@parallel-protocol/x402 0.8.1 → 0.8.2

package/README.md

@@ -40,7 +40,7 @@ Agent                        Merchant (this SDK)           Facilitator
 - The handler only runs after the signature is verified.
 - The on-chain settlement happens after the handler produces a 2xx response — the agent is not charged on errors.
 - The settle is bound to the merchant that verified: `POST /x402/verify` hands the middleware a settle token that `POST /x402/settle` must present. The token stays in memory for the life of the request and never reaches the agent.
-- If settlement fails, the middleware discards the handler's response and returns `402` with `{ error: "PAYMENT_SETTLEMENT_FAILED", reason, message }`: `reason` is the facilitator's code (`INSUFFICIENT_BALANCE`, `AUTHORIZATION_USED`, `PAYMENT_EXPIRED`, ...) or this SDK's (`SETTLE_TIMEOUT`, `FACILITATOR_UNAVAILABLE`, `FACILITATOR_INVALID_RESPONSE`, `AMOUNT_MISMATCH`, `UNKNOWN`), `message` the facilitator's text or this SDK's, and the facilitator's `Retry-After` is copied when it sent one. A settle that timed out or could not reach the facilitator is retried once first: the same settle is idempotent, and the facilitator answers the recorded outcome if the first attempt went through.
+- If settlement fails, the middleware discards the handler's response and returns `402` with `{ error: "PAYMENT_SETTLEMENT_FAILED", reason, message }`: `reason` is the facilitator's code (`INSUFFICIENT_BALANCE`, `AUTHORIZATION_USED`, `PAYMENT_EXPIRED`, ...) or this SDK's (`SETTLE_TIMEOUT`, `FACILITATOR_UNAVAILABLE`, `FACILITATOR_INVALID_RESPONSE`, `AMOUNT_MISMATCH`, `UNKNOWN`), `message` the facilitator's text or this SDK's, and the facilitator's `Retry-After` is copied when it sent one. A settle that timed out or could not reach the facilitator is retried once first, with the same settle token: once the first attempt has finished, the facilitator answers its recorded outcome, and any other answer to the retry tells the agent to check with the merchant.
 - A metered settle must settle the amount the handler asked for: a confirmation for another amount is refused and the response discarded.
 - Handlers are bounded by a 30-second timeout on Express, Hono and Next.js — a slow handler returns `504` and the agent is not charged. (Fastify manages handler execution itself, so no timeout is applied there.) Metered routes get their announced window minus two minutes kept for the settlement and its retry.
 - On paid Fastify routes, writing to `reply.raw` (the SSE/streaming pattern) fails loudly instead of sending: a raw response skips the settlement hooks and would go out unpaid. Streaming is not supported on paid routes.
@@ -755,7 +755,7 @@ if (result.success) {
 }
 ```
 
-The constructor throws `X402ConfigError` when the URL is neither https nor plain http on `localhost`, `127.0.0.1` or `[::1]`, and the client keeps the address it checked. No call follows a redirect. `verify` uses a 10-second timeout. `settle` uses a 60-second timeout to accommodate on-chain confirmation latency. `verify` throws on any failure, with the facilitator's message in `.detail`, its HTTP status in `.status` and its `Retry-After` in `.retryAfter`. A facilitator that issues no settle token is an invalid response. `settle` returns a `FacilitatorResponse` union on facilitator errors, with the facilitator's status and `Retry-After` on `error`, and throws `X402RuntimeError` on connectivity issues (`SETTLE_TIMEOUT` when the 60 seconds ran out, the payment may still settle), an undecodable payment header, or a malformed facilitator response. A settle refused with a status below 500 and no `error` field comes back as `SUBMISSION_FAILED`, one at 500 or above with no `error` field throws `FACILITATOR_UNAVAILABLE`. The settle token is a secret for the life of the request: keep it in memory, never log it, never send it to the payer.
+The constructor throws `X402ConfigError` when the URL is neither https nor plain http on `localhost`, `127.0.0.1` or `[::1]`, and the client keeps the address it checked. No call follows a redirect. `verify` uses a 10-second timeout. `settle` uses a 60-second timeout to accommodate on-chain confirmation latency. `verify` throws on any failure, with the facilitator's message in `.detail`, its HTTP status in `.status` and its `Retry-After` in `.retryAfter`. A facilitator that issues no settle token is an invalid response. `settle` returns a `FacilitatorResponse` union on facilitator errors, with the facilitator's status and `Retry-After` on `error`, and throws `X402RuntimeError` on connectivity issues (`SETTLE_TIMEOUT` when the 60 seconds ran out, the payment may still settle), an undecodable payment header, or a malformed facilitator response. A settle answered with an error that carries no `error` field throws `FACILITATOR_UNAVAILABLE` with that status: the answer comes from something in front of the facilitator, and the payment may still settle. The settle token is a secret for the life of the request: keep it in memory, never log it, never send it to the payer.
 
 For a metered payment, the requirements also carry `scheme: "upto"` and `maxTimeoutSeconds`, and `settle` takes the amount to charge, in the token's smallest unit, next to the settle token: `{ settleToken, amount }`.
 
@@ -807,12 +807,12 @@ The SDK raises it when the facilitator gave no usable answer:
 - It could not be reached: a DNS, connection or TLS failure.
 - It answered with a redirect, which the SDK never follows. The error's `status` is the redirect's, and the configured `url` is then usually not the facilitator's own https address.
 - It did not answer a `verify` within 10 seconds. A `settle` that runs out of its 60 seconds raises `SETTLE_TIMEOUT` instead.
-- It answered a `verify` with an error that carries no `error` field, such as an error page from a gateway in front of it, or a `settle` with a 5xx error that carries no `error` field.
+- It answered with an error that carries no `error` field, such as an error page from a gateway or a firewall in front of it. The error's `status` is that answer's.
 - It answered with a success status but a body that is not JSON, or that was cut off.
 
 At `verify`, nothing was settled. The middleware answers the agent 402 with a new invoice and `error: "FACILITATOR_UNAVAILABLE"`, and the agent can pay again later.
 
-At `settle`, the outcome is unknown, since the facilitator may have settled before its answer was lost. The middleware retries the settle once with the same settle token, which returns the recorded outcome if there is one. If the retry raises it too, the response is not served, and the agent gets a 402 `{ error: "PAYMENT_SETTLEMENT_FAILED", reason: "FACILITATOR_UNAVAILABLE" }` whose message tells it not to sign another payment before checking with the merchant. A retry that fails another way reports that reason instead.
+At `settle`, the outcome is unknown, since the facilitator may have settled before its answer was lost. The middleware retries the settle once with the same settle token, which returns the recorded outcome once the first attempt has finished. If the retry raises it too, the response is not served, and the agent gets a 402 `{ error: "PAYMENT_SETTLEMENT_FAILED", reason: "FACILITATOR_UNAVAILABLE" }` whose message tells it not to sign another payment before checking with the merchant. A retry that fails another way reports that reason instead.
 
 ### Propagated from the facilitator
 
@@ -822,7 +822,7 @@ When the facilitator refuses a payment at verify, its code is forwarded as the `
 |------|--------------------|---------|--------------------------|
 | `INVALID_PAYLOAD` | 400 | The payload does not have the shape of its route, carries a field another route would read, or uses a method of the other scheme | Sign a payment that matches one of the `accepts` entries |
 | `INVALID_SIGNATURE` | 400 | EIP-712 signature recovery failed | Sign again |
-| `INVALID_NONCE` | 409 | Nonce already used (replay detected) | Sign a new payment with a fresh nonce |
+| `INVALID_NONCE` | 409 | Nonce already used: the same payment reached the facilitator before, and may have settled | Do not sign another payment before checking with the merchant |
 | `PAYMENT_EXPIRED` | 402 | `validBefore` has passed | Sign a new payment |
 | `INSUFFICIENT_AMOUNT` | 402 | The amount the route guarantees the merchant is below the price, or the authorization is for zero | Sign for the invoiced `amount` |
 | `INSUFFICIENT_BALANCE` | 402 | The payer does not hold the signed amount (metered payments) | Fund the wallet, sign a new payment |
@@ -842,19 +842,20 @@ When the facilitator refuses at settle, the 402 body is `{ error: "PAYMENT_SETTL
 | Reason | Facilitator status | Meaning | What the agent should do |
 |--------|--------------------|---------|--------------------------|
 | `INSUFFICIENT_BALANCE` | 402 | The payer no longer holds the signed amount | Fund the wallet, sign a new payment |
-| `AUTHORIZATION_USED` | 409 | The authorization nonce is consumed or cancelled on-chain, this facilitator did not settle it | Sign a new payment |
+| `AUTHORIZATION_USED` | 409 | The authorization is already consumed or cancelled on-chain. It may have paid the merchant | Do not sign another payment before checking with the merchant |
 | `PAYMENT_EXPIRED` | 402 | The authorization expired before settlement | Sign a new payment |
-| `PAYMENT_NOT_VERIFIED` | 402 | No verified payment for this authorization, or it already failed | Sign a new payment |
+| `PAYMENT_NOT_VERIFIED` | 402 | No verified payment for this authorization, or an earlier settle of it failed. The merchant may have been paid, or may still be | Do not sign another payment before checking with the merchant |
 | `SETTLE_IN_PROGRESS` | 409 | Another settle of the same payment is still running | Do not sign another payment before checking with the merchant |
 | `SETTLE_TOKEN_INVALID`, `SETTLE_TOKEN_REQUIRED` | 403 | The merchant did not present the settle token verify issued: a merchant client issue, not the payer's, and nothing was settled | Do not sign another payment before checking with the merchant |
-| `RELAYER_UNAVAILABLE`, `PARALLELIZER_PAUSED`, `SERVICE_UNAVAILABLE` | 503 | The facilitator or the chain is temporarily unable to settle | Retry later with a new payment, after `Retry-After` when given |
+| `RELAYER_UNAVAILABLE` | 503 | The facilitator is temporarily unable to settle. The payment was not taken, and the facilitator will not settle it | Retry later with a new payment, after `Retry-After` when given |
+| `PARALLELIZER_PAUSED`, `SERVICE_UNAVAILABLE` | 503 | The facilitator or the chain is temporarily unable to settle. This settle sent nothing, but the payment may still settle until its authorization expires, and an earlier attempt may already have settled it | Do not sign another payment before checking with the merchant |
 | `TX_REVERTED` | 500 | The transaction reverted for a reason the facilitator could not attribute | Sign a new payment |
 | `SUBMISSION_FAILED` | 500 | The submission failed. When the message says the outcome is unknown, a transaction may have been sent, and the payment may have settled or may still settle | Sign a new payment, unless the message says the outcome is unknown: then check with the merchant first |
 | `RECEIPT_UNAVAILABLE` | 500 | The transaction was sent but its confirmation could not be read | Do not sign another payment before checking with the merchant |
 | `INVALID_PAYLOAD`, `NETWORK_MISMATCH`, `PAYMENT_METHOD_NOT_SUPPORTED` | 400 | The settle request does not match the payment that was verified, or a metered amount is missing, malformed or above the signed cap. Nothing was settled | Sign a new payment |
 | `INSUFFICIENT_AMOUNT` | 402 | A metered amount of zero, or an authorization for zero. Nothing was settled | Sign a new payment |
 
-Reasons from this SDK: `SETTLE_TIMEOUT`, `FACILITATOR_UNAVAILABLE` and `FACILITATOR_INVALID_RESPONSE` (the settle may still have gone through, do not pay again before checking with the merchant), `AMOUNT_MISMATCH` (the facilitator settled another amount than the one asked, money moved, the response was not served, do not pay again before checking), `UNKNOWN` (anything that is not a code, such as the `Too Many Requests` of the facilitator's per-IP limit). For `SETTLE_IN_PROGRESS`, `RECEIPT_UNAVAILABLE`, `SETTLE_TOKEN_INVALID` and `SETTLE_TOKEN_REQUIRED` the message is this SDK's as well, since the facilitator's text addresses the merchant.
+Reasons from this SDK: `SETTLE_TIMEOUT`, `FACILITATOR_UNAVAILABLE` and `FACILITATOR_INVALID_RESPONSE` (the settle may still have gone through, do not pay again before checking with the merchant), `AMOUNT_MISMATCH` (the facilitator settled another amount than the one asked, money moved, the response was not served, do not pay again before checking), `UNKNOWN` (anything that is not a code, such as the `Too Many Requests` of the facilitator's per-IP limit: the payment may have settled, do not pay again before checking). For `SETTLE_IN_PROGRESS`, `RECEIPT_UNAVAILABLE`, `SETTLE_TOKEN_INVALID` and `SETTLE_TOKEN_REQUIRED` the message is this SDK's as well, since the facilitator's text addresses the merchant. The message is this SDK's too for `AUTHORIZATION_USED`, `PAYMENT_NOT_VERIFIED`, `PARALLELIZER_PAUSED` and `SERVICE_UNAVAILABLE`: the payment may have settled or may still settle, so the message tells the agent to check with the merchant before paying again.
 
 `AMOUNT_MISMATCH` is also the one reason that points at the facilitator rather than at the request: it confirmed a settlement of another amount than the one the route asked for, so money moved. Alert on it, for example on 402 responses whose `reason` is `AMOUNT_MISMATCH`, rather than treating it as a routine refusal.
 
@@ -865,7 +866,7 @@ The facilitator counts the requests of each IP address that calls it, which is t
 | Limit | Facilitator answer | What the agent gets | What the agent should do |
 |-------|--------------------|---------------------|--------------------------|
 | Verifies per IP | 429 `{ error: "Too Many Requests", message }`, the message naming the time left in the minute (`Rate limit exceeded, retry in 42 seconds`, for instance), with `Retry-After` in seconds | 402 with a new invoice, `error: "FACILITATOR_INVALID_RESPONSE"`, the facilitator's message and its `Retry-After`. Nothing was verified | Send the payment again after `Retry-After` |
-| Settles per IP | The same 429 | 402 `{ error: "PAYMENT_SETTLEMENT_FAILED", reason: "UNKNOWN", message: "The payment could not be settled." }` with the facilitator's `Retry-After`. The handler's response is discarded, the settle is not retried, and nothing was settled | The agent cannot tell this `UNKNOWN` from another one, and x402-fetch reports that the payment may still settle: check with the merchant, then sign a new payment after `Retry-After` |
+| Settles per IP | The same 429 | 402 `{ error: "PAYMENT_SETTLEMENT_FAILED", reason: "UNKNOWN", message }` with the facilitator's `Retry-After`. The handler's response is discarded and the settle is not retried. This settle did nothing, but when the limit answers the SDK's retry of a settle that timed out, the first attempt may have settled | The message says the payment may have settled: check with the merchant, then sign a new payment after `Retry-After` |
 | Verifies per payer | 429 `RATE_LIMIT_EXCEEDED`, with `Retry-After` until the next UTC hour | 402 with a new invoice, `error: "RATE_LIMIT_EXCEEDED"`, the facilitator's message and its `Retry-After` | Pay again after `Retry-After` |
 
 The `error` of the per-IP answer is not a code, which is why the middleware reports `FACILITATOR_INVALID_RESPONSE` at verify and `UNKNOWN` at settle. A direct caller of `FacilitatorClient` sees it as it is: `verify` throws an `X402RuntimeError` whose `.code` is `"Too Many Requests"`, with `.status` 429 and `.retryAfter`, and `settle` returns it as a failure with the same code.

package/dist/{chunk-GXPUE3ES.js → chunk-KTBFF5HI.js}

@@ -325,14 +325,16 @@ var FacilitatorClient = class {
       throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
-        if (body.error === void 0 && response.status >= 500) {
-          throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
+        if (body.error === void 0) {
+          throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+            status: response.status
+          });
         }
         const retryAfter = retryAfterOf(response);
         return {
           success: false,
           error: {
-            code: body.error ?? "SUBMISSION_FAILED",
+            code: body.error,
             message: body.message ?? "Settlement failed",
             status: response.status,
             ...retryAfter !== void 0 && { retryAfter }
@@ -772,8 +774,9 @@ function createPaymentGate(config) {
     };
   };
 }
-var UNKNOWN_SETTLEMENT_MESSAGE = "The payment could not be settled.";
+var DEFAULT_SETTLEMENT_MESSAGE = "The payment could not be settled.";
 var MERCHANT_SETTLEMENT_MESSAGE = "The merchant could not complete the settlement of this payment. The payment was not taken: do not sign another payment for this request before checking with the merchant.";
+var UNAVAILABLE_SETTLEMENT_MESSAGE = "The facilitator could not settle the payment for now. It may still settle until its authorization expires, or an earlier attempt may already have settled it: do not sign another payment for this request before checking with the merchant.";
 var AGENT_MESSAGES = {
   [X402_ERROR_CODES.SETTLE_TIMEOUT]: "The facilitator did not confirm the settlement in time. The payment may still settle: do not sign another payment for this request before checking with the merchant.",
   [X402_ERROR_CODES.FACILITATOR_UNAVAILABLE]: "The facilitator could not be reached to settle the payment. It may still have settled: do not sign another payment for this request before checking with the merchant.",
@@ -782,15 +785,19 @@ var AGENT_MESSAGES = {
   RECEIPT_UNAVAILABLE: "The facilitator sent the transaction but could not read its confirmation. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
   SETTLE_TOKEN_INVALID: MERCHANT_SETTLEMENT_MESSAGE,
   SETTLE_TOKEN_REQUIRED: MERCHANT_SETTLEMENT_MESSAGE,
+  AUTHORIZATION_USED: "The payment's authorization was already consumed or cancelled on-chain. It may have paid the merchant: do not sign another payment for this request before checking with the merchant.",
+  PAYMENT_NOT_VERIFIED: "The facilitator holds no payment it can settle for this request. An earlier attempt may have paid the merchant, or may still settle: do not sign another payment for this request before checking with the merchant.",
+  PARALLELIZER_PAUSED: UNAVAILABLE_SETTLEMENT_MESSAGE,
+  SERVICE_UNAVAILABLE: UNAVAILABLE_SETTLEMENT_MESSAGE,
   AMOUNT_MISMATCH: "The facilitator settled a different amount than this request asked for. The response was not served: do not sign another payment for this request before checking with the merchant.",
-  UNKNOWN: UNKNOWN_SETTLEMENT_MESSAGE
+  UNKNOWN: "The facilitator gave no reason for this failure, and the payment may have settled: do not sign another payment for this request before checking with the merchant."
 };
 function settlementFailure(code, failure) {
   const reason = shapedCode(code) ?? "UNKNOWN";
   return {
     settled: false,
     reason,
-    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? UNKNOWN_SETTLEMENT_MESSAGE,
+    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? DEFAULT_SETTLEMENT_MESSAGE,
     ...failure?.retryAfter !== void 0 && {
       retryAfter: failure.retryAfter
     }

package/dist/{chunk-SNW5Z5HB.cjs → chunk-MXGS3HMS.cjs}

@@ -327,14 +327,16 @@ var FacilitatorClient = class {
       throwIfRedirect(response);
       if (!response.ok) {
         const body = await readErrorBody(response);
-        if (body.error === void 0 && response.status >= 500) {
-          throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
+        if (body.error === void 0) {
+          throw new chunkKZZY5LS6_cjs.X402RuntimeError(chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE, {
+            status: response.status
+          });
         }
         const retryAfter = retryAfterOf(response);
         return {
           success: false,
           error: {
-            code: body.error ?? "SUBMISSION_FAILED",
+            code: body.error,
             message: body.message ?? "Settlement failed",
             status: response.status,
             ...retryAfter !== void 0 && { retryAfter }
@@ -774,8 +776,9 @@ function createPaymentGate(config) {
     };
   };
 }
-var UNKNOWN_SETTLEMENT_MESSAGE = "The payment could not be settled.";
+var DEFAULT_SETTLEMENT_MESSAGE = "The payment could not be settled.";
 var MERCHANT_SETTLEMENT_MESSAGE = "The merchant could not complete the settlement of this payment. The payment was not taken: do not sign another payment for this request before checking with the merchant.";
+var UNAVAILABLE_SETTLEMENT_MESSAGE = "The facilitator could not settle the payment for now. It may still settle until its authorization expires, or an earlier attempt may already have settled it: do not sign another payment for this request before checking with the merchant.";
 var AGENT_MESSAGES = {
   [chunkKZZY5LS6_cjs.X402_ERROR_CODES.SETTLE_TIMEOUT]: "The facilitator did not confirm the settlement in time. The payment may still settle: do not sign another payment for this request before checking with the merchant.",
   [chunkKZZY5LS6_cjs.X402_ERROR_CODES.FACILITATOR_UNAVAILABLE]: "The facilitator could not be reached to settle the payment. It may still have settled: do not sign another payment for this request before checking with the merchant.",
@@ -784,15 +787,19 @@ var AGENT_MESSAGES = {
   RECEIPT_UNAVAILABLE: "The facilitator sent the transaction but could not read its confirmation. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
   SETTLE_TOKEN_INVALID: MERCHANT_SETTLEMENT_MESSAGE,
   SETTLE_TOKEN_REQUIRED: MERCHANT_SETTLEMENT_MESSAGE,
+  AUTHORIZATION_USED: "The payment's authorization was already consumed or cancelled on-chain. It may have paid the merchant: do not sign another payment for this request before checking with the merchant.",
+  PAYMENT_NOT_VERIFIED: "The facilitator holds no payment it can settle for this request. An earlier attempt may have paid the merchant, or may still settle: do not sign another payment for this request before checking with the merchant.",
+  PARALLELIZER_PAUSED: UNAVAILABLE_SETTLEMENT_MESSAGE,
+  SERVICE_UNAVAILABLE: UNAVAILABLE_SETTLEMENT_MESSAGE,
   AMOUNT_MISMATCH: "The facilitator settled a different amount than this request asked for. The response was not served: do not sign another payment for this request before checking with the merchant.",
-  UNKNOWN: UNKNOWN_SETTLEMENT_MESSAGE
+  UNKNOWN: "The facilitator gave no reason for this failure, and the payment may have settled: do not sign another payment for this request before checking with the merchant."
 };
 function settlementFailure(code, failure) {
   const reason = shapedCode(code) ?? "UNKNOWN";
   return {
     settled: false,
     reason,
-    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? UNKNOWN_SETTLEMENT_MESSAGE,
+    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? DEFAULT_SETTLEMENT_MESSAGE,
     ...failure?.retryAfter !== void 0 && {
       retryAfter: failure.retryAfter
     }

package/dist/express.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkSNW5Z5HB_cjs = require('./chunk-SNW5Z5HB.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 
 // src/express/adapter.ts
@@ -108,8 +108,8 @@ var ExpressAdapter = class {
       return originalEnd(...args);
     });
     next();
-    const outcome = await chunkSNW5Z5HB_cjs.raceTimeout(endPromise, options?.timeoutMs);
-    if (outcome === chunkSNW5Z5HB_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkMXGS3HMS_cjs.raceTimeout(endPromise, options?.timeoutMs);
+    if (outcome === chunkMXGS3HMS_cjs.HANDLER_TIMEOUT) {
       discarded = true;
       return {
         status: 504,
@@ -146,7 +146,7 @@ var ExpressAdapter = class {
           const chunk = chunkBytes(args);
           if (chunk) bytes.push(chunk);
         }
-        return chunkSNW5Z5HB_cjs.parseJsonBody(
+        return chunkMXGS3HMS_cjs.parseJsonBody(
           contentType,
           Buffer.concat(bytes).toString("utf8")
         );
@@ -170,7 +170,7 @@ var ExpressAdapter = class {
 
 // src/express/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkSNW5Z5HB_cjs.createPaymentMiddleware(config);
+  const middleware = chunkMXGS3HMS_cjs.createPaymentMiddleware(config);
   return async (req, res, next) => {
     const result = await middleware(new ExpressAdapter(req, res, next));
     if ("pass" in result) {

package/dist/express.js

@@ -1,4 +1,4 @@
-import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-GXPUE3ES.js';
+import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 
 // src/express/adapter.ts

package/dist/fastify.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkSNW5Z5HB_cjs = require('./chunk-SNW5Z5HB.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 var fp = require('fastify-plugin');
 
@@ -37,7 +37,7 @@ var FastifyAdapter = class {
 // src/fastify/index.ts
 function payloadJson(contentType, payload) {
   const text = typeof payload === "string" ? payload : payload instanceof Uint8Array ? Buffer.from(payload).toString("utf8") : void 0;
-  return chunkSNW5Z5HB_cjs.parseJsonBody(contentType, text);
+  return chunkMXGS3HMS_cjs.parseJsonBody(contentType, text);
 }
 function refuse(reply, result) {
   const json = JSON.stringify(result.body);
@@ -54,11 +54,11 @@ function headerValue(value) {
 }
 function paymentMiddleware(config) {
   return fp__default.default(async (fastify) => {
-    const gate = chunkSNW5Z5HB_cjs.createPaymentGate(config);
+    const gate = chunkMXGS3HMS_cjs.createPaymentGate(config);
     const verifiedMap = /* @__PURE__ */ new WeakMap();
     const rawWriters = /* @__PURE__ */ new WeakMap();
     const needsBody = (req) => {
-      const route = chunkSNW5Z5HB_cjs.matchRoute(
+      const route = chunkMXGS3HMS_cjs.matchRoute(
         new FastifyAdapter(req).getPath(),
         config.routes
       );
@@ -111,29 +111,29 @@ function paymentMiddleware(config) {
       if (!verified) return payload;
       let raw;
       if (verified.scheme === "upto") {
-        raw = headerValue(reply.getHeader(chunkSNW5Z5HB_cjs.SETTLE_AMOUNT_HEADER));
-        reply.removeHeader(chunkSNW5Z5HB_cjs.SETTLE_AMOUNT_HEADER);
+        raw = headerValue(reply.getHeader(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER));
+        reply.removeHeader(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER);
       }
       if (reply.statusCode < 200 || reply.statusCode >= 300) {
         return payload;
       }
       let settleOptions;
       if (verified.scheme === "upto") {
-        const resolved = await chunkSNW5Z5HB_cjs.resolveCharge(verified, raw, {
+        const resolved = await chunkMXGS3HMS_cjs.resolveCharge(verified, raw, {
           status: reply.statusCode,
           header: (name) => headerValue(reply.getHeader(name)),
           body: async () => payloadJson(headerValue(reply.getHeader("content-type")), payload)
         });
         if (resolved.kind === "invalid") {
-          return refuse(reply, chunkSNW5Z5HB_cjs.invalidSettleAmountResponse(resolved.reason));
+          return refuse(reply, chunkMXGS3HMS_cjs.invalidSettleAmountResponse(resolved.reason));
         }
         if (resolved.kind === "skip") return payload;
         settleOptions = { amount: resolved.amount };
       }
-      const outcome = await chunkSNW5Z5HB_cjs.settleVerified(verified, settleOptions);
+      const outcome = await chunkMXGS3HMS_cjs.settleVerified(verified, settleOptions);
       if (!outcome.settled)
-        return refuse(reply, chunkSNW5Z5HB_cjs.settlementFailureResponse(outcome));
-      reply.header("payment-response", chunkSNW5Z5HB_cjs.encodeBase64(outcome.confirmation));
+        return refuse(reply, chunkMXGS3HMS_cjs.settlementFailureResponse(outcome));
+      reply.header("payment-response", chunkMXGS3HMS_cjs.encodeBase64(outcome.confirmation));
       reply.header("access-control-expose-headers", "payment-response");
       return payload;
     });

package/dist/fastify.js

@@ -1,4 +1,4 @@
-import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, settleVerified, settlementFailureResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-GXPUE3ES.js';
+import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, settleVerified, settlementFailureResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 import fp from 'fastify-plugin';
 

package/dist/hono.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkSNW5Z5HB_cjs = require('./chunk-SNW5Z5HB.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 
 // src/hono/adapter.ts
@@ -30,7 +30,7 @@ var HonoAdapter = class {
   // Hono caches the parsed body on the request, so the handler can still read
   // it after the price function did.
   async getBody() {
-    if (!chunkSNW5Z5HB_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
+    if (!chunkMXGS3HMS_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
     try {
       return await this.c.req.json();
     } catch {
@@ -38,8 +38,8 @@ var HonoAdapter = class {
     }
   }
   async runHandler(options) {
-    const outcome = await chunkSNW5Z5HB_cjs.raceTimeout(this.next(), options?.timeoutMs);
-    if (outcome === chunkSNW5Z5HB_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkMXGS3HMS_cjs.raceTimeout(this.next(), options?.timeoutMs);
+    if (outcome === chunkMXGS3HMS_cjs.HANDLER_TIMEOUT) {
       return {
         status: 504,
         setResponseHeader: () => {
@@ -64,7 +64,7 @@ var HonoAdapter = class {
       getResponseHeader: (name) => res.headers.get(name) ?? void 0,
       removeResponseHeader: (name) => res.headers.delete(name),
       // Read from a clone: the response body streams once, to the client.
-      getResponseBody: () => chunkSNW5Z5HB_cjs.jsonFromResponse(res),
+      getResponseBody: () => chunkMXGS3HMS_cjs.jsonFromResponse(res),
       sendResponse: () => {
       },
       // The response is replaced: release its body (and whatever upstream
@@ -79,7 +79,7 @@ var HonoAdapter = class {
 
 // src/hono/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkSNW5Z5HB_cjs.createPaymentMiddleware(config);
+  const middleware = chunkMXGS3HMS_cjs.createPaymentMiddleware(config);
   return async (c, next) => {
     const result = await middleware(new HonoAdapter(c, next));
     if ("pass" in result) {

package/dist/hono.js

@@ -1,4 +1,4 @@
-import { isJsonContentType, raceTimeout, HANDLER_TIMEOUT, jsonFromResponse, createPaymentMiddleware } from './chunk-GXPUE3ES.js';
+import { isJsonContentType, raceTimeout, HANDLER_TIMEOUT, jsonFromResponse, createPaymentMiddleware } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 
 // src/hono/adapter.ts

package/dist/index.cjs

@@ -1,65 +1,65 @@
 'use strict';
 
-var chunkSNW5Z5HB_cjs = require('./chunk-SNW5Z5HB.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 var chunkKZZY5LS6_cjs = require('./chunk-KZZY5LS6.cjs');
 
 
 
 Object.defineProperty(exports, "FacilitatorClient", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.FacilitatorClient; }
+  get: function () { return chunkMXGS3HMS_cjs.FacilitatorClient; }
 });
 Object.defineProperty(exports, "PARALLEL_TOKENS", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.PARALLEL_TOKENS; }
+  get: function () { return chunkMXGS3HMS_cjs.PARALLEL_TOKENS; }
 });
 Object.defineProperty(exports, "SETTLE_AMOUNT_HEADER", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.SETTLE_AMOUNT_HEADER; }
+  get: function () { return chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER; }
 });
 Object.defineProperty(exports, "createPaymentGate", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.createPaymentGate; }
+  get: function () { return chunkMXGS3HMS_cjs.createPaymentGate; }
 });
 Object.defineProperty(exports, "createPaymentMiddleware", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.createPaymentMiddleware; }
+  get: function () { return chunkMXGS3HMS_cjs.createPaymentMiddleware; }
 });
 Object.defineProperty(exports, "encodeBase64", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.encodeBase64; }
+  get: function () { return chunkMXGS3HMS_cjs.encodeBase64; }
 });
 Object.defineProperty(exports, "getDefaultAcceptedTokens", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.getDefaultAcceptedTokens; }
+  get: function () { return chunkMXGS3HMS_cjs.getDefaultAcceptedTokens; }
 });
 Object.defineProperty(exports, "parsePrice", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.parsePrice; }
+  get: function () { return chunkMXGS3HMS_cjs.parsePrice; }
 });
 Object.defineProperty(exports, "resolveCharge", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.resolveCharge; }
+  get: function () { return chunkMXGS3HMS_cjs.resolveCharge; }
 });
 Object.defineProperty(exports, "resolveSettleAmount", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.resolveSettleAmount; }
+  get: function () { return chunkMXGS3HMS_cjs.resolveSettleAmount; }
 });
 Object.defineProperty(exports, "settleVerified", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.settleVerified; }
+  get: function () { return chunkMXGS3HMS_cjs.settleVerified; }
 });
 Object.defineProperty(exports, "settlementFailureResponse", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.settlementFailureResponse; }
+  get: function () { return chunkMXGS3HMS_cjs.settlementFailureResponse; }
 });
 Object.defineProperty(exports, "toEip155Network", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.toEip155Network; }
+  get: function () { return chunkMXGS3HMS_cjs.toEip155Network; }
 });
 Object.defineProperty(exports, "validateAddress", {
   enumerable: true,
-  get: function () { return chunkSNW5Z5HB_cjs.validateAddress; }
+  get: function () { return chunkMXGS3HMS_cjs.validateAddress; }
 });
 Object.defineProperty(exports, "X402ConfigError", {
   enumerable: true,

package/dist/index.js

@@ -1,2 +1,2 @@
-export { FacilitatorClient, PARALLEL_TOKENS, SETTLE_AMOUNT_HEADER, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, parsePrice, resolveCharge, resolveSettleAmount, settleVerified, settlementFailureResponse, toEip155Network, validateAddress } from './chunk-GXPUE3ES.js';
+export { FacilitatorClient, PARALLEL_TOKENS, SETTLE_AMOUNT_HEADER, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, parsePrice, resolveCharge, resolveSettleAmount, settleVerified, settlementFailureResponse, toEip155Network, validateAddress } from './chunk-KTBFF5HI.js';
 export { X402ConfigError, X402PriceRejectedError, X402RuntimeError, X402_ERROR_CODES, isPriceRejection } from './chunk-QAECRSWF.js';

package/dist/next.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkSNW5Z5HB_cjs = require('./chunk-SNW5Z5HB.cjs');
+var chunkMXGS3HMS_cjs = require('./chunk-MXGS3HMS.cjs');
 require('./chunk-KZZY5LS6.cjs');
 var server = require('next/server');
 
@@ -25,7 +25,7 @@ var NextAdapter = class {
   // Read from a clone: a request body is a stream that can be consumed once,
   // and the handler still needs the original.
   async getBody() {
-    if (!chunkSNW5Z5HB_cjs.isJsonContentType(this.req.headers.get("content-type") ?? void 0))
+    if (!chunkMXGS3HMS_cjs.isJsonContentType(this.req.headers.get("content-type") ?? void 0))
       return void 0;
     try {
       return await this.req.clone().json();
@@ -43,7 +43,7 @@ function fromResult(result) {
   });
 }
 function withPayment(config, handler) {
-  const gate = chunkSNW5Z5HB_cjs.createPaymentGate(config);
+  const gate = chunkMXGS3HMS_cjs.createPaymentGate(config);
   return async (req) => {
     const gateResult = await gate(new NextAdapter(req));
     if (gateResult.type === "pass") {
@@ -52,11 +52,11 @@ function withPayment(config, handler) {
     if (gateResult.type === "error") return fromResult(gateResult.result);
     let response;
     try {
-      const outcome = await chunkSNW5Z5HB_cjs.raceTimeout(
+      const outcome = await chunkMXGS3HMS_cjs.raceTimeout(
         handler(req),
         gateResult.handlerTimeoutMs
       );
-      if (outcome === chunkSNW5Z5HB_cjs.HANDLER_TIMEOUT) {
+      if (outcome === chunkMXGS3HMS_cjs.HANDLER_TIMEOUT) {
         return new server.NextResponse(null, { status: 504 });
       }
       response = outcome;
@@ -65,10 +65,10 @@ function withPayment(config, handler) {
     }
     let raw;
     if (gateResult.scheme === "upto") {
-      raw = response.headers.get(chunkSNW5Z5HB_cjs.SETTLE_AMOUNT_HEADER) ?? void 0;
+      raw = response.headers.get(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER) ?? void 0;
       if (raw !== void 0) {
         const headers = new Headers(response.headers);
-        headers.delete(chunkSNW5Z5HB_cjs.SETTLE_AMOUNT_HEADER);
+        headers.delete(chunkMXGS3HMS_cjs.SETTLE_AMOUNT_HEADER);
         response = new server.NextResponse(response.body, {
           status: response.status,
           headers
@@ -79,24 +79,24 @@ function withPayment(config, handler) {
       let settleOptions;
       if (gateResult.scheme === "upto") {
         const handled = response;
-        const resolved = await chunkSNW5Z5HB_cjs.resolveCharge(gateResult, raw, {
+        const resolved = await chunkMXGS3HMS_cjs.resolveCharge(gateResult, raw, {
           status: handled.status,
           header: (name) => handled.headers.get(name) ?? void 0,
           // Read from a clone: the body streams once, to the client.
-          body: () => chunkSNW5Z5HB_cjs.jsonFromResponse(handled)
+          body: () => chunkMXGS3HMS_cjs.jsonFromResponse(handled)
         });
         if (resolved.kind === "invalid") {
           handled.body?.cancel().catch(() => {
           });
-          return fromResult(chunkSNW5Z5HB_cjs.invalidSettleAmountResponse(resolved.reason));
+          return fromResult(chunkMXGS3HMS_cjs.invalidSettleAmountResponse(resolved.reason));
         }
         if (resolved.kind === "skip") return response;
         settleOptions = { amount: resolved.amount };
       }
-      const outcome = await chunkSNW5Z5HB_cjs.settleVerified(gateResult, settleOptions);
+      const outcome = await chunkMXGS3HMS_cjs.settleVerified(gateResult, settleOptions);
       if (outcome.settled) {
         const headers = new Headers(response.headers);
-        headers.set("payment-response", chunkSNW5Z5HB_cjs.encodeBase64(outcome.confirmation));
+        headers.set("payment-response", chunkMXGS3HMS_cjs.encodeBase64(outcome.confirmation));
         headers.set("access-control-expose-headers", "payment-response");
         return new server.NextResponse(response.body, {
           status: response.status,
@@ -105,7 +105,7 @@ function withPayment(config, handler) {
       }
       response.body?.cancel().catch(() => {
       });
-      return fromResult(chunkSNW5Z5HB_cjs.settlementFailureResponse(outcome));
+      return fromResult(chunkMXGS3HMS_cjs.settlementFailureResponse(outcome));
     }
     return response;
   };

package/dist/next.js

@@ -1,4 +1,4 @@
-import { isJsonContentType, createPaymentGate, raceTimeout, HANDLER_TIMEOUT, SETTLE_AMOUNT_HEADER, resolveCharge, jsonFromResponse, invalidSettleAmountResponse, settleVerified, encodeBase64, settlementFailureResponse } from './chunk-GXPUE3ES.js';
+import { isJsonContentType, createPaymentGate, raceTimeout, HANDLER_TIMEOUT, SETTLE_AMOUNT_HEADER, resolveCharge, jsonFromResponse, invalidSettleAmountResponse, settleVerified, encodeBase64, settlementFailureResponse } from './chunk-KTBFF5HI.js';
 import './chunk-QAECRSWF.js';
 import { NextResponse } from 'next/server';
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@parallel-protocol/x402",
-	"version": "0.8.1",
+	"version": "0.8.2",
 	"description": "Parallel Protocol x402 payment middleware — Express, Next.js, Fastify, Hono",
 	"author": "Parallel Protocol <contact@parallel.best>",
 	"repository": {