@hpp-io/x402-mcp-bridge 0.0.1 → 0.0.2

package/dist/server.js

@@ -14,25 +14,126 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { parseComputeResultText, startAutoSettlePoller, } from "./autoSettlePickup.js";
+import { PAY_A2A_TOOL, payA2aAgent } from "./a2a.js";
+import { X402_HTTP_TOOL, x402HttpCall } from "./httpX402.js";
 import { log } from "./log.js";
 export async function startBridgeServer(opts) {
     const server = new Server({ name: opts.name, version: opts.version }, { capabilities: { tools: {} } });
-    // ---- listTools — pass through from upstream -------------------------
+    // ---- listTools — upstream tools (if any) + local tools --------------
     server.setRequestHandler(ListToolsRequestSchema, async () => {
-        const upstreamTools = await opts.upstream.base.listTools();
-        log.debug("listTools", { count: upstreamTools.tools.length });
-        return { tools: upstreamTools.tools };
+        const upstreamTools = opts.upstream ? await opts.upstream.base.listTools() : { tools: [] };
+        log.debug("listTools", { count: upstreamTools.tools.length + 2 });
+        return { tools: [...upstreamTools.tools, PAY_A2A_TOOL, X402_HTTP_TOOL] };
     });
     // ---- callTool — forward through x402-aware wrapper ------------------
-    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    //
+    // Long-running tools: the upstream resource-server emits
+    // `notifications/progress` every ~25s while it inline-waits for an
+    // on-chain X402Delivered event. We forward each one to the host using
+    // the host's own progressToken (from extra._meta) so its idle timer
+    // resets and the request doesn't get cancelled at 60s. Without this,
+    // any compute taking longer than ~55s gets killed at the host's MCP
+    // client timeout, regardless of what the server eventually returns.
+    //
+    // `resetTimeoutOnProgress: true` on the upstream call applies the same
+    // protection on the bridge → resource-server hop. `timeout: 300_000`
+    // gives the upstream up to 5 minutes (well past anything we'd run
+    // inline) before bridge gives up.
+    server.setRequestHandler(CallToolRequestSchema, async (req, extra) => {
         const { name, arguments: args } = req.params;
         log.info("callTool.start", { name });
+        // Local tool: pay an external A2A agent (not an upstream MCP tool).
+        if (name === PAY_A2A_TOOL.name) {
+            try {
+                return await payA2aAgent({
+                    signer: opts.signer,
+                    network: opts.network,
+                    autoTopup: opts.autoTopup,
+                    rpcTimeoutMs: opts.a2aRpcTimeoutMs,
+                }, (args ?? {}));
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                log.error("pay_a2a_agent.failed", { err: msg });
+                return { content: [{ type: "text", text: `pay_a2a_agent error: ${msg}` }], isError: true };
+            }
+        }
+        // Local tool: call an x402-protected HTTP endpoint (not an upstream MCP
+        // tool). Auth headers + spend limits come from local policy; payment is
+        // signed with the bridge's delegate wallet.
+        if (name === X402_HTTP_TOOL.name) {
+            try {
+                return await x402HttpCall({
+                    signer: opts.signer,
+                    network: opts.network,
+                    autoTopup: opts.autoTopup,
+                }, (args ?? {}));
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                log.error("x402_http_call.failed", { err: msg });
+                return { content: [{ type: "text", text: `x402_http_call error: ${msg}` }], isError: true };
+            }
+        }
+        // Beyond the local tools above, everything is an upstream resource-server
+        // tool. In local-tools-only mode there's no upstream to forward to.
+        if (!opts.upstream) {
+            return {
+                content: [{ type: "text", text: `unknown tool: ${name} (no upstream resource server configured)` }],
+                isError: true,
+            };
+        }
+        const up = opts.upstream;
+        const hostProgressToken = extra._meta?.progressToken;
         try {
-            const result = await opts.upstream.x402.callTool(name, (args ?? {}));
-            log.info("callTool.done", {
-                name,
-                paymentMade: result.paymentMade ?? false,
-            });
+            // x402MCPClient's typed callTool options omit `onprogress`, but at
+            // runtime the underlying mcpClient.callTool receives the options
+            // object unchanged — so onprogress IS honoured by the SDK. Cast
+            // around the type gap; remove once @x402/mcp upstream broadens its
+            // option type.
+            const upstreamOptions = {
+                timeout: 300_000,
+                resetTimeoutOnProgress: true,
+                onprogress: hostProgressToken !== undefined
+                    ? (p) => {
+                        extra
+                            .sendNotification({
+                            method: "notifications/progress",
+                            params: {
+                                progressToken: hostProgressToken,
+                                progress: p.progress,
+                                total: p.total,
+                                message: p.message,
+                            },
+                        })
+                            .catch((err) => {
+                            log.debug("progress.forwardFailed", {
+                                err: err.message,
+                            });
+                        });
+                    }
+                    : undefined,
+            };
+            const result = await up.x402.callTool(name, (args ?? {}), upstreamOptions);
+            const paymentMade = result.paymentMade ?? false;
+            log.info("callTool.done", { name, paymentMade });
+            // F-3a auto-refund hook. If the server's inline wait returned
+            // status:pending for a paid compute, start a background poller
+            // that watches get_compute_result(jobId). On terminal `failed`
+            // we fire batchScheme.refund() so the buyer recovers funds
+            // without manual intervention.
+            // Skip silently when:
+            //   - this wasn't a paid compute tool (name doesn't start with compute_)
+            //   - payment didn't actually happen this turn (already in channel cache)
+            //   - response isn't the pending shape (server returned an actual
+            //     result inline, or some non-JSON text like "hello world ...")
+            //   - we don't have a channelId to act on
+            //   - the payment scheme wasn't batch-settlement (exact settles on
+            //     the first response so the buyer already has its PAYMENT-RESPONSE)
+            if (paymentMade && name.startsWith("compute_")) {
+                maybeStartAutoSettlePoller(up, result, name);
+            }
             // Strip bridge-internal fields (paymentMade, paymentResponse) before
             // returning to host — they're not part of the MCP CallToolResult shape.
             return {
@@ -53,4 +154,47 @@ export async function startBridgeServer(opts) {
     await server.connect(transport);
     log.info("bridge.ready");
 }
+/**
+ * Inspect a freshly-returned paid compute result. If the server
+ * reported `status: "pending"` (its inline-wait timed out) AND the
+ * payment used batch-settlement, kick off the background poller so
+ * the eventual result-poll picks up the PAYMENT-RESPONSE and updates
+ * the buyer's local cumulative. All failure paths are silent
+ * best-effort, never throwing into the caller.
+ *
+ * Deferred-settle replaces F-3a: the server never settles the pending
+ * voucher, so failed compute leaves the buyer's budget intact and
+ * there's nothing to refund. The poller now only applies settle when
+ * the compute succeeds and the server attaches PAYMENT-RESPONSE.
+ */
+function maybeStartAutoSettlePoller(upstream, result, toolName) {
+    const content = result.content;
+    const text = content?.[0]?.type === "text" ? content[0]?.text : undefined;
+    if (!text)
+        return;
+    const parsed = parseComputeResultText(text);
+    if (parsed?.status !== "pending" || !parsed.jobId)
+        return;
+    const payResp = result.paymentResponse;
+    const schemeName = payResp?.scheme;
+    const channelId = payResp?.extra?.channelState?.channelId;
+    if (schemeName !== "batch-settlement" || !channelId) {
+        log.debug("autoSettle.skipped", {
+            jobId: parsed.jobId,
+            reason: schemeName !== "batch-settlement"
+                ? "scheme_not_batch_settlement"
+                : "no_channel_id",
+            scheme: schemeName,
+        });
+        return;
+    }
+    startAutoSettlePoller({
+        base: upstream.base,
+        batchScheme: upstream.batchScheme,
+    }, {
+        jobId: parsed.jobId,
+        channelId,
+        toolName,
+    });
+}
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAQ/B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAyB;IAC/D,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAC1C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,wEAAwE;IACxE,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3D,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAC9C,IAAI,EACJ,CAAC,IAAI,IAAI,EAAE,CAA4B,CACxC,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE;gBACxB,IAAI;gBACJ,WAAW,EAAG,MAAoC,CAAC,WAAW,IAAI,KAAK;aACxE,CAAC,CAAC;YAEH,qEAAqE;YACrE,wEAAwE;YACxE,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC;gBAClE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAmB,MAAM,UAAU,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAIhF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAmB/B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAyB;IAC/D,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAC1C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,wEAAwE;IACxE,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3F,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,EAAE;IACF,yDAAyD;IACzD,mEAAmE;IACnE,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,EAAE;IACF,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,kCAAkC;IAClC,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAErC,oEAAoE;QACpE,IAAI,IAAI,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,MAAM,WAAW,CACtB;oBACE,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,YAAY,EAAE,IAAI,CAAC,eAAe;iBACnC,EACD,CAAC,IAAI,IAAI,EAAE,CAA0B,CACtC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACtG,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,MAAM,YAAY,CACvB;oBACE,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,EACD,CAAC,IAAI,IAAI,EAAE,CAA4B,CACxC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvG,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,IAAI,2CAA2C,EAAE,CAAC;gBAC5G,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEzB,MAAM,iBAAiB,GACrB,KAAK,CAAC,KACP,EAAE,aAAa,CAAC;QAEjB,IAAI,CAAC;YACH,mEAAmE;YACnE,iEAAiE;YACjE,gEAAgE;YAChE,mEAAmE;YACnE,eAAe;YACf,MAAM,eAAe,GAAY;gBAC/B,OAAO,EAAE,OAAO;gBAChB,sBAAsB,EAAE,IAAI;gBAC5B,UAAU,EACR,iBAAiB,KAAK,SAAS;oBAC7B,CAAC,CAAC,CAAC,CAAyD,EAAE,EAAE;wBAC5D,KAAK;6BACF,gBAAgB,CAAC;4BAChB,MAAM,EAAE,wBAAwB;4BAChC,MAAM,EAAE;gCACN,aAAa,EAAE,iBAAiB;gCAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gCACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gCACd,OAAO,EAAE,CAAC,CAAC,OAAO;6BACnB;yBACF,CAAC;6BACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACb,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;gCAClC,GAAG,EAAG,GAAa,CAAC,OAAO;6BAC5B,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;oBACP,CAAC;oBACH,CAAC,CAAC,SAAS;aAChB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CACnC,IAAI,EACJ,CAAC,IAAI,IAAI,EAAE,CAA4B,EACvC,eAAyD,CAC1D,CAAC;YAEF,MAAM,WAAW,GACd,MAAoC,CAAC,WAAW,IAAI,KAAK,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAEjD,8DAA8D;YAC9D,+DAA+D;YAC/D,+DAA+D;YAC/D,2DAA2D;YAC3D,+BAA+B;YAC/B,sBAAsB;YACtB,yEAAyE;YACzE,0EAA0E;YAC1E,kEAAkE;YAClE,mEAAmE;YACnE,0CAA0C;YAC1C,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;YAED,qEAAqE;YACrE,wEAAwE;YACxE,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC;gBAClE,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,0BAA0B,CACjC,QAAwB,EACxB,MAAwD,EACxD,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,OAEV,CAAC;IACd,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO;IAE1D,MAAM,OAAO,GAAG,MAAM,CAAC,eAKV,CAAC;IACd,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;IAC1D,IAAI,UAAU,KAAK,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EACJ,UAAU,KAAK,kBAAkB;gBAC/B,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,eAAe;YACrB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,qBAAqB,CACnB;QACE,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,EACD;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS;QACT,QAAQ;KACT,CACF,CAAC;AACJ,CAAC"}

package/docs/policy.md

@@ -0,0 +1,101 @@
+# Host policy (`policy.json`) — 레퍼런스
+
+`x402_http_call` 도구가 읽는 **host별 인증 헤더 주입 + 지출 가드레일** 설정. 서비스마다 다른 부분을
+코드가 아닌 데이터로 두어, 새 서비스 추가가 한 줄이고 어떤 호스트도 하드코딩되지 않습니다.
+
+## 위치
+
+- 기본: `~/.hpp-x402/policy.json` (디렉토리는 `$HPP_X402_HOME`로 변경 가능)
+- override: `$HPP_X402_CRED_FILE` (파일 경로 직접 지정)
+- bridge가 **매 도구 호출마다 읽음** → 수정 후 재시작 불필요
+- 정확 경로 확인: `hpp-x402-policy path`
+
+## 스키마
+
+```jsonc
+{
+  "_defaults": {
+    "allowUnlisted": false,                 // 미등록 host 허용? (기본 false = 거부 = allowlist)
+    "limits": { "requireHttps": true, "maxPerCallAtomic": "1000000" }
+  },
+  "<host>": {                               // 정확 일치(포트 포함, 소문자). wildcard 없음
+    "headers": { "<HeaderName>": "<value-source>" },
+    "limits": {
+      "requireHttps":     true,             // https 강제 (로컬 http면 false)
+      "maxPerCallAtomic": "5000000",        // 1회 상한 (atomic, USDC.e 6dec → 5000000 = 5)
+      "cooldownMs":       300000,           // 결제 간 최소 간격(ms) — 멱등(H2)
+      "maxPerDayAtomic":  "20000000"        // (파싱만, 일일 ledger는 후속)
+    }
+  }
+}
+```
+
+`host`는 `new URL(url).host`(소문자). 정책에 없고 `allowUnlisted=false`면 **결제 전 거부**.
+
+## value-source (헤더 값 출처)
+
+비밀을 파일에 직접 안 쓰고 참조로 둡니다. 호출 시 **로컬에서만** 해석 → 헤더로 주입(LLM/로그 미노출).
+해석 실패 시 **무인증 전송 없이 에러로 중단**.
+
+| 형식 | 의미 |
+|------|------|
+| `file:<path>#<field>` | JSON 파일 필드 (`~` 확장, 중첩 `a.b.c`) |
+| `env:<VAR>` | 환경변수 |
+| `keychain://<svc>/<acct>` | OS 키체인 |
+| `literal:<value>` | 인라인 평문 (**dev 전용**) |
+
+## 가드레일
+
+| 키 | 효과 |
+|----|------|
+| `allowUnlisted` (_defaults) | false면 등록된 host만 호출 가능 (deny-by-default) |
+| `requireHttps` | https 아닌 대상 거부 (로컬 http는 host별 false) |
+| `maxPerCallAtomic` | 1회 결제 상한 — **서버가 준 402 금액**에 적용(악성 서버 방어) |
+| `cooldownMs` | 직전 결제 후 이 시간 내 재결제는 직전 결과 반환(재결제 X) |
+
+> 온체인 Safe AllowanceModule 일일 한도가 **최종 하드 상한**(정책 파일로 못 넘음).
+
+## CLI — `hpp-x402-policy`
+
+수동 JSON 편집 대신 사용 가능:
+
+```bash
+hpp-x402-policy path                          # 파일 경로
+hpp-x402-policy show                          # 전체 JSON
+hpp-x402-policy list                          # host 요약
+
+# host 추가/수정 (--header 반복 가능, --max-per-call은 USDC 단위 → atomic 자동 변환)
+hpp-x402-policy set hub-stage.hpp.io \
+  --header X-Api-Key=file:~/.hpphub/config.json#api_key \
+  --max-per-call 5 --cooldown-ms 300000
+
+hpp-x402-policy set localhost:4000 \
+  --header X-Api-Key=file:~/.hpphub/config.json#api_key \
+  --max-per-call 5 --https false            # 로컬 http 허용
+
+hpp-x402-policy unset <host>                  # host 삭제
+hpp-x402-policy unset <host> --header NAME    # 헤더 1개 삭제
+
+hpp-x402-policy defaults --allow-unlisted false --max-per-call 1 --https true
+```
+
+## 예시 (완성형)
+
+```jsonc
+{
+  "_defaults": { "allowUnlisted": false, "limits": { "requireHttps": true, "maxPerCallAtomic": "1000000" } },
+  "hub-stage.hpp.io": {
+    "headers": { "X-Api-Key": "file:~/.hpphub/config.json#api_key" },
+    "limits":  { "requireHttps": true, "maxPerCallAtomic": "5000000", "cooldownMs": 300000 }
+  },
+  "localhost:4000": {
+    "headers": { "X-Api-Key": "file:~/.hpphub/config.json#api_key" },
+    "limits":  { "requireHttps": false, "maxPerCallAtomic": "5000000", "cooldownMs": 300000 }
+  }
+}
+```
+
+## 보안 메모
+
+- 파일 퍼미션 0600 권장 (CLI는 0600으로 기록). `literal:` 평문은 dev 전용 — 운영은 `file:`/`keychain://`.
+- value-source는 로컬에서만 해석, 결과는 **대상 host 요청 헤더로만** 전송. 로그/도구 args에 노출 안 됨.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hpp-io/x402-mcp-bridge",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "MCP stdio bridge that lets Claude Desktop / OpenClaw / other MCP hosts make x402 payments on HPP — autoTopup from a Safe via AllowanceModule, signs EIP-3009 with a delegate EOA.",
   "license": "Apache-2.0",
   "type": "module",
@@ -9,11 +9,15 @@
   "bin": {
     "x402-mcp-bridge": "bin/x402-mcp-bridge.js",
     "hpp-x402-safe-setup": "bin/hpp-x402-safe-setup.js",
-    "hpp-x402-safe-revoke": "bin/hpp-x402-safe-revoke.js"
+    "hpp-x402-safe-revoke": "bin/hpp-x402-safe-revoke.js",
+    "hpp-x402-keychain": "bin/hpp-x402-keychain.js",
+    "hpp-x402-channel": "bin/hpp-x402-channel.js",
+    "hpp-x402-policy": "bin/hpp-x402-policy.js"
   },
   "files": [
     "dist",
     "bin",
+    "docs/policy.md",
     "README.md",
     "LICENSE"
   ],
@@ -24,6 +28,7 @@
     "build": "tsc",
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",
+    "postinstall": "patch-package || true",
     "prepublishOnly": "npm run typecheck && npm run build"
   },
   "publishConfig": {
@@ -32,14 +37,16 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@x402/core": "^2.10.0",
-    "@x402/evm": "^2.10.0",
-    "@x402/mcp": "^2.10.0",
+    "@napi-rs/keyring": "^1.3.0",
+    "@x402/core": "^2.13.0",
+    "@x402/evm": "^2.13.0",
+    "@x402/mcp": "^2.13.0",
     "viem": "^2.21.54",
     "zod": "^3.23.8"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",
+    "patch-package": "^8.0.1",
     "tsx": "^4.0.0",
     "typescript": "^5.4.0"
   }