@dexterai/x402 1.9.1 → 1.9.3

package/README.md

@@ -77,10 +77,22 @@ The simplest way to make x402 payments from scripts:
 ```typescript
 import { wrapFetch } from '@dexterai/x402/client';
 
+// Solana
 const x402Fetch = wrapFetch(fetch, {
   walletPrivateKey: process.env.SOLANA_PRIVATE_KEY,
 });
 
+// EVM (Base, Polygon, Arbitrum, Optimism, Avalanche, SKALE)
+const x402Fetch = wrapFetch(fetch, {
+  evmPrivateKey: process.env.EVM_PRIVATE_KEY,  // requires: npm install viem
+});
+
+// Both — SDK picks the chain with balance
+const x402Fetch = wrapFetch(fetch, {
+  walletPrivateKey: process.env.SOLANA_PRIVATE_KEY,
+  evmPrivateKey: process.env.EVM_PRIVATE_KEY,
+});
+
 // That's it. 402 responses are handled automatically.
 const response = await x402Fetch('https://api.example.com/protected');
 ```

package/dist/server/index.cjs

@@ -44,6 +44,7 @@ __export(server_exports, {
   createDynamicPricing: () => createDynamicPricing,
   createTokenPricing: () => createTokenPricing,
   createX402Server: () => createX402Server,
+  escapeHtml: () => escapeHtml,
   estimateCost: () => estimateCost,
   findModel: () => findModel,
   formatModelPricing: () => formatModelPricing,
@@ -431,9 +432,104 @@ function createX402Server(config) {
   };
 }
 
+// src/server/stripe-payto.ts
+var stripeProviderNetworks = /* @__PURE__ */ new WeakMap();
+function getStripeProviderNetwork(provider) {
+  return stripeProviderNetworks.get(provider);
+}
+var STRIPE_NETWORK_KEYS = {
+  "base": "base",
+  "base-sepolia": "base_sepolia"
+};
+var CAIP2_NETWORKS = {
+  "base": "eip155:8453",
+  "base-sepolia": "eip155:84532"
+};
+var USDC_DECIMALS = 6;
+function stripePayTo(secretKeyOrConfig) {
+  const config = typeof secretKeyOrConfig === "string" ? { secretKey: secretKeyOrConfig } : secretKeyOrConfig;
+  const networkName = config.network ?? "base";
+  const stripeNetworkKey = STRIPE_NETWORK_KEYS[networkName] ?? "base";
+  const caip2Network = CAIP2_NETWORKS[networkName] ?? "eip155:8453";
+  const apiVersion = config.apiVersion ?? "2026-01-28.clover";
+  let stripeClient = null;
+  async function getStripe() {
+    if (stripeClient) return stripeClient;
+    try {
+      const { default: Stripe } = await import("stripe");
+      stripeClient = new Stripe(config.secretKey, {
+        apiVersion,
+        appInfo: {
+          name: "@dexterai/x402",
+          url: "https://dexter.cash/sdk"
+        }
+      });
+      return stripeClient;
+    } catch {
+      throw new Error(
+        'The "stripe" package is required for stripePayTo(). Install it with: npm install stripe'
+      );
+    }
+  }
+  const provider = async (context) => {
+    if (context.paymentHeader) {
+      try {
+        const decoded = JSON.parse(
+          Buffer.from(context.paymentHeader, "base64").toString()
+        );
+        const toAddress = decoded.payload?.authorization?.to;
+        if (toAddress && typeof toAddress === "string") {
+          return toAddress;
+        }
+        const acceptedPayTo = decoded.accepted?.payTo;
+        if (acceptedPayTo && typeof acceptedPayTo === "string") {
+          return acceptedPayTo;
+        }
+      } catch {
+      }
+      throw new Error(
+        "Could not extract deposit address from payment header. Ensure the client is sending a valid x402 PAYMENT-SIGNATURE."
+      );
+    }
+    const stripe = await getStripe();
+    const amountAtomic = context.amountAtomic ? parseInt(context.amountAtomic, 10) : 1e4;
+    const amountInCents = Math.max(1, Math.round(amountAtomic / Math.pow(10, USDC_DECIMALS - 2)));
+    const paymentIntent = await stripe.paymentIntents.create({
+      amount: amountInCents,
+      currency: "usd",
+      payment_method_types: ["crypto"],
+      payment_method_data: { type: "crypto" },
+      payment_method_options: {
+        crypto: { mode: "custom" }
+      },
+      confirm: true
+    });
+    const nextAction = paymentIntent.next_action;
+    if (!nextAction?.crypto_collect_deposit_details) {
+      throw new Error(
+        "Stripe PaymentIntent did not return crypto deposit details. Ensure your Stripe account has crypto payins enabled: https://support.stripe.com/questions/get-started-with-pay-with-crypto"
+      );
+    }
+    const depositDetails = nextAction.crypto_collect_deposit_details;
+    const payToAddress = depositDetails.deposit_addresses?.[stripeNetworkKey]?.address;
+    if (!payToAddress) {
+      throw new Error(
+        `No deposit address found for network "${stripeNetworkKey}". Available networks: ${Object.keys(depositDetails.deposit_addresses || {}).join(", ")}`
+      );
+    }
+    return payToAddress;
+  };
+  provider._x402Defaults = {
+    network: caip2Network,
+    facilitatorUrl: "https://x402.dexter.cash"
+  };
+  stripeProviderNetworks.set(provider, caip2Network);
+  return provider;
+}
+
 // src/server/middleware.ts
 var DEFAULT_NETWORK = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
-var USDC_DECIMALS = 6;
+var USDC_DECIMALS2 = 6;
 function resolvePayToForNetwork(payTo, network) {
   if (typeof payTo === "string" || typeof payTo === "function") return payTo;
   if (network in payTo) return payTo[network];
@@ -471,9 +567,9 @@ function x402Middleware(config) {
   const servers = /* @__PURE__ */ new Map();
   for (const net of configuredNetworks) {
     const netPayTo = resolvePayToForNetwork(payTo, net);
-    if (typeof netPayTo === "function" && netPayTo._stripeNetwork) {
-      const stripeNet = netPayTo._stripeNetwork;
-      if (net !== stripeNet) {
+    if (typeof netPayTo === "function") {
+      const stripeNet = getStripeProviderNetwork(netPayTo);
+      if (stripeNet && net !== stripeNet) {
         throw new Error(
           `stripePayTo is configured for "${stripeNet}" but middleware includes network "${net}". Stripe only supports Base deposit addresses. Use a static payTo for other chains.`
         );
@@ -496,7 +592,7 @@ function x402Middleware(config) {
         const resourceUrl = getResourceUrl?.(req) ?? staticResourceUrl ?? `${req.protocol}://${req.get("host")}${req.originalUrl}`;
         const requestAmount = getAmount?.(req) ?? amount;
         const requestDescription = getDescription?.(req) ?? description;
-        const decimals = asset?.decimals ?? USDC_DECIMALS;
+        const decimals = asset?.decimals ?? USDC_DECIMALS2;
         const amountAtomic = toAtomicUnits(parseFloat(requestAmount), decimals);
         const requirementsOptions = {
           amountAtomic,
@@ -615,7 +711,7 @@ function x402Middleware(config) {
 }
 
 // src/server/browser-support.ts
-function esc(s) {
+function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 var USDC_ICON_SVG = `<svg width="18" height="18" viewBox="0 0 2000 2000" xmlns="http://www.w3.org/2000/svg"><path d="M1000 2000c554.17 0 1000-445.83 1000-1000S1554.17 0 1000 0 0 445.83 0 1000s445.83 1000 1000 1000z" fill="#2775ca"/><path d="M1275 1158.33c0-145.83-87.5-195.83-262.5-216.66-125-16.67-150-50-150-108.34s41.67-95.83 125-95.83c75 0 116.67 25 137.5 87.5 4.17 12.5 16.67 20.83 29.17 20.83h66.66c16.67 0 29.17-12.5 29.17-29.16v-4.17c-16.67-91.67-91.67-162.5-187.5-170.83v-100c0-16.67-12.5-29.17-33.33-33.34h-62.5c-16.67 0-29.17 12.5-33.34 33.34v95.83c-125 16.67-204.16 100-204.16 204.17 0 137.5 83.33 191.66 258.33 212.5 116.67 20.83 154.17 45.83 154.17 112.5s-58.34 112.5-137.5 112.5c-108.34 0-145.84-45.84-158.34-108.34-4.16-16.66-16.66-25-29.16-25h-70.84c-16.66 0-29.16 12.5-29.16 29.17v4.17c16.66 104.16 83.33 179.16 220.83 200v100c0 16.66 12.5 29.16 33.33 33.33h62.5c16.67 0 29.17-12.5 33.34-33.33v-100c125-20.84 208.33-108.34 208.33-220.84z" fill="#fff"/><path d="M787.5 1595.83c-325-116.66-491.67-479.16-370.83-800 62.5-175 200-308.33 370.83-370.83 16.67-8.33 25-20.83 25-41.67V325c0-16.67-8.33-29.17-25-33.33-4.17 0-12.5 0-16.67 4.16-395.83 125-612.5 545.84-487.5 941.67 75 233.33 254.17 412.5 487.5 487.5 16.67 8.33 33.34 0 37.5-16.67 4.17-4.16 4.17-8.33 4.17-16.66v-58.34c0-12.5-12.5-29.16-25-37.5zM1229.17 295.83c-16.67-8.33-33.34 0-37.5 16.67-4.17 4.17-4.17 8.33-4.17 16.67v58.33c0 16.67 12.5 33.33 25 41.67 325 116.66 491.67 479.16 370.83 800-62.5 175-200 308.33-370.83 370.83-16.67 8.33-25 20.83-25 41.67V1700c0 16.67 8.33 29.17 25 33.33 4.17 0 12.5 0 16.67-4.16 395.83-125 612.5-545.84 487.5-941.67-75-237.5-258.34-416.67-487.5-491.67z" fill="#fff"/></svg>`;
@@ -877,22 +973,22 @@ function generatePaywallHtml(paymentRequiredHeader, requestUrl, method, config,
   } catch {
   }
   const chainName = network.includes("solana") ? "Solana" : network.includes("eip155") ? "Base" : "";
-  const endpointSection = config.showEndpoint ? `<div class="endpoint"><code>${esc(method)} ${esc(requestUrl)}</code></div>` : "";
+  const endpointSection = config.showEndpoint ? `<div class="endpoint"><code>${escapeHtml(method)} ${escapeHtml(requestUrl)}</code></div>` : "";
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1">
-<title>${esc(config.title)} \u2014 ${esc(price)} USDC</title>
+<title>${escapeHtml(config.title)} \u2014 ${escapeHtml(price)} USDC</title>
 <style>${DEXTER_STYLES}${PAY_BUTTON_STYLES}</style>
 </head>
 <body>
 <div class="card">
   <div class="crest">${DEXTER_CREST_SVG}</div>
-  <h1>${esc(config.title)}</h1>
-  <p class="desc">${esc(description)}</p>
-  <div class="price">${USDC_ICON_SVG}<span id="price-value">${esc(price)}</span></div>
-  <div class="chain">${esc(chainName)}${chainName ? " network" : ""}</div>
+  <h1>${escapeHtml(config.title)}</h1>
+  <p class="desc">${escapeHtml(description)}</p>
+  <div class="price">${USDC_ICON_SVG}<span id="price-value">${escapeHtml(price)}</span></div>
+  <div class="chain">${escapeHtml(chainName)}${chainName ? " network" : ""}</div>
   ${endpointSection}
 
   <div id="pay-section" class="pay-section" style="display:none">
@@ -1017,7 +1113,7 @@ function verifyJwt(token, secret) {
   }
 }
 var DEFAULT_NETWORK2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
-var USDC_DECIMALS2 = 6;
+var USDC_DECIMALS3 = 6;
 function x402AccessPass(config) {
   const {
     payTo,
@@ -1040,7 +1136,7 @@ function x402AccessPass(config) {
   }
   const log = verbose ? console.log.bind(console, "[x402:access-pass]") : () => {
   };
-  const decimals = asset?.decimals ?? USDC_DECIMALS2;
+  const decimals = asset?.decimals ?? USDC_DECIMALS3;
   const builtTiers = [];
   if (tierPrices) {
     for (const [id, price] of Object.entries(tierPrices)) {
@@ -1304,7 +1400,6 @@ function formatPricing(config) {
 
 // src/server/token-pricing.ts
 var import_crypto3 = require("crypto");
-var import_tiktoken = require("tiktoken");
 
 // src/server/model-registry.ts
 var STANDARD_PARAMS = {
@@ -1881,17 +1976,30 @@ var MODEL_PRICING_MAP = Object.fromEntries(
 );
 
 // src/server/token-pricing.ts
+var _tiktoken = null;
+async function loadTiktoken() {
+  if (_tiktoken) return _tiktoken;
+  try {
+    _tiktoken = await import("tiktoken");
+    return _tiktoken;
+  } catch {
+    throw new Error(
+      'Token pricing requires the "tiktoken" package. Install with: npm install tiktoken'
+    );
+  }
+}
 var MODEL_PRICING = MODEL_PRICING_MAP;
 var DEFAULT_MODEL = "gpt-4o-mini";
-function getEncodingForModel(model) {
+async function getEncodingForModel(model) {
+  const tiktoken = await loadTiktoken();
   try {
-    return (0, import_tiktoken.encoding_for_model)(model);
+    return tiktoken.encoding_for_model(model);
   } catch {
-    return (0, import_tiktoken.get_encoding)("cl100k_base");
+    return tiktoken.get_encoding("cl100k_base");
   }
 }
-function countTokens(text, model = DEFAULT_MODEL) {
-  const encoding = getEncodingForModel(model);
+async function countTokens(text, model = DEFAULT_MODEL) {
+  const encoding = await getEncodingForModel(model);
   try {
     const tokens = encoding.encode(text);
     return tokens.length;
@@ -1925,17 +2033,17 @@ function createTokenPricing(config = {}) {
     decimals: config.decimals ?? 6
   };
   const { minUsd, maxUsd, decimals } = fullConfig;
-  function countTokensInternal(input) {
+  async function countTokensInternal(input) {
     if (customTokenizer) {
       return customTokenizer(input);
     }
     return countTokens(input, model);
   }
-  function calculate(input, systemPrompt) {
+  async function calculate(input, systemPrompt) {
     const fullInput = systemPrompt ? `${systemPrompt}
 
 ${input}` : input;
-    const inputTokens = countTokensInternal(fullInput);
+    const inputTokens = await countTokensInternal(fullInput);
     let usdAmount = inputTokens / 1e6 * modelInfo.input;
     usdAmount = Math.max(usdAmount, minUsd);
     usdAmount = Math.min(usdAmount, maxUsd);
@@ -1954,9 +2062,9 @@ ${input}` : input;
       quoteHash
     };
   }
-  function validateQuote(input, quoteHash) {
+  async function validateQuote(input, quoteHash) {
     if (!quoteHash) return false;
-    const inputTokens = countTokensInternal(input);
+    const inputTokens = await countTokensInternal(input);
     const expectedHash = generateQuoteHash(input, model, modelInfo.input, inputTokens);
     return expectedHash === quoteHash;
   }
@@ -1991,97 +2099,6 @@ function formatTokenPricing(model = DEFAULT_MODEL) {
   return `$${pricing.input.toFixed(2)} per 1M tokens (${actualModel})`;
 }
 
-// src/server/stripe-payto.ts
-var STRIPE_NETWORK_KEYS = {
-  "base": "base",
-  "base-sepolia": "base_sepolia"
-};
-var CAIP2_NETWORKS = {
-  "base": "eip155:8453",
-  "base-sepolia": "eip155:84532"
-};
-var USDC_DECIMALS3 = 6;
-function stripePayTo(secretKeyOrConfig) {
-  const config = typeof secretKeyOrConfig === "string" ? { secretKey: secretKeyOrConfig } : secretKeyOrConfig;
-  const networkName = config.network ?? "base";
-  const stripeNetworkKey = STRIPE_NETWORK_KEYS[networkName] ?? "base";
-  const caip2Network = CAIP2_NETWORKS[networkName] ?? "eip155:8453";
-  const apiVersion = config.apiVersion ?? "2026-01-28.clover";
-  let stripeClient = null;
-  async function getStripe() {
-    if (stripeClient) return stripeClient;
-    try {
-      const { default: Stripe } = await import("stripe");
-      stripeClient = new Stripe(config.secretKey, {
-        apiVersion,
-        appInfo: {
-          name: "@dexterai/x402",
-          url: "https://dexter.cash/sdk"
-        }
-      });
-      return stripeClient;
-    } catch {
-      throw new Error(
-        'The "stripe" package is required for stripePayTo(). Install it with: npm install stripe'
-      );
-    }
-  }
-  const provider = async (context) => {
-    if (context.paymentHeader) {
-      try {
-        const decoded = JSON.parse(
-          Buffer.from(context.paymentHeader, "base64").toString()
-        );
-        const toAddress = decoded.payload?.authorization?.to;
-        if (toAddress && typeof toAddress === "string") {
-          return toAddress;
-        }
-        const acceptedPayTo = decoded.accepted?.payTo;
-        if (acceptedPayTo && typeof acceptedPayTo === "string") {
-          return acceptedPayTo;
-        }
-      } catch {
-      }
-      throw new Error(
-        "Could not extract deposit address from payment header. Ensure the client is sending a valid x402 PAYMENT-SIGNATURE."
-      );
-    }
-    const stripe = await getStripe();
-    const amountAtomic = context.amountAtomic ? parseInt(context.amountAtomic, 10) : 1e4;
-    const amountInCents = Math.max(1, Math.round(amountAtomic / Math.pow(10, USDC_DECIMALS3 - 2)));
-    const paymentIntent = await stripe.paymentIntents.create({
-      amount: amountInCents,
-      currency: "usd",
-      payment_method_types: ["crypto"],
-      payment_method_data: { type: "crypto" },
-      payment_method_options: {
-        crypto: { mode: "custom" }
-      },
-      confirm: true
-    });
-    const nextAction = paymentIntent.next_action;
-    if (!nextAction?.crypto_collect_deposit_details) {
-      throw new Error(
-        "Stripe PaymentIntent did not return crypto deposit details. Ensure your Stripe account has crypto payins enabled: https://support.stripe.com/questions/get-started-with-pay-with-crypto"
-      );
-    }
-    const depositDetails = nextAction.crypto_collect_deposit_details;
-    const payToAddress = depositDetails.deposit_addresses?.[stripeNetworkKey]?.address;
-    if (!payToAddress) {
-      throw new Error(
-        `No deposit address found for network "${stripeNetworkKey}". Available networks: ${Object.keys(depositDetails.deposit_addresses || {}).join(", ")}`
-      );
-    }
-    return payToAddress;
-  };
-  provider._x402Defaults = {
-    network: caip2Network,
-    facilitatorUrl: "https://x402.dexter.cash"
-  };
-  provider._stripeNetwork = caip2Network;
-  return provider;
-}
-
 // src/server/index.ts
 var import_x402_ads_types = require("@dexterai/x402-ads-types");
 // Annotate the CommonJS export names for ESM import in node:
@@ -2100,6 +2117,7 @@ var import_x402_ads_types = require("@dexterai/x402-ads-types");
   createDynamicPricing,
   createTokenPricing,
   createX402Server,
+  escapeHtml,
   estimateCost,
   findModel,
   formatModelPricing,