@lunora/x402 0.0.0 → 1.0.0-alpha.2

package/dist/pay/index.d.mts

@@ -0,0 +1,77 @@
+import { e as X402PayConfig } from "../packem_shared/config.d-CddwCiBm.mjs";
+export { type C as Caip2, D as DEFAULT_FACILITATOR_URL, m as DEFAULT_STABLECOIN_DECIMALS, type n as SpendPolicy, type o as SpendState, type X as X402CdpSignerConfig, type d as X402Network, type f as X402Price, type j as X402SignerConfig, p as assertBoundedPolicy, q as buildPaymentGuard, s as buildSpendPolicy, u as createSpendState, k as isEvmNetwork, l as isSvmNetwork, v as recordSpend, r as resolveFacilitatorUrl, t as toCaip2, w as usdToAtomic } from "../packem_shared/config.d-CddwCiBm.mjs";
+import { x402Client } from '@x402/core/client';
+import { ClientSvmSigner } from '@x402/svm';
+import { PrivateKeyAccount } from 'viem/accounts';
+import '@x402/evm';
+import '@x402/core/http';
+import '@x402/core/types';
+/** Reads a secret by name; resolves `undefined` when unset. */
+type GetSecret = (name: string) => Promise<string | undefined> | string | undefined;
+/** How the wallet reads its key material — wired to `ctx.secrets.get` in an action. */
+interface WalletDeps {
+  /** Read a secret (e.g. a private key) by name; `undefined` when unset. */
+  readonly getSecret: GetSecret;
+}
+/**
+* Resolve a viem `LocalAccount` from a raw private key. The key may be given with
+* or without the `0x` prefix. The account is a structural `ClientEvmSigner`
+* (`address` + `signTypedData`), so `@x402/evm` accepts it directly.
+*/
+declare const resolveEvmAccount: (privateKey: string) => Promise<PrivateKeyAccount>;
+/**
+* Resolve a `@solana/kit` `KeyPairSigner` from a raw Solana secret key. The secret
+* may be given as a JSON byte array (`[12,34,…]`, the `solana-keygen` keyfile
+* format) or as a base58 string. A 64-byte value is a full secret key (seed ‖
+* public key); a 32-byte value is the seed alone. The returned signer is a
+* structural `ClientSvmSigner` (`TransactionSigner`), so `@x402/svm` accepts it.
+*/
+declare const resolveSvmSigner: (secret: string) => Promise<ClientSvmSigner>;
+/**
+* Register the scheme family the configured network needs on `client`, wired to
+* the agent signer. Dispatches on network family (EVM vs SVM) and on custody —
+* `"signer"` (a signer the caller already built; registered directly, no secret
+* read), `"raw-key"` (a `ctx.secrets` private key → viem account on EVM or a
+* `@solana/kit` keypair on SVM), or `"cdp"` (a Coinbase-managed wallet via
+* `@coinbase/cdp-sdk`).
+*/
+declare const registerWallet: (client: x402Client, config: X402PayConfig, deps: WalletDeps) => Promise<void>;
+/** A payment-enabled `fetch`: same signature as the platform `fetch`. */
+type PayFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Dependencies for building a pay-rail fetch: secret access, plus an optional base `fetch` to wrap. */
+interface X402PayDeps extends WalletDeps {
+  /** The `fetch` to wrap (defaults to `globalThis.fetch`). Inject to test or to chain transports. */
+  readonly fetch?: typeof globalThis.fetch;
+}
+/**
+* Build a payment-enabled `fetch` for `config`. Throws (before resolving a
+* signer) when `config.policy` is unbounded — an agent wallet is never built
+* with unlimited spend authority.
+*/
+declare const createPayFetch: (config: X402PayConfig, deps: X402PayDeps) => Promise<PayFetch>;
+/** A configured pay rail: a payment-enabled `fetch` bounded by the spend policy. */
+interface X402Pay {
+  /** A `fetch` that transparently pays for `402`-gated resources under the policy. */
+  readonly fetch: PayFetch;
+}
+/**
+* Build a pay rail for `config`. The returned `fetch` answers `402` challenges by
+* signing and retrying, within `config.policy`. Throws (before touching the
+* signer) when the policy is unbounded.
+*/
+declare const createX402Pay: (config: X402PayConfig, deps: X402PayDeps) => Promise<X402Pay>;
+/**
+* A synchronous, lazily-initialised pay rail — what codegen wires `ctx.x402` to.
+*
+* `buildCtx` must stay synchronous, but {@link createX402Pay} is async (it reads
+* the wallet secret and imports the signer). So this returns an {@link X402Pay}
+* immediately whose `fetch` builds the real rail on its **first** call and
+* memoises it: the viem/`@x402` signer imports + Secrets Store read are paid for
+* only when an action actually pays, and the single `SpendState` behind the
+* rail is shared across every payment for the lifetime of this ctx — so the
+* per-run cap scopes to the ctx, not to each request. A failed build (e.g. an
+* unbounded policy) is memoised too, keeping the rail deterministically
+* fail-closed.
+*/
+declare const lazyX402Pay: (config: X402PayConfig, deps: X402PayDeps) => X402Pay;
+export { type PayFetch, type WalletDeps, X402Pay, type X402PayConfig, type X402PayDeps, createPayFetch, createX402Pay, lazyX402Pay, registerWallet, resolveEvmAccount, resolveSvmSigner };

package/dist/pay/index.d.ts

@@ -0,0 +1,77 @@
+import { e as X402PayConfig } from "../packem_shared/config.d-CddwCiBm.js";
+export { type C as Caip2, D as DEFAULT_FACILITATOR_URL, m as DEFAULT_STABLECOIN_DECIMALS, type n as SpendPolicy, type o as SpendState, type X as X402CdpSignerConfig, type d as X402Network, type f as X402Price, type j as X402SignerConfig, p as assertBoundedPolicy, q as buildPaymentGuard, s as buildSpendPolicy, u as createSpendState, k as isEvmNetwork, l as isSvmNetwork, v as recordSpend, r as resolveFacilitatorUrl, t as toCaip2, w as usdToAtomic } from "../packem_shared/config.d-CddwCiBm.js";
+import { x402Client } from '@x402/core/client';
+import { ClientSvmSigner } from '@x402/svm';
+import { PrivateKeyAccount } from 'viem/accounts';
+import '@x402/evm';
+import '@x402/core/http';
+import '@x402/core/types';
+/** Reads a secret by name; resolves `undefined` when unset. */
+type GetSecret = (name: string) => Promise<string | undefined> | string | undefined;
+/** How the wallet reads its key material — wired to `ctx.secrets.get` in an action. */
+interface WalletDeps {
+  /** Read a secret (e.g. a private key) by name; `undefined` when unset. */
+  readonly getSecret: GetSecret;
+}
+/**
+* Resolve a viem `LocalAccount` from a raw private key. The key may be given with
+* or without the `0x` prefix. The account is a structural `ClientEvmSigner`
+* (`address` + `signTypedData`), so `@x402/evm` accepts it directly.
+*/
+declare const resolveEvmAccount: (privateKey: string) => Promise<PrivateKeyAccount>;
+/**
+* Resolve a `@solana/kit` `KeyPairSigner` from a raw Solana secret key. The secret
+* may be given as a JSON byte array (`[12,34,…]`, the `solana-keygen` keyfile
+* format) or as a base58 string. A 64-byte value is a full secret key (seed ‖
+* public key); a 32-byte value is the seed alone. The returned signer is a
+* structural `ClientSvmSigner` (`TransactionSigner`), so `@x402/svm` accepts it.
+*/
+declare const resolveSvmSigner: (secret: string) => Promise<ClientSvmSigner>;
+/**
+* Register the scheme family the configured network needs on `client`, wired to
+* the agent signer. Dispatches on network family (EVM vs SVM) and on custody —
+* `"signer"` (a signer the caller already built; registered directly, no secret
+* read), `"raw-key"` (a `ctx.secrets` private key → viem account on EVM or a
+* `@solana/kit` keypair on SVM), or `"cdp"` (a Coinbase-managed wallet via
+* `@coinbase/cdp-sdk`).
+*/
+declare const registerWallet: (client: x402Client, config: X402PayConfig, deps: WalletDeps) => Promise<void>;
+/** A payment-enabled `fetch`: same signature as the platform `fetch`. */
+type PayFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Dependencies for building a pay-rail fetch: secret access, plus an optional base `fetch` to wrap. */
+interface X402PayDeps extends WalletDeps {
+  /** The `fetch` to wrap (defaults to `globalThis.fetch`). Inject to test or to chain transports. */
+  readonly fetch?: typeof globalThis.fetch;
+}
+/**
+* Build a payment-enabled `fetch` for `config`. Throws (before resolving a
+* signer) when `config.policy` is unbounded — an agent wallet is never built
+* with unlimited spend authority.
+*/
+declare const createPayFetch: (config: X402PayConfig, deps: X402PayDeps) => Promise<PayFetch>;
+/** A configured pay rail: a payment-enabled `fetch` bounded by the spend policy. */
+interface X402Pay {
+  /** A `fetch` that transparently pays for `402`-gated resources under the policy. */
+  readonly fetch: PayFetch;
+}
+/**
+* Build a pay rail for `config`. The returned `fetch` answers `402` challenges by
+* signing and retrying, within `config.policy`. Throws (before touching the
+* signer) when the policy is unbounded.
+*/
+declare const createX402Pay: (config: X402PayConfig, deps: X402PayDeps) => Promise<X402Pay>;
+/**
+* A synchronous, lazily-initialised pay rail — what codegen wires `ctx.x402` to.
+*
+* `buildCtx` must stay synchronous, but {@link createX402Pay} is async (it reads
+* the wallet secret and imports the signer). So this returns an {@link X402Pay}
+* immediately whose `fetch` builds the real rail on its **first** call and
+* memoises it: the viem/`@x402` signer imports + Secrets Store read are paid for
+* only when an action actually pays, and the single `SpendState` behind the
+* rail is shared across every payment for the lifetime of this ctx — so the
+* per-run cap scopes to the ctx, not to each request. A failed build (e.g. an
+* unbounded policy) is memoised too, keeping the rail deterministically
+* fail-closed.
+*/
+declare const lazyX402Pay: (config: X402PayConfig, deps: X402PayDeps) => X402Pay;
+export { type PayFetch, type WalletDeps, X402Pay, type X402PayConfig, type X402PayDeps, createPayFetch, createX402Pay, lazyX402Pay, registerWallet, resolveEvmAccount, resolveSvmSigner };

package/dist/pay/index.mjs

@@ -0,0 +1,21 @@
+import { createPayFetch } from '../packem_shared/createPayFetch-O2vkvM1v.mjs';
+export { DEFAULT_FACILITATOR_URL, resolveFacilitatorUrl } from '../packem_shared/DEFAULT_FACILITATOR_URL-Cbz6kIqa.mjs';
+export { isEvmNetwork, isSvmNetwork, toCaip2 } from '../packem_shared/EVM_NETWORKS-BhnYWUQ4.mjs';
+export { DEFAULT_STABLECOIN_DECIMALS, assertBoundedPolicy, buildPaymentGuard, buildSpendPolicy, createSpendState, recordSpend, usdToAtomic } from '../packem_shared/DEFAULT_STABLECOIN_DECIMALS-CSu5b5lD.mjs';
+export { registerWallet, resolveEvmAccount, resolveSvmSigner } from '../packem_shared/registerWallet-I4pVwq65.mjs';
+
+const createX402Pay = async (config, deps) => {
+  const fetch = await createPayFetch(config, deps);
+  return { fetch };
+};
+const lazyX402Pay = (config, deps) => {
+  let railPromise;
+  const fetch = async (input, init) => {
+    railPromise ??= createX402Pay(config, deps);
+    const rail = await railPromise;
+    return rail.fetch(input, init);
+  };
+  return { fetch };
+};
+
+export { createPayFetch, createX402Pay, lazyX402Pay };

package/package.json

@@ -1,10 +1,78 @@
 {
   "name": "@lunora/x402",
-  "version": "0.0.0",
-  "description": "OIDC trusted publishing setup package for @lunora/x402",
+  "version": "1.0.0-alpha.2",
+  "description": "Agentic payments (x402) for Lunora: charge agents per request (charge rail) and let your agents pay x402-gated resources (pay rail)",
   "keywords": [
-    "oidc",
-    "trusted-publishing",
-    "setup"
-  ]
-}
+    "agents",
+    "cloudflare",
+    "lunora",
+    "micropayments",
+    "payments",
+    "stablecoin",
+    "usdc",
+    "workers",
+    "x402"
+  ],
+  "homepage": "https://lunora.sh",
+  "bugs": "https://github.com/anolilab/lunora/issues",
+  "license": "FSL-1.1-Apache-2.0",
+  "author": {
+    "name": "Daniel Bannert",
+    "email": "d.bannert@anolilab.de"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/anolilab/lunora.git",
+    "directory": "packages/x402"
+  },
+  "files": [
+    "./dist",
+    "__assets__",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs"
+    },
+    "./charge": {
+      "types": "./dist/charge/index.d.ts",
+      "import": "./dist/charge/index.mjs"
+    },
+    "./pay": {
+      "types": "./dist/pay/index.d.ts",
+      "import": "./dist/pay/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@lunora/errors": "1.0.0-alpha.4",
+    "@solana/kit": "5.5.1",
+    "@x402/core": "2.17.0",
+    "@x402/evm": "2.17.0",
+    "@x402/fetch": "2.17.0",
+    "@x402/svm": "2.17.0",
+    "viem": "2.54.1"
+  },
+  "peerDependencies": {
+    "@coinbase/cdp-sdk": ">=1.0.0",
+    "@coinbase/x402": ">=2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@coinbase/cdp-sdk": {
+      "optional": true
+    },
+    "@coinbase/x402": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": "^22.15.0 || >=24.11.0"
+  }
+}