAA;AAAA,IACJ,OAAA,EAAS,IAAA;AAAA,IACT,WAAA,EAAa,MAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAS,4CAAA;AAA6C;AAE5F,CAAA;AAEA,IAAM,KAAA,GAAQ,IAAI,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,CAAC,OAAA,CAAQ,EAAA,EAAI,OAAO,CAAC,CAAC,CAAA;AAE/D,IAAM,wBAA2C,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE;AAMzE,SAAS,qBAAA,CAAsB,IAAY,IAAA,EAA8B;AAC9E,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,EAAE,CAAA;AAC5B,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,EAAG,IAAI,CAAA,GAAA,EAAM,EAAE,+DAA+D,qBAAA,CAAsB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MAC9G,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,IAAG;AAAE,KACnC;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAaO,SAAS,qBAAA,CACd,SACA,eAAA,EACgB;AAChB,EAAA,IAAI,eAAA,KAAoB,SAAS,OAAO,OAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAA;AACjB;AAGO,IAAM,mBAAA,GAAsB,qCAAA;AAE5B,SAAS,uBAAuB,IAAA,EAA8B;AACnE,EAAA,OAAO,IAAA,KAAS,SAAA,GAAY,mBAAA,GAAsB,IAAA,CAAK,WAAA,EAAY;AACrE;;;AC9EO,IAAM,yBAAA,GAIT;AAAA,EACF;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA,GACd;AAAA,EACA;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA,GACd;AAAA,EACA;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA;AAEhB,CAAA;;;ACjBA,IAAM,sBAA2C,IAAI,GAAA;AAAA,EACnD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,aAAa;AACjE,CAAA;AAEA,IAAM,2BAAgD,IAAI,GAAA;AAAA,EACxD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,aAAa;AAC9D,CAAA;AAGA,IAAM,iBAAA,GAAoB,qBAAA;AAEnB,SAAS,kBAAkB,UAAA,EAA6B;AAC7D,EAAA,OAAO,mBAAA,CAAoB,GAAA,CAAI,UAAA,CAAW,WAAA,EAAa,CAAA;AACzD;AAEO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,OAAO,wBAAA,CAAyB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,CAAA;AAC3D;AAeO,SAAS,2BAA2B,QAAA,EAA2B;AACpE,EAAA,MAAM,IAAI,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,YAAY,EAAE,CAAA;AACvD,EAAA,IAAI,MAAM,WAAA,IAAe,CAAA,KAAM,WAAA,IAAe,CAAA,KAAM,OAAO,OAAO,IAAA;AAClE,EAAA,IAAI,kCAAA,CAAmC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACvD,EAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACtD,EAAA,IAAI,8BAAA,CAA+B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACnD,EAAA,IAAI,6CAAA,CAA8C,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAClE,EAAA,IAAI,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,IAAK,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AACjD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,0BAA0B,MAAM,CAAA,oBAAA,CAAA;AAAA,MAChC,EAAE,KAAA;AAAM,KACV;AAAA,EACF;AACF;AAaO,SAAS,uBAAA,CAAwB,QAAgB,gBAAA,EAAgC;AACtF,EAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,gBAAgB,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,iBAAA,CAAkB,gBAAgB,CAAA,EAAG;AAE1C,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,kGACM,MAAM,CAAA,sRAAA;AAAA,KAGd;AAAA,EACF;AACF;AAeO,SAAS,0BAAA,CAA2B,QAAgB,KAAA,EAAqB;AAC9E,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AAEnC,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,KAAK,CAAA,yDAAA,EAC1B,MAAM,CAAA,6QAAA;AAAA,KAId;AAAA,EACF;AACF;;;ACjFA,SAAS,OAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAOO,SAAS,sBAAsB,KAAA,EAA4C;AAChF,EAAA,MAAM,OAAA,GAAU,qBAAA,CAAsB,KAAA,CAAM,OAAA,EAAS,uBAAuB,CAAA;AAC5E,EAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,OAAA,EAAS,KAAA,CAAM,YAAY,IAAI,CAAA;AAKlE,EAAA,IAAI,QAAQ,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,WAAA,CAAY,SAAS,OAAA,EAAS;AACpE,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,wBAAA,EAA2B,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,QAAQ,WAAW,CAAA,+HAAA,CAAA;AAAA,MAC9D;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,YAAA,KAAiB,IAAA,EAAM;AACrD,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,wBAAA,EAA2B,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,QAAQ,WAAW,CAAA,yHAAA,CAAA;AAAA,MAC9D;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,QAAA,EAAU;AACvC,IAAA,0BAAA,CAA2B,KAAA,CAAM,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA;AACtD,IAAA,IAAI,SAAS,SAAA,IAAa,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,SAAS,MAAA,EAAQ;AAChE,MAAA,MAAM,OAAA;AAAA,QACJ,iLAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,KAAA,CAAM,IAAA,EAAK,KAAM,EAAA,EAAI;AAC1F,MAAA,MAAM,OAAA;AAAA,QACJ,2HAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAMA,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,qBAAA,CAAsB,KAAA,CAAM,KAAK,CAAA,EAAG;AAC1D,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,wBAAA,EAA2B,KAAA,CAAM,KAAK,CAAA,0DAAA,EAA6D,IAAI,CAAA,wFAAA,CAAA;AAAA,MACvG;AAAA,KACF;AAAA,EACF;AAIA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,IAAI,IAAA,KAAS,aAAa,SAAA,IAAa,CAAC,YAAY,KAAA,CAAM,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,EAAG;AACnF,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,qBAAA,EAAwB,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,CAAA,gEAAA,CAAA;AAAA,MACvH;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAQA,SAAS,0BAAA,CAA2B,KAAa,IAAA,EAA4B;AAC3E,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,mCAAmC,GAAG,CAAA,oBAAA,CAAA;AAAA,MACtC,EAAE,KAAA,EAAO,OAAA,EAAS,EAAE,IAAA,EAAM,iCAAgC;AAAE,KAC9D;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAClC,EAAA,IAAI,MAAA,CAAO,aAAa,OAAA,EAAS;AAC/B,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,qFAAA,EAAwF,OAAO,QAAQ,CAAA,GAAA,CAAA;AAAA,MACvG;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,0BAAA,CAA2B,MAAA,CAAO,QAAQ,CAAA,EAAG;AAEvE,EAAA,MAAM,OAAA;AAAA,IACJ,mCAAmC,GAAG,CAAA,mKAAA,CAAA;AAAA,IACtC;AAAA,GACF;AACF;AAEA,SAAS,WAAA,CAAY,GAAW,CAAA,EAAoB;AAClD,EAAA,OAAO,CAAA,CAAE,WAAA,EAAY,KAAM,CAAA,CAAE,WAAA,EAAY;AAC3C","file":"chunk-MQMKQGAB.js","sourcesContent":["/**\n * The networks this gateway will settle on, as data.\n *\n * x402 v2 identifies a network by its CAIP-2 id, so the only thing an\n * operator has to change to move between environments is that string. What\n * the code needs on top of it — the chain id to sign against, a name a human\n * recognises, and whether real money is involved — lives here rather than\n * being derived at each call site.\n *\n * A registry rather than \"parse any `eip155:*`\" on purpose. The chain id is\n * parseable from any such string, but `mainnet` is not, and every guardrail in\n * `guardrails.ts` keys off it. An unknown id is refused at startup instead of\n * being quietly treated as a testnet.\n *\n * Base Sepolia and the local dev chain share the id `eip155:84532`: the local\n * chain deliberately reuses Base Sepolia's chain id so the unmodified x402 SDK\n * can talk to it. Nothing may infer \"public network\" from the network id alone\n * — that is what `resolveDeploymentMode` and the Anvil probe in `provider.ts`\n * are for.\n */\nimport { CommerceError } from '../../core/index.js';\n\nexport interface NetworkProfile {\n  /** CAIP-2 identifier, e.g. `eip155:84532`. */\n  readonly id: string;\n  /** Signed into the buyer's EIP-712 domain. */\n  readonly chainId: number;\n  readonly displayName: string;\n  readonly kind: 'testnet' | 'mainnet';\n  /**\n   * The USDC deployment this network is expected to settle in. Enforced only\n   * on mainnet (see `guardrails.ts`) — a testnet is where a mock token is a\n   * legitimate thing to point at.\n   */\n  readonly canonicalAsset?: { readonly symbol: string; readonly address: string };\n}\n\nconst PROFILES: readonly NetworkProfile[] = [\n  {\n    id: 'eip155:84532',\n    chainId: 84532,\n    displayName: 'Base Sepolia',\n    kind: 'testnet',\n    canonicalAsset: { symbol: 'USDC', address: '0x036CbD53842c5426634e7929541eC2318f3dCF7e' },\n  },\n  {\n    id: 'eip155:8453',\n    chainId: 8453,\n    displayName: 'Base',\n    kind: 'mainnet',\n    canonicalAsset: { symbol: 'USDC', address: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' },\n  },\n];\n\nconst BY_ID = new Map(PROFILES.map((profile) => [profile.id, profile]));\n\nexport const SUPPORTED_NETWORK_IDS: readonly string[] = PROFILES.map((p) => p.id);\n\nexport function findNetworkProfile(id: string): NetworkProfile | undefined {\n  return BY_ID.get(id);\n}\n\nexport function requireNetworkProfile(id: string, path: string): NetworkProfile {\n  const profile = BY_ID.get(id);\n  if (!profile) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `${path}: \"${id}\" is not a supported network. Supported CAIP-2 identifiers: ${SUPPORTED_NETWORK_IDS.join(', ')}`,\n      { details: { path, network: id } },\n    );\n  }\n  return profile;\n}\n\n/**\n * What this deployment actually is, as opposed to what it is called.\n *\n * `local` is a property of the *facilitator*, not the network: settling\n * through the in-process facilitator against a dev node is local regardless of\n * the CAIP-2 id that node answers to. This distinction is the whole reason\n * diagnostics can say `eip155:84532` without claiming to be on public Base\n * Sepolia.\n */\nexport type DeploymentMode = 'local' | 'testnet' | 'mainnet';\n\nexport function resolveDeploymentMode(\n  profile: NetworkProfile,\n  facilitatorMode: 'local' | 'remote',\n): DeploymentMode {\n  if (facilitatorMode === 'local') return 'local';\n  return profile.kind;\n}\n\n/** The banner an operator must not be able to miss. Never printed for anything else. */\nexport const LIVE_MAINNET_BANNER = 'LIVE MAINNET MODE — REAL FUNDS';\n\nexport function describeDeploymentMode(mode: DeploymentMode): string {\n  return mode === 'mainnet' ? LIVE_MAINNET_BANNER : mode.toUpperCase();\n}\n","/**\n * Anvil's well-known development accounts.\n *\n * LOCAL DEVELOPMENT ONLY — DO NOT FUND. These addresses and private keys are\n * derived from Foundry's public, well-documented default test mnemonic\n * (\"test test test test test test test test test test test junk\") and are\n * known to everyone who has ever run `anvil`. Anyone who sends real value to\n * one of these addresses on a real network will lose it.\n *\n * Index layout used by the local demo chain (see docs/contracts.md):\n * 0 — deployer / local facilitator signer (pays gas, broadcasts settlement)\n * 1 — merchant settlement destination (`payTo`)\n * 2 — buyer (signs EIP-3009 authorisations; never held by the gateway)\n */\nexport interface AnvilWellKnownAccount {\n  readonly address: `0x${string}`;\n  readonly privateKey: `0x${string}`;\n}\n\n/** Fixed-length tuple (not a bare array) so indexing by the documented layout above is fully typed. */\nexport const ANVIL_WELL_KNOWN_ACCOUNTS: readonly [\n  AnvilWellKnownAccount,\n  AnvilWellKnownAccount,\n  AnvilWellKnownAccount,\n] = [\n  {\n    address: '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266',\n    privateKey: '0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80',\n  },\n  {\n    address: '0x70997970C51812dc3A010C7d01b50e0d17dc79C8',\n    privateKey: '0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d',\n  },\n  {\n    address: '0x3C44CdDdB6a900fa2b585dd299e03d12FA4293BC',\n    privateKey: '0x5de4111afa1a4b94908f83103eb1f1706367c2e68ca870fc3fb9a804cdab365a',\n  },\n];\n\nexport const LOCAL_FACILITATOR_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[0];\nexport const LOCAL_MERCHANT_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[1];\nexport const LOCAL_BUYER_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[2];\n\n/** Safe label used everywhere a dev key appears in output, logs or manifests. */\nexport const DEV_KEY_LABEL = 'LOCAL DEVELOPMENT ONLY - DO NOT FUND';\n","/**\n * Prevents a well-known Anvil development private key — or a well-known\n * Anvil development *address* — from ever being used against anything other\n * than a loopback/private/dev RPC. Two symmetric mistakes, both covered:\n * signing settlement with a dev key (`assertDevKeyIsLocalOnly`), and routing\n * settlement revenue to a dev address (`assertPayToIsNotDevAddress`). The\n * second is the more consequential of the two — a wrong key merely fails to\n * sign, a wrong payTo silently succeeds and gives the money away, since the\n * private key behind every well-known Anvil address is public knowledge.\n *\n * Chain id alone cannot tell a real network from this project's local dev\n * chain: Base Sepolia's own chain id is 84532, the same id this project\n * deliberately reuses for the local chain so the unmodified x402 SDK can talk\n * to it. A dev key or dev payTo pointed at a real RPC by a config mistake is\n * instantly drainable — this is checked once at provider construction, not per\n * payment.\n */\nimport { CommerceError } from '../../core/index.js';\nimport { ANVIL_WELL_KNOWN_ACCOUNTS } from './local-chain/accounts.js';\n\nconst WELL_KNOWN_DEV_KEYS: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase()),\n);\n\nconst WELL_KNOWN_DEV_ADDRESSES: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase()),\n);\n\n/** `0x` + 64 hex chars — the only shape `privateKeyToAccount` accepts. */\nconst PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;\n\nexport function isWellKnownDevKey(privateKey: string): boolean {\n  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());\n}\n\nexport function isWellKnownDevAddress(address: string): boolean {\n  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());\n}\n\n/**\n * True for loopback addresses, RFC1918 private ranges, and bare (dot-free)\n * hostnames — the shape of a docker-compose/k8s service name (e.g.\n * \"anvil\"), which a real public DNS name essentially never has.\n *\n * ASSUMPTION, and the loosest edge of this guard: every dot-free, colon-free\n * hostname is treated as private, with no exceptions. A single-label *public* hostname (no dots) is\n * essentially nonexistent in practice — ICANN does not delegate bare\n * gTLDs/TLDs as public A/AAAA records — but this function cannot tell \"no\n * dots because it's a compose service name\" from \"no dots because it's an\n * unusual real host\" if one somehow existed. If that assumption ever stops\n * holding, this is the line to revisit.\n */\nexport function isLikelyLocalOrPrivateHost(hostname: string): boolean {\n  const h = hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (h === 'localhost' || h === '127.0.0.1' || h === '::1') return true;\n  if (/^127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^10\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^192\\.168\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^172\\.(1[6-9]|2\\d|3[01])\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (!h.includes('.') && !h.includes(':')) return true; // bare hostname\n  return false;\n}\n\nfunction parseHostnameOrThrow(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).hostname;\n  } catch (cause) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: rpcUrl \"${rpcUrl}\" is not a valid URL`,\n      { cause },\n    );\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if a well-known dev key would sign against a non-local\n * RPC — or if `signerPrivateKey` isn't shaped like a private key at all.\n *\n * The shape check runs first and unconditionally. \"Not a key I recognise\"\n * (falls through `isWellKnownDevKey`, silently treated as someone's own real\n * facilitator key) and \"not a key at all\" (e.g. a truncated 63-char string)\n * must never share a code path: a malformed key that slips past this guard\n * only fails later, inside `settle()`, after the buyer's replayKey is already\n * reserved.\n */\nexport function assertDevKeyIsLocalOnly(rpcUrl: string, signerPrivateKey: string): void {\n  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key ' +\n        '(expected \"0x\" followed by exactly 64 hex characters).',\n    );\n  }\n\n  if (!isWellKnownDevKey(signerPrivateKey)) return; // a real facilitator key: not our business\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl ' +\n        `\"${rpcUrl}\" does not look like a local/private chain. A public dev key must never sign against ` +\n        'a public network — it is instantly drainable and can grief real settlements via nonce exhaustion. ' +\n        'Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.',\n    );\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `payTo` (the settlement destination) is a\n * well-known Anvil development address and `rpcUrl` doesn't look\n * local/private.\n *\n * Mirrors `assertDevKeyIsLocalOnly`, but guards the *receiving* side of the\n * payment instead of the signing side, and — unlike the key guard — applies\n * regardless of facilitator mode: which account signs the settlement\n * transaction has no bearing on whether the destination address is one whose\n * private key is public knowledge. `agent-commerce init` defaults `payTo` to\n * a well-known Anvil address as a local-demo convenience; on a real network\n * that default routes every payment to an address anyone on earth can sweep.\n */\nexport function assertPayToIsNotDevAddress(rpcUrl: string, payTo: string): void {\n  if (!isWellKnownDevAddress(payTo)) return; // not a dev address: not our business\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: \"payTo\" (${payTo}) is a well-known Anvil development address, but rpcUrl ` +\n        `\"${rpcUrl}\" does not look like a local/private chain. The private key behind that address ` +\n        'is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set ' +\n        '\"payTo\" to your own merchant wallet for any non-local RPC, or point rpcUrl at your ' +\n        'local/dev chain.',\n    );\n  }\n}\n","/**\n * Everything that must be true before this gateway is allowed to settle a\n * payment on the configured network.\n *\n * One definition, two callers: the provider runs it at construction so a\n * library consumer who never touches our config loader still gets the checks,\n * and `doctor` runs it against the parsed config so an operator sees the same\n * verdict without starting the gateway. Sharing a *call* is not sharing a\n * definition — the checks live here, and nothing re-implements them.\n *\n * Every failure is a startup failure. None of these are request-time\n * decisions: a deployment that is unsafe is unsafe before the first buyer\n * arrives, and finding out during `settle()` means the buyer's authorisation\n * is already burned.\n *\n * Peer-free by construction (no viem, no `@x402/*`) so the CLI can import it.\n */\nimport { CommerceError } from '../../core/index.js';\nimport { isLikelyLocalOrPrivateHost, isWellKnownDevAddress } from './dev-key-guard.js';\nimport {\n  type DeploymentMode,\n  type NetworkProfile,\n  requireNetworkProfile,\n  resolveDeploymentMode,\n} from './networks.js';\n\n/**\n * How the gateway authenticates to a remote facilitator.\n *\n * Deliberately generic: x402 facilitators are not a Coinbase-only category,\n * and a scheme that only fits one vendor's credentials would make the\n * abstraction a fiction. `bearer` covers every facilitator that takes a static\n * token; a facilitator needing per-request signed credentials (CDP's JWT among\n * them) is not supported yet and is refused rather than silently sent nothing.\n */\nexport type FacilitatorAuth =\n  | { readonly type: 'none' }\n  | { readonly type: 'bearer'; readonly token: string };\n\nexport type X402FacilitatorConfig =\n  | { readonly mode: 'local'; readonly signerPrivateKey: string }\n  | { readonly mode: 'remote'; readonly url: string; readonly auth: FacilitatorAuth };\n\nexport interface X402DeploymentInput {\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset: string;\n  readonly facilitator: X402FacilitatorConfig;\n  /** Required, and required to be `true`, before anything settles on a mainnet. */\n  readonly allowMainnet?: boolean;\n}\n\nexport interface X402Deployment {\n  readonly profile: NetworkProfile;\n  readonly mode: DeploymentMode;\n}\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\n/**\n * Resolves the deployment and refuses every combination that could move real\n * money by accident. Order matters only in that the network must resolve\n * first; the rest are independent.\n */\nexport function resolveX402Deployment(input: X402DeploymentInput): X402Deployment {\n  const profile = requireNetworkProfile(input.network, 'payments.x402.network');\n  const mode = resolveDeploymentMode(profile, input.facilitator.mode);\n\n  // The in-process facilitator signs with a key this process holds. On a\n  // mainnet that is a hot wallet inside the resource server — the arrangement\n  // this project exists to avoid — so it is not a warning, it is refused.\n  if (profile.kind === 'mainnet' && input.facilitator.mode === 'local') {\n    throw invalid(\n      `payments.x402: network \"${profile.id}\" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode \"local\". A mainnet deployment must settle through a remote facilitator.`,\n      'payments.x402.facilitator.mode',\n    );\n  }\n\n  if (mode === 'mainnet' && input.allowMainnet !== true) {\n    throw invalid(\n      `payments.x402: network \"${profile.id}\" (${profile.displayName}) settles real funds. Set payments.x402.allowMainnet: true to acknowledge this explicitly — it is never the default.`,\n      'payments.x402.allowMainnet',\n    );\n  }\n\n  if (input.facilitator.mode === 'remote') {\n    assertFacilitatorUrlIsSafe(input.facilitator.url, mode);\n    if (mode === 'mainnet' && input.facilitator.auth.type === 'none') {\n      throw invalid(\n        'payments.x402: a mainnet facilitator must be authenticated. Set payments.x402.facilitator.auth to a supported type — an unauthenticated production facilitator is refused.',\n        'payments.x402.facilitator.auth',\n      );\n    }\n    if (input.facilitator.auth.type === 'bearer' && input.facilitator.auth.token.trim() === '') {\n      throw invalid(\n        'payments.x402: facilitator.auth.type is \"bearer\" but the token is empty. An empty credential is refused rather than sent.',\n        'payments.x402.facilitator.auth.token',\n      );\n    }\n  }\n\n  // The private key behind every well-known Anvil address is public knowledge.\n  // `dev-key-guard` already refuses one against a public *RPC*; this refuses\n  // one on any non-local *deployment*, which is the case a remote facilitator\n  // creates — there the RPC host says nothing about where settlement lands.\n  if (mode !== 'local' && isWellKnownDevAddress(input.payTo)) {\n    throw invalid(\n      `payments.x402: \"payTo\" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set payTo to your own merchant wallet.`,\n      'payments.x402.payTo',\n    );\n  }\n\n  // Mainnet only. A testnet is exactly where pointing at a mock token is the\n  // right thing to do, so the same check there would block the normal case.\n  const canonical = profile.canonicalAsset;\n  if (mode === 'mainnet' && canonical && !sameAddress(input.asset, canonical.address)) {\n    throw invalid(\n      `payments.x402: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). Settling a mainnet payment in an unintended token is refused.`,\n      'payments.x402.asset',\n    );\n  }\n\n  return { profile, mode };\n}\n\n/**\n * A facilitator sees every payment authorisation this gateway handles. Plain\n * HTTP to one on a public network puts those on the wire in the clear and\n * lets anyone in the path rewrite a settlement result, so it is allowed only\n * where the endpoint cannot leave the host — a local or private address.\n */\nfunction assertFacilitatorUrlIsSafe(url: string, mode: DeploymentMode): void {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch (cause) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `payments.x402: facilitator.url \"${url}\" is not a valid URL`,\n      { cause, details: { path: 'payments.x402.facilitator.url' } },\n    );\n  }\n\n  if (parsed.protocol === 'https:') return;\n  if (parsed.protocol !== 'http:') {\n    throw invalid(\n      `payments.x402: facilitator.url must be https (or http on a local/private host); got \"${parsed.protocol}//\"`,\n      'payments.x402.facilitator.url',\n    );\n  }\n  if (mode !== 'mainnet' && isLikelyLocalOrPrivateHost(parsed.hostname)) return;\n\n  throw invalid(\n    `payments.x402: facilitator.url \"${url}\" uses plain HTTP. Payment authorisations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,\n    'payments.x402.facilitator.url',\n  );\n}\n\nfunction sameAddress(a: string, b: string): boolean {\n  return a.toLowerCase() === b.toLowerCase();\n}\n"]}

package/dist/cli/index.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node