@lizard-build/cli 4.0.23 → 4.0.24

package/dist/lib/x402.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../src/lib/x402.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEjE,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,KAAK,GAAG,4CAA4C,CAAC;AAC3D,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAG9C,MAAM,iBAAkB,SAAQ,KAAK;CAAG;AAExC,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACvH,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,sBAAsB,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1I,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AACD,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,KAAa,EAAE,IAAc,EAAE,SAAkB;IACtF,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IACtE,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACjH,IAAI,SAAS;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;IACxD,OAAO,KAAK,CAAC,aAAa,EAAE,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAClL,CAAC;AACD,KAAK,UAAU,IAAI,CAAI,GAAa;IAClC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAA8C,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,yBAAyB,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,CAAY,EAAE,WAAmB,EAAE,aAAa,GAAG,MAAM,CAAC,gBAAgB;IACtG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;QAClH,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,aAAa;QAC9H,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;AACxL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB;IACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAY,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,QAAQ,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7F,aAAa,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,CAAY,EAAE,MAAc;IACpF,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC;QAC3G,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC9F,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAO,CAAC;QACtG,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,GAAG;QACrD,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACxN,CAAC;AACD,SAAS,WAAW,CAAC,WAAmB,EAAE,SAAkB;IAC1D,IAAI,SAAS,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrJ,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/F,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,WAAW,OAAO,CAAC,CAAC;IAC9D,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAY,CAAC;QACzE,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,WAAW,WAAW,OAAO,CAAC,CAAC;AACpE,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,KAAc;IAC3C,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB,EAAE,aAAqB,EAAE,QAAmB,EAAE,SAAkB;IAC/G,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,KAAK,GAAY,EAAE,SAAS,EAAE,SAAS,IAAI,UAAU,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAClG,IAAI,CAAC;QAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACnF,OAAO,CAAC,EAAE,CAAC;QACT,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAC;QAC5D,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,KAAK,CAAC,aAAa,GAAG,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC9L,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACpC,IAAI,SAAS;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,SAAS,4EAA4E,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC9G,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAoB,CAAC;YAChG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAgB,CAAC;YACjD,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACjL,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAChD,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,iBAAiB,CAAC,sFAAsF,CAAC,CAAC;YAClK,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACtF,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;aACvF,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAoB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;iBAC1E,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC7D,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1E,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,wDAAwD;YAC9E,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAa,QAAQ,CAAC,CAAC;QAChD,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACpJ,MAAM,OAAO,GAAG,CAAC,YAAY,QAAQ,IAAI,CAAC,YAAY,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qDAAqD,CAAC;QAC5I,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,6BAA6B,KAAK,CAAC,SAAS,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/F,OAAO,IAAI,CAAa,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/src/commands/credits.ts

@@ -1,379 +0,0 @@
-import { dollarsToCents, getX402Quote, payX402, getX402Status } from "../lib/x402.js";
-import chalk from "chalk";
-import open from "open";
-import * as p from "@clack/prompts";
-import { Command } from "commander";
-import { api, withQuery, APIError } from "../lib/api.js";
-import { success, isJSONMode, printJSON, table, isTTY, timeAgo } from "../lib/format.js";
-
-interface BalanceView {
-  plan: string;
-  status: "active" | "grace" | "frozen";
-  balanceCents: number;
-  overdraftLimitCents: number | null;
-  availableCents: number | null;
-  expiringCents: number;
-  expiringAt: number | null;
-  expiringCredits: { amountCents: number; expiresAt: number }[];
-  hourlyRateCents: number;
-  runwayHours: number | null;
-  graceSince: number | null;
-  graceHours: number;
-  neverFreeze: boolean;
-  invoicedMonthly: boolean;
-  email: string | null;
-  autoTopup: {
-    enabled: boolean; thresholdCents: number; amountCents: number;
-    paymentMethodIds: string[]; disabledReason: string | null;
-    lastAttemptAt: number | null; lastSuccessAt: number | null; consecutiveFailures: number;
-  };
-  pendingPromo: { code: string; creditCents: number; expiresAt: number | null } | null;
-  topupUrl: string;
-  purchase: { minCents: number; maxCents: number; feeBps: number; feeMinCents: number; feeFixedCents: number; feeInternationalBps: number; cryptoEnabled: boolean };
-}
-
-// `lizard credits` — account-scoped prepaid balance (LIZARD-177). Unlike
-// most commands this never takes --project/--service: billing belongs to
-// the user, not a workspace. See docs/credits-api.md on the platform repo
-// for the contract this is built against.
-
-function fmtCents(cents: number): string {
-  const sign = cents < 0 ? "-" : "";
-  return `${sign}$${(Math.abs(cents) / 100).toFixed(2)}`;
-}
-
-/** Accepts "10", "10.5", "$10.50" -> cents. Throws on anything else. */
-function parseDollarsToCents(input: string): number {
-  const cleaned = input.trim().replace(/^\$/, "");
-  const value = Number(cleaned);
-  if (!Number.isFinite(value) || value <= 0) {
-    throw new Error(`Invalid amount: "${input}". Use a positive dollar amount, e.g. 10 or 10.50.`);
-  }
-  return Math.round(value * 100);
-}
-
-function statusLabel(status: string): string {
-  switch (status) {
-    case "active": return chalk.green(status);
-    case "grace": return chalk.yellow(status);
-    case "frozen": return chalk.red(status);
-    default: return status;
-  }
-}
-
-async function printBalance(): Promise<BalanceView> {
-  const view = await api.get<BalanceView>("/api/billing/balance");
-  if (isJSONMode()) {
-    printJSON(view);
-    return view;
-  }
-
-  console.log(`${chalk.bold(fmtCents(view.balanceCents))}  ${statusLabel(view.status)}  ${chalk.dim(`(${view.plan})`)}`);
-
-  if (view.neverFreeze) {
-    console.log(chalk.dim("Exempt from billing freeze — balance can go negative with no enforcement."));
-  } else {
-    if (view.overdraftLimitCents != null) {
-      console.log(chalk.dim(`Overdraft limit: `) + fmtCents(-view.overdraftLimitCents));
-    }
-    if (view.availableCents != null) {
-      console.log(chalk.dim(`Available before freeze: `) + fmtCents(view.availableCents));
-    }
-    if (view.graceSince) {
-      const deadline = view.graceSince + view.graceHours * 3_600_000;
-      const hoursLeft = Math.max(0, Math.round((deadline - Date.now()) / 3_600_000));
-      console.log(chalk.yellow(`In grace since ${timeAgo(view.graceSince)} — freezes in ~${hoursLeft}h if unpaid.`));
-    }
-  }
-
-  if (view.expiringCents > 0 && view.expiringAt) {
-    console.log(chalk.dim(`Expiring: `) + `${fmtCents(view.expiringCents)} by ${new Date(view.expiringAt).toLocaleDateString()}`);
-  }
-
-  if (view.hourlyRateCents > 0) {
-    const rate = chalk.dim(`(~${fmtCents(view.hourlyRateCents)}/hr)`);
-    if (view.runwayHours != null) {
-      const days = (view.runwayHours / 24).toFixed(1);
-      console.log(chalk.dim(`Runway: `) + `~${view.runwayHours}h (${days}d) at current usage ${rate}`);
-    } else {
-      console.log(chalk.dim(`Current usage rate: `) + rate);
-    }
-  }
-
-  console.log(
-    chalk.dim("Auto top-up: ") +
-      (view.autoTopup.enabled
-        ? `on — tops up ${fmtCents(view.autoTopup.amountCents)} when balance drops below ${fmtCents(view.autoTopup.thresholdCents)}`
-        : "off"),
-  );
-  if (view.autoTopup.disabledReason) {
-    console.log(chalk.yellow(`  disabled: ${view.autoTopup.disabledReason}`));
-  }
-
-  if (view.pendingPromo) {
-    console.log(chalk.dim("Pending promo: ") + `${view.pendingPromo.code} (${fmtCents(view.pendingPromo.creditCents)})`);
-  }
-
-  return view;
-}
-
-interface Transaction {
-  id: string; kind: string; amountCents: number; balanceAfterCents: number | null;
-  description: string | null; createdAt: number; externalRef: string | null;
-  receiptUrl: string | null; invoiceUrl: string | null; expiresAt: number | null;
-}
-
-interface PaymentMethod {
-  id: string; brand: string; last4: string; expMonth: number; expYear: number; isDefault?: boolean;
-}
-
-export function registerCredits(program: Command) {
-  const cmd = program
-    .command("credits")
-    .alias("billing")
-    .description("Account balance, usage, and top-ups (prepaid credits)")
-    .action(async () => {
-      await printBalance();
-    });
-
-  cmd
-    .command("balance")
-    .description("Show current balance, status, and runway")
-    .action(async () => {
-      await printBalance();
-    });
-
-  cmd
-    .command("transactions")
-    .alias("ledger")
-    .description("List recent balance transactions")
-    .option("-l, --limit <n>", "Max results (1-100)", "20")
-    .option("-c, --cursor <cursor>", "Pagination cursor from a previous call")
-    .option("-u, --usage", "Include daily usage-deduction rows")
-    .action(async (opts) => {
-      const page = await api.get<{ items: Transaction[]; nextCursor: string | null }>(
-        withQuery("/api/billing/transactions", {
-          limit: opts.limit,
-          cursor: opts.cursor,
-          includeUsage: opts.usage ? "1" : undefined,
-        }),
-      );
-
-      if (isJSONMode()) {
-        printJSON(page);
-        return;
-      }
-
-      if (page.items.length === 0) {
-        console.log("No transactions.");
-        return;
-      }
-
-      table(
-        ["When", "Kind", "Amount", "Balance after", "Description"],
-        page.items.map((t) => [
-          timeAgo(t.createdAt),
-          t.kind,
-          t.amountCents >= 0 ? chalk.green(fmtCents(t.amountCents)) : chalk.red(fmtCents(t.amountCents)),
-          t.balanceAfterCents != null ? fmtCents(t.balanceAfterCents) : "—",
-          t.description ?? "",
-        ]),
-      );
-
-      if (page.nextCursor) {
-        console.log(chalk.dim(`\nMore results: lizard credits transactions --cursor ${page.nextCursor}`));
-      }
-    });
-
-  // ── Payment methods ───────────────────────────────────────────────
-  const pm = cmd.command("payment-methods").alias("pm").description("Manage saved payment methods");
-
-  pm.command("list")
-    .description("List saved payment methods")
-    .action(async () => {
-      const { items } = await api.get<{ items: PaymentMethod[] }>("/api/billing/payment-methods");
-      if (isJSONMode()) {
-        printJSON(items);
-        return;
-      }
-      if (items.length === 0) {
-        console.log("No saved payment methods. Add one with `lizard credits payment-methods add`.");
-        return;
-      }
-      table(
-        ["ID", "Card", "Expires", "Default"],
-        items.map((m) => [m.id, `${m.brand} •••• ${m.last4}`, `${m.expMonth}/${m.expYear}`, m.isDefault ? "yes" : ""]),
-      );
-    });
-
-  pm.command("add")
-    .description("Save a new card via a Stripe Checkout link")
-    .option("--return-url <url>", "Where to redirect after saving the card")
-    .option("--no-open", "Print the link instead of opening a browser")
-    .action(async (opts) => {
-      const { url } = await api.post<{ url: string }>("/api/billing/payment-methods/setup", {
-        returnUrl: opts.returnUrl,
-      });
-      if (isJSONMode()) {
-        printJSON({ url });
-        return;
-      }
-      console.log(`Open this link to save a card:\n${chalk.cyan(url)}`);
-      if (opts.open !== false && isTTY()) await open(url).catch(() => {});
-    });
-
-  pm.command("remove <id>")
-    .alias("rm")
-    .description("Remove a saved payment method")
-    .option("-y, --yes", "Skip confirmation")
-    .action(async (id: string, opts) => {
-      if (!opts.yes) {
-        if (!isTTY()) throw new Error("Use -y to confirm in non-interactive mode");
-        const confirm = await p.confirm({ message: `Remove payment method ${chalk.bold(id)}?` });
-        if (p.isCancel(confirm) || !confirm) process.exit(5);
-      }
-      const out = await api.delete<{ ok: boolean }>(`/api/billing/payment-methods/${encodeURIComponent(id)}`);
-      if (isJSONMode()) {
-        printJSON(out);
-      } else {
-        success("Payment method removed");
-      }
-    });
-
-  // ── Top up ────────────────────────────────────────────────────────
-  cmd
-    .command("topup <amount>")
-    .alias("purchase")
-    .description("Buy credits (amount in dollars, e.g. `lizard credits topup 20`)")
-    .option("--method <method>", "card, crypto, or x402", "card")
-    .option("--quote", "Show an x402 quote without paying")
-    .option("--max-total <amount>", "Maximum x402 payment including fees, in dollars")
-    .option("--request-id <uuid>", "Reuse this ID to resume an x402 purchase")
-    .option("-y, --yes", "Confirm the x402 payment within --max-total")
-    .option("--return-url <url>", "Where to redirect after payment")
-    .option("--no-open", "Print the checkout link instead of opening a browser")
-    .action(async (amount: string, opts) => {
-      if (opts.method === "x402") {
-        const creditCents = dollarsToCents(amount);
-        const quote = await getX402Quote(creditCents);
-        if (opts.quote) {
-          if (isJSONMode()) printJSON(quote);
-          else console.log(`Credits ${fmtCents(quote.creditCents)}, fee ${fmtCents(quote.feeCents)}, total ${fmtCents(quote.totalCents)} USDC on Base`);
-          return;
-        }
-        if (!opts.maxTotal) throw new Error("Use --max-total to set a payment limit including fees.");
-        const limit = dollarsToCents(opts.maxTotal);
-        if (quote.totalCents > limit) throw new Error("Payment exceeds --max-total.");
-        if (!opts.yes) {
-          if (!isTTY()) throw new Error("Use --yes and --max-total to authorize an x402 payment.");
-          const confirmed = await p.confirm({ message: `Pay ${fmtCents(quote.totalCents)} USDC for ${fmtCents(quote.creditCents)} credits?` });
-          if (p.isCancel(confirmed) || !confirmed) throw new Error("Payment cancelled.");
-        }
-        const result = await payX402(creditCents, limit, quote, opts.requestId);
-        if (isJSONMode()) printJSON(result);
-        else console.log(`Payment ${result.status}. Attempt: ${result.attemptId}. Request: ${result.requestId}`);
-        return;
-      }
-      if (opts.quote || opts.maxTotal || opts.requestId) throw new Error("--quote, --max-total, and --request-id require --method x402.");
-      const creditCents = parseDollarsToCents(amount);
-      if (opts.method !== "card" && opts.method !== "crypto") {
-        throw new Error(`--method must be "card", "crypto", or "x402", got "${opts.method}"`);
-      }
-      let out: { url?: string; sessionId?: string };
-      try {
-        out = await api.post("/api/billing/purchase", {
-          creditCents,
-          paymentMethod: opts.method,
-          returnUrl: opts.returnUrl,
-        });
-      } catch (e) {
-        if (e instanceof APIError && e.status === 409 && e.message === "CREDITS_NOT_ENABLED") {
-          throw new Error("Credits purchases aren't available yet on this account.");
-        }
-        throw e;
-      }
-      if (isJSONMode()) {
-        printJSON(out);
-        return;
-      }
-      if (!out.url) throw new Error("No checkout URL returned.");
-      console.log(`Complete payment (${fmtCents(creditCents)}) at:\n${chalk.cyan(out.url)}`);
-      if (opts.open !== false && isTTY()) await open(out.url).catch(() => {});
-    });
-
-  cmd.command("payment-status <attempt-id>")
-    .description("Check or recover an x402 credit purchase")
-    .action(async (attemptId: string) => {
-      const result = await getX402Status(attemptId);
-      if (isJSONMode()) printJSON(result);
-      else console.log(`Payment ${result.status}. Attempt: ${result.attemptId}`);
-    });
-
-  // ── Auto top-up ───────────────────────────────────────────────────
-  const auto = cmd.command("auto-topup").description("Show or configure automatic top-up");
-
-  auto.action(async () => {
-    const settings = await api.get("/api/billing/auto-topup");
-    if (isJSONMode()) { printJSON(settings); return; }
-    console.log(JSON.stringify(settings, null, 2));
-  });
-
-  auto
-    .command("set")
-    .description("Configure automatic top-up")
-    .requiredOption("--payment-method <id...>", "Payment method ID(s) to charge, in priority order")
-    .option("--threshold <amount>", "Top up when balance drops below this (dollars)", "5")
-    .option("--amount <amount>", "How much to add per top-up (dollars)", "20")
-    .option("--disable", "Turn auto top-up off instead of configuring it")
-    .action(async (opts) => {
-      const body = {
-        enabled: !opts.disable,
-        thresholdCents: parseDollarsToCents(opts.threshold),
-        amountCents: parseDollarsToCents(opts.amount),
-        paymentMethodIds: opts.paymentMethod,
-      };
-      const out = await api.put("/api/billing/auto-topup", body);
-      if (isJSONMode()) { printJSON(out); return; }
-      success(opts.disable ? "Auto top-up disabled" : "Auto top-up configured");
-    });
-
-  auto
-    .command("run")
-    .description("Manually trigger an auto top-up check now")
-    .action(async () => {
-      try {
-        const out = await api.post<{ ok: boolean; creditedCents?: number; balanceCents?: number }>(
-          "/api/billing/auto-topup/run",
-          {},
-        );
-        if (isJSONMode()) { printJSON(out); return; }
-        if (out.ok) {
-          success(`Topped up ${fmtCents(out.creditedCents ?? 0)} — new balance ${fmtCents(out.balanceCents ?? 0)}`);
-        }
-      } catch (e) {
-        if (e instanceof APIError && e.status === 429) {
-          throw new Error(`Auto top-up rate-limited: ${(e.body as any)?.reason ?? e.message}`);
-        }
-        throw e;
-      }
-    });
-
-  // ── Promo codes ───────────────────────────────────────────────────
-  cmd
-    .command("promo <code>")
-    .description("Redeem a promo code")
-    .action(async (code: string) => {
-      try {
-        const out = await api.post<{ status: string; creditCents: number; expiresAt: number | null; balanceCents: number }>(
-          "/api/billing/promo/redeem",
-          { code },
-        );
-        if (isJSONMode()) { printJSON(out); return; }
-        success(`Redeemed ${fmtCents(out.creditCents)} — new balance ${fmtCents(out.balanceCents)}`);
-      } catch (e) {
-        if (e instanceof APIError) throw new Error((e.body as any)?.message ?? e.message);
-        throw e;
-      }
-    });
-}
-

package/src/lib/x402.ts

@@ -1,131 +0,0 @@
-import { createHash, randomUUID } from 'node:crypto';
-import fs from 'node:fs';
-import path from 'node:path';
-import os from 'node:os';
-import type { PaymentRequired } from '@x402/core/types';
-import { APIError, getBaseURL, getRequestToken } from './api.js';
-
-const NETWORK = 'eip155:8453';
-const ASSET = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
-const ENDPOINT = '/api/billing/purchase/x402';
-export interface X402Quote { creditCents: number; feeCents: number; totalCents: number; network: string; asset: string; payTo: string; }
-export interface X402Result extends X402Quote { requestId: string; attemptId: string; status: string; transaction?: string | null; paymentIntentId?: string | null; }
-class PaymentInputError extends Error {}
-interface Journal { requestId: string; creditCents: number; maxTotalCents: number; origin: string; signature?: string; result?: X402Result; }
-export function dollarsToCents(value: string): number {
-  if (!/^\d+(\.\d{1,2})?$/.test(value)) throw new Error('Use a positive dollar amount with at most two decimal places.');
-  const [whole, fraction = ''] = value.split('.');
-  const cents = Number(whole) * 100 + Number(fraction.padEnd(2, '0'));
-  if (!Number.isSafeInteger(cents) || cents <= 0) throw new Error('Invalid dollar amount.');
-  return cents;
-}
-export function paymentOrigin(): string {
-  const url = new URL(getBaseURL());
-  const trusted = process.env.LIZARD_X402_TRUSTED_ORIGIN || 'https://lizard.build';
-  if (url.protocol !== 'https:' || url.origin !== trusted || url.username || url.password || url.pathname !== '/' || url.search || url.hash) {
-    throw new Error('x402 requires a trusted HTTPS API origin. Set LIZARD_X402_TRUSTED_ORIGIN explicitly for another server.');
-  }
-  return url.origin;
-}
-async function request(method: string, route: string, body?: unknown, signature?: string): Promise<Response> {
-  const token = getRequestToken();
-  if (!token) throw new APIError(401, 'Sign in before buying credits.');
-  const headers: Record<string, string> = { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' };
-  if (signature) headers['PAYMENT-SIGNATURE'] = signature;
-  return fetch(paymentOrigin() + route, { method, headers, body: body === undefined ? undefined : JSON.stringify(body), redirect: 'error', signal: AbortSignal.timeout(45_000) });
-}
-async function json<T>(res: Response): Promise<T> {
-  const value = await res.json() as T & { error?: string; message?: string };
-  if (!res.ok) throw new APIError(res.status, value.error || value.message || 'Payment request failed.', value.error, value);
-  return value;
-}
-export function validateQuote(q: X402Quote, creditCents: number, maxTotalCents = Number.MAX_SAFE_INTEGER) {
-  if (!Number.isSafeInteger(q.creditCents) || !Number.isSafeInteger(q.feeCents) || !Number.isSafeInteger(q.totalCents) ||
-    q.creditCents !== creditCents || q.feeCents < 0 || q.totalCents !== q.creditCents + q.feeCents || q.totalCents > maxTotalCents ||
-    q.network !== NETWORK || q.asset.toLowerCase() !== ASSET.toLowerCase() || !/^0x[0-9a-fA-F]{40}$/.test(q.payTo)) throw new Error('Payment quote is invalid or exceeds --max-total.');
-}
-export async function getX402Quote(creditCents: number): Promise<X402Quote> {
-  const q = await json<X402Quote>(await request('POST', `${ENDPOINT}/quote`, { creditCents }));
-  validateQuote(q, creditCents);
-  return q;
-}
-export function validateChallenge(value: PaymentRequired, q: X402Quote, origin: string) {
-  const r = value.accepts?.[0];
-  if (value.x402Version !== 2 || value.accepts?.length !== 1 || value.resource?.url !== origin + ENDPOINT || !r ||
-    r.scheme !== 'exact' || r.network !== NETWORK || r.asset.toLowerCase() !== ASSET.toLowerCase() ||
-    r.payTo.toLowerCase() !== q.payTo.toLowerCase() || r.amount !== String(BigInt(q.totalCents) * 10_000n) ||
-    r.maxTimeoutSeconds <= 0 || r.maxTimeoutSeconds > 300 ||
-    (value.extensions && Object.keys(value.extensions).length > 0) ||
-    (r.extra?.assetTransferMethod !== undefined && r.extra.assetTransferMethod !== 'eip3009') ||
-    Object.keys(r.extra || {}).some(key => !['name', 'version', 'assetTransferMethod'].includes(key)) || r.extra?.name !== 'USD Coin' || r.extra?.version !== '2') throw new Error('Untrusted x402 payment challenge.');
-}
-function journalPath(creditCents: number, requestId?: string) {
-  if (requestId && !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(requestId)) throw new Error('--request-id must be a UUID.');
-  const account = createHash('sha256').update(paymentOrigin() + '\0' + getRequestToken()).digest('hex');
-  const dir = path.join(process.env.LIZARD_HOME || os.homedir(), '.lizard', 'payments', account);
-  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-  const pending = path.join(dir, `pending-${creditCents}.json`);
-  if (requestId && fs.existsSync(pending)) {
-    const previous = JSON.parse(fs.readFileSync(pending, 'utf8')) as Journal;
-    if (previous.requestId === requestId) return pending;
-  }
-  return path.join(dir, requestId || `pending-${creditCents}.json`);
-}
-function persist(file: string, state: Journal) {
-  const temporary = `${file}.${randomUUID()}.tmp`;
-  fs.writeFileSync(temporary, JSON.stringify(state), { mode: 0o600, flag: 'wx' });
-  fs.renameSync(temporary, file);
-}
-export async function payX402(creditCents: number, maxTotalCents: number, expected: X402Quote, requestId?: string): Promise<X402Result> {
-  validateQuote(expected, creditCents, maxTotalCents);
-  const origin = paymentOrigin();
-  const file = journalPath(creditCents, requestId);
-  let state: Journal = { requestId: requestId || randomUUID(), creditCents, maxTotalCents, origin };
-  try { fs.writeFileSync(file, JSON.stringify(state), { flag: 'wx', mode: 0o600 }); }
-  catch (e) {
-    if ((e as NodeJS.ErrnoException).code !== 'EEXIST') throw e;
-    state = JSON.parse(fs.readFileSync(file, 'utf8')) as Journal;
-    if (state.origin !== origin || state.creditCents !== creditCents || state.maxTotalCents > maxTotalCents) throw new Error('Saved payment differs. Resume with the original amount and limit.');
-    if (state.result?.status === 'paid') {
-      if (requestId) return state.result;
-      throw new Error(`Previous payment ${state.requestId} is paid. Use a new --request-id UUID for another purchase of this amount.`);
-    }
-  }
-  try {
-    let response = await request('POST', ENDPOINT, { creditCents, requestId: state.requestId }, state.signature);
-    if (response.status === 402 && !state.signature) {
-      const header = response.headers.get('PAYMENT-REQUIRED');
-      if (!header || header.length > 16_384) throw new Error('Server returned 402 without a valid x402 challenge.');
-      const challenge = JSON.parse(Buffer.from(header, 'base64').toString('utf8')) as PaymentRequired;
-      const body = await response.json() as X402Result;
-      validateQuote(body, creditCents, Math.min(state.maxTotalCents, maxTotalCents));
-      if (body.payTo.toLowerCase() !== expected.payTo.toLowerCase() || body.totalCents !== expected.totalCents) throw new Error('Quote changed. Request a fresh quote before paying.');
-      validateChallenge(challenge, body, origin);
-      const key = process.env.LIZARD_X402_PRIVATE_KEY;
-      if (!key || !/^0x[0-9a-fA-F]{64}$/.test(key)) throw new PaymentInputError('Set LIZARD_X402_PRIVATE_KEY to a funded Base wallet key through your secret manager.');
-      const [{ x402Client }, { ExactEvmScheme }, { privateKeyToAccount }] = await Promise.all([
-        import('@x402/core/client'), import('@x402/evm/exact/client'), import('viem/accounts'),
-      ]);
-      const signer = privateKeyToAccount(key as `0x${string}`);
-      const client = new x402Client().register(NETWORK, new ExactEvmScheme(signer))
-        .setSpendControls({ maxAmountPerPayment: `$${(Math.min(state.maxTotalCents, maxTotalCents) / 100).toFixed(2)}` });
-      const payload = await client.createPaymentPayload(challenge);
-      state.signature = Buffer.from(JSON.stringify(payload)).toString('base64');
-      state.result = body;
-      persist(file, state); // Persist the authorization before sending it anywhere.
-      response = await request('POST', ENDPOINT, { creditCents, requestId: state.requestId }, state.signature);
-    }
-    const result = await json<X402Result>(response);
-    state.result = result;
-    persist(file, state);
-    return result;
-  } catch (e) {
-    if (e instanceof APIError && e.code === 'QUOTE_EXPIRED') throw new Error('Quote expired before payment was accepted. Use a new --request-id UUID.');
-    const message = e instanceof APIError || e instanceof PaymentInputError ? e.message : 'Payment did not finish. No new payment was started.';
-    throw new Error(`${message} Resume with --request-id ${state.requestId}. Saved state: ${file}`);
-  }
-}
-export async function getX402Status(attemptId: string): Promise<X402Result> {
-  if (!/^[0-9a-f-]{36}$/i.test(attemptId)) throw new Error('Payment attempt ID must be a UUID.');
-  return json<X402Result>(await request('GET', `${ENDPOINT}/${attemptId}`));
-}

package/test/unit/x402.test.ts

@@ -1,61 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { dollarsToCents, validateQuote, validateChallenge, paymentOrigin, payX402, getX402Quote } from '../../src/lib/x402.js';
-import { setBaseURL, setAccessToken } from '../../src/lib/api.js';
-const payTo='0x'+'22'.repeat(20);
-const quote={creditCents:2000,feeCents:31,totalCents:2031,network:'eip155:8453',asset:'0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',payTo};
-const challenge={x402Version:2,resource:{url:'https://lizard.build/api/billing/purchase/x402',mimeType:'application/json'},accepts:[{scheme:'exact',network:'eip155:8453' as const,asset:quote.asset,amount:'20310000',payTo,maxTimeoutSeconds:300,extra:{name:'USD Coin',version:'2'}}]};
-const fetchMock=vi.fn();
-let home: string;
-function unpaid() { return new Response(JSON.stringify({...quote,attemptId:'a0000000-0000-4000-8000-000000000001',status:'quoted',...challenge}), {status:402,headers:{'PAYMENT-REQUIRED':Buffer.from(JSON.stringify(challenge)).toString('base64')}}); }
-beforeEach(() => {
-  fetchMock.mockReset(); vi.stubGlobal('fetch',fetchMock); setBaseURL('https://lizard.build'); setAccessToken('test-token');
-  home=fs.mkdtempSync(path.join(os.tmpdir(),'lizard-x402-')); vi.stubEnv('LIZARD_HOME',home);
-  vi.stubEnv('LIZARD_X402_TRUSTED_ORIGIN',''); vi.stubEnv('LIZARD_X402_PRIVATE_KEY','0x'+'11'.repeat(32));
-});
-afterEach(() => { vi.unstubAllGlobals(); vi.unstubAllEnvs(); });
-describe('x402 client', () => {
-  it('parses money without rounding fractional cents', () => {
-    expect(dollarsToCents('20.31')).toBe(2031);
-    for(const invalid of ['1.001','NaN','1e3','-1','0','Infinity']) expect(()=>dollarsToCents(invalid)).toThrow();
-  });
-  it('blocks untrusted hosts and malformed quotes', () => {
-    setBaseURL('http://lizard.build'); expect(paymentOrigin).toThrow();
-    setBaseURL('https://evil.example'); expect(paymentOrigin).toThrow();
-    expect(()=>validateQuote({...quote,totalCents:2200},2000,2100)).toThrow();
-    expect(()=>validateQuote({...quote,asset:payTo},2000,2100)).toThrow();
-  });
-  it('rejects a changed recipient, token, network, amount, domain or payment scheme', () => {
-    for(const patch of [{payTo:'0x'+'33'.repeat(20)},{asset:payTo},{network:'eip155:1'},{amount:'99999999'},{extra:{name:'USDC',version:'2'}},{scheme:'upto'},{extra:{name:'USD Coin',version:'2',assetTransferMethod:'permit2'}}]) {
-      expect(()=>validateChallenge({...challenge,accepts:[{...challenge.accepts[0],...patch}]} as never,quote,'https://lizard.build')).toThrow();
-    }
-  });
-  it('quotes without accessing a wallet or signing', async () => {
-    vi.stubEnv('LIZARD_X402_PRIVATE_KEY',''); fetchMock.mockResolvedValue(new Response(JSON.stringify(quote)));
-    expect(await getX402Quote(2000)).toEqual(quote); expect(fetchMock).toHaveBeenCalledTimes(1);
-  });
-  it('never signs a plain INSUFFICIENT_CREDITS 402', async () => {
-    fetchMock.mockResolvedValue(new Response(JSON.stringify({error:'INSUFFICIENT_CREDITS'}),{status:402}));
-    await expect(payX402(2000,2100,quote)).rejects.toThrow('Resume with --request-id'); expect(fetchMock).toHaveBeenCalledTimes(1);
-  });
-  it('persists the real SDK authorization and reuses it after a lost response', async () => {
-    fetchMock.mockResolvedValueOnce(unpaid()).mockRejectedValueOnce(new Error('network timeout'));
-    await expect(payX402(2000,2100,quote)).rejects.toThrow('Resume with --request-id');
-    const sent=fetchMock.mock.calls[1][1]; const first=JSON.parse(sent.body);
-    expect(sent.redirect).toBe('error'); expect(sent.headers.Authorization).toBe('Bearer test-token');
-    const payload=JSON.parse(Buffer.from(sent.headers['PAYMENT-SIGNATURE'],'base64').toString());
-    expect(payload.payload.authorization).toMatchObject({to:payTo,value:'20310000'});
-    const paid={...quote,requestId:first.requestId,attemptId:'a0000000-0000-4000-8000-000000000001',status:'paid'};
-    fetchMock.mockResolvedValueOnce(new Response(JSON.stringify(paid)));
-    expect(await payX402(2000,2100,quote,first.requestId)).toEqual(paid);
-    expect(fetchMock.mock.calls[2][1].headers['PAYMENT-SIGNATURE']).toBe(sent.headers['PAYMENT-SIGNATURE']);
-    expect(JSON.parse(fetchMock.mock.calls[2][1].body).requestId).toBe(first.requestId);
-    expect(JSON.stringify(fs.readdirSync(path.join(home,'.lizard','payments')))).not.toContain('test-token');
-    await expect(payX402(2000,2100,quote)).rejects.toThrow('Previous payment');
-  });
-  it('refuses a quote over the approved limit before any request', async () => {
-    await expect(payX402(2000,2000,quote)).rejects.toThrow('exceeds --max-total'); expect(fetchMock).not.toHaveBeenCalled();
-  });
-});