@hpp-io/x402-mcp-bridge 0.0.2 → 0.1.0

package/dist/client.js

@@ -12,6 +12,7 @@ import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
 import { wrapMCPClientWithPaymentFromConfig } from "@x402/mcp";
 import { ExactEvmScheme } from "@x402/evm/exact/client";
+import { UptoEvmScheme } from "@x402/evm/upto/client";
 import { BatchSettlementEvmScheme, processSettleResponse, } from "@x402/evm/batch-settlement/client";
 // @x402/evm 2.13.0 moved FileClientChannelStorage into its own subpath.
 import { FileClientChannelStorage } from "@x402/evm/batch-settlement/client/file-storage";
@@ -45,10 +46,9 @@ export async function connectUpstream(opts) {
     // it; the UpstreamClient surface reads it.
     let lastPaymentAmountAtomic = null;
     const x402 = wrapMCPClientWithPaymentFromConfig(base, {
-        // batch-settlement preferred when offered. Explicit selector keeps the
-        // choice visible in logs (the SDK's default would silently pick the
-        // first server accept; explicit lets us see what the bridge saw and
-        // why it picked).
+        // Register all three client schemes so the bridge can pay whatever a
+        // service advertises. The selector (below) honors the seller's accepts
+        // order and logs the choice; registration order here is not significant.
         schemes: [
             {
                 network: opts.network,
@@ -60,17 +60,31 @@ export async function connectUpstream(opts) {
                 network: opts.network,
                 client: new ExactEvmScheme(opts.signer.viemAccount),
             },
+            {
+                // upto (usage-based) — selected when the service advertises it first
+                // (seller-driven). The client auto-detects the facilitator's EIP-2612
+                // gas-sponsoring extension and signs the Permit2 permit accordingly;
+                // without it the payer must have an existing approve(Permit2).
+                // Ref: x402-upto-scheme design/05.
+                network: opts.network,
+                // rpcUrl lets the upto client read the EIP-2612 token nonce so it can
+                // sign the gasless Permit2 approval (no on-chain approve needed).
+                client: new UptoEvmScheme(opts.signer.viemAccount, { rpcUrl: opts.rpcUrl }),
+            },
         ],
         paymentRequirementsSelector: (_x402Version, accepts) => {
-            // Default: prefer batch-settlement when the server offers it. Fall back
-            // to whatever's first otherwise (legacy exact-only servers).
-            // Demo/override: HPP_X402_PREFER_EXACT=true forces the `exact` scheme
-            // (e.g. to show wallet balance deltas live). Falls back to first accept
-            // if the server doesn't offer exact.
-            const preferExact = process.env.HPP_X402_PREFER_EXACT === "true";
-            const batch = accepts.find((a) => a.scheme === "batch-settlement");
-            const exact = accepts.find((a) => a.scheme === "exact");
-            const picked = preferExact ? (exact ?? accepts[0]) : (batch ?? accepts[0]);
+            // Honor the SELLER's advertised order: pick the first accept whose
+            // scheme this client can sign. Scheme choice is a property of the
+            // service's pricing model (seller advertises priority via accepts
+            // order), NOT buyer config — so a usage-based service that lists `upto`
+            // first gets upto automatically; a fixed-price service that lists
+            // batch/exact gets those. `HPP_X402_PREFER_EXACT=true` is a demo-only
+            // override (forces exact, e.g. to show wallet balance deltas live).
+            const supported = new Set(["exact", "batch-settlement", "upto"]);
+            let picked = accepts.find((a) => supported.has(a.scheme)) ?? accepts[0];
+            if (process.env.HPP_X402_PREFER_EXACT === "true") {
+                picked = accepts.find((a) => a.scheme === "exact") ?? picked;
+            }
             const amountStr = picked.amount;
             if (amountStr) {
                 try {
@@ -90,7 +104,12 @@ export async function connectUpstream(opts) {
     }, {
         autoPayment: true,
         onPaymentRequested: async ({ paymentRequired }) => {
-            const accept = paymentRequired.accepts?.[0];
+            // A multi-network resource-server advertises accepts for several networks;
+            // pick THIS bridge's network so the topup amount + log match the accept the
+            // selector will actually settle (the SDK filters accepts by registered
+            // network). Falling back to accepts[0] keeps single-network servers working.
+            const accept = paymentRequired.accepts?.find((a) => a.network === opts.network) ??
+                paymentRequired.accepts?.[0];
             if (!accept)
                 return false;
             const requiredAtomic = BigInt(accept.amount ?? "0");
@@ -100,7 +119,7 @@ export async function connectUpstream(opts) {
                 network: accept.network,
             });
             try {
-                const txHash = await opts.autoTopup.ensure(requiredAtomic);
+                const txHash = await opts.funds.ensure(requiredAtomic);
                 if (txHash) {
                     log.info("autoTopup.executed", { txHash, requiredAtomic: requiredAtomic.toString() });
                 }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,kCAAkC,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,mCAAmC,CAAC;AAC3C,wEAAwE;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAK1F,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAsC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAEhF,MAAM,cAAc,GAAG,IAAI,wBAAwB,CAAC;QAClD,SAAS,EAAE,oBAAoB;KAChC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE3E,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACxE,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,mEAAmE;IACnE,kEAAkE;IAClE,2CAA2C;IAC3C,IAAI,uBAAuB,GAAkB,IAAI,CAAC;IAElD,MAAM,IAAI,GAAG,kCAAkC,CAC7C,IAAI,EACJ;QACE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,kBAAkB;QAClB,OAAO,EAAE;YACP;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,gEAAgE;gBAChE,+DAA+D;gBAC/D,MAAM,EAAE,WAAW;aACpB;YACD;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;aACpD;SACF;QACD,2BAA2B,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE;YACrD,wEAAwE;YACxE,6DAA6D;YAC7D,sEAAsE;YACtE,wEAAwE;YACxE,qCAAqC;YACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,CAAC;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAI,MAA8B,CAAC,MAAM,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,uBAAuB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC3B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,EACD;QACE,WAAW,EAAE,IAAI;QACjB,kBAAkB,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAE1B,MAAM,cAAc,GAAG,MAAM,CAAE,MAA8B,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC5B,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;gBACjC,KAAK,EAAG,MAA6B,CAAC,KAAK;gBAC3C,OAAO,EAAG,MAA+B,CAAC,OAAO;aAClD,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC3D,IAAI,MAAM,EAAE,CAAC;oBACX,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE;oBAC5B,GAAG,EAAG,GAAa,CAAC,OAAO;oBAC3B,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;iBAC1C,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,2CAA2C;YAC3D,CAAC;QACH,CAAC;KACF,CACF,CAAC;IAEF,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,oEAAoE;IACpE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,2CAA2C;IAC3C,qEAAqE;IACrE,uDAAuD;IACvD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;QAC/C,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,OAAO;YAAE,OAAO;QAEvD,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,KAAK,GAAI,cAA0F;aACtG,KAAK,EAAE,YAAY,CAAC;QACvB,IAAI,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;YAClF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,MAAM,CACxB,KAA0C,EAAE,OAAO,IAAI,GAAG,CAC5D,CAAC;gBACF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;oBAC9B,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;wBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,eAAe,EAAE,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE;wBACvD,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,MAAM,EAAE,cAAc,CAAC,WAAW;qBACnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAC/C,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAElD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,iBAAiB,EAAE,GAAG,EAAE,CAAC,uBAAuB;QAChD,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,kCAAkC,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,mCAAmC,CAAC;AAC3C,wEAAwE;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAK1F,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AA0C/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAEhF,MAAM,cAAc,GAAG,IAAI,wBAAwB,CAAC;QAClD,SAAS,EAAE,oBAAoB;KAChC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE3E,mEAAmE;IACnE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACxE,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,mEAAmE;IACnE,kEAAkE;IAClE,2CAA2C;IAC3C,IAAI,uBAAuB,GAAkB,IAAI,CAAC;IAElD,MAAM,IAAI,GAAG,kCAAkC,CAC7C,IAAI,EACJ;QACE,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,EAAE;YACP;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,gEAAgE;gBAChE,+DAA+D;gBAC/D,MAAM,EAAE,WAAW;aACpB;YACD;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;aACpD;YACD;gBACE,qEAAqE;gBACrE,sEAAsE;gBACtE,qEAAqE;gBACrE,+DAA+D;gBAC/D,mCAAmC;gBACnC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,sEAAsE;gBACtE,kEAAkE;gBAClE,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAC5E;SACF;QACD,2BAA2B,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE;YACrD,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,wEAAwE;YACxE,kEAAkE;YAClE,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;gBACjD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,MAAM,CAAC;YAC/D,CAAC;YACD,MAAM,SAAS,GAAI,MAA8B,CAAC,MAAM,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,uBAAuB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC3B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,EACD;QACE,WAAW,EAAE,IAAI;QACjB,kBAAkB,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAChD,2EAA2E;YAC3E,4EAA4E;YAC5E,uEAAuE;YACvE,6EAA6E;YAC7E,MAAM,MAAM,GACV,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;gBAChE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAE1B,MAAM,cAAc,GAAG,MAAM,CAAE,MAA8B,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC5B,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;gBACjC,KAAK,EAAG,MAA6B,CAAC,KAAK;gBAC3C,OAAO,EAAG,MAA+B,CAAC,OAAO;aAClD,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvD,IAAI,MAAM,EAAE,CAAC;oBACX,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE;oBAC5B,GAAG,EAAG,GAAa,CAAC,OAAO;oBAC3B,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;iBAC1C,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,2CAA2C;YAC3D,CAAC;QACH,CAAC;KACF,CACF,CAAC;IAEF,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,0EAA0E;IAC1E,wEAAwE;IACxE,oEAAoE;IACpE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,2CAA2C;IAC3C,qEAAqE;IACrE,uDAAuD;IACvD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;QAC/C,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,OAAO;YAAE,OAAO;QAEvD,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,KAAK,GAAI,cAA0F;aACtG,KAAK,EAAE,YAAY,CAAC;QACvB,IAAI,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;YAClF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,MAAM,CACxB,KAA0C,EAAE,OAAO,IAAI,GAAG,CAC5D,CAAC;gBACF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;oBAC9B,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;wBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,eAAe,EAAE,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE;wBACvD,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,MAAM,EAAE,cAAc,CAAC,WAAW;qBACnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAC/C,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAElD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,iBAAiB,EAAE,GAAG,EAAE,CAAC,uBAAuB;QAChD,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -5,42 +5,98 @@
  * loudly at startup rather than mid-call.
  */
 import { z } from "zod";
-declare const Schema: z.ZodObject<{
+declare const Schema: z.ZodEffects<z.ZodObject<{
     DELEGATE_PRIVATE_KEY: z.ZodEffects<z.ZodString, string, string>;
-    SAFE_ADDRESS: z.ZodString;
-    ALLOWANCE_MODULE_ADDRESS: z.ZodString;
-    USDCE_ADDRESS: z.ZodString;
+    SAFE_ADDRESS: z.ZodOptional<z.ZodString>;
+    ALLOWANCE_MODULE_ADDRESS: z.ZodOptional<z.ZodString>;
+    USDCE_ADDRESS: z.ZodOptional<z.ZodString>;
     RESOURCE_SERVER_URL: z.ZodOptional<z.ZodString>;
-    HPP_RPC_URL: z.ZodString;
-    HPP_NETWORK: z.ZodString;
+    HPP_RPC_URL: z.ZodOptional<z.ZodString>;
+    HPP_NETWORK: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     TOPUP_AMOUNT_ATOMIC: z.ZodOptional<z.ZodString>;
     TOPUP_HEADROOM_X: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     LOG_LEVEL: z.ZodDefault<z.ZodOptional<z.ZodEnum<["off", "info", "debug"]>>>;
+    HPP_X402_DISCOVERY: z.ZodDefault<z.ZodOptional<z.ZodEnum<["on", "off"]>>>;
+    HPP_X402_DISCOVERY_URL: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    HPP_X402_SELLER: z.ZodDefault<z.ZodOptional<z.ZodEnum<["on", "off"]>>>;
+    HPP_X402_FACILITATOR_URL: z.ZodDefault<z.ZodOptional<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     DELEGATE_PRIVATE_KEY: string;
-    SAFE_ADDRESS: string;
-    ALLOWANCE_MODULE_ADDRESS: string;
-    USDCE_ADDRESS: string;
-    HPP_RPC_URL: string;
     HPP_NETWORK: string;
     TOPUP_HEADROOM_X: string;
     LOG_LEVEL: "off" | "info" | "debug";
+    HPP_X402_DISCOVERY: "off" | "on";
+    HPP_X402_DISCOVERY_URL: string;
+    HPP_X402_SELLER: "off" | "on";
+    HPP_X402_FACILITATOR_URL: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    USDCE_ADDRESS?: string | undefined;
     RESOURCE_SERVER_URL?: string | undefined;
+    HPP_RPC_URL?: string | undefined;
     TOPUP_AMOUNT_ATOMIC?: string | undefined;
 }, {
     DELEGATE_PRIVATE_KEY: string;
-    SAFE_ADDRESS: string;
-    ALLOWANCE_MODULE_ADDRESS: string;
-    USDCE_ADDRESS: string;
-    HPP_RPC_URL: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    USDCE_ADDRESS?: string | undefined;
+    RESOURCE_SERVER_URL?: string | undefined;
+    HPP_RPC_URL?: string | undefined;
+    HPP_NETWORK?: string | undefined;
+    TOPUP_AMOUNT_ATOMIC?: string | undefined;
+    TOPUP_HEADROOM_X?: string | undefined;
+    LOG_LEVEL?: "off" | "info" | "debug" | undefined;
+    HPP_X402_DISCOVERY?: "off" | "on" | undefined;
+    HPP_X402_DISCOVERY_URL?: string | undefined;
+    HPP_X402_SELLER?: "off" | "on" | undefined;
+    HPP_X402_FACILITATOR_URL?: string | undefined;
+}>, {
+    DELEGATE_PRIVATE_KEY: string;
     HPP_NETWORK: string;
+    TOPUP_HEADROOM_X: string;
+    LOG_LEVEL: "off" | "info" | "debug";
+    HPP_X402_DISCOVERY: "off" | "on";
+    HPP_X402_DISCOVERY_URL: string;
+    HPP_X402_SELLER: "off" | "on";
+    HPP_X402_FACILITATOR_URL: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    USDCE_ADDRESS?: string | undefined;
+    RESOURCE_SERVER_URL?: string | undefined;
+    HPP_RPC_URL?: string | undefined;
+    TOPUP_AMOUNT_ATOMIC?: string | undefined;
+}, {
+    DELEGATE_PRIVATE_KEY: string;
+    SAFE_ADDRESS?: string | undefined;
+    ALLOWANCE_MODULE_ADDRESS?: string | undefined;
+    USDCE_ADDRESS?: string | undefined;
     RESOURCE_SERVER_URL?: string | undefined;
+    HPP_RPC_URL?: string | undefined;
+    HPP_NETWORK?: string | undefined;
     TOPUP_AMOUNT_ATOMIC?: string | undefined;
     TOPUP_HEADROOM_X?: string | undefined;
     LOG_LEVEL?: "off" | "info" | "debug" | undefined;
+    HPP_X402_DISCOVERY?: "off" | "on" | undefined;
+    HPP_X402_DISCOVERY_URL?: string | undefined;
+    HPP_X402_SELLER?: "off" | "on" | undefined;
+    HPP_X402_FACILITATOR_URL?: string | undefined;
 }>;
-export type Config = z.infer<typeof Schema> & {
+export type Config = Omit<z.infer<typeof Schema>, "USDCE_ADDRESS" | "HPP_RPC_URL"> & {
+    /** Filled from NETWORK_DEFAULTS when omitted, so always present downstream. */
+    USDCE_ADDRESS: string;
+    HPP_RPC_URL: string;
     chainId: number;
+    /** "safe" when SAFE_ADDRESS + ALLOWANCE_MODULE_ADDRESS are set (autoTopup
+     *  from the Safe); "light" when both are omitted (delegate holds USDC.e). */
+    walletMode: "safe" | "light";
+    /** true when HPP_X402_DISCOVERY === "on" — register hpp_discover/hpp_call. */
+    discoveryEnabled: boolean;
+    /** Base URL of the discovery REST API. */
+    discoveryUrl: string;
+    /** true when HPP_X402_SELLER === "on" — register seller_* tools. */
+    sellerEnabled: boolean;
+    /** Facilitator base URL used by seller verify/settle. */
+    facilitatorUrl: string;
 };
 export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;
 export {};

package/dist/config.js

@@ -8,6 +8,11 @@ import { z } from "zod";
 const HEX_ADDR = /^0x[0-9a-fA-F]{40}$/;
 const HEX_KEY = /^0x[0-9a-fA-F]{64}$/;
 const KEYCHAIN_URI = /^keychain:\/\/[^\/]+\/[a-zA-Z0-9._-]+$/;
+// Per-network defaults so USDCE_ADDRESS / HPP_RPC_URL can be omitted (zero-config).
+const NETWORK_DEFAULTS = {
+    "eip155:181228": { rpc: "https://sepolia.hpp.io", usdc: "0x401eCb1D350407f13ba348573E5630B83638E30D" },
+    "eip155:190415": { rpc: "https://mainnet.hpp.io", usdc: "0x401eCb1D350407f13ba348573E5630B83638E30D" },
+};
 const Schema = z.object({
     // Delegate EOA — signs EIP-3009 payments + executeAllowanceTransfer.
     // Accepted forms:
@@ -16,21 +21,25 @@ const Schema = z.object({
     DELEGATE_PRIVATE_KEY: z
         .string()
         .refine((v) => HEX_KEY.test(v) || KEYCHAIN_URI.test(v), "expected 0x + 64 hex chars OR keychain://hpp-x402/<account>"),
-    // Safe wallet that holds the user's USDC.e.
-    SAFE_ADDRESS: z.string().regex(HEX_ADDR),
-    // Deployed AllowanceModule.
-    ALLOWANCE_MODULE_ADDRESS: z.string().regex(HEX_ADDR),
-    // Asset paid in (USDC.e on HPP).
-    USDCE_ADDRESS: z.string().regex(HEX_ADDR),
+    // Safe wallet that holds the user's USDC.e (Safe mode only). Omit for light
+    // mode, where the delegate EOA holds USDC.e directly. Must be set together
+    // with ALLOWANCE_MODULE_ADDRESS (both-or-neither, enforced below).
+    SAFE_ADDRESS: z.string().regex(HEX_ADDR).optional(),
+    // Deployed AllowanceModule (Safe mode only; pairs with SAFE_ADDRESS).
+    ALLOWANCE_MODULE_ADDRESS: z.string().regex(HEX_ADDR).optional(),
+    // Asset paid in (USDC.e on HPP). Optional — defaults per network (below).
+    USDCE_ADDRESS: z.string().regex(HEX_ADDR).optional(),
     // Remote MCP server we proxy to (the seller). Optional: when unset the
     // bridge runs in local-tools-only mode (e.g. credit top-up / A2A) and skips
     // the upstream connection entirely.
     RESOURCE_SERVER_URL: z.string().url().optional(),
-    // Chain RPC.
-    HPP_RPC_URL: z.string().url(),
+    // Chain RPC. Optional — defaults per network (below).
+    HPP_RPC_URL: z.string().url().optional(),
     // CAIP-2 network identifier used by @x402/evm.
     // e.g. "eip155:181228" (HPP Sepolia) / "eip155:190415" (HPP Mainnet).
-    HPP_NETWORK: z.string().regex(/^eip155:\d+$/),
+    // Optional — defaults to HPP Sepolia so a bare `npx @hpp-io/x402-mcp-bridge`
+    // boots with zero config (see NETWORK_DEFAULTS + runBridge auto-wallet).
+    HPP_NETWORK: z.string().regex(/^eip155:\d+$/).optional().default("eip155:181228"),
     // Optional knobs ------------------------------------------------------
     // How much to pull on each topup, in atomic USDC.e units. If unset,
     // the bridge tops up "just enough" for the upcoming payment + small
@@ -49,6 +58,40 @@ const Schema = z.object({
         .default("10"),
     // Logging. "off" = silent (good for clean stdio), "debug" = verbose stderr.
     LOG_LEVEL: z.enum(["off", "info", "debug"]).optional().default("info"),
+    // Curated service discovery (hpp-x402-discovery). "on" (default) registers
+    // the hpp_discover / hpp_call tools that query the HPP discovery directory —
+    // a facilitator-indexed, semi-curated list of paid x402 services. "off"
+    // disables them (manual RESOURCE_SERVER_URL only).
+    HPP_X402_DISCOVERY: z.enum(["on", "off"]).optional().default("on"),
+    HPP_X402_DISCOVERY_URL: z
+        .string()
+        .url()
+        .optional()
+        .default("https://x402-discovery.hpp.io"),
+    // Seller tools (A2 Phase 1). "on" registers seller_* MCP tools so this agent
+    // can charge others over x402 (facilitator verify/settle wrappers). Off by
+    // default — buyers don't need them.
+    HPP_X402_SELLER: z.enum(["on", "off"]).optional().default("off"),
+    HPP_X402_FACILITATOR_URL: z
+        .string()
+        .url()
+        .optional()
+        .default("https://facilitator-sepolia.hpp.io"),
+})
+    // Wallet mode is inferred from Safe config presence: both set = Safe mode
+    // (autoTopup from the Safe within an on-chain cap); both omitted = light mode
+    // (delegate EOA holds USDC.e directly). Setting one without the other is a
+    // config error.
+    .superRefine((v, ctx) => {
+    const hasSafe = !!v.SAFE_ADDRESS;
+    const hasModule = !!v.ALLOWANCE_MODULE_ADDRESS;
+    if (hasSafe !== hasModule) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: [hasSafe ? "ALLOWANCE_MODULE_ADDRESS" : "SAFE_ADDRESS"],
+            message: "SAFE_ADDRESS and ALLOWANCE_MODULE_ADDRESS must be set together (Safe mode) or both omitted (light mode)",
+        });
+    }
 });
 export function loadConfig(env = process.env) {
     const parsed = Schema.safeParse(env);
@@ -60,6 +103,19 @@ export function loadConfig(env = process.env) {
     }
     const v = parsed.data;
     const chainId = Number(v.HPP_NETWORK.split(":")[1]);
-    return { ...v, chainId };
+    const walletMode = v.SAFE_ADDRESS && v.ALLOWANCE_MODULE_ADDRESS ? "safe" : "light";
+    // Zero-config: fill USDC.e + RPC from per-network defaults when omitted.
+    const defaults = NETWORK_DEFAULTS[v.HPP_NETWORK] ?? NETWORK_DEFAULTS["eip155:181228"];
+    return {
+        ...v,
+        USDCE_ADDRESS: v.USDCE_ADDRESS ?? defaults.usdc,
+        HPP_RPC_URL: v.HPP_RPC_URL ?? defaults.rpc,
+        chainId,
+        walletMode,
+        discoveryEnabled: v.HPP_X402_DISCOVERY === "on",
+        discoveryUrl: v.HPP_X402_DISCOVERY_URL,
+        sellerEnabled: v.HPP_X402_SELLER === "on",
+        facilitatorUrl: v.HPP_X402_FACILITATOR_URL,
+    };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,qEAAqE;IACrE,kBAAkB;IAClB,oDAAoD;IACpD,+EAA+E;IAC/E,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAC9C,6DAA6D,CAC9D;IAEH,4CAA4C;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAExC,4BAA4B;IAC5B,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEpD,iCAAiC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEzC,uEAAuE;IACvE,4EAA4E;IAC5E,oCAAoC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAEhD,aAAa;IACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAE7B,+CAA+C;IAC/C,sEAAsE;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IAE7C,wEAAwE;IACxE,oEAAoE;IACpE,oEAAoE;IACpE,2DAA2D;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;IAEb,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;IAEhB,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACvE,CAAC,CAAC;AAMH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,MAAM,GAAG,IAAI,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,oFAAoF;AACpF,MAAM,gBAAgB,GAAkD;IACtE,eAAe,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,4CAA4C,EAAE;IACtG,eAAe,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,4CAA4C,EAAE;CACvG,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,qEAAqE;IACrE,kBAAkB;IAClB,oDAAoD;IACpD,+EAA+E;IAC/E,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAC9C,6DAA6D,CAC9D;IAEH,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAEnD,sEAAsE;IACtE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAE/D,0EAA0E;IAC1E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAEpD,uEAAuE;IACvE,4EAA4E;IAC5E,oCAAoC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAEhD,sDAAsD;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAExC,+CAA+C;IAC/C,sEAAsE;IACtE,6EAA6E;IAC7E,yEAAyE;IACzE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAEjF,wEAAwE;IACxE,oEAAoE;IACpE,oEAAoE;IACpE,2DAA2D;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;IAEb,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;IAEhB,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAEtE,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,mDAAmD;IACnD,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,+BAA+B,CAAC;IAE3C,6EAA6E;IAC7E,2EAA2E;IAC3E,oCAAoC;IACpC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChE,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,oCAAoC,CAAC;CACjD,CAAC;IACA,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,gBAAgB;KACf,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,CAAC;YAC7D,OAAO,EACL,yGAAyG;SAC5G,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAoBL,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,MAAM,GAAG,IAAI,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GACd,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACtF,OAAO;QACL,GAAG,CAAC;QACJ,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,QAAQ,CAAC,IAAI;QAC/C,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,QAAQ,CAAC,GAAG;QAC1C,OAAO;QACP,UAAU;QACV,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,KAAK,IAAI;QAC/C,YAAY,EAAE,CAAC,CAAC,sBAAsB;QACtC,aAAa,EAAE,CAAC,CAAC,eAAe,KAAK,IAAI;QACzC,cAAc,EAAE,CAAC,CAAC,wBAAwB;KAC3C,CAAC;AACJ,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,43 @@
+export interface DiscoveredResource {
+    id: string;
+    type: "http" | "mcp" | "a2a";
+    resourceUrl: string;
+    routeTemplate?: string;
+    toolName?: string;
+    skillId?: string;
+    agentCardUrl?: string;
+    payTo: string;
+    network: string;
+    asset: string;
+    scheme: string;
+    priceAtomic: string;
+    description?: string;
+    httpMethod?: string;
+    bodyType?: "json" | "form-data" | "text";
+    transport?: "streamable-http" | "sse";
+    x402Version: number;
+}
+export interface DiscoveredResourceDetail extends DiscoveredResource {
+    metadata?: {
+        info?: unknown;
+        schema?: unknown;
+    };
+}
+export interface DiscoverQuery {
+    /** Free-text semantic search; omit to browse the newest/highest-ranked. */
+    query?: string;
+    type?: "http" | "mcp" | "a2a" | "all";
+    /** CAIP-2 network filter, e.g. "eip155:190415". */
+    network?: string;
+    limit?: number;
+}
+export declare class DiscoveryClient {
+    private readonly baseUrl;
+    private readonly timeoutMs;
+    constructor(baseUrl: string, timeoutMs?: number);
+    private get;
+    /** List or semantically search the directory. */
+    discover(q: DiscoverQuery): Promise<DiscoveredResource[]>;
+    /** Full detail for one resource (incl. metadata.schema when present). */
+    detail(id: string): Promise<DiscoveredResourceDetail>;
+}

package/dist/discovery.js

@@ -0,0 +1,62 @@
+/**
+ * Client for the HPP x402-discovery REST API — a curated, facilitator-indexed
+ * directory of paid x402 services on the HPP chain.
+ *
+ * Read-only from the bridge's side: we query discovery to *find* services,
+ * then pay them directly with the bridge's own wallet. Discovery never holds
+ * funds or sees our keys (non-custodial).
+ *
+ * REST contract (hpp-x402-discovery/spec/openapi.yaml → routes/discovery.ts):
+ *   GET /discovery/resources?type&network&limit&offset  -> { items: [...] }
+ *   GET /discovery/search?q&type&network&sort&limit      -> { items: [...] }
+ *   GET /discovery/resources/:id                         -> ResourceDetail
+ */
+import { log } from "./log.js";
+export class DiscoveryClient {
+    baseUrl;
+    timeoutMs;
+    constructor(baseUrl, timeoutMs = 10_000) {
+        this.baseUrl = baseUrl;
+        this.timeoutMs = timeoutMs;
+    }
+    async get(path) {
+        const url = this.baseUrl.replace(/\/$/, "") + path;
+        const ac = new AbortController();
+        const t = setTimeout(() => ac.abort(), this.timeoutMs);
+        try {
+            const res = await fetch(url, {
+                signal: ac.signal,
+                headers: { accept: "application/json" },
+            });
+            if (!res.ok)
+                throw new Error(`discovery ${res.status} for ${path}`);
+            return (await res.json());
+        }
+        finally {
+            clearTimeout(t);
+        }
+    }
+    /** List or semantically search the directory. */
+    async discover(q) {
+        const type = q.type ?? "all";
+        const limit = Math.min(Math.max(q.limit ?? 20, 1), 50);
+        const params = new URLSearchParams();
+        params.set("type", type);
+        if (q.network)
+            params.set("network", q.network);
+        params.set("limit", String(limit));
+        const query = q.query?.trim();
+        const path = query
+            ? `/discovery/search?q=${encodeURIComponent(query)}&${params.toString()}`
+            : `/discovery/resources?${params.toString()}`;
+        const out = await this.get(path);
+        const items = out.items ?? [];
+        log.debug("discovery.discover", { path, count: items.length });
+        return items;
+    }
+    /** Full detail for one resource (incl. metadata.schema when present). */
+    async detail(id) {
+        return this.get(`/discovery/resources/${encodeURIComponent(id)}`);
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAmC/B,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,OAAe,EACf,YAAY,MAAM;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAS;IAClC,CAAC;IAEI,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,QAAQ,CAAC,CAAgB;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAC,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;YACzE,CAAC,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmC,IAAI,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,GAAG,CACb,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/discoveryTools.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Discovery-backed local tools: hpp_discover + hpp_call.
+ *
+ * The multi-service UX decision (SERVICE_CONNECTION_DESIGN §멀티서비스 UX):
+ * instead of proxying every discovered service's tools (context explosion),
+ * expose two generic tools —
+ *   - hpp_discover: list/search the curated directory (read-only, no payment)
+ *   - hpp_call:     call one discovered service by id (payment via our wallet)
+ *
+ * hpp_call routes HTTP-typed resources through the same x402 HTTP payment path
+ * as x402_http_call, but marks the call `trustedSource` so it skips the manual
+ * host allowlist — curated discovery is the trust boundary — while keeping the
+ * daily spend cap. MCP/A2A-typed resources return connection guidance.
+ */
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { DiscoveryClient } from "./discovery.js";
+import { type HttpX402Deps } from "./httpX402.js";
+export declare const HPP_DISCOVER_TOOL: {
+    readonly name: "hpp_discover";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly query: {
+                readonly type: "string";
+                readonly description: "Optional free-text search over the directory.";
+            };
+            readonly type: {
+                readonly type: "string";
+                readonly enum: readonly ["http", "mcp", "a2a", "all"];
+                readonly description: "Filter by resource type (default all).";
+            };
+            readonly network: {
+                readonly type: "string";
+                readonly description: "Filter by CAIP-2 network, e.g. eip155:190415.";
+            };
+            readonly limit: {
+                readonly type: "number";
+                readonly description: "Max results (default 20, max 50).";
+            };
+        };
+        readonly additionalProperties: false;
+    };
+};
+export declare const HPP_CALL_TOOL: {
+    readonly name: "hpp_call";
+    readonly description: string;
+    readonly inputSchema: {
+        readonly type: "object";
+        readonly properties: {
+            readonly resourceId: {
+                readonly type: "string";
+                readonly description: "Service id returned by hpp_discover.";
+            };
+            readonly body: {
+                readonly type: "object";
+                readonly description: "Request body / input args for the service.";
+            };
+        };
+        readonly required: readonly ["resourceId"];
+        readonly additionalProperties: false;
+    };
+};
+export interface DiscoverArgs {
+    query?: string;
+    type?: "http" | "mcp" | "a2a" | "all";
+    network?: string;
+    limit?: number;
+}
+export interface HppCallArgs {
+    resourceId: string;
+    body?: unknown;
+}
+export declare function hppDiscover(client: DiscoveryClient, args: DiscoverArgs): Promise<CallToolResult>;
+export declare function hppCall(deps: HttpX402Deps, client: DiscoveryClient, args: HppCallArgs): Promise<CallToolResult>;

package/dist/discoveryTools.js

@@ -0,0 +1,101 @@
+import { x402HttpCall } from "./httpX402.js";
+export const HPP_DISCOVER_TOOL = {
+    name: "hpp_discover",
+    description: "Discover paid x402 services on the HPP chain from the curated discovery " +
+        "directory. Returns services with their resourceId, description, price " +
+        "(USDC.e atomic units), network and type. Pass `query` for a semantic " +
+        "search (e.g. 'image generation'), or omit it to browse. Then invoke one " +
+        "with hpp_call({ resourceId, body }).",
+    inputSchema: {
+        type: "object",
+        properties: {
+            query: {
+                type: "string",
+                description: "Optional free-text search over the directory.",
+            },
+            type: {
+                type: "string",
+                enum: ["http", "mcp", "a2a", "all"],
+                description: "Filter by resource type (default all).",
+            },
+            network: {
+                type: "string",
+                description: "Filter by CAIP-2 network, e.g. eip155:190415.",
+            },
+            limit: { type: "number", description: "Max results (default 20, max 50)." },
+        },
+        additionalProperties: false,
+    },
+};
+export const HPP_CALL_TOOL = {
+    name: "hpp_call",
+    description: "Call a service found via hpp_discover. Pass its `resourceId` and a `body` " +
+        "(the service's input args). Payment (USDC.e) is handled automatically with " +
+        "your wallet, subject to the daily spend cap — you do not sign anything. " +
+        "HTTP-typed services are called directly; MCP/A2A-typed services return " +
+        "connection guidance.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            resourceId: {
+                type: "string",
+                description: "Service id returned by hpp_discover.",
+            },
+            body: {
+                type: "object",
+                description: "Request body / input args for the service.",
+            },
+        },
+        required: ["resourceId"],
+        additionalProperties: false,
+    },
+};
+function errorResult(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+export async function hppDiscover(client, args) {
+    const resources = await client.discover(args);
+    const services = resources.map((r) => ({
+        resourceId: r.id,
+        type: r.type,
+        description: r.description ?? r.toolName ?? r.resourceUrl,
+        priceAtomic: r.priceAtomic,
+        asset: r.asset,
+        network: r.network,
+        scheme: r.scheme,
+        ...(r.toolName ? { toolName: r.toolName } : {}),
+    }));
+    return {
+        content: [
+            { type: "text", text: JSON.stringify({ count: services.length, services }) },
+        ],
+    };
+}
+export async function hppCall(deps, client, args) {
+    if (!args.resourceId || typeof args.resourceId !== "string") {
+        return errorResult("resourceId required");
+    }
+    let detail;
+    try {
+        detail = await client.detail(args.resourceId);
+    }
+    catch (err) {
+        return errorResult(`discovery lookup failed: ${err.message}`);
+    }
+    if (detail.type !== "http") {
+        return errorResult(`resource "${args.resourceId}" is type "${detail.type}" — connect to it ` +
+            `directly at ${detail.resourceUrl}` +
+            (detail.type === "a2a"
+                ? ` (use pay_a2a_agent with its skill id).`
+                : ` (MCP transport).`));
+    }
+    // Curated discovery is the trust boundary → skip the manual host allowlist
+    // (trustedSource) but keep the spend cap. Exact-scheme only today; upto/batch
+    // resources surface a clear "no exact accept" error (follow-up).
+    return x402HttpCall({ ...deps, trustedSource: true }, {
+        url: detail.resourceUrl,
+        method: detail.httpMethod ?? "POST",
+        body: args.body,
+    });
+}
+//# sourceMappingURL=discoveryTools.js.map