@skillzmarket/sdk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 SkillzMarket
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,313 @@
+# @skillzmarket/sdk
+
+[![npm version](https://img.shields.io/npm/v/@skillzmarket/sdk.svg)](https://www.npmjs.com/package/@skillzmarket/sdk)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+SDK for discovering and calling paid AI skills with automatic x402 crypto payments.
+
+## Features
+
+- **Discover skills** - Search and explore the Skillz Market registry
+- **Automatic payments** - x402 protocol handles USDC payments seamlessly
+- **Create skills** - Monetize your AI services with zero crypto knowledge
+- **Type-safe** - Full TypeScript support with comprehensive types
+- **Base network** - Fast, low-cost transactions on Base mainnet
+
+## Installation
+
+```bash
+npm install @skillzmarket/sdk viem
+# or
+pnpm add @skillzmarket/sdk viem
+```
+
+## Quick Start
+
+### Consumer: Call Paid Skills
+
+```typescript
+import { SkillzMarket } from '@skillzmarket/sdk';
+
+const market = new SkillzMarket({ wallet: '0x...' });
+const result = await market.call('text-to-image', { prompt: 'A sunset' });
+```
+
+### Creator: Monetize Your Skills
+
+```typescript
+import { skill, serve } from '@skillzmarket/sdk/creator';
+
+const echo = skill({ price: '$0.001' }, async (input) => ({ echo: input }));
+serve({ echo }); // Run: SKILLZ_WALLET_KEY=0x... npx tsx index.ts
+```
+
+## Documentation
+
+📚 **[Full Documentation](https://docs.skillz.market)** - Complete guides, API reference, and examples.
+
+---
+
+## AI Assistant Integration
+
+For AI assistants like Claude, use the MCP package:
+
+```json
+{
+  "mcpServers": {
+    "skillzmarket": {
+      "command": "npx",
+      "args": ["@skillzmarket/mcp"],
+      "env": { "SKILLZ_PRIVATE_KEY": "0x..." }
+    }
+  }
+}
+```
+
+| Tool | Description |
+|------|-------------|
+| `skillz_search` | Search for skills |
+| `skillz_info` | Get skill details |
+| `skillz_call` | Call with payment |
+| `skillz_reviews` | Get reviews |
+
+See [@skillzmarket/mcp](../mcp) for details.
+
+---
+
+## Consumer API
+
+The consumer API lets you discover and call paid skills.
+
+### Initialize
+
+```typescript
+import { SkillzMarket } from '@skillzmarket/sdk';
+
+// Without wallet (discovery only)
+const market = new SkillzMarket();
+
+// With wallet (can call paid skills)
+const market = new SkillzMarket({
+  wallet: '0x...private-key',
+  apiUrl: 'https://api.skillz.market', // optional
+  network: 'eip155:8453', // Base mainnet (default)
+});
+```
+
+### Methods
+
+| Method | Description |
+|--------|-------------|
+| `search(query, filters?)` | Search for skills by keyword |
+| `info(slug)` | Get detailed skill information |
+| `call(slug, input)` | Call a skill with automatic payment |
+| `getCreator(address)` | Get creator profile |
+| `getReviews(slug)` | Get reviews for a skill |
+| `authenticate()` | Auth with wallet signature |
+| `feedback(slug, score, comment?)` | Submit a review |
+
+### Example
+
+```typescript
+import { SkillzMarket } from '@skillzmarket/sdk';
+
+const market = new SkillzMarket({
+  wallet: process.env.WALLET_KEY,
+});
+
+// Discover skills
+const skills = await market.search('image generation');
+const skill = await market.info('text-to-image');
+
+// Call with automatic payment
+const result = await market.call('text-to-image', {
+  prompt: 'A cyberpunk cityscape at night',
+  style: 'photorealistic',
+});
+
+// Submit feedback
+await market.feedback('text-to-image', 90, 'Amazing results!');
+```
+
+### Payment Flow
+
+Payments use the [x402 protocol](https://x402.org):
+
+1. Skill endpoint returns `402 Payment Required`
+2. SDK creates USDC transfer (consumer → creator)
+3. Payment settles on Base (instant)
+4. SDK retries request with payment proof
+5. Skill executes and returns result
+
+---
+
+## Creator API
+
+The creator API lets you monetize your AI skills.
+
+### Functions
+
+| Function | Description |
+|----------|-------------|
+| `skill(options, handler)` | Define a monetized skill |
+| `serve(skills, options?)` | Start the skill server |
+| `register(skills, options)` | Register skills with marketplace |
+
+### Example
+
+```typescript
+import { skill, serve } from '@skillzmarket/sdk/creator';
+
+// Define skills
+const summarize = skill({
+  price: '$0.005',
+  description: 'Summarize text using AI',
+  inputSchema: {
+    type: 'object',
+    properties: { text: { type: 'string' } },
+    required: ['text'],
+  },
+}, async ({ text }) => {
+  // Your AI logic here
+  return { summary: text.slice(0, 100) + '...' };
+});
+
+const translate = skill({
+  price: '$0.003',
+  description: 'Translate text between languages',
+}, async ({ text, targetLang }) => {
+  return { translated: `[${targetLang}] ${text}` };
+});
+
+// Serve multiple skills
+serve({ summarize, translate }, {
+  port: 3002,
+  register: {
+    endpoint: 'https://your-server.com',
+    enabled: true,
+  },
+});
+```
+
+### Price Formats
+
+Creators can specify prices in multiple formats:
+
+| Format | Example | Result |
+|--------|---------|--------|
+| Dollar sign | `'$0.001'` | 0.001 USDC |
+| With currency | `'0.005 USDC'` | 0.005 USDC |
+| Plain number | `'0.01'` | 0.01 USDC |
+
+### Skill Options
+
+```typescript
+interface SkillOptions {
+  price: string;           // Required: price per call
+  description?: string;    // What the skill does
+  timeout?: number;        // Max execution time (ms, default: 60000)
+  inputSchema?: JsonSchema;  // JSON Schema for input validation
+  outputSchema?: JsonSchema; // JSON Schema for output format
+}
+```
+
+### Serve Options
+
+```typescript
+interface ServeOptions {
+  port?: number;           // Port to listen on (default: 3002)
+  wallet?: Hex;            // Private key (or use SKILLZ_WALLET_KEY env)
+  network?: string;        // Network (default: 'eip155:8453')
+  register?: {
+    endpoint: string;      // Your public server URL
+    enabled?: boolean;     // Enable auto-registration
+    onError?: 'throw' | 'warn' | 'silent';
+  };
+  onCall?: (name, input) => void;   // Callback for skill calls
+  onError?: (name, error) => void;  // Callback for errors
+}
+```
+
+---
+
+## Environment Variables
+
+| Variable | Description | Required |
+|----------|-------------|----------|
+| `SKILLZ_WALLET_KEY` | Private key for payments (Creator) | Yes* |
+
+*Required for `serve()` if not passed in options.
+
+## Security Considerations
+
+### HTTPS Required
+
+All API URLs must use HTTPS. The SDK rejects HTTP URLs (except localhost for development).
+
+### Wallet Security
+
+- Never hardcode private keys in source code
+- Use environment variables or secure key management
+- Consider hardware wallets for production
+
+### Error Handling
+
+In production (`NODE_ENV=production`), error messages are masked to prevent information disclosure.
+
+---
+
+## Types
+
+### Consumer Types
+
+```typescript
+interface Skill {
+  id: string;
+  slug: string;
+  name: string;
+  description: string | null;
+  price: string;
+  currency: string;
+  endpoint: string;
+  inputSchema: Record<string, unknown> | null;
+  outputSchema: Record<string, unknown> | null;
+  paymentAddress: string;
+  isActive: boolean;
+  creatorId: string;
+}
+
+interface SearchFilters {
+  category?: string;
+  minPrice?: string;
+  maxPrice?: string;
+  creator?: string;
+}
+
+type WalletConfig = PrivateKeyAccount | Hex;
+```
+
+### Creator Types
+
+```typescript
+interface SkillDefinition<TInput, TOutput> {
+  options: SkillOptions;
+  handler: SkillHandler<TInput, TOutput>;
+  parsedPrice: ParsedPrice;
+}
+
+interface ParsedPrice {
+  amount: string;
+  currency: 'USDC';
+}
+```
+
+---
+
+## Requirements
+
+- Node.js >= 18.0.0
+- pnpm >= 8.0.0 (recommended)
+
+## License
+
+MIT © [Skillz Market](https://skillz.market)

package/dist/client.d.ts

@@ -0,0 +1,18 @@
+import type { Skill, SearchFilters, SkillzMarketOptions } from './types.js';
+export declare class SkillzMarket {
+    private discovery;
+    private apiUrl;
+    private wallet?;
+    private walletAddress?;
+    private paymentFetch?;
+    private authToken?;
+    constructor(options?: SkillzMarketOptions);
+    search(query: string, filters?: SearchFilters): Promise<Skill[]>;
+    info(slug: string): Promise<Skill>;
+    getCreator(address: string): Promise<import("./types.js").Creator>;
+    getReviews(skillSlug: string): Promise<import("./types.js").Review[]>;
+    call<T = unknown>(slug: string, input: Record<string, unknown>): Promise<T>;
+    authenticate(): Promise<string>;
+    feedback(slug: string, score: number, comment?: string): Promise<void>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAgB,MAAM,YAAY,CAAC;AAgB1F,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAC,CAAe;IAC9B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,SAAS,CAAC,CAAS;gBAEf,OAAO,GAAE,mBAAwB;IAmBvC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAIhE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAIlC,UAAU,CAAC,OAAO,EAAE,MAAM;IAI1B,UAAU,CAAC,SAAS,EAAE,MAAM;IAK5B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAyB3E,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IA4C/B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAkB7E"}

package/dist/client.js

@@ -0,0 +1,118 @@
+import { DiscoveryClient } from './discovery.js';
+import { createPaymentFetch, getWalletAddress, DEFAULT_NETWORK } from './payment.js';
+const DEFAULT_API_URL = 'https://api.skillz.market';
+/**
+ * Validate that a URL uses HTTPS protocol.
+ * Allows localhost for development purposes.
+ */
+function validateHttpsUrl(url, paramName) {
+    const parsed = new URL(url);
+    const isLocalhost = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';
+    if (!isLocalhost && parsed.protocol !== 'https:') {
+        throw new Error(`${paramName} must use HTTPS protocol for security`);
+    }
+}
+export class SkillzMarket {
+    discovery;
+    apiUrl;
+    wallet;
+    walletAddress;
+    paymentFetch;
+    authToken;
+    constructor(options = {}) {
+        this.apiUrl = options.apiUrl || DEFAULT_API_URL;
+        // Validate HTTPS for API URL (allow localhost for development)
+        validateHttpsUrl(this.apiUrl, 'apiUrl');
+        this.discovery = new DiscoveryClient(this.apiUrl);
+        if (options.wallet) {
+            this.wallet = options.wallet;
+            this.walletAddress = getWalletAddress(options.wallet);
+            this.paymentFetch = createPaymentFetch(options.wallet, options.network || DEFAULT_NETWORK);
+        }
+    }
+    // Discovery methods
+    async search(query, filters) {
+        return this.discovery.search(query, filters);
+    }
+    async info(slug) {
+        return this.discovery.getSkill(slug);
+    }
+    async getCreator(address) {
+        return this.discovery.getCreator(address);
+    }
+    async getReviews(skillSlug) {
+        return this.discovery.getReviews(skillSlug);
+    }
+    // Execution (handles x402 payment automatically)
+    async call(slug, input) {
+        if (!this.paymentFetch || !this.wallet) {
+            throw new Error('Wallet required for calling paid skills');
+        }
+        const skill = await this.info(slug);
+        if (!skill.isActive) {
+            throw new Error(`Skill ${slug} is not active`);
+        }
+        const response = await this.paymentFetch(skill.endpoint, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(input),
+        });
+        if (!response.ok) {
+            throw new Error(`Skill call failed: ${response.statusText}`);
+        }
+        return response.json();
+    }
+    // Authentication
+    async authenticate() {
+        if (!this.wallet || !this.walletAddress) {
+            throw new Error('Wallet required for authentication');
+        }
+        const { resolveAccount } = await import('./payment.js');
+        const account = resolveAccount(this.wallet);
+        // Get challenge
+        const challengeRes = await fetch(`${this.apiUrl}/auth/challenge`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ address: this.walletAddress }),
+        });
+        if (!challengeRes.ok) {
+            throw new Error('Failed to get auth challenge');
+        }
+        const { message } = await challengeRes.json();
+        // Sign message using viem account
+        if (!account.signMessage) {
+            throw new Error('Account does not support message signing');
+        }
+        const signature = await account.signMessage({ message });
+        // Verify and get token
+        const verifyRes = await fetch(`${this.apiUrl}/auth/verify`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ address: this.walletAddress, signature }),
+        });
+        if (!verifyRes.ok) {
+            throw new Error('Authentication failed');
+        }
+        const { token } = await verifyRes.json();
+        this.authToken = token;
+        return token;
+    }
+    // Feedback
+    async feedback(slug, score, comment) {
+        if (!this.authToken) {
+            await this.authenticate();
+        }
+        const response = await fetch(`${this.apiUrl}/reviews`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${this.authToken}`,
+            },
+            body: JSON.stringify({ skillSlug: slug, score, comment }),
+        });
+        if (!response.ok) {
+            throw new Error(`Failed to submit feedback: ${response.statusText}`);
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGrF,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACvF,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,uCAAuC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IACf,SAAS,CAAkB;IAC3B,MAAM,CAAS;IACf,MAAM,CAAgB;IACtB,aAAa,CAAU;IACvB,YAAY,CAAgB;IAC5B,SAAS,CAAU;IAE3B,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;QAEhD,+DAA+D;QAC/D,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAElD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CACpC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,OAAO,IAAI,eAAe,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAuB;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,KAA8B;QAClE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,iBAAiB;IACjB,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5C,gBAAgB;QAChB,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,iBAAiB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAE9C,kCAAkC;QAClC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzD,uBAAuB;QACvB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,cAAc,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW;IACX,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,OAAgB;QAC1D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,UAAU,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;aAC5C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SAC1D,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF"}

package/dist/creator/auth.d.ts

@@ -0,0 +1,50 @@
+import type { PrivateKeyAccount } from 'viem/accounts';
+export interface AuthenticateOptions {
+    apiUrl?: string;
+}
+export interface AuthResult {
+    token: string;
+    refreshToken?: string;
+    expiresIn?: number;
+}
+/**
+ * Authenticate with the Skillz Market API using a wallet.
+ *
+ * This performs a challenge-response authentication flow:
+ * 1. Request a challenge message from the API
+ * 2. Sign the message with the wallet
+ * 3. Submit the signature to get a JWT token
+ *
+ * @param account - viem PrivateKeyAccount to sign with
+ * @param options - Authentication options
+ * @returns JWT token
+ */
+export declare function authenticate(account: PrivateKeyAccount, options?: AuthenticateOptions): Promise<AuthResult>;
+export interface RefreshOptions {
+    apiUrl?: string;
+}
+export interface RefreshResult {
+    token: string;
+    expiresIn: number;
+}
+/**
+ * Refresh an access token using a refresh token.
+ *
+ * Call this before the access token expires (typically 15 minutes).
+ * The refresh token is valid for 7 days.
+ *
+ * @param refreshToken - Refresh token from authenticate()
+ * @param options - Refresh options
+ * @returns New access token and expiration time
+ */
+export declare function refreshAccessToken(refreshToken: string, options?: RefreshOptions): Promise<RefreshResult>;
+/**
+ * Make an authenticated fetch request to the Skillz Market API.
+ *
+ * @param url - Full URL to fetch
+ * @param token - JWT token from authenticate()
+ * @param options - Fetch options
+ * @returns Fetch response
+ */
+export declare function authenticatedFetch(url: string, token: string, options?: RequestInit): Promise<Response>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/creator/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/creator/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIvD,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAcD;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CA2DrB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAoBxB;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CASnB"}

package/dist/creator/auth.js

@@ -0,0 +1,114 @@
+const DEFAULT_API_URL = 'https://api.skillz.market';
+/**
+ * Validate that a URL uses HTTPS protocol.
+ * Allows localhost for development purposes.
+ */
+function validateHttpsUrl(url, paramName) {
+    const parsed = new URL(url);
+    const isLocalhost = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';
+    if (!isLocalhost && parsed.protocol !== 'https:') {
+        throw new Error(`${paramName} must use HTTPS protocol for security`);
+    }
+}
+/**
+ * Authenticate with the Skillz Market API using a wallet.
+ *
+ * This performs a challenge-response authentication flow:
+ * 1. Request a challenge message from the API
+ * 2. Sign the message with the wallet
+ * 3. Submit the signature to get a JWT token
+ *
+ * @param account - viem PrivateKeyAccount to sign with
+ * @param options - Authentication options
+ * @returns JWT token
+ */
+export async function authenticate(account, options = {}) {
+    const apiUrl = options.apiUrl ?? DEFAULT_API_URL;
+    // Validate HTTPS for API URL (allow localhost for development)
+    validateHttpsUrl(apiUrl, 'apiUrl');
+    // Step 1: Request challenge message
+    const challengeResponse = await fetch(`${apiUrl}/auth/challenge`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            address: account.address,
+        }),
+    });
+    if (!challengeResponse.ok) {
+        const error = await challengeResponse.text();
+        throw new Error(`Failed to get auth challenge: ${error}`);
+    }
+    const { message } = (await challengeResponse.json());
+    // Step 2: Sign the message
+    const signature = await account.signMessage({
+        message,
+    });
+    // Step 3: Submit signature for JWT
+    const authResponse = await fetch(`${apiUrl}/auth/verify`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            address: account.address,
+            signature,
+        }),
+    });
+    if (!authResponse.ok) {
+        const error = await authResponse.text();
+        throw new Error(`Failed to authenticate: ${error}`);
+    }
+    const authResult = (await authResponse.json());
+    return {
+        token: authResult.token,
+        refreshToken: authResult.refreshToken,
+        expiresIn: authResult.expiresIn,
+    };
+}
+/**
+ * Refresh an access token using a refresh token.
+ *
+ * Call this before the access token expires (typically 15 minutes).
+ * The refresh token is valid for 7 days.
+ *
+ * @param refreshToken - Refresh token from authenticate()
+ * @param options - Refresh options
+ * @returns New access token and expiration time
+ */
+export async function refreshAccessToken(refreshToken, options = {}) {
+    const apiUrl = options.apiUrl ?? DEFAULT_API_URL;
+    validateHttpsUrl(apiUrl, 'apiUrl');
+    const response = await fetch(`${apiUrl}/auth/refresh`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ refreshToken }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Failed to refresh token: ${error}`);
+    }
+    const result = (await response.json());
+    return result;
+}
+/**
+ * Make an authenticated fetch request to the Skillz Market API.
+ *
+ * @param url - Full URL to fetch
+ * @param token - JWT token from authenticate()
+ * @param options - Fetch options
+ * @returns Fetch response
+ */
+export async function authenticatedFetch(url, token, options = {}) {
+    const headers = new Headers(options.headers);
+    headers.set('Authorization', `Bearer ${token}`);
+    headers.set('Content-Type', 'application/json');
+    return fetch(url, {
+        ...options,
+        headers,
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/creator/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/creator/auth.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAYpD;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACvF,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,uCAAuC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA0B,EAC1B,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IAEjD,+DAA+D;IAC/D,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEnC,oCAAoC;IACpC,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,iBAAiB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAElD,CAAC;IAEF,2BAA2B;IAC3B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;QAC1C,OAAO;KACR,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,cAAc,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS;SACV,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAI5C,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,UAA0B,EAAE;IAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IAEjD,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,KAAa,EACb,UAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAEhD,OAAO,KAAK,CAAC,GAAG,EAAE;QAChB,GAAG,OAAO;QACV,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/creator/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @skillzmarket/sdk/creator - Create monetized skills with zero x402 knowledge
+ *
+ * @example
+ * ```typescript
+ * import { skill, serve } from '@skillzmarket/sdk/creator';
+ *
+ * const echo = skill({
+ *   price: '$0.001',
+ *   description: 'Echoes input back',
+ * }, async (input) => {
+ *   return { echo: input };
+ * });
+ *
+ * serve({ echo });
+ * // Run: SKILLZ_WALLET_KEY=0x... npx tsx index.ts
+ * ```
+ */
+export { skill } from './skill.js';
+export { serve } from './serve.js';
+export { register } from './register.js';
+export { authenticate, refreshAccessToken } from './auth.js';
+export type { AuthResult, RefreshResult } from './auth.js';
+export type { SkillOptions, SkillHandler, SkillDefinition, SkillsMap, ServeOptions, ParsedPrice, JsonSchema, RegistrationOptions, RegistrationResult, } from './types.js';
+export { parsePrice, formatPriceForX402 } from './utils/price.js';
+export { resolveWallet, maskPrivateKey } from './utils/wallet.js';
+//# sourceMappingURL=index.d.ts.map