@hpp-io/x402-mcp-bridge 0.0.2 → 0.0.3

package/dist/config.d.ts

@@ -5,10 +5,10 @@
  * loudly at startup rather than mid-call.
  */
 import { z } from "zod";
-declare const Schema: z.ZodObject<{
+declare const Schema: z.ZodEffects<z.ZodObject<{
     DELEGATE_PRIVATE_KEY: z.ZodEffects<z.ZodString, string, string>;
-    SAFE_ADDRESS: z.ZodString;
-    ALLOWANCE_MODULE_ADDRESS: z.ZodString;
+    SAFE_ADDRESS: z.ZodOptional<z.ZodString>;
+    ALLOWANCE_MODULE_ADDRESS: z.ZodOptional<z.ZodString>;
     USDCE_ADDRESS: z.ZodString;
     RESOURCE_SERVER_URL: z.ZodOptional<z.ZodString>;
     HPP_RPC_URL: z.ZodString;
@@ -16,31 +16,70 @@ declare const Schema: z.ZodObject<{
     TOPUP_AMOUNT_ATOMIC: z.ZodOptional<z.ZodString>;
     TOPUP_HEADROOM_X: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     LOG_LEVEL: z.ZodDefault<z.ZodOptional<z.ZodEnum<["off", "info", "debug"]>>>;
+    HPP_X402_DISCOVERY: z.ZodDefault<z.ZodOptional<z.ZodEnum<["on", "off"]>>>;
+    HPP_X402_DISCOVERY_URL: z.ZodDefault<z.ZodOptional<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     DELEGATE_PRIVATE_KEY: string;
-    SAFE_ADDRESS: string;
-    ALLOWANCE_MODULE_ADDRESS: string;
     USDCE_ADDRESS: string;
     HPP_RPC_URL: string;
     HPP_NETWORK: string;
     TOPUP_HEADROOM_X: string;
     LOG_LEVEL: "off" | "info" | "debug";
+    HPP_X402_DISCOVERY: "off" | "on";
+    HPP_X402_DISCOVERY_URL: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
     RESOURCE_SERVER_URL?: string | undefined;
     TOPUP_AMOUNT_ATOMIC?: string | undefined;
 }, {
     DELEGATE_PRIVATE_KEY: string;
-    SAFE_ADDRESS: string;
-    ALLOWANCE_MODULE_ADDRESS: string;
     USDCE_ADDRESS: string;
     HPP_RPC_URL: string;
     HPP_NETWORK: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
     RESOURCE_SERVER_URL?: string | undefined;
     TOPUP_AMOUNT_ATOMIC?: string | undefined;
     TOPUP_HEADROOM_X?: string | undefined;
     LOG_LEVEL?: "off" | "info" | "debug" | undefined;
+    HPP_X402_DISCOVERY?: "off" | "on" | undefined;
+    HPP_X402_DISCOVERY_URL?: string | undefined;
+}>, {
+    DELEGATE_PRIVATE_KEY: string;
+    USDCE_ADDRESS: string;
+    HPP_RPC_URL: string;
+    HPP_NETWORK: string;
+    TOPUP_HEADROOM_X: string;
+    LOG_LEVEL: "off" | "info" | "debug";
+    HPP_X402_DISCOVERY: "off" | "on";
+    HPP_X402_DISCOVERY_URL: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    RESOURCE_SERVER_URL?: string | undefined;
+    TOPUP_AMOUNT_ATOMIC?: string | undefined;
+}, {
+    DELEGATE_PRIVATE_KEY: string;
+    USDCE_ADDRESS: string;
+    HPP_RPC_URL: string;
+    HPP_NETWORK: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    RESOURCE_SERVER_URL?: string | undefined;
+    TOPUP_AMOUNT_ATOMIC?: string | undefined;
+    TOPUP_HEADROOM_X?: string | undefined;
+    LOG_LEVEL?: "off" | "info" | "debug" | undefined;
+    HPP_X402_DISCOVERY?: "off" | "on" | undefined;
+    HPP_X402_DISCOVERY_URL?: string | undefined;
 }>;
 export type Config = z.infer<typeof Schema> & {
     chainId: number;
+    /** "safe" when SAFE_ADDRESS + ALLOWANCE_MODULE_ADDRESS are set (autoTopup
+     *  from the Safe); "light" when both are omitted (delegate holds USDC.e). */
+    walletMode: "safe" | "light";
+    /** true when HPP_X402_DISCOVERY === "on" — register hpp_discover/hpp_call. */
+    discoveryEnabled: boolean;
+    /** Base URL of the discovery REST API. */
+    discoveryUrl: string;
 };
 export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;
 export {};

package/dist/config.js

@@ -16,10 +16,12 @@ const Schema = z.object({
     DELEGATE_PRIVATE_KEY: z
         .string()
         .refine((v) => HEX_KEY.test(v) || KEYCHAIN_URI.test(v), "expected 0x + 64 hex chars OR keychain://hpp-x402/<account>"),
-    // Safe wallet that holds the user's USDC.e.
-    SAFE_ADDRESS: z.string().regex(HEX_ADDR),
-    // Deployed AllowanceModule.
-    ALLOWANCE_MODULE_ADDRESS: z.string().regex(HEX_ADDR),
+    // Safe wallet that holds the user's USDC.e (Safe mode only). Omit for light
+    // mode, where the delegate EOA holds USDC.e directly. Must be set together
+    // with ALLOWANCE_MODULE_ADDRESS (both-or-neither, enforced below).
+    SAFE_ADDRESS: z.string().regex(HEX_ADDR).optional(),
+    // Deployed AllowanceModule (Safe mode only; pairs with SAFE_ADDRESS).
+    ALLOWANCE_MODULE_ADDRESS: z.string().regex(HEX_ADDR).optional(),
     // Asset paid in (USDC.e on HPP).
     USDCE_ADDRESS: z.string().regex(HEX_ADDR),
     // Remote MCP server we proxy to (the seller). Optional: when unset the
@@ -49,6 +51,31 @@ const Schema = z.object({
         .default("10"),
     // Logging. "off" = silent (good for clean stdio), "debug" = verbose stderr.
     LOG_LEVEL: z.enum(["off", "info", "debug"]).optional().default("info"),
+    // Curated service discovery (hpp-x402-discovery). "on" (default) registers
+    // the hpp_discover / hpp_call tools that query the HPP discovery directory —
+    // a facilitator-indexed, semi-curated list of paid x402 services. "off"
+    // disables them (manual RESOURCE_SERVER_URL only).
+    HPP_X402_DISCOVERY: z.enum(["on", "off"]).optional().default("on"),
+    HPP_X402_DISCOVERY_URL: z
+        .string()
+        .url()
+        .optional()
+        .default("https://x402-discovery.hpp.io"),
+})
+    // Wallet mode is inferred from Safe config presence: both set = Safe mode
+    // (autoTopup from the Safe within an on-chain cap); both omitted = light mode
+    // (delegate EOA holds USDC.e directly). Setting one without the other is a
+    // config error.
+    .superRefine((v, ctx) => {
+    const hasSafe = !!v.SAFE_ADDRESS;
+    const hasModule = !!v.ALLOWANCE_MODULE_ADDRESS;
+    if (hasSafe !== hasModule) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: [hasSafe ? "ALLOWANCE_MODULE_ADDRESS" : "SAFE_ADDRESS"],
+            message: "SAFE_ADDRESS and ALLOWANCE_MODULE_ADDRESS must be set together (Safe mode) or both omitted (light mode)",
+        });
+    }
 });
 export function loadConfig(env = process.env) {
     const parsed = Schema.safeParse(env);
@@ -60,6 +87,13 @@ export function loadConfig(env = process.env) {
     }
     const v = parsed.data;
     const chainId = Number(v.HPP_NETWORK.split(":")[1]);
-    return { ...v, chainId };
+    const walletMode = v.SAFE_ADDRESS && v.ALLOWANCE_MODULE_ADDRESS ? "safe" : "light";
+    return {
+        ...v,
+        chainId,
+        walletMode,
+        discoveryEnabled: v.HPP_X402_DISCOVERY === "on",
+        discoveryUrl: v.HPP_X402_DISCOVERY_URL,
+    };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,qEAAqE;IACrE,kBAAkB;IAClB,oDAAoD;IACpD,+EAA+E;IAC/E,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAC9C,6DAA6D,CAC9D;IAEH,4CAA4C;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAExC,4BAA4B;IAC5B,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEpD,iCAAiC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEzC,uEAAuE;IACvE,4EAA4E;IAC5E,oCAAoC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAEhD,aAAa;IACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAE7B,+CAA+C;IAC/C,sEAAsE;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IAE7C,wEAAwE;IACxE,oEAAoE;IACpE,oEAAoE;IACpE,2DAA2D;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;IAEb,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;IAEhB,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACvE,CAAC,CAAC;AAMH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,MAAM,GAAG,IAAI,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,qEAAqE;IACrE,kBAAkB;IAClB,oDAAoD;IACpD,+EAA+E;IAC/E,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAC9C,6DAA6D,CAC9D;IAEH,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAEnD,sEAAsE;IACtE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAE/D,iCAAiC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEzC,uEAAuE;IACvE,4EAA4E;IAC5E,oCAAoC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAEhD,aAAa;IACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAE7B,+CAA+C;IAC/C,sEAAsE;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IAE7C,wEAAwE;IACxE,oEAAoE;IACpE,oEAAoE;IACpE,2DAA2D;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;IAEb,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;IAEhB,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAEtE,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,mDAAmD;IACnD,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,+BAA+B,CAAC;CAC5C,CAAC;IACA,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,gBAAgB;KACf,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,CAAC;YAC7D,OAAO,EACL,yGAAyG;SAC5G,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAaL,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,MAAM,GAAG,IAAI,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GACd,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,OAAO;QACL,GAAG,CAAC;QACJ,OAAO;QACP,UAAU;QACV,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,KAAK,IAAI;QAC/C,YAAY,EAAE,CAAC,CAAC,sBAAsB;KACvC,CAAC;AACJ,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,43 @@
+export interface DiscoveredResource {
+    id: string;
+    type: "http" | "mcp" | "a2a";
+    resourceUrl: string;
+    routeTemplate?: string;
+    toolName?: string;
+    skillId?: string;
+    agentCardUrl?: string;
+    payTo: string;
+    network: string;
+    asset: string;
+    scheme: string;
+    priceAtomic: string;
+    description?: string;
+    httpMethod?: string;
+    bodyType?: "json" | "form-data" | "text";
+    transport?: "streamable-http" | "sse";
+    x402Version: number;
+}
+export interface DiscoveredResourceDetail extends DiscoveredResource {
+    metadata?: {
+        info?: unknown;
+        schema?: unknown;
+    };
+}
+export interface DiscoverQuery {
+    /** Free-text semantic search; omit to browse the newest/highest-ranked. */
+    query?: string;
+    type?: "http" | "mcp" | "a2a" | "all";
+    /** CAIP-2 network filter, e.g. "eip155:190415". */
+    network?: string;
+    limit?: number;
+}
+export declare class DiscoveryClient {
+    private readonly baseUrl;
+    private readonly timeoutMs;
+    constructor(baseUrl: string, timeoutMs?: number);
+    private get;
+    /** List or semantically search the directory. */
+    discover(q: DiscoverQuery): Promise<DiscoveredResource[]>;
+    /** Full detail for one resource (incl. metadata.schema when present). */
+    detail(id: string): Promise<DiscoveredResourceDetail>;
+}

package/dist/discovery.js

@@ -0,0 +1,62 @@
+/**
+ * Client for the HPP x402-discovery REST API — a curated, facilitator-indexed
+ * directory of paid x402 services on the HPP chain.
+ *
+ * Read-only from the bridge's side: we query discovery to *find* services,
+ * then pay them directly with the bridge's own wallet. Discovery never holds
+ * funds or sees our keys (non-custodial).
+ *
+ * REST contract (hpp-x402-discovery/spec/openapi.yaml → routes/discovery.ts):
+ *   GET /discovery/resources?type&network&limit&offset  -> { items: [...] }
+ *   GET /discovery/search?q&type&network&sort&limit      -> { items: [...] }
+ *   GET /discovery/resources/:id                         -> ResourceDetail
+ */
+import { log } from "./log.js";
+export class DiscoveryClient {
+    baseUrl;
+    timeoutMs;
+    constructor(baseUrl, timeoutMs = 10_000) {
+        this.baseUrl = baseUrl;
+        this.timeoutMs = timeoutMs;
+    }
+    async get(path) {
+        const url = this.baseUrl.replace(/\/$/, "") + path;
+        const ac = new AbortController();
+        const t = setTimeout(() => ac.abort(), this.timeoutMs);
+        try {
+            const res = await fetch(url, {
+                signal: ac.signal,
+                headers: { accept: "application/json" },
+            });
+            if (!res.ok)
+                throw new Error(`discovery ${res.status} for ${path}`);
+            return (await res.json());
+        }
+        finally {
+            clearTimeout(t);
+        }
+    }
+    /** List or semantically search the directory. */
+    async discover(q) {
+        const type = q.type ?? "all";
+        const limit = Math.min(Math.max(q.limit ?? 20, 1), 50);
+        const params = new URLSearchParams();
+        params.set("type", type);
+        if (q.network)
+            params.set("network", q.network);
+        params.set("limit", String(limit));
+        const query = q.query?.trim();
+        const path = query
+            ? `/discovery/search?q=${encodeURIComponent(query)}&${params.toString()}`
+            : `/discovery/resources?${params.toString()}`;
+        const out = await this.get(path);
+        const items = out.items ?? [];
+        log.debug("discovery.discover", { path, count: items.length });
+        return items;
+    }
+    /** Full detail for one resource (incl. metadata.schema when present). */
+    async detail(id) {
+        return this.get(`/discovery/resources/${encodeURIComponent(id)}`);
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAmC/B,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,OAAe,EACf,YAAY,MAAM;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAS;IAClC,CAAC;IAEI,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,QAAQ,CAAC,CAAgB;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAC,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;YACzE,CAAC,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmC,IAAI,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,GAAG,CACb,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/discoveryTools.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Discovery-backed local tools: hpp_discover + hpp_call.
+ *
+ * The multi-service UX decision (SERVICE_CONNECTION_DESIGN §멀티서비스 UX):
+ * instead of proxying every discovered service's tools (context explosion),
+ * expose two generic tools —
+ *   - hpp_discover: list/search the curated directory (read-only, no payment)
+ *   - hpp_call:     call one discovered service by id (payment via our wallet)
+ *
+ * hpp_call routes HTTP-typed resources through the same x402 HTTP payment path
+ * as x402_http_call, but marks the call `trustedSource` so it skips the manual
+ * host allowlist — curated discovery is the trust boundary — while keeping the
+ * daily spend cap. MCP/A2A-typed resources return connection guidance.
+ */
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { DiscoveryClient } from "./discovery.js";
+import { type HttpX402Deps } from "./httpX402.js";
+export declare const HPP_DISCOVER_TOOL: {
+    readonly name: "hpp_discover";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly query: {
+                readonly type: "string";
+                readonly description: "Optional free-text search over the directory.";
+            };
+            readonly type: {
+                readonly type: "string";
+                readonly enum: readonly ["http", "mcp", "a2a", "all"];
+                readonly description: "Filter by resource type (default all).";
+            };
+            readonly network: {
+                readonly type: "string";
+                readonly description: "Filter by CAIP-2 network, e.g. eip155:190415.";
+            };
+            readonly limit: {
+                readonly type: "number";
+                readonly description: "Max results (default 20, max 50).";
+            };
+        };
+        readonly additionalProperties: false;
+    };
+};
+export declare const HPP_CALL_TOOL: {
+    readonly name: "hpp_call";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly resourceId: {
+                readonly type: "string";
+                readonly description: "Service id returned by hpp_discover.";
+            };
+            readonly body: {
+                readonly type: "object";
+                readonly description: "Request body / input args for the service.";
+            };
+        };
+        readonly required: readonly ["resourceId"];
+        readonly additionalProperties: false;
+    };
+};
+export interface DiscoverArgs {
+    query?: string;
+    type?: "http" | "mcp" | "a2a" | "all";
+    network?: string;
+    limit?: number;
+}
+export interface HppCallArgs {
+    resourceId: string;
+    body?: unknown;
+}
+export declare function hppDiscover(client: DiscoveryClient, args: DiscoverArgs): Promise<CallToolResult>;
+export declare function hppCall(deps: HttpX402Deps, client: DiscoveryClient, args: HppCallArgs): Promise<CallToolResult>;

package/dist/discoveryTools.js

@@ -0,0 +1,101 @@
+import { x402HttpCall } from "./httpX402.js";
+export const HPP_DISCOVER_TOOL = {
+    name: "hpp_discover",
+    description: "Discover paid x402 services on the HPP chain from the curated discovery " +
+        "directory. Returns services with their resourceId, description, price " +
+        "(USDC.e atomic units), network and type. Pass `query` for a semantic " +
+        "search (e.g. 'image generation'), or omit it to browse. Then invoke one " +
+        "with hpp_call({ resourceId, body }).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            query: {
+                type: "string",
+                description: "Optional free-text search over the directory.",
+            },
+            type: {
+                type: "string",
+                enum: ["http", "mcp", "a2a", "all"],
+                description: "Filter by resource type (default all).",
+            },
+            network: {
+                type: "string",
+                description: "Filter by CAIP-2 network, e.g. eip155:190415.",
+            },
+            limit: { type: "number", description: "Max results (default 20, max 50)." },
+        },
+        additionalProperties: false,
+    },
+};
+export const HPP_CALL_TOOL = {
+    name: "hpp_call",
+    description: "Call a service found via hpp_discover. Pass its `resourceId` and a `body` " +
+        "(the service's input args). Payment (USDC.e) is handled automatically with " +
+        "your wallet, subject to the daily spend cap — you do not sign anything. " +
+        "HTTP-typed services are called directly; MCP/A2A-typed services return " +
+        "connection guidance.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            resourceId: {
+                type: "string",
+                description: "Service id returned by hpp_discover.",
+            },
+            body: {
+                type: "object",
+                description: "Request body / input args for the service.",
+            },
+        },
+        required: ["resourceId"],
+        additionalProperties: false,
+    },
+};
+function errorResult(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+export async function hppDiscover(client, args) {
+    const resources = await client.discover(args);
+    const services = resources.map((r) => ({
+        resourceId: r.id,
+        type: r.type,
+        description: r.description ?? r.toolName ?? r.resourceUrl,
+        priceAtomic: r.priceAtomic,
+        asset: r.asset,
+        network: r.network,
+        scheme: r.scheme,
+        ...(r.toolName ? { toolName: r.toolName } : {}),
+    }));
+    return {
+        content: [
+            { type: "text", text: JSON.stringify({ count: services.length, services }) },
+        ],
+    };
+}
+export async function hppCall(deps, client, args) {
+    if (!args.resourceId || typeof args.resourceId !== "string") {
+        return errorResult("resourceId required");
+    }
+    let detail;
+    try {
+        detail = await client.detail(args.resourceId);
+    }
+    catch (err) {
+        return errorResult(`discovery lookup failed: ${err.message}`);
+    }
+    if (detail.type !== "http") {
+        return errorResult(`resource "${args.resourceId}" is type "${detail.type}" — connect to it ` +
+            `directly at ${detail.resourceUrl}` +
+            (detail.type === "a2a"
+                ? ` (use pay_a2a_agent with its skill id).`
+                : ` (MCP transport).`));
+    }
+    // Curated discovery is the trust boundary → skip the manual host allowlist
+    // (trustedSource) but keep the spend cap. Exact-scheme only today; upto/batch
+    // resources surface a clear "no exact accept" error (follow-up).
+    return x402HttpCall({ ...deps, trustedSource: true }, {
+        url: detail.resourceUrl,
+        method: detail.httpMethod ?? "POST",
+        body: args.body,
+    });
+}
+//# sourceMappingURL=discoveryTools.js.map

package/dist/discoveryTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discoveryTools.js","sourceRoot":"","sources":["../src/discoveryTools.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,sCAAsC;IACxC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC7D;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBACnC,WAAW,EAAE,wCAAwC;aACtD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC7D;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;SAC5E;QACD,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,sBAAsB;IACxB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4CAA4C;aAC1D;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,oBAAoB,EAAE,KAAK;KAC5B;CACO,CAAC;AAcX,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAuB,EACvB,IAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAqB,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW;QACzD,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;SAC7E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAkB,EAClB,MAAuB,EACvB,IAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,WAAW,CAChB,aAAa,IAAI,CAAC,UAAU,cAAc,MAAM,CAAC,IAAI,oBAAoB;YACvE,eAAe,MAAM,CAAC,WAAW,EAAE;YACnC,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;gBACpB,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,mBAAmB,CAAC,CAC3B,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,iEAAiE;IACjE,OAAO,YAAY,CACjB,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAChC;QACE,GAAG,EAAE,MAAM,CAAC,WAAW;QACvB,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CACF,CAAC;AACJ,CAAC"}

package/dist/funds/direct-balance.d.ts

@@ -0,0 +1,27 @@
+/**
+ * DirectBalance — light wallet mode (Safe-less).
+ *
+ * The delegate EOA holds USDC.e directly (funded by sending USDC.e straight to
+ * its address). No Safe, no AllowanceModule, no autoTopup — and because x402
+ * settlement is gasless (the facilitator submits EIP-3009 / sponsors the upto
+ * Permit2 approval), the delegate needs no native gas either. So funding the
+ * wallet is a single USDC.e transfer.
+ *
+ * This `Funds` impl simply reads the delegate's balance before each payment and,
+ * when short, throws an error whose message doubles as a funding instruction the
+ * MCP host surfaces to the LLM/user.
+ */
+import { type Address, type Hex } from "viem";
+import type { Funds } from "../funds.js";
+export declare class DirectBalance implements Funds {
+    private readonly delegate;
+    private readonly token;
+    private readonly publicClient;
+    constructor(delegate: Address, token: Address, chainId: number, rpcUrl: string);
+    /**
+     * Light mode never performs an on-chain topup, so this either returns null
+     * (sufficient balance) or throws with a funding instruction. It never returns
+     * a tx hash.
+     */
+    ensure(requiredAtomic: bigint): Promise<Hex | null>;
+}

package/dist/funds/direct-balance.js

@@ -0,0 +1,58 @@
+/**
+ * DirectBalance — light wallet mode (Safe-less).
+ *
+ * The delegate EOA holds USDC.e directly (funded by sending USDC.e straight to
+ * its address). No Safe, no AllowanceModule, no autoTopup — and because x402
+ * settlement is gasless (the facilitator submits EIP-3009 / sponsors the upto
+ * Permit2 approval), the delegate needs no native gas either. So funding the
+ * wallet is a single USDC.e transfer.
+ *
+ * This `Funds` impl simply reads the delegate's balance before each payment and,
+ * when short, throws an error whose message doubles as a funding instruction the
+ * MCP host surfaces to the LLM/user.
+ */
+import { createPublicClient, http, defineChain, } from "viem";
+const ERC20_BALANCE_ABI = [
+    {
+        type: "function",
+        name: "balanceOf",
+        inputs: [{ name: "account", type: "address" }],
+        outputs: [{ name: "", type: "uint256" }],
+        stateMutability: "view",
+    },
+];
+export class DirectBalance {
+    delegate;
+    token;
+    publicClient;
+    constructor(delegate, token, chainId, rpcUrl) {
+        this.delegate = delegate;
+        this.token = token;
+        const chain = defineChain({
+            id: chainId,
+            name: `chain-${chainId}`,
+            nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
+            rpcUrls: { default: { http: [rpcUrl] } },
+        });
+        this.publicClient = createPublicClient({ chain, transport: http(rpcUrl) });
+    }
+    /**
+     * Light mode never performs an on-chain topup, so this either returns null
+     * (sufficient balance) or throws with a funding instruction. It never returns
+     * a tx hash.
+     */
+    async ensure(requiredAtomic) {
+        const balance = (await this.publicClient.readContract({
+            address: this.token,
+            abi: ERC20_BALANCE_ABI,
+            functionName: "balanceOf",
+            args: [this.delegate],
+        }));
+        if (balance >= requiredAtomic)
+            return null;
+        throw new Error(`insufficient USDC.e: need ${requiredAtomic}, have ${balance}. ` +
+            `Send USDC.e to ${this.delegate} on this network to top up ` +
+            `(no native gas required).`);
+    }
+}
+//# sourceMappingURL=direct-balance.js.map

package/dist/funds/direct-balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-balance.js","sourceRoot":"","sources":["../../src/funds/direct-balance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,WAAW,GAIZ,MAAM,MAAM,CAAC;AAId,MAAM,iBAAiB,GAAG;IACxB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxC,eAAe,EAAE,MAAM;KACxB;CACO,CAAC;AAEX,MAAM,OAAO,aAAa;IAIL;IACA;IAJF,YAAY,CAAe;IAE5C,YACmB,QAAiB,EACjB,KAAc,EAC/B,OAAe,EACf,MAAc;QAHG,aAAQ,GAAR,QAAQ,CAAS;QACjB,UAAK,GAAL,KAAK,CAAS;QAI/B,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,SAAS,OAAO,EAAE;YACxB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACpD,OAAO,EAAE,IAAI,CAAC,KAAK;YACnB,GAAG,EAAE,iBAAiB;YACtB,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;SACtB,CAAC,CAAW,CAAC;QAEd,IAAI,OAAO,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,IAAI,KAAK,CACb,6BAA6B,cAAc,UAAU,OAAO,IAAI;YAC9D,kBAAkB,IAAI,CAAC,QAAQ,6BAA6B;YAC5D,2BAA2B,CAC9B,CAAC;IACJ,CAAC;CACF"}

package/dist/funds.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Funds — abstraction over "ensure the delegate can cover this payment".
+ *
+ * Two implementations back the two wallet modes:
+ *   - AutoTopup (Safe mode): pulls USDC.e from the user's Safe to the delegate
+ *     EOA via AllowanceModule.executeAllowanceTransfer, within the on-chain
+ *     daily cap, when the delegate balance is short.
+ *   - DirectBalance (light mode): the delegate EOA holds USDC.e directly; this
+ *     impl only verifies the balance and surfaces a clear funding instruction
+ *     when short — no Safe, no on-chain topup, no native gas.
+ *
+ * The payment path (client.ts onPaymentRequested) depends only on this
+ * interface, so the two modes share a single code path.
+ */
+import type { Hex } from "viem";
+export interface Funds {
+    /**
+     * Ensure the delegate holds at least `requiredAtomic` of the payment asset
+     * before the x402 payment is signed.
+     *
+     * Returns the topup tx hash when an on-chain refill was performed (Safe mode),
+     * or `null` when no action was needed (already sufficient). Throws a clear,
+     * host-surfaceable error when funds are insufficient and cannot be topped up.
+     */
+    ensure(requiredAtomic: bigint): Promise<Hex | null>;
+}

package/dist/funds.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=funds.js.map

package/dist/funds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"funds.js","sourceRoot":"","sources":["../src/funds.ts"],"names":[],"mappings":""}

package/dist/httpX402.d.ts

@@ -1,12 +1,18 @@
 import type { Network } from "@x402/core/types";
 import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
-import type { AutoTopup } from "./autoTopup.js";
+import type { Funds } from "./funds.js";
 import type { RawEoaSigner } from "./signers/raw-eoa.js";
 export interface HttpX402Deps {
     signer: RawEoaSigner;
     network: Network;
     /** Ensure the delegate holds enough USDC.e before paying. */
-    autoTopup?: AutoTopup;
+    funds?: Funds;
+    /**
+     * Set by hpp_call for curated-discovery resources: skip the manual host
+     * allowlist + local credential injection (discovery is the trust boundary).
+     * The spend cap (default limits, per-call amount, cooldown) still applies.
+     */
+    trustedSource?: boolean;
 }
 export declare const X402_HTTP_TOOL: {
     readonly name: "x402_http_call";