@lemmaoracle/x402 0.1.14 → 0.1.15

package/dist/bazaar-middleware.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Lemma wrapper around the upstream x402 paymentMiddleware — v0.2
+ *
+ * v0.2 changes (vs v0.1 in lemma/#222):
+ *   1. Inject Bazaar extension input into the 402 challenge's accepts[].extra
+ *      so the CDP facilitator auto-indexes the route on first settle.
+ *   2. Parse the settle response's EXTENSION-RESPONSES header and emit a
+ *      structured BazaarStatusEvent for observability (independent of settle
+ *      outcome — discovery failures never break payment).
+ *   3. Validate the "discoverable implies metadata" contract at construction
+ *      time (assertDiscoverableConfigured).
+ *
+ * Rationale:
+ *   - outputs/bazaar-listings/handoff-2026-05-20-register-on-first-settle.md
+ *   - lemma/#222 residual TODO 1/3
+ */
+import type { MiddlewareHandler } from "hono";
+import { type LemmaRouteConfig } from "./routeConfig.js";
+/**
+ * Context variables set by the Bazaar middleware so downstream handlers and
+ * settle hooks can read them without re-deriving from config.
+ */
+export interface BazaarContextVariables {
+    "lemma:bazaar:discoverable": boolean;
+    "lemma:bazaar:schema": string | undefined;
+    "lemma:bazaar:category": LemmaRouteConfig["bazaarCategory"] | undefined;
+    "lemma:bazaar:subTags": readonly string[] | undefined;
+}
+/**
+ * Drop-in payment middleware for Bazaar-discoverable routes.
+ *
+ * @example
+ * ```ts
+ * app.use(
+ *   "/v1/suites/inference/attest",
+ *   bazaarPaymentMiddleware({
+ *     accepts: [
+ *       // standard x402 PaymentOption (recipient, amount, network, ...)
+ *     ],
+ *     discoverable: true,
+ *     schema: "inference-attestation-v1",
+ *     bazaarCategory: "Inference",
+ *     bazaarDescription:
+ *       "For AI agents running their own inference, generate a Groth16 attestation proving which model produced which output, anchored on Base mainnet. Lemma never sees raw data.",
+ *     bazaarSubTags: ["verifiable-ai", "audit-trail", "claim-check"],
+ *     bazaarInputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-input.json",
+ *     bazaarOutputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-output.json",
+ *   })
+ * );
+ * ```
+ */
+export declare const bazaarPaymentMiddleware: (config: LemmaRouteConfig) => MiddlewareHandler;
+//# sourceMappingURL=bazaar-middleware.d.ts.map

package/dist/bazaar-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-middleware.d.ts","sourceRoot":"","sources":["../src/bazaar-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAW,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAG7D,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAM1B;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,2BAA2B,EAAE,OAAO,CAAC;IACrC,qBAAqB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,uBAAuB,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;IACxE,sBAAsB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACvD;AA+DD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,uBAAuB,GAClC,QAAQ,gBAAgB,KACvB,iBAyDF,CAAC"}

package/dist/bazaar-middleware.js

@@ -0,0 +1,105 @@
+import { paymentMiddlewareFromConfig as upstreamPaymentMiddleware } from "@x402/hono";
+import { assertDiscoverableConfigured, } from "./routeConfig.js";
+import { getBazaarStatusEmitter, parseBazaarStatus, } from "./bazaar-status-emitter.js";
+const buildBazaarExtensionInput = (config) => {
+    // assertDiscoverableConfigured has already guaranteed these are present
+    // when discoverable: true; non-null assertions are safe here.
+    return {
+        name: config.schema,
+        description: config.bazaarDescription,
+        category: config.bazaarCategory,
+        tags: config.bazaarSubTags ?? [],
+        inputSchema: config.bazaarInputSchemaRef,
+        outputSchema: config.bazaarOutputSchemaRef,
+    };
+};
+/**
+ * Merge the Bazaar extension input into the upstream config's accepts[].extra.
+ * Preserves any other extension already present (forward-compat with future
+ * extensions like KYT, sanctions, etc.).
+ */
+const injectBazaarExtensionInput = (config) => {
+    const bazaar = buildBazaarExtensionInput(config);
+    // `accepts` may be undefined or an array per upstream type; we merge into
+    // the first element (the active payment scheme).
+    const acceptsRaw = config.accepts;
+    const accepts = Array.isArray(acceptsRaw) && acceptsRaw.length > 0
+        ? acceptsRaw
+        : [{}];
+    const head = accepts[0] ?? {};
+    return {
+        ...config,
+        accepts: [
+            {
+                ...head,
+                extra: { ...head.extra, bazaar },
+            },
+            ...accepts.slice(1),
+        ],
+    };
+};
+/**
+ * Drop-in payment middleware for Bazaar-discoverable routes.
+ *
+ * @example
+ * ```ts
+ * app.use(
+ *   "/v1/suites/inference/attest",
+ *   bazaarPaymentMiddleware({
+ *     accepts: [
+ *       // standard x402 PaymentOption (recipient, amount, network, ...)
+ *     ],
+ *     discoverable: true,
+ *     schema: "inference-attestation-v1",
+ *     bazaarCategory: "Inference",
+ *     bazaarDescription:
+ *       "For AI agents running their own inference, generate a Groth16 attestation proving which model produced which output, anchored on Base mainnet. Lemma never sees raw data.",
+ *     bazaarSubTags: ["verifiable-ai", "audit-trail", "claim-check"],
+ *     bazaarInputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-input.json",
+ *     bazaarOutputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-output.json",
+ *   })
+ * );
+ * ```
+ */
+export const bazaarPaymentMiddleware = (config) => {
+    // Construction-time validation: fail fast if discoverable: true is missing
+    // any of its required companion fields. Throws synchronously.
+    assertDiscoverableConfigured(config);
+    const enrichedConfig = config.discoverable
+        ? injectBazaarExtensionInput(config)
+        : config;
+    const upstream = upstreamPaymentMiddleware(enrichedConfig);
+    return async (c, next) => {
+        if (config.discoverable) {
+            c.set("lemma:bazaar:discoverable", true);
+            c.set("lemma:bazaar:schema", config.schema);
+            c.set("lemma:bazaar:category", config.bazaarCategory);
+            c.set("lemma:bazaar:subTags", config.bazaarSubTags);
+        }
+        await upstream(c, next);
+        if (config.discoverable && c.res) {
+            // CDP returns Bazaar metadata processing status in EXTENSION-RESPONSES.
+            // The header is absent for non-CDP facilitators (e.g. x402.org), in
+            // which case we skip emission silently.
+            const headerValue = c.res.headers.get("EXTENSION-RESPONSES");
+            if (headerValue) {
+                getBazaarStatusEmitter().emit({
+                    routePath: c.req.path,
+                    schema: config.schema,
+                    category: config.bazaarCategory,
+                    status: parseBazaarStatus(headerValue),
+                    rawHeader: headerValue,
+                    observedAt: new Date().toISOString(),
+                });
+            }
+            // Always surface Bazaar metadata to clients via response headers for
+            // transparent downstream consumption (`agentic.market` curated tooling).
+            if (config.schema)
+                c.header("X-Lemma-Bazaar-Schema", config.schema);
+            if (config.bazaarCategory) {
+                c.header("X-Lemma-Bazaar-Category", config.bazaarCategory);
+            }
+        }
+    };
+};
+//# sourceMappingURL=bazaar-middleware.js.map

package/dist/bazaar-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-middleware.js","sourceRoot":"","sources":["../src/bazaar-middleware.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,2BAA2B,IAAI,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEtF,OAAO,EACL,4BAA4B,GAE7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AA4BpC,MAAM,yBAAyB,GAAG,CAChC,MAAwB,EACF,EAAE;IACxB,wEAAwE;IACxE,8DAA8D;IAC9D,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAO;QACpB,WAAW,EAAE,MAAM,CAAC,iBAAkB;QACtC,QAAQ,EAAE,MAAM,CAAC,cAAe;QAChC,IAAI,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC,oBAAoB;QACxC,YAAY,EAAE,MAAM,CAAC,qBAAqB;KAC3C,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,CACjC,MAAwB,EACN,EAAE;IACpB,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAEjD,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,UAAU,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC7D,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,CAAE,UAAiE;QACpE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEX,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP;gBACE,GAAG,IAAI;gBACP,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE;aACjC;YACD,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SACpB;KACkB,CAAC;AACxB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,MAAwB,EACL,EAAE;IACrB,2EAA2E;IAC3E,8DAA8D;IAC9D,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY;QACxC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC;IAEX,MAAM,QAAQ,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;IAE3D,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,CAAC,CAAC,GAAG,CACH,2BAA2B,EAC3B,IAAkE,CACnE,CAAC;YACF,CAAC,CAAC,GAAG,CACH,qBAAqB,EACrB,MAAM,CAAC,MAA8D,CACtE,CAAC;YACF,CAAC,CAAC,GAAG,CACH,uBAAuB,EACvB,MAAM,CAAC,cAAwE,CAChF,CAAC;YACF,CAAC,CAAC,GAAG,CACH,sBAAsB,EACtB,MAAM,CAAC,aAAsE,CAC9E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAExB,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACjC,wEAAwE;YACxE,oEAAoE;YACpE,wCAAwC;YACxC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAC7D,IAAI,WAAW,EAAE,CAAC;gBAChB,sBAAsB,EAAE,CAAC,IAAI,CAAC;oBAC5B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,cAAc;oBAC/B,MAAM,EAAE,iBAAiB,CAAC,WAAW,CAAC;oBACtC,SAAS,EAAE,WAAW;oBACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,MAAM,CAAC,MAAM;gBAAE,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/dist/bazaar-middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bazaar-middleware.test.d.ts.map

package/dist/bazaar-middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-middleware.test.d.ts","sourceRoot":"","sources":["../src/bazaar-middleware.test.ts"],"names":[],"mappings":""}

package/dist/bazaar-middleware.test.js

@@ -0,0 +1,156 @@
+/**
+ * Unit tests for bazaarPaymentMiddleware v0.2.
+ *
+ * Mocks @x402/hono's paymentMiddlewareFromConfig so we never call the real
+ * upstream during unit tests. The mock echoes the (potentially enriched)
+ * config into a response header so tests can inspect what was injected.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { Hono } from "hono";
+vi.mock("@x402/hono", () => ({
+    paymentMiddlewareFromConfig: vi.fn((config) => {
+        return async (c, next) => {
+            c.header("X-Test-Injected-Bazaar", JSON.stringify(config
+                .accepts?.[0]?.extra?.bazaar ?? null));
+            await next();
+        };
+    }),
+}));
+import { bazaarPaymentMiddleware } from "./bazaar-middleware.js";
+import { setBazaarStatusEmitterForTesting, } from "./bazaar-status-emitter.js";
+const baseConfig = {
+    recipient: "0x000000000000000000000000000000000000dEaD",
+    amount: "70000",
+    network: "base",
+};
+describe("bazaarPaymentMiddleware (v0.2)", () => {
+    const emitted = [];
+    beforeEach(() => {
+        emitted.length = 0;
+        setBazaarStatusEmitterForTesting({
+            emit: (e) => emitted.push(e),
+        });
+    });
+    afterEach(() => {
+        setBazaarStatusEmitterForTesting(undefined);
+    });
+    it("does not inject bazaar extension when discoverable is false", async () => {
+        const app = new Hono();
+        app.use("/foo", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: false,
+        }));
+        app.get("/foo", (c) => c.text("ok"));
+        const res = await app.request("/foo");
+        expect(res.status).toBe(200);
+        expect(res.headers.get("X-Test-Injected-Bazaar")).toBe("null");
+    });
+    it("throws at construction time when discoverable: true is missing required fields", () => {
+        expect(() => bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            // missing: schema, bazaarCategory, bazaarDescription
+        })).toThrow(/discoverable: true requires/);
+    });
+    it("throws when bazaarDescription exceeds 256 chars", () => {
+        expect(() => bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "test-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "x".repeat(257),
+        })).toThrow(/exceeds 256 chars/);
+    });
+    it("injects bazaar extension input into accepts[0].extra when discoverable", async () => {
+        const app = new Hono();
+        app.use("/attest", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "inference-attestation-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "For AI agents that need per-call attestations.",
+            bazaarSubTags: ["verifiable-ai", "claim-check"],
+            bazaarInputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-input.json",
+            bazaarOutputSchemaRef: "https://schemas.lemma.frame00.com/bazaar/product-b-output.json",
+        }));
+        app.post("/attest", (c) => c.json({ ok: true }));
+        const res = await app.request("/attest", { method: "POST" });
+        expect(res.status).toBe(200);
+        const injected = JSON.parse(res.headers.get("X-Test-Injected-Bazaar") ?? "null");
+        expect(injected).toEqual({
+            name: "inference-attestation-v1",
+            description: "For AI agents that need per-call attestations.",
+            category: "Inference",
+            tags: ["verifiable-ai", "claim-check"],
+            inputSchema: "https://schemas.lemma.frame00.com/bazaar/product-b-input.json",
+            outputSchema: "https://schemas.lemma.frame00.com/bazaar/product-b-output.json",
+        });
+    });
+    it("emits accepted status when EXTENSION-RESPONSES header is present", async () => {
+        const app = new Hono();
+        app.use("/attest", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "inference-attestation-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "x",
+        }));
+        app.post("/attest", (c) => {
+            c.header("EXTENSION-RESPONSES", "status=accepted");
+            return c.json({ ok: true });
+        });
+        await app.request("/attest", { method: "POST" });
+        expect(emitted).toHaveLength(1);
+        expect(emitted[0]?.status).toBe("accepted");
+        expect(emitted[0]?.routePath).toBe("/attest");
+        expect(emitted[0]?.schema).toBe("inference-attestation-v1");
+    });
+    it("emits rejected status without affecting the 200 response (payment-independent)", async () => {
+        const app = new Hono();
+        app.use("/attest", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "inference-attestation-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "x",
+        }));
+        app.post("/attest", (c) => {
+            c.header("EXTENSION-RESPONSES", "status=rejected");
+            return c.json({ ok: true });
+        });
+        const res = await app.request("/attest", { method: "POST" });
+        expect(res.status).toBe(200);
+        expect(emitted[0]?.status).toBe("rejected");
+    });
+    it("does not emit when EXTENSION-RESPONSES header is absent", async () => {
+        const app = new Hono();
+        app.use("/attest", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "inference-attestation-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "x",
+        }));
+        app.post("/attest", (c) => c.json({ ok: true }));
+        await app.request("/attest", { method: "POST" });
+        expect(emitted).toHaveLength(0);
+    });
+    it("returns 'unknown' status for forward-compat header values", async () => {
+        const app = new Hono();
+        app.use("/attest", bazaarPaymentMiddleware({
+            ...baseConfig,
+            discoverable: true,
+            schema: "x-v1",
+            bazaarCategory: "Inference",
+            bazaarDescription: "x",
+        }));
+        app.post("/attest", (c) => {
+            c.header("EXTENSION-RESPONSES", "status=quantum-superposition");
+            return c.json({ ok: true });
+        });
+        await app.request("/attest", { method: "POST" });
+        expect(emitted[0]?.status).toBe("unknown");
+        expect(emitted[0]?.rawHeader).toBe("status=quantum-superposition");
+    });
+});
+//# sourceMappingURL=bazaar-middleware.test.js.map

package/dist/bazaar-middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-middleware.test.js","sourceRoot":"","sources":["../src/bazaar-middleware.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAe,EAAE,EAAE;QACrD,OAAO,KAAK,EACV,CAGC,EACD,IAAyB,EACzB,EAAE;YACF,CAAC,CAAC,MAAM,CACN,wBAAwB,EACxB,IAAI,CAAC,SAAS,CACX,MAAgE;iBAC9D,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,CACvC,CACF,CAAC;YACF,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,gCAAgC,GAEjC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,GAAG;IACjB,SAAS,EAAE,4CAA4C;IACvD,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,MAAe;CACzB,CAAC;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACnB,gCAAgC,CAAC;YAC/B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,MAAM,EACN,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,KAAK;SACX,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAErC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,qDAAqD;SAC7C,CAAC,CACZ,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,EAAE,CACV,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1B,CAAC,CACZ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,SAAS,EACT,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,0BAA0B;YAClC,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,gDAAgD;YACnE,aAAa,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;YAC/C,oBAAoB,EAClB,+DAA+D;YACjE,qBAAqB,EACnB,gEAAgE;SAC1D,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,gDAAgD;YAC7D,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;YACtC,WAAW,EACT,+DAA+D;YACjE,YAAY,EACV,gEAAgE;SACnE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,SAAS,EACT,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,0BAA0B;YAClC,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,GAAG;SACd,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACxB,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,SAAS,EACT,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,0BAA0B;YAClC,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,GAAG;SACd,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACxB,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,SAAS,EACT,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,0BAA0B;YAClC,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,GAAG;SACd,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACL,SAAS,EACT,uBAAuB,CAAC;YACtB,GAAG,UAAU;YACb,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,GAAG;SACd,CAAC,CACZ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACxB,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/bazaar-status-emitter.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Bazaar status emitter — abstract observability sink for the
+ * `EXTENSION-RESPONSES` outcome returned by the CDP facilitator on settle.
+ *
+ * Default: console.info (JSON-line, log-aggregation-friendly).
+ * Override via env LEMMA_BAZAAR_EMITTER:
+ *   - "console" (default)
+ *   - "noop"     (silent — useful in tests)
+ *   - "datadog"  (TODO(W2): wire to Datadog metrics agent if/when available)
+ *
+ * Discovery failures are observability events, not payment events — they
+ * never break settle. See bazaar-middleware.ts for the emission site.
+ */
+export interface BazaarStatusEvent {
+    routePath: string;
+    schema: string | undefined;
+    category: string | undefined;
+    /** "accepted" | "processing" | "rejected" | "unknown" */
+    status: "accepted" | "processing" | "rejected" | "unknown";
+    rawHeader: string;
+    observedAt: string;
+}
+export interface BazaarStatusEmitter {
+    emit(event: BazaarStatusEvent): void;
+}
+export declare const getBazaarStatusEmitter: () => BazaarStatusEmitter;
+/**
+ * Test-only setter. Lets unit tests inject a mock emitter and restore later
+ * by passing `undefined`.
+ */
+export declare const setBazaarStatusEmitterForTesting: (emitter: BazaarStatusEmitter | undefined) => void;
+/**
+ * Parse the EXTENSION-RESPONSES header into a typed status.
+ *
+ * CDP's exact header format is not exhaustively documented; we look for
+ * `status=<value>` and fall back to "unknown" for forward-compat. The raw
+ * header is always preserved on the emitted event so downstream alerting
+ * can react to undocumented variants.
+ */
+export declare const parseBazaarStatus: (headerValue: string) => BazaarStatusEvent["status"];
+//# sourceMappingURL=bazaar-status-emitter.d.ts.map

package/dist/bazaar-status-emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-status-emitter.d.ts","sourceRoot":"","sources":["../src/bazaar-status-emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,yDAAyD;IACzD,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACtC;AA+CD,eAAO,MAAM,sBAAsB,QAAO,mBAuBzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gCAAgC,GAC3C,SAAS,mBAAmB,GAAG,SAAS,KACvC,IAEF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,aAAa,MAAM,KAClB,iBAAiB,CAAC,QAAQ,CAgB5B,CAAC"}

package/dist/bazaar-status-emitter.js

@@ -0,0 +1,92 @@
+class ConsoleEmitter {
+    emit(event) {
+        // Single line, JSON-parseable for log aggregation.
+        console.info(JSON.stringify({
+            ts: event.observedAt,
+            level: "info",
+            msg: "bazaar_extension_response",
+            route: event.routePath,
+            schema: event.schema,
+            category: event.category,
+            status: event.status,
+            raw: event.rawHeader,
+        }));
+    }
+}
+class NoopEmitter {
+    emit() {
+        /* intentionally empty */
+    }
+}
+/**
+ * Lazy singleton. Reads env at first call so tests can override before init.
+ */
+let cached;
+/**
+ * Resolve the `LEMMA_BAZAAR_EMITTER` env var across Node, Workers, and
+ * browser-like environments without taking a type-level dependency on
+ * `@types/node`.
+ */
+const readEmitterEnv = () => {
+    const proc = globalThis.process;
+    const fromProcess = proc?.env?.["LEMMA_BAZAAR_EMITTER"];
+    if (typeof fromProcess === "string" && fromProcess.length > 0)
+        return fromProcess;
+    const fromGlobal = globalThis.LEMMA_BAZAAR_EMITTER;
+    if (typeof fromGlobal === "string" && fromGlobal.length > 0)
+        return fromGlobal;
+    return undefined;
+};
+export const getBazaarStatusEmitter = () => {
+    if (cached)
+        return cached;
+    const envValue = readEmitterEnv();
+    switch (envValue) {
+        case "noop":
+            cached = new NoopEmitter();
+            break;
+        case "console":
+        case undefined:
+            cached = new ConsoleEmitter();
+            break;
+        default:
+            // Unknown emitter name — log once and fall back to console so we never
+            // silently drop observability data due to a typo.
+            console.warn(`[lemma:bazaar] unknown LEMMA_BAZAAR_EMITTER="${envValue}", falling back to console`);
+            cached = new ConsoleEmitter();
+    }
+    return cached;
+};
+/**
+ * Test-only setter. Lets unit tests inject a mock emitter and restore later
+ * by passing `undefined`.
+ */
+export const setBazaarStatusEmitterForTesting = (emitter) => {
+    cached = emitter;
+};
+/**
+ * Parse the EXTENSION-RESPONSES header into a typed status.
+ *
+ * CDP's exact header format is not exhaustively documented; we look for
+ * `status=<value>` and fall back to "unknown" for forward-compat. The raw
+ * header is always preserved on the emitted event so downstream alerting
+ * can react to undocumented variants.
+ */
+export const parseBazaarStatus = (headerValue) => {
+    const match = /(?:^|[\s,;])status\s*=\s*"?([a-z_-]+)"?/i.exec(headerValue);
+    if (!match || !match[1])
+        return "unknown";
+    switch (match[1].toLowerCase()) {
+        case "accepted":
+            return "accepted";
+        case "processing":
+        case "pending":
+            return "processing";
+        case "rejected":
+        case "failed":
+            return "rejected";
+        default:
+            return "unknown";
+    }
+};
+//# sourceMappingURL=bazaar-status-emitter.js.map

package/dist/bazaar-status-emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bazaar-status-emitter.js","sourceRoot":"","sources":["../src/bazaar-status-emitter.ts"],"names":[],"mappings":"AA2BA,MAAM,cAAc;IAClB,IAAI,CAAC,KAAwB;QAC3B,mDAAmD;QACnD,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,KAAK,CAAC,UAAU;YACpB,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,2BAA2B;YAChC,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,SAAS;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,WAAW;IACf,IAAI;QACF,yBAAyB;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,IAAI,MAAuC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAuB,EAAE;IAC9C,MAAM,IAAI,GAAI,UAAyE,CAAC,OAAO,CAAC;IAChG,MAAM,WAAW,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IAElF,MAAM,UAAU,GAAI,UAAgD,CAAC,oBAAoB,CAAC;IAC1F,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAE/E,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAwB,EAAE;IAC9D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAElC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC3B,MAAM;QACR,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YAC9B,MAAM;QACR;YACE,uEAAuE;YACvE,kDAAkD;YAClD,OAAO,CAAC,IAAI,CACV,gDAAgD,QAAQ,4BAA4B,CACrF,CAAC;YACF,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,OAAwC,EAClC,EAAE;IACR,MAAM,GAAG,OAAO,CAAC;AACnB,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,WAAmB,EACU,EAAE;IAC/B,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC;QACtB,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC"}

package/dist/index.d.ts

@@ -25,7 +25,13 @@ export { x402ResourceServer } from "./lemma-server.js";
 export { paymentMiddleware } from "./lemma-discovery.js";
 export { ExactEvmScheme } from "@x402/evm/exact/server";
 export { x402Client } from "@x402/core/client";
+export { bazaarPaymentMiddleware } from "./bazaar-middleware.js";
+export { isLemmaRouteConfig, assertDiscoverableConfigured } from "./routeConfig.js";
+export { getBazaarStatusEmitter, parseBazaarStatus, setBazaarStatusEmitterForTesting, } from "./bazaar-status-emitter.js";
 export type { Network, PaymentRequirements, PaymentPayload } from "@x402/core/types";
 export type { FacilitatorConfig } from "@x402/core/server";
 export type { LemmaConfig } from "./lemma-config.js";
+export type { LemmaRouteConfig } from "./routeConfig.js";
+export type { BazaarContextVariables } from "./bazaar-middleware.js";
+export type { BazaarStatusEvent, BazaarStatusEmitter, } from "./bazaar-status-emitter.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACrF,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAW/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACrF,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EACV,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -28,4 +28,16 @@ export { paymentMiddleware } from "./lemma-discovery.js";
 // Additional x402 re-exports
 export { ExactEvmScheme } from "@x402/evm/exact/server";
 export { x402Client } from "@x402/core/client";
+// Bazaar discoverability extension (x402 Bazaar Discovery Layer) — v0.2
+//
+// v0.2 surface changes vs lemma/#222:
+//   + assertDiscoverableConfigured  (runtime contract check, throws on misconfig)
+//   + BazaarStatusEvent / Emitter   (observability for CDP EXTENSION-RESPONSES)
+//   - registerBazaarRouteOnFirstSettle (removed — superseded by emitter pipeline;
+//     see packages/x402/src/README.md "Bazaar Discovery" section)
+//
+// See also: outputs/bazaar-listings/handoff-2026-05-20-register-on-first-settle.md
+export { bazaarPaymentMiddleware } from "./bazaar-middleware.js";
+export { isLemmaRouteConfig, assertDiscoverableConfigured } from "./routeConfig.js";
+export { getBazaarStatusEmitter, parseBazaarStatus, setBazaarStatusEmitterForTesting, } from "./bazaar-status-emitter.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kDAAkD;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,mEAAmE;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kDAAkD;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,mEAAmE;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,6BAA6B;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,wEAAwE;AACxE,EAAE;AACF,sCAAsC;AACtC,kFAAkF;AAClF,gFAAgF;AAChF,kFAAkF;AAClF,kEAAkE;AAClE,EAAE;AACF,mFAAmF;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,4BAA4B,CAAC"}

package/dist/routeConfig.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Lemma extension of @x402/core/server RouteConfig — v0.2
+ *
+ * v0.2 additions:
+ *  - bazaarDescription         (1-sentence semantic-search-friendly description)
+ *  - bazaarInputSchemaRef      (absolute URL of input JSON Schema)
+ *  - bazaarOutputSchemaRef     (absolute URL of output JSON Schema)
+ *
+ * These three feed into the 402 challenge response's accepts[].extra.bazaar
+ * payload that the CDP facilitator consumes for Discovery Layer indexing.
+ *
+ * Rationale:
+ *   - CDP auto-indexes routes that settle with discoverable: true. The
+ *     metadata it needs (description / category / tags / inputSchema /
+ *     outputSchema) all travel through the 402 challenge extension input.
+ *   - See outputs/bazaar-listings/handoff-2026-05-20-register-on-first-settle.md
+ *     §1.2 for the primary-source derivation.
+ */
+import type { RouteConfig as BaseRouteConfig } from "@x402/core/server";
+export interface LemmaRouteConfig extends BaseRouteConfig {
+    /**
+     * When true, the route is auto-registered in x402 Bazaar after the first
+     * successful settle via the CDP facilitator.
+     *
+     * Important: only the CDP facilitator (api.cdp.coinbase.com/platform/v2/x402)
+     * triggers indexing. The x402.org community facilitator does NOT index to
+     * the CDP Discovery Layer. See packages/x402/src/README.md.
+     *
+     * When set true, `schema`, `bazaarCategory`, and `bazaarDescription` are
+     * all required at runtime; the middleware throws at construction time if
+     * any is missing. (Compile-time strict union enforcement is deferred to
+     * v0.3.)
+     *
+     * Setting `discoverable: false` (or omitting it) leaves the route priced
+     * but invisible to the public Discovery Layer — no Bazaar metadata is
+     * injected into the 402 challenge.
+     */
+    discoverable?: boolean;
+    /**
+     * Schema identifier surfaced as Bazaar extension input `name`.
+     * Convention: kebab-case + version suffix, e.g.
+     *   "agent-identity-authority-v1"
+     *   "inference-attestation-v1"
+     *   "compliance-bundle-v1"
+     *   "seal-identity-v1"
+     */
+    schema?: string;
+    /**
+     * Bazaar category. One of the 7 official categories.
+     */
+    bazaarCategory?: "Inference" | "Data" | "Media" | "Search" | "Social" | "Infrastructure" | "Trading";
+    /**
+     * Free-form sub-tags surfaced as semantic-search hints on Bazaar.
+     * Each tag must match /^[a-z0-9-]+$/.
+     */
+    bazaarSubTags?: readonly string[];
+    /**
+     * 1-sentence human-readable description injected into the 402 challenge
+     * extension input. Surfaced verbatim on Bazaar Discovery Layer search.
+     *
+     * Best practices (lemma-internal):
+     *  - Start with "For AI agents that need to {verb} {noun}, ..." for
+     *    semantic-search alignment.
+     *  - <= 256 chars.
+     *  - Mention the value prop (zero-knowledge, no raw data, etc.) in the
+     *    first 80 chars where possible.
+     *
+     * Required when discoverable: true.
+     */
+    bazaarDescription?: string;
+    /**
+     * Absolute URL of the input JSON Schema (Draft 2020-12). Referenced from
+     * the 402 extension input so callers can validate before paying.
+     *
+     * Production convention:
+     *   https://schemas.lemma.frame00.com/suites/product-<a|b|c|d>-input.json
+     */
+    bazaarInputSchemaRef?: string;
+    /**
+     * Absolute URL of the output JSON Schema (Draft 2020-12).
+     */
+    bazaarOutputSchemaRef?: string;
+}
+/**
+ * Type guard: narrows an arbitrary x402 config to a LemmaRouteConfig.
+ */
+export declare const isLemmaRouteConfig: (config: BaseRouteConfig) => config is LemmaRouteConfig;
+/**
+ * Runtime validation for v0.2's "discoverable implies metadata" contract.
+ *
+ * Called by bazaarPaymentMiddleware at construction time. Throws synchronously
+ * on misconfiguration so the failure surfaces at deploy time, not on first
+ * incoming request.
+ */
+export declare const assertDiscoverableConfigured: (config: LemmaRouteConfig) => void;
+//# sourceMappingURL=routeConfig.d.ts.map

package/dist/routeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeConfig.d.ts","sourceRoot":"","sources":["../src/routeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,cAAc,CAAC,EACX,WAAW,GACX,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,gBAAgB,GAChB,SAAS,CAAC;IAEd;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAIlC;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAC7B,QAAQ,eAAe,KACtB,MAAM,IAAI,gBAOsB,CAAC;AAEpC;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GAAI,QAAQ,gBAAgB,KAAG,IAqBvE,CAAC"}

package/dist/routeConfig.js

@@ -0,0 +1,37 @@
+/**
+ * Type guard: narrows an arbitrary x402 config to a LemmaRouteConfig.
+ */
+export const isLemmaRouteConfig = (config) => "discoverable" in config ||
+    "schema" in config ||
+    "bazaarCategory" in config ||
+    "bazaarSubTags" in config ||
+    "bazaarDescription" in config ||
+    "bazaarInputSchemaRef" in config ||
+    "bazaarOutputSchemaRef" in config;
+/**
+ * Runtime validation for v0.2's "discoverable implies metadata" contract.
+ *
+ * Called by bazaarPaymentMiddleware at construction time. Throws synchronously
+ * on misconfiguration so the failure surfaces at deploy time, not on first
+ * incoming request.
+ */
+export const assertDiscoverableConfigured = (config) => {
+    if (!config.discoverable)
+        return;
+    const missing = [];
+    if (!config.schema)
+        missing.push("schema");
+    if (!config.bazaarCategory)
+        missing.push("bazaarCategory");
+    if (!config.bazaarDescription)
+        missing.push("bazaarDescription");
+    if (missing.length > 0) {
+        throw new Error(`[LemmaRouteConfig] discoverable: true requires ${missing.join(", ")}. ` +
+            `See packages/x402/src/README.md for the discoverable contract.`);
+    }
+    if (config.bazaarDescription && config.bazaarDescription.length > 256) {
+        throw new Error(`[LemmaRouteConfig] bazaarDescription exceeds 256 chars (got ${config.bazaarDescription.length}). ` +
+            `Bazaar search hits favour concise descriptions; trim before deploy.`);
+    }
+};
+//# sourceMappingURL=routeConfig.js.map

package/dist/routeConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeConfig.js","sourceRoot":"","sources":["../src/routeConfig.ts"],"names":[],"mappings":"AAoGA;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,MAAuB,EACK,EAAE,CAC9B,cAAc,IAAI,MAAM;IACxB,QAAQ,IAAI,MAAM;IAClB,gBAAgB,IAAI,MAAM;IAC1B,eAAe,IAAI,MAAM;IACzB,mBAAmB,IAAI,MAAM;IAC7B,sBAAsB,IAAI,MAAM;IAChC,uBAAuB,IAAI,MAAM,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAwB,EAAQ,EAAE;IAC7E,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO;IAEjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAEjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACtE,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,+DAA+D,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK;YACjG,qEAAqE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lemmaoracle/x402",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "Drop-in replacement for @x402/* with automatic Lemma discovery and proof submission",
   "license": "Apache-2.0",
   "repository": {
@@ -57,6 +57,6 @@
     "wrangler": "^3.101.0"
   },
   "peerDependencies": {
-    "@lemmaoracle/sdk": "^0.0.32"
+    "@lemmaoracle/sdk": "^0.0.33"
   }
 }