@parallel-protocol/x402 0.5.0 → 0.5.2

package/README.md

@@ -209,7 +209,7 @@ For the four natively supported networks, `acceptedTokens` defaults to `[USDp, U
 
 | Network | USDp | USDC | sUSDp |
 |---------|------|------|-------|
-| `ethereum` | `0x9B3a8f7CEC208e247d97dEE13313690977e24459` | `0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48` | `0x0d45b129dc868963025Db79A9074EA9c9e32Cae4` |
+| `ethereum` | `0x9B3a8f7CEC208e247d97dEE13313690977e24459` | `0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48` | `0xd3a452B305C8285c0Dd7b8537665c734d3D279eF` |
 | `base` | `0x76A9A0062ec6712b99B4f63bD2b4270185759dd5` | `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913` | `0x472eD57b376fE400259FB28e5C46eB53f0E3e7E7` |
 | `avalanche` | `0x9eE1963f05553eF838604Dd39403be21ceF26AA4` | `0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E` | `0x9d92c21205383651610f90722131655a5b8ed3e0` |
 | `hyperevm` | `0xBE65F0F410A72BeC163dC65d46c83699e957D588` | `0xb88339cb7199b77e23db6e890353e22632ba630f` | `0x9B3a8f7CEC208e247d97dEE13313690977e24459` |

package/dist/{chunk-FDQULXKG.js → chunk-75GLDK7L.js}

@@ -245,7 +245,7 @@ var FacilitatorClient = class {
 var PARALLEL_TOKENS = {
   ethereum: {
     usdp: "0x9B3a8f7CEC208e247d97dEE13313690977e24459",
-    susdp: "0x0d45b129dc868963025Db79A9074EA9c9e32Cae4",
+    susdp: "0xd3a452B305C8285c0Dd7b8537665c734d3D279eF",
     usdc: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
     frxUSD: "0xCAcd6fd266aF91b8AeD52aCCc382b4e165586E29",
     sfrxUSD: "0xcf62F905562626CfcDD2261162a51fd02Fc9c5b6",
@@ -326,14 +326,40 @@ function buildPaymentRequired(url, config, resolvedTokens) {
     accepts
   };
 }
-function buildFacilitatorRequirements(config, resolvedTokens) {
-  const asset = resolvedTokens[0];
+function decodePaymentPayload(header) {
+  try {
+    const parsed = JSON.parse(
+      Buffer.from(header, "base64").toString("utf8")
+    );
+    return typeof parsed === "object" && parsed !== null ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deliveredToken(payload, chainTokens) {
+  if (payload.method === "depositWithAuthorization" || payload.payload?.depositAuthorization) {
+    return chainTokens?.susdp;
+  }
+  if (payload.method === "redeemWithAuthorization") return chainTokens?.usdp;
+  if (payload.swapParams?.tokenOut) return payload.swapParams.tokenOut;
+  if (payload.method === "partialRedeemWithAuthorization") {
+    return chainTokens?.usdp;
+  }
+  return payload.tokenIn ?? chainTokens?.usdp;
+}
+function resolveDeliveredAsset(header, config, resolvedTokens) {
+  const payload = decodePaymentPayload(header);
+  const target = payload ? deliveredToken(
+    payload,
+    PARALLEL_TOKENS[config.network]
+  ) : void 0;
+  const lower = target?.toLowerCase();
+  return resolvedTokens.find((token) => token.toLowerCase() === lower) ?? resolvedTokens[0];
+}
+function buildFacilitatorRequirements(config, asset) {
   const decimals = resolveDecimals(config, asset);
   return {
     maxAmountRequired: parsePrice(config.price, decimals).toString(),
-    // Informational only: the facilitator validates the amount + the on-chain
-    // payload (the paid token lives in the payload / swapParams), and ignores
-    // `asset`. resolveAcceptedTokens guarantees at least one entry.
     asset,
     payTo: config.payTo,
     network: config.network
@@ -381,7 +407,7 @@ function createPaymentGate(config) {
     }
     const requirements = buildFacilitatorRequirements(
       routeConfig,
-      resolvedTokens
+      resolveDeliveredAsset(paymentHeader, routeConfig, resolvedTokens)
     );
     try {
       await client.verify(paymentHeader, requirements);

package/dist/{chunk-W3SMR5LQ.cjs → chunk-KQPIZ6SZ.cjs}

@@ -247,7 +247,7 @@ var FacilitatorClient = class {
 var PARALLEL_TOKENS = {
   ethereum: {
     usdp: "0x9B3a8f7CEC208e247d97dEE13313690977e24459",
-    susdp: "0x0d45b129dc868963025Db79A9074EA9c9e32Cae4",
+    susdp: "0xd3a452B305C8285c0Dd7b8537665c734d3D279eF",
     usdc: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
     frxUSD: "0xCAcd6fd266aF91b8AeD52aCCc382b4e165586E29",
     sfrxUSD: "0xcf62F905562626CfcDD2261162a51fd02Fc9c5b6",
@@ -328,14 +328,40 @@ function buildPaymentRequired(url, config, resolvedTokens) {
     accepts
   };
 }
-function buildFacilitatorRequirements(config, resolvedTokens) {
-  const asset = resolvedTokens[0];
+function decodePaymentPayload(header) {
+  try {
+    const parsed = JSON.parse(
+      Buffer.from(header, "base64").toString("utf8")
+    );
+    return typeof parsed === "object" && parsed !== null ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deliveredToken(payload, chainTokens) {
+  if (payload.method === "depositWithAuthorization" || payload.payload?.depositAuthorization) {
+    return chainTokens?.susdp;
+  }
+  if (payload.method === "redeemWithAuthorization") return chainTokens?.usdp;
+  if (payload.swapParams?.tokenOut) return payload.swapParams.tokenOut;
+  if (payload.method === "partialRedeemWithAuthorization") {
+    return chainTokens?.usdp;
+  }
+  return payload.tokenIn ?? chainTokens?.usdp;
+}
+function resolveDeliveredAsset(header, config, resolvedTokens) {
+  const payload = decodePaymentPayload(header);
+  const target = payload ? deliveredToken(
+    payload,
+    PARALLEL_TOKENS[config.network]
+  ) : void 0;
+  const lower = target?.toLowerCase();
+  return resolvedTokens.find((token) => token.toLowerCase() === lower) ?? resolvedTokens[0];
+}
+function buildFacilitatorRequirements(config, asset) {
   const decimals = resolveDecimals(config, asset);
   return {
     maxAmountRequired: parsePrice(config.price, decimals).toString(),
-    // Informational only: the facilitator validates the amount + the on-chain
-    // payload (the paid token lives in the payload / swapParams), and ignores
-    // `asset`. resolveAcceptedTokens guarantees at least one entry.
     asset,
     payTo: config.payTo,
     network: config.network
@@ -383,7 +409,7 @@ function createPaymentGate(config) {
     }
     const requirements = buildFacilitatorRequirements(
       routeConfig,
-      resolvedTokens
+      resolveDeliveredAsset(paymentHeader, routeConfig, resolvedTokens)
     );
     try {
       await client.verify(paymentHeader, requirements);

package/dist/express.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkXUNNMCO5_cjs = require('./chunk-XUNNMCO5.cjs');
-var chunkW3SMR5LQ_cjs = require('./chunk-W3SMR5LQ.cjs');
+var chunkKQPIZ6SZ_cjs = require('./chunk-KQPIZ6SZ.cjs');
 
 // src/express/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({
@@ -113,7 +113,7 @@ var ExpressAdapter = class {
 
 // src/express/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkW3SMR5LQ_cjs.createPaymentMiddleware(config);
+  const middleware = chunkKQPIZ6SZ_cjs.createPaymentMiddleware(config);
   return async (req, res, next) => {
     const result = await middleware(new ExpressAdapter(req, res, next));
     if ("pass" in result) {

package/dist/express.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-2UEAVMCH.js';
-import { createPaymentMiddleware } from './chunk-FDQULXKG.js';
+import { createPaymentMiddleware } from './chunk-75GLDK7L.js';
 
 // src/express/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({

package/dist/fastify.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkW3SMR5LQ_cjs = require('./chunk-W3SMR5LQ.cjs');
+var chunkKQPIZ6SZ_cjs = require('./chunk-KQPIZ6SZ.cjs');
 var fp = require('fastify-plugin');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -31,7 +31,7 @@ var FastifyAdapter = class {
 // src/fastify/index.ts
 function paymentMiddleware(config) {
   return fp__default.default(async (fastify) => {
-    const gate = chunkW3SMR5LQ_cjs.createPaymentGate(config);
+    const gate = chunkKQPIZ6SZ_cjs.createPaymentGate(config);
     const settleMap = /* @__PURE__ */ new WeakMap();
     fastify.addHook("onRequest", async (req, reply) => {
       const gateResult = await gate(new FastifyAdapter(req));
@@ -54,7 +54,7 @@ function paymentMiddleware(config) {
       try {
         const settleResponse = await settle();
         if (settleResponse.success) {
-          reply.header("payment-response", chunkW3SMR5LQ_cjs.encodeBase64(settleResponse));
+          reply.header("payment-response", chunkKQPIZ6SZ_cjs.encodeBase64(settleResponse));
           reply.header("access-control-expose-headers", "payment-response");
           settled = true;
         }

package/dist/fastify.js

@@ -1,4 +1,4 @@
-import { createPaymentGate, encodeBase64 } from './chunk-FDQULXKG.js';
+import { createPaymentGate, encodeBase64 } from './chunk-75GLDK7L.js';
 import fp from 'fastify-plugin';
 
 // src/fastify/adapter.ts

package/dist/hono.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkXUNNMCO5_cjs = require('./chunk-XUNNMCO5.cjs');
-var chunkW3SMR5LQ_cjs = require('./chunk-W3SMR5LQ.cjs');
+var chunkKQPIZ6SZ_cjs = require('./chunk-KQPIZ6SZ.cjs');
 
 // src/hono/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({
@@ -58,7 +58,7 @@ var HonoAdapter = class {
 
 // src/hono/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkW3SMR5LQ_cjs.createPaymentMiddleware(config);
+  const middleware = chunkKQPIZ6SZ_cjs.createPaymentMiddleware(config);
   return async (c, next) => {
     const result = await middleware(new HonoAdapter(c, next));
     if ("pass" in result) {

package/dist/hono.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-2UEAVMCH.js';
-import { createPaymentMiddleware } from './chunk-FDQULXKG.js';
+import { createPaymentMiddleware } from './chunk-75GLDK7L.js';
 
 // src/hono/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({

package/dist/index.cjs

@@ -1,54 +1,54 @@
 'use strict';
 
-var chunkW3SMR5LQ_cjs = require('./chunk-W3SMR5LQ.cjs');
+var chunkKQPIZ6SZ_cjs = require('./chunk-KQPIZ6SZ.cjs');
 
 
 
 Object.defineProperty(exports, "FacilitatorClient", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.FacilitatorClient; }
+  get: function () { return chunkKQPIZ6SZ_cjs.FacilitatorClient; }
 });
 Object.defineProperty(exports, "PARALLEL_TOKENS", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.PARALLEL_TOKENS; }
+  get: function () { return chunkKQPIZ6SZ_cjs.PARALLEL_TOKENS; }
 });
 Object.defineProperty(exports, "X402ConfigError", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.X402ConfigError; }
+  get: function () { return chunkKQPIZ6SZ_cjs.X402ConfigError; }
 });
 Object.defineProperty(exports, "X402RuntimeError", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.X402RuntimeError; }
+  get: function () { return chunkKQPIZ6SZ_cjs.X402RuntimeError; }
 });
 Object.defineProperty(exports, "X402_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.X402_ERROR_CODES; }
+  get: function () { return chunkKQPIZ6SZ_cjs.X402_ERROR_CODES; }
 });
 Object.defineProperty(exports, "createPaymentGate", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.createPaymentGate; }
+  get: function () { return chunkKQPIZ6SZ_cjs.createPaymentGate; }
 });
 Object.defineProperty(exports, "createPaymentMiddleware", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.createPaymentMiddleware; }
+  get: function () { return chunkKQPIZ6SZ_cjs.createPaymentMiddleware; }
 });
 Object.defineProperty(exports, "encodeBase64", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.encodeBase64; }
+  get: function () { return chunkKQPIZ6SZ_cjs.encodeBase64; }
 });
 Object.defineProperty(exports, "getDefaultAcceptedTokens", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.getDefaultAcceptedTokens; }
+  get: function () { return chunkKQPIZ6SZ_cjs.getDefaultAcceptedTokens; }
 });
 Object.defineProperty(exports, "parsePrice", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.parsePrice; }
+  get: function () { return chunkKQPIZ6SZ_cjs.parsePrice; }
 });
 Object.defineProperty(exports, "toEip155Network", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.toEip155Network; }
+  get: function () { return chunkKQPIZ6SZ_cjs.toEip155Network; }
 });
 Object.defineProperty(exports, "validateAddress", {
   enumerable: true,
-  get: function () { return chunkW3SMR5LQ_cjs.validateAddress; }
+  get: function () { return chunkKQPIZ6SZ_cjs.validateAddress; }
 });

package/dist/index.js

@@ -1 +1 @@
-export { FacilitatorClient, PARALLEL_TOKENS, X402ConfigError, X402RuntimeError, X402_ERROR_CODES, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, parsePrice, toEip155Network, validateAddress } from './chunk-FDQULXKG.js';
+export { FacilitatorClient, PARALLEL_TOKENS, X402ConfigError, X402RuntimeError, X402_ERROR_CODES, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, parsePrice, toEip155Network, validateAddress } from './chunk-75GLDK7L.js';

package/dist/next.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkXUNNMCO5_cjs = require('./chunk-XUNNMCO5.cjs');
-var chunkW3SMR5LQ_cjs = require('./chunk-W3SMR5LQ.cjs');
+var chunkKQPIZ6SZ_cjs = require('./chunk-KQPIZ6SZ.cjs');
 var server = require('next/server');
 
 // src/next/adapter.ts
@@ -26,7 +26,7 @@ var NextAdapter = class {
 
 // src/next/index.ts
 function withPayment(config, handler) {
-  const gate = chunkW3SMR5LQ_cjs.createPaymentGate(config);
+  const gate = chunkKQPIZ6SZ_cjs.createPaymentGate(config);
   return async (req) => {
     const gateResult = await gate(new NextAdapter(req));
     if (gateResult.type === "pass") {
@@ -56,7 +56,7 @@ function withPayment(config, handler) {
         const settleResponse = await gateResult.settle();
         if (settleResponse.success) {
           const headers = new Headers(response.headers);
-          headers.set("payment-response", chunkW3SMR5LQ_cjs.encodeBase64(settleResponse));
+          headers.set("payment-response", chunkKQPIZ6SZ_cjs.encodeBase64(settleResponse));
           headers.set("access-control-expose-headers", "payment-response");
           return new server.NextResponse(response.body, {
             status: response.status,

package/dist/next.js

@@ -1,5 +1,5 @@
 import { raceTimeout, HANDLER_TIMEOUT } from './chunk-2UEAVMCH.js';
-import { createPaymentGate, encodeBase64 } from './chunk-FDQULXKG.js';
+import { createPaymentGate, encodeBase64 } from './chunk-75GLDK7L.js';
 import { NextResponse } from 'next/server';
 
 // src/next/adapter.ts

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@parallel-protocol/x402",
-	"version": "0.5.0",
+	"version": "0.5.2",
 	"description": "Parallel Protocol x402 payment middleware — Express, Next.js, Fastify, Hono",
 	"author": "Parallel Protocol <contact@parallel.best>",
 	"repository": {
@@ -123,7 +123,7 @@
 		"vitest": "^4.0.14"
 	},
 	"dependencies": {
-		"@parallel-protocol/chains": "^0.2.0",
+		"@parallel-protocol/chains": "^0.2.1",
 		"fastify-plugin": "^6.0.0",
 		"zod": "^4.4.3"
 	},