@parallel-protocol/x402 0.8.0 → 0.8.2

package/dist/{chunk-SA5ULSG2.js → chunk-KTBFF5HI.js}

@@ -1,4 +1,4 @@
-import { X402_ERROR_CODES, X402RuntimeError, X402ConfigError, isPriceRejection } from './chunk-QAECRSWF.js';
+import { X402_ERROR_CODES, X402ConfigError, X402RuntimeError, isPriceRejection } from './chunk-QAECRSWF.js';
 import { getTokenDecimals as getTokenDecimals$1 } from '@parallel-protocol/chains';
 import { z } from 'zod';
 
@@ -127,8 +127,18 @@ var priceSchema = z.union([
     "Price must be a string, a bigint or a function of the request"
   )
 ]);
+var LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+function isFacilitatorUrl(value) {
+  if (!URL.canParse(value)) return false;
+  const { protocol, hostname } = new URL(value);
+  return protocol === "https:" || protocol === "http:" && LOCAL_HOSTNAMES.has(hostname);
+}
+var facilitatorUrlSchema = z.string().refine(
+  isFacilitatorUrl,
+  "The facilitator URL must use https (plain http only on localhost, 127.0.0.1 or [::1])"
+);
 var facilitatorConfigSchema = z.object({
-  url: z.string().refine((v) => URL.canParse(v), "Invalid facilitator URL"),
+  url: facilitatorUrlSchema,
   apiKey: z.string().optional()
 });
 var UPTO_MAX_TIMEOUT_SECONDS = 3600;
@@ -223,6 +233,15 @@ function retryAfterOf(response) {
   const value = response.headers.get("retry-after");
   return value !== null && RETRY_AFTER_SHAPE.test(value) ? value : void 0;
 }
+function throwIfRedirect(response) {
+  const redirected = response.type === "opaqueredirect" || response.status >= 300 && response.status < 400;
+  if (!redirected) return;
+  response.body?.cancel().catch(() => {
+  });
+  throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+    status: response.status
+  });
+}
 function decodePaymentHeader(paymentHeader) {
   try {
     return decodeBase64(paymentHeader);
@@ -231,20 +250,33 @@ function decodePaymentHeader(paymentHeader) {
   }
 }
 var FacilitatorClient = class {
+  // Checked and kept when the client is built: a config changed afterwards
+  // does not move the calls elsewhere.
+  url;
+  apiKey;
   constructor(config) {
-    this.config = config;
+    const url = facilitatorUrlSchema.safeParse(config.url);
+    if (!url.success) {
+      throw new X402ConfigError(
+        url.error.issues[0]?.message ?? "Invalid facilitator URL",
+        url.error
+      );
+    }
+    this.url = new URL(url.data).href.replace(/\/+$/, "");
+    this.apiKey = config.apiKey;
   }
-  config;
   async verify(paymentHeader, paymentRequirements) {
     const paymentPayload = decodePaymentHeader(paymentHeader);
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/verify`, {
+      const response = await fetch(`${this.url}/x402/verify`, {
         method: "POST",
         headers: this.buildHeaders(),
         body: JSON.stringify({ paymentPayload, paymentRequirements }),
+        redirect: "manual",
         signal: AbortSignal.timeout(FACILITATOR_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
         throw new X402RuntimeError(
@@ -272,7 +304,7 @@ var FacilitatorClient = class {
     const paymentPayload = decodePaymentHeader(paymentHeader);
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/settle`, {
+      const response = await fetch(`${this.url}/x402/settle`, {
         method: "POST",
         headers: this.buildHeaders(),
         // settleAmount only travels for metered routes; the settle token
@@ -287,18 +319,22 @@ var FacilitatorClient = class {
             settleToken: options.settleToken
           }
         }),
+        redirect: "manual",
         signal: AbortSignal.timeout(SETTLE_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
-        if (body.error === void 0 && response.status >= 500) {
-          throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
+        if (body.error === void 0) {
+          throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+            status: response.status
+          });
         }
         const retryAfter = retryAfterOf(response);
         return {
           success: false,
           error: {
-            code: body.error ?? "SUBMISSION_FAILED",
+            code: body.error,
             message: body.message ?? "Settlement failed",
             status: response.status,
             ...retryAfter !== void 0 && { retryAfter }
@@ -337,16 +373,22 @@ var FacilitatorClient = class {
       throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_INVALID_RESPONSE);
     }
   }
+  /**
+   * @deprecated The Parallel facilitator no longer serves `/x402/pay`, so this
+   * call fails with `FACILITATOR_UNAVAILABLE`. Use `verify`, then `settle`.
+   */
   async pay(paymentHeader) {
     const headers = this.buildHeaders();
     headers["X-PAYMENT"] = paymentHeader;
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/pay`, {
+      const response = await fetch(`${this.url}/x402/pay`, {
         method: "POST",
         headers,
+        redirect: "manual",
         signal: AbortSignal.timeout(FACILITATOR_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
       }
@@ -365,8 +407,8 @@ var FacilitatorClient = class {
     const headers = {
       "Content-Type": "application/json"
     };
-    if (this.config.apiKey) {
-      headers["X-API-Key"] = this.config.apiKey;
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
     }
     return headers;
   }
@@ -650,12 +692,13 @@ function paymentRequiredResponse(url, config, resolvedTokens, price, refusal) {
   });
 }
 function createPaymentGate(config) {
-  try {
-    paymentMiddlewareConfigSchema.parse(config);
-  } catch (cause) {
+  const checked = paymentMiddlewareConfigSchema.safeParse(config);
+  if (!checked.success) {
+    const issue = checked.error.issues[0];
+    const where = issue?.path.length ? ` at ${issue.path.join(".")}` : "";
     throw new X402ConfigError(
-      "Invalid paymentMiddleware config \u2014 check your routes, facilitator URL and payTo addresses",
-      cause
+      `Invalid paymentMiddleware config${where}: ${issue?.message ?? "check your routes, facilitator URL and payTo addresses"}`,
+      checked.error
     );
   }
   const client = new FacilitatorClient(config.facilitator);
@@ -731,8 +774,9 @@ function createPaymentGate(config) {
     };
   };
 }
-var UNKNOWN_SETTLEMENT_MESSAGE = "The payment could not be settled.";
+var DEFAULT_SETTLEMENT_MESSAGE = "The payment could not be settled.";
 var MERCHANT_SETTLEMENT_MESSAGE = "The merchant could not complete the settlement of this payment. The payment was not taken: do not sign another payment for this request before checking with the merchant.";
+var UNAVAILABLE_SETTLEMENT_MESSAGE = "The facilitator could not settle the payment for now. It may still settle until its authorization expires, or an earlier attempt may already have settled it: do not sign another payment for this request before checking with the merchant.";
 var AGENT_MESSAGES = {
   [X402_ERROR_CODES.SETTLE_TIMEOUT]: "The facilitator did not confirm the settlement in time. The payment may still settle: do not sign another payment for this request before checking with the merchant.",
   [X402_ERROR_CODES.FACILITATOR_UNAVAILABLE]: "The facilitator could not be reached to settle the payment. It may still have settled: do not sign another payment for this request before checking with the merchant.",
@@ -741,15 +785,19 @@ var AGENT_MESSAGES = {
   RECEIPT_UNAVAILABLE: "The facilitator sent the transaction but could not read its confirmation. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
   SETTLE_TOKEN_INVALID: MERCHANT_SETTLEMENT_MESSAGE,
   SETTLE_TOKEN_REQUIRED: MERCHANT_SETTLEMENT_MESSAGE,
+  AUTHORIZATION_USED: "The payment's authorization was already consumed or cancelled on-chain. It may have paid the merchant: do not sign another payment for this request before checking with the merchant.",
+  PAYMENT_NOT_VERIFIED: "The facilitator holds no payment it can settle for this request. An earlier attempt may have paid the merchant, or may still settle: do not sign another payment for this request before checking with the merchant.",
+  PARALLELIZER_PAUSED: UNAVAILABLE_SETTLEMENT_MESSAGE,
+  SERVICE_UNAVAILABLE: UNAVAILABLE_SETTLEMENT_MESSAGE,
   AMOUNT_MISMATCH: "The facilitator settled a different amount than this request asked for. The response was not served: do not sign another payment for this request before checking with the merchant.",
-  UNKNOWN: UNKNOWN_SETTLEMENT_MESSAGE
+  UNKNOWN: "The facilitator gave no reason for this failure, and the payment may have settled: do not sign another payment for this request before checking with the merchant."
 };
 function settlementFailure(code, failure) {
   const reason = shapedCode(code) ?? "UNKNOWN";
   return {
     settled: false,
     reason,
-    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? UNKNOWN_SETTLEMENT_MESSAGE,
+    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? DEFAULT_SETTLEMENT_MESSAGE,
     ...failure?.retryAfter !== void 0 && {
       retryAfter: failure.retryAfter
     }

package/dist/{chunk-NA7245L5.cjs → chunk-MXGS3HMS.cjs}

@@ -129,8 +129,18 @@ var priceSchema = zod.z.union([
     "Price must be a string, a bigint or a function of the request"
   )
 ]);
+var LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+function isFacilitatorUrl(value) {
+  if (!URL.canParse(value)) return false;
+  const { protocol, hostname } = new URL(value);
+  return protocol === "https:" || protocol === "http:" && LOCAL_HOSTNAMES.has(hostname);
+}
+var facilitatorUrlSchema = zod.z.string().refine(
+  isFacilitatorUrl,
+  "The facilitator URL must use https (plain http only on localhost, 127.0.0.1 or [::1])"
+);
 var facilitatorConfigSchema = zod.z.object({
-  url: zod.z.string().refine((v) => URL.canParse(v), "Invalid facilitator URL"),
+  url: facilitatorUrlSchema,
   apiKey: zod.z.string().optional()
 });
 var UPTO_MAX_TIMEOUT_SECONDS = 3600;
@@ -225,6 +235,15 @@ function retryAfterOf(response) {
   const value = response.headers.get("retry-after");
   return value !== null && RETRY_AFTER_SHAPE.test(value) ? value : void 0;
 }
+function throwIfRedirect(response) {
+  const redirected = response.type === "opaqueredirect" || response.status >= 300 && response.status < 400;
+  if (!redirected) return;
+  response.body?.cancel().catch(() => {
+  });
+  throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+    status: response.status
+  });
+}
 function decodePaymentHeader(paymentHeader) {
   try {
     return decodeBase64(paymentHeader);
@@ -233,20 +252,33 @@ function decodePaymentHeader(paymentHeader) {
   }
 }
 var FacilitatorClient = class {
+  // Checked and kept when the client is built: a config changed afterwards
+  // does not move the calls elsewhere.
+  url;
+  apiKey;
   constructor(config) {
-    this.config = config;
+    const url = facilitatorUrlSchema.safeParse(config.url);
+    if (!url.success) {
+      throw new chunkKZZY5LS6_cjs.X402ConfigError(
+        url.error.issues[0]?.message ?? "Invalid facilitator URL",
+        url.error
+      );
+    }
+    this.url = new URL(url.data).href.replace(/\/+$/, "");
+    this.apiKey = config.apiKey;
   }
-  config;
   async verify(paymentHeader, paymentRequirements) {
     const paymentPayload = decodePaymentHeader(paymentHeader);
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/verify`, {
+      const response = await fetch(`${this.url}/x402/verify`, {
         method: "POST",
         headers: this.buildHeaders(),
         body: JSON.stringify({ paymentPayload, paymentRequirements }),
+        redirect: "manual",
         signal: AbortSignal.timeout(FACILITATOR_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
         throw new chunkKZZY5LS6_cjs.X402RuntimeError(
@@ -274,7 +306,7 @@ var FacilitatorClient = class {
     const paymentPayload = decodePaymentHeader(paymentHeader);
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/settle`, {
+      const response = await fetch(`${this.url}/x402/settle`, {
         method: "POST",
         headers: this.buildHeaders(),
         // settleAmount only travels for metered routes; the settle token
@@ -289,18 +321,22 @@ var FacilitatorClient = class {
             settleToken: options.settleToken
           }
         }),
+        redirect: "manual",
         signal: AbortSignal.timeout(SETTLE_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
-        if (body.error === void 0 && response.status >= 500) {
-          throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
+        if (body.error === void 0) {
+          throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+            status: response.status
+          });
         }
         const retryAfter = retryAfterOf(response);
         return {
           success: false,
           error: {
-            code: body.error ?? "SUBMISSION_FAILED",
+            code: body.error,
             message: body.message ?? "Settlement failed",
             status: response.status,
             ...retryAfter !== void 0 && { retryAfter }
@@ -339,16 +375,22 @@ var FacilitatorClient = class {
       throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_INVALID_RESPONSE);
     }
   }
+  /**
+   * @deprecated The Parallel facilitator no longer serves `/x402/pay`, so this
+   * call fails with `FACILITATOR_UNAVAILABLE`. Use `verify`, then `settle`.
+   */
   async pay(paymentHeader) {
     const headers = this.buildHeaders();
     headers["X-PAYMENT"] = paymentHeader;
     let json;
     try {
-      const response = await fetch(`${this.config.url}/x402/pay`, {
+      const response = await fetch(`${this.url}/x402/pay`, {
         method: "POST",
         headers,
+        redirect: "manual",
         signal: AbortSignal.timeout(FACILITATOR_TIMEOUT_MS)
       });
+      throwIfRedirect(response);
       if (!response.ok) {
         throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
       }
@@ -367,8 +409,8 @@ var FacilitatorClient = class {
     const headers = {
       "Content-Type": "application/json"
     };
-    if (this.config.apiKey) {
-      headers["X-API-Key"] = this.config.apiKey;
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
     }
     return headers;
   }
@@ -652,12 +694,13 @@ function paymentRequiredResponse(url, config, resolvedTokens, price, refusal) {
   });
 }
 function createPaymentGate(config) {
-  try {
-    paymentMiddlewareConfigSchema.parse(config);
-  } catch (cause) {
+  const checked = paymentMiddlewareConfigSchema.safeParse(config);
+  if (!checked.success) {
+    const issue = checked.error.issues[0];
+    const where = issue?.path.length ? ` at ${issue.path.join(".")}` : "";
     throw new chunkKZZY5LS6_cjs.X402ConfigError(
-      "Invalid paymentMiddleware config \u2014 check your routes, facilitator URL and payTo addresses",
-      cause
+      `Invalid paymentMiddleware config${where}: ${issue?.message ?? "check your routes, facilitator URL and payTo addresses"}`,
+      checked.error
     );
   }
   const client = new FacilitatorClient(config.facilitator);
@@ -733,8 +776,9 @@ function createPaymentGate(config) {
     };
   };
 }
-var UNKNOWN_SETTLEMENT_MESSAGE = "The payment could not be settled.";
+var DEFAULT_SETTLEMENT_MESSAGE = "The payment could not be settled.";
 var MERCHANT_SETTLEMENT_MESSAGE = "The merchant could not complete the settlement of this payment. The payment was not taken: do not sign another payment for this request before checking with the merchant.";
+var UNAVAILABLE_SETTLEMENT_MESSAGE = "The facilitator could not settle the payment for now. It may still settle until its authorization expires, or an earlier attempt may already have settled it: do not sign another payment for this request before checking with the merchant.";
 var AGENT_MESSAGES = {
   [chunkKZZY5LS6_cjs.X402_ERROR_CODES.SETTLE_TIMEOUT]: "The facilitator did not confirm the settlement in time. The payment may still settle: do not sign another payment for this request before checking with the merchant.",
   [chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE]: "The facilitator could not be reached to settle the payment. It may still have settled: do not sign another payment for this request before checking with the merchant.",
@@ -743,15 +787,19 @@ var AGENT_MESSAGES = {
   RECEIPT_UNAVAILABLE: "The facilitator sent the transaction but could not read its confirmation. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
   SETTLE_TOKEN_INVALID: MERCHANT_SETTLEMENT_MESSAGE,
   SETTLE_TOKEN_REQUIRED: MERCHANT_SETTLEMENT_MESSAGE,
+  AUTHORIZATION_USED: "The payment's authorization was already consumed or cancelled on-chain. It may have paid the merchant: do not sign another payment for this request before checking with the merchant.",
+  PAYMENT_NOT_VERIFIED: "The facilitator holds no payment it can settle for this request. An earlier attempt may have paid the merchant, or may still settle: do not sign another payment for this request before checking with the merchant.",
+  PARALLELIZER_PAUSED: UNAVAILABLE_SETTLEMENT_MESSAGE,
+  SERVICE_UNAVAILABLE: UNAVAILABLE_SETTLEMENT_MESSAGE,
   AMOUNT_MISMATCH: "The facilitator settled a different amount than this request asked for. The response was not served: do not sign another payment for this request before checking with the merchant.",
-  UNKNOWN: UNKNOWN_SETTLEMENT_MESSAGE
+  UNKNOWN: "The facilitator gave no reason for this failure, and the payment may have settled: do not sign another payment for this request before checking with the merchant."
 };
 function settlementFailure(code, failure) {
   const reason = shapedCode(code) ?? "UNKNOWN";
   return {
     settled: false,
     reason,
-    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? UNKNOWN_SETTLEMENT_MESSAGE,
+    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? DEFAULT_SETTLEMENT_MESSAGE,
     ...failure?.retryAfter !== void 0 && {
       retryAfter: failure.retryAfter
     }

package/dist/express.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 
 // src/express/adapter.ts
@@ -108,8 +108,8 @@ var ExpressAdapter = class {
       return originalEnd(...args);
     });
     next();
-    const outcome = await chunkNA7245L5_cjs.raceTimeout(endPromise, options?.timeoutMs);
-    if (outcome === chunkNA7245L5_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkMXGS3HMS_cjs.raceTimeout(endPromise, options?.timeoutMs);
+    if (outcome === chunkMXGS3HMS_cjs.HANDLER_TIMEOUT) {
       discarded = true;
       return {
         status: 504,
@@ -146,7 +146,7 @@ var ExpressAdapter = class {
           const chunk = chunkBytes(args);
           if (chunk) bytes.push(chunk);
         }
-        return chunkNA7245L5_cjs.parseJsonBody(
+        return chunkMXGS3HMS_cjs.parseJsonBody(
           contentType,
           Buffer.concat(bytes).toString("utf8")
         );
@@ -170,7 +170,7 @@ var ExpressAdapter = class {
 
 // src/express/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkNA7245L5_cjs.createPaymentMiddleware(config);
+  const middleware = chunkMXGS3HMS_cjs.createPaymentMiddleware(config);
   return async (req, res, next) => {
     const result = await middleware(new ExpressAdapter(req, res, next));
     if ("pass" in result) {

package/dist/express.js

@@ -1,4 +1,4 @@
-import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-SA5ULSG2.js';
+import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 
 // src/express/adapter.ts

package/dist/fastify.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 var fp = require('fastify-plugin');
 
@@ -37,7 +37,7 @@ var FastifyAdapter = class {
 // src/fastify/index.ts
 function payloadJson(contentType, payload) {
   const text = typeof payload === "string" ? payload : payload instanceof Uint8Array ? Buffer.from(payload).toString("utf8") : void 0;
-  return chunkNA7245L5_cjs.parseJsonBody(contentType, text);
+  return chunkMXGS3HMS_cjs.parseJsonBody(contentType, text);
 }
 function refuse(reply, result) {
   const json = JSON.stringify(result.body);
@@ -54,11 +54,11 @@ function headerValue(value) {
 }
 function paymentMiddleware(config) {
   return fp__default.default(async (fastify) => {
-    const gate = chunkNA7245L5_cjs.createPaymentGate(config);
+    const gate = chunkMXGS3HMS_cjs.createPaymentGate(config);
     const verifiedMap = /* @__PURE__ */ new WeakMap();
     const rawWriters = /* @__PURE__ */ new WeakMap();
     const needsBody = (req) => {
-      const route = chunkNA7245L5_cjs.matchRoute(
+      const route = chunkMXGS3HMS_cjs.matchRoute(
         new FastifyAdapter(req).getPath(),
         config.routes
       );
@@ -111,29 +111,29 @@ function paymentMiddleware(config) {
       if (!verified) return payload;
       let raw;
       if (verified.scheme === "upto") {
-        raw = headerValue(reply.getHeader(chunkNA7245L5_cjs.SETTLE_AMOUNT_HEADER));
-        reply.removeHeader(chunkNA7245L5_cjs.SETTLE_AMOUNT_HEADER);
+        raw = headerValue(reply.getHeader(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER));
+        reply.removeHeader(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER);
       }
       if (reply.statusCode < 200 || reply.statusCode >= 300) {
         return payload;
       }
       let settleOptions;
       if (verified.scheme === "upto") {
-        const resolved = await chunkNA7245L5_cjs.resolveCharge(verified, raw, {
+        const resolved = await chunkMXGS3HMS_cjs.resolveCharge(verified, raw, {
           status: reply.statusCode,
           header: (name) => headerValue(reply.getHeader(name)),
           body: async () => payloadJson(headerValue(reply.getHeader("content-type")), payload)
         });
         if (resolved.kind === "invalid") {
-          return refuse(reply, chunkNA7245L5_cjs.invalidSettleAmountResponse(resolved.reason));
+          return refuse(reply, chunkMXGS3HMS_cjs.invalidSettleAmountResponse(resolved.reason));
         }
         if (resolved.kind === "skip") return payload;
         settleOptions = { amount: resolved.amount };
       }
-      const outcome = await chunkNA7245L5_cjs.settleVerified(verified, settleOptions);
+      const outcome = await chunkMXGS3HMS_cjs.settleVerified(verified, settleOptions);
       if (!outcome.settled)
-        return refuse(reply, chunkNA7245L5_cjs.settlementFailureResponse(outcome));
-      reply.header("payment-response", chunkNA7245L5_cjs.encodeBase64(outcome.confirmation));
+        return refuse(reply, chunkMXGS3HMS_cjs.settlementFailureResponse(outcome));
+      reply.header("payment-response", chunkMXGS3HMS_cjs.encodeBase64(outcome.confirmation));
       reply.header("access-control-expose-headers", "payment-response");
       return payload;
     });

package/dist/fastify.js

@@ -1,4 +1,4 @@
-import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, settleVerified, settlementFailureResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-SA5ULSG2.js';
+import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, settleVerified, settlementFailureResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 import fp from 'fastify-plugin';
 

package/dist/hono.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 
 // src/hono/adapter.ts
@@ -30,7 +30,7 @@ var HonoAdapter = class {
   // Hono caches the parsed body on the request, so the handler can still read
   // it after the price function did.
   async getBody() {
-    if (!chunkNA7245L5_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
+    if (!chunkMXGS3HMS_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
     try {
       return await this.c.req.json();
     } catch {
@@ -38,8 +38,8 @@ var HonoAdapter = class {
     }
   }
   async runHandler(options) {
-    const outcome = await chunkNA7245L5_cjs.raceTimeout(this.next(), options?.timeoutMs);
-    if (outcome === chunkNA7245L5_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkMXGS3HMS_cjs.raceTimeout(this.next(), options?.timeoutMs);
+    if (outcome === chunkMXGS3HMS_cjs.HANDLER_TIMEOUT) {
       return {
         status: 504,
         setResponseHeader: () => {
@@ -64,7 +64,7 @@ var HonoAdapter = class {
       getResponseHeader: (name) => res.headers.get(name) ?? void 0,
       removeResponseHeader: (name) => res.headers.delete(name),
       // Read from a clone: the response body streams once, to the client.
-      getResponseBody: () => chunkNA7245L5_cjs.jsonFromResponse(res),
+      getResponseBody: () => chunkMXGS3HMS_cjs.jsonFromResponse(res),
       sendResponse: () => {
       },
       // The response is replaced: release its body (and whatever upstream
@@ -79,7 +79,7 @@ var HonoAdapter = class {
 
 // src/hono/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkNA7245L5_cjs.createPaymentMiddleware(config);
+  const middleware = chunkMXGS3HMS_cjs.createPaymentMiddleware(config);
   return async (c, next) => {
     const result = await middleware(new HonoAdapter(c, next));
     if ("pass" in result) {

package/dist/hono.js

@@ -1,4 +1,4 @@
-import { isJsonContentType, raceTimeout, HANDLER_TIMEOUT, jsonFromResponse, createPaymentMiddleware } from './chunk-SA5ULSG2.js';
+import { isJsonContentType, raceTimeout, HANDLER_TIMEOUT, jsonFromResponse, createPaymentMiddleware } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 
 // src/hono/adapter.ts

package/dist/index.cjs

@@ -1,65 +1,65 @@
 'use strict';
 
-var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 var chunkKZZY5LS6_cjs = require('./chunk-KZZY5LS6.cjs');
 
 
 
 Object.defineProperty(exports, "FacilitatorClient", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.FacilitatorClient; }
+  get: function () { return chunkMXGS3HMS_cjs.FacilitatorClient; }
 });
 Object.defineProperty(exports, "PARALLEL_TOKENS", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.PARALLEL_TOKENS; }
+  get: function () { return chunkMXGS3HMS_cjs.PARALLEL_TOKENS; }
 });
 Object.defineProperty(exports, "SETTLE_AMOUNT_HEADER", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.SETTLE_AMOUNT_HEADER; }
+  get: function () { return chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER; }
 });
 Object.defineProperty(exports, "createPaymentGate", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.createPaymentGate; }
+  get: function () { return chunkMXGS3HMS_cjs.createPaymentGate; }
 });
 Object.defineProperty(exports, "createPaymentMiddleware", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.createPaymentMiddleware; }
+  get: function () { return chunkMXGS3HMS_cjs.createPaymentMiddleware; }
 });
 Object.defineProperty(exports, "encodeBase64", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.encodeBase64; }
+  get: function () { return chunkMXGS3HMS_cjs.encodeBase64; }
 });
 Object.defineProperty(exports, "getDefaultAcceptedTokens", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.getDefaultAcceptedTokens; }
+  get: function () { return chunkMXGS3HMS_cjs.getDefaultAcceptedTokens; }
 });
 Object.defineProperty(exports, "parsePrice", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.parsePrice; }
+  get: function () { return chunkMXGS3HMS_cjs.parsePrice; }
 });
 Object.defineProperty(exports, "resolveCharge", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.resolveCharge; }
+  get: function () { return chunkMXGS3HMS_cjs.resolveCharge; }
 });
 Object.defineProperty(exports, "resolveSettleAmount", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.resolveSettleAmount; }
+  get: function () { return chunkMXGS3HMS_cjs.resolveSettleAmount; }
 });
 Object.defineProperty(exports, "settleVerified", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.settleVerified; }
+  get: function () { return chunkMXGS3HMS_cjs.settleVerified; }
 });
 Object.defineProperty(exports, "settlementFailureResponse", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.settlementFailureResponse; }
+  get: function () { return chunkMXGS3HMS_cjs.settlementFailureResponse; }
 });
 Object.defineProperty(exports, "toEip155Network", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.toEip155Network; }
+  get: function () { return chunkMXGS3HMS_cjs.toEip155Network; }
 });
 Object.defineProperty(exports, "validateAddress", {
   enumerable: true,
-  get: function () { return chunkNA7245L5_cjs.validateAddress; }
+  get: function () { return chunkMXGS3HMS_cjs.validateAddress; }
 });
 Object.defineProperty(exports, "X402ConfigError", {
   enumerable: true,

package/dist/index.d.cts

@@ -3,10 +3,15 @@ export { i as MeterContext, j as MeterFunction, k as PaymentFailure, l as Paymen
 import { Address } from 'viem';
 
 declare class FacilitatorClient {
-    private readonly config;
+    private readonly url;
+    private readonly apiKey;
     constructor(config: FacilitatorConfig);
     verify(paymentHeader: string, paymentRequirements: FacilitatorPaymentRequirements): Promise<VerifyResult>;
     settle(paymentHeader: string, paymentRequirements: FacilitatorPaymentRequirements, options?: FacilitatorSettleOptions): Promise<FacilitatorResponse>;
+    /**
+     * @deprecated The Parallel facilitator no longer serves `/x402/pay`, so this
+     * call fails with `FACILITATOR_UNAVAILABLE`. Use `verify`, then `settle`.
+     */
     pay(paymentHeader: string): Promise<FacilitatorResponse>;
     private buildHeaders;
 }