@warppay402/server 1.0.0

package/README.md

@@ -0,0 +1,93 @@
+# @warppay402/server ⚡
+
+> Instant x402 V2 monetization SDK and self-hosted infrastructure for Model Context Protocol (MCP) AI tools, Hono HTTP APIs, Cloudflare Monetization Gateway, and Base.
+
+`@warppay402/server` allows developers to monetize any MCP tool or HTTP API route in a few lines of code. It automatically generates standard x402 V2 HTTP payment challenges, verifies gasless EIP-712 signatures, enforces platform fee splits, protects against prompt injection threats, and prevents signature replay attacks.
+
+Official Site: [https://www.warppay402.com](https://www.warppay402.com)
+
+---
+
+## Features
+
+- **x402 V2 Compliant:** Standardized payment challenge headers (`PAYMENT-REQUIRED`, `PAYMENT-SIGNATURE`, `PAYMENT-RESPONSE`).
+- **Base Network Native:** Uses USDC on Base mainnet (`eip155:8453`) by default.
+- **Gasless Off-Chain Signing:** Clients sign `TransferWithAuthorization` payloads without paying gas fees.
+- **Automated Platform Fee Split:** Configurable fee split in basis points (e.g. 50 BPS = 0.5%) routed directly during facilitator settlement.
+- **x402-Guard Security:** Pre-flight middleware protecting endpoints against prompt injection attacks, payload buffer overruns, and high-velocity traffic spikes.
+- **MCP Native Decorator:** Seamlessly wraps tools written for the Model Context Protocol.
+- **Replay Protection:** Includes built-in `MemoryNonceStore` and distributed `RedisNonceStore` drivers to prevent double-spending or signature reuse.
+- **Edge Compatible:** Zero Node.js-only API dependencies; runs seamlessly on Cloudflare Workers, Vercel Edge, Node.js (18+), and Deno.
+
+---
+
+## Installation
+
+```bash
+npm install @warppay402/server
+```
+## Usage Case 1: Monetizing Hono HTTP APIs
+```typescript
+import { Hono } from "hono";
+import { monetize } from "@warppay402/server";
+
+const app = new Hono();
+
+app.use(
+  "/api/data",
+  monetize({
+    price: "0.01", // $0.01 USDC
+    payTo: "0xYourMerchantWalletAddress",
+    platformWallet: "0xYourPlatformTreasuryWallet",
+    platformFeeBps: 50, // 0.5% cut
+    guard: true // Enables x402-guard security scanning
+  })
+);
+
+app.get("/api/data", (c) => c.json({ status: "success", content: "Monetized Payload" }));
+
+export default app;
+```
+## Usage Case 2:  Monetizing MCP (Model Context Protocol) Tools
+```typescript
+import { createMonetizedMCPTool } from "@warppay402/server";
+
+const originalTool = {
+  name: "web_scraper",
+  description: "Extract clean Markdown content from URLs",
+  inputSchema: { type: "object", properties: { url: { type: "string" } } },
+  handler: async ({ url }: { url: string }) => {
+    return { markdown: "# Cleaned Markdown Content" };
+  }
+};
+
+export const monetizedTool = createMonetizedMCPTool(originalTool, {
+  price: "0.02", // $0.02 USDC
+  payTo: "0xYourMerchantWalletAddress",
+  platformWallet: "0xYourPlatformTreasuryWallet",
+  platformFeeBps: 50
+});
+```
+
+## Usage Case 3: Distributed Nonce Locking with Redis / Upstash
+```typescript
+import { Redis } from "@upstash/redis";
+import { monetize, RedisNonceStore } from "@warppay402/server";
+
+const redis = new Redis({
+  url: process.env.UPSTASH_REDIS_REST_URL!,
+  token: process.env.UPSTASH_REDIS_REST_TOKEN!
+});
+
+app.use(
+  "/api/v1/compute",
+  monetize({
+    price: "0.10",
+    payTo: "0xYourMerchantWalletAddress",
+    platformWallet: "0xYourPlatformTreasuryWallet",
+    nonceStore: new RedisNonceStore(redis),
+    nonceTtlSeconds: 300
+  })
+);
+```
+## License: MIT © WarpPay402

package/dist/demo.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/demo.js

@@ -0,0 +1,53 @@
+import { Hono } from "hono";
+import { monetize, createMonetizedMCPTool } from "./index";
+// ============================================================================
+// 1. Test Web API Middleware
+// ============================================================================
+const app = new Hono();
+app.use("/api/weather", monetize({
+    price: "0.05",
+    payTo: "0x1111111111111111111111111111111111111111",
+    platformFeeBps: 50
+}));
+app.get("/api/weather", (c) => {
+    return c.json({ city: "Austin", temperature: "78F", condition: "Sunny" });
+});
+// ============================================================================
+// 2. Test MCP Tool Decorator
+// ============================================================================
+const monetizedSearchTool = createMonetizedMCPTool({
+    name: "web_search",
+    description: "Perform deep web searches for AI agents",
+    inputSchema: { type: "object" },
+    handler: async (args) => {
+        return { status: "success", data: `Search results for: ${args.query}` };
+    }
+}, {
+    price: "0.10",
+    payTo: "0x1111111111111111111111111111111111111111",
+    platformFeeBps: 50
+});
+// ============================================================================
+// 3. Execution Simulation
+// ============================================================================
+async function runLocalVerification() {
+    console.log("==================================================");
+    console.log("1. TESTING HTTP API MIDDLEWARE WITHOUT PAYMENT");
+    console.log("==================================================");
+    const unauthenticatedRes = await app.request("http://localhost/api/weather");
+    console.log("HTTP Status Code:", unauthenticatedRes.status, "(Expected: 402)");
+    console.log("PAYMENT-REQUIRED Header:", unauthenticatedRes.headers.get("PAYMENT-REQUIRED") ? "RECEIVED ✓" : "MISSING ✗");
+    const challengeBody = await unauthenticatedRes.json();
+    console.log("Challenge Payload:", JSON.stringify(challengeBody, null, 2));
+    console.log("\n==================================================");
+    console.log("2. TESTING MCP TOOL DECORATOR WITHOUT PAYMENT");
+    console.log("==================================================");
+    try {
+        await monetizedSearchTool.handler({ query: "Base network x402" }, {});
+    }
+    catch (err) {
+        console.log("Caught Expected MCP 402 Error ✓");
+        console.log("MCP Error Payload:", JSON.parse(err.message));
+    }
+}
+runLocalVerification();

package/dist/examples/basic-monetized-server.d.ts

@@ -0,0 +1,4 @@
+import "dotenv/config";
+import { Hono } from "hono";
+declare const app: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export default app;

package/dist/examples/basic-monetized-server.js

@@ -0,0 +1,25 @@
+import "dotenv/config";
+import { serve } from "@hono/node-server";
+import { monetize } from "../index.js";
+import { Hono } from "hono";
+const app = new Hono();
+// Define the developer's wallet address (where 99.5% of funds go)
+const developerWallet = "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b";
+app.use("/api/weather", monetize({
+    price: "0.01",
+    payTo: developerWallet,
+    platformWallet: "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b",
+    platformFeeBps: 50,
+    facilitatorUrl: "https://warppay402.com"
+}));
+app.get("/api/weather", (c) => {
+    return c.json({
+        status: "success",
+        timestamp: new Date().toISOString(),
+        data: { city: "Austin", temperature: "78°F", condition: "Sunny" }
+    });
+});
+serve({ fetch: app.fetch, port: 3000 }, (info) => {
+    console.log(`[API Server] Running on http://localhost:${info.port}`);
+});
+export default app;

package/dist/facilitator.d.ts

@@ -0,0 +1 @@
+import "dotenv/config";

package/dist/facilitator.js

@@ -0,0 +1,118 @@
+import "dotenv/config";
+import { serve } from "@hono/node-server";
+import { Hono } from "hono";
+import { createWalletClient, http, parseAbi, verifyTypedData } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { base } from "viem/chains";
+const app = new Hono();
+// Log every incoming request URL to debug the exact path hit by the SDK
+app.use("*", async (c, next) => {
+    console.log(`[Facilitator Debug] Incoming ${c.req.method} request to path: ${c.req.path}`);
+    await next();
+});
+const FACILITATOR_PRIVATE_KEY = process.env.FACILITATOR_PRIVATE_KEY;
+if (!FACILITATOR_PRIVATE_KEY) {
+    console.error("Please set FACILITATOR_PRIVATE_KEY with a Base gas-holding key.");
+    process.exit(1);
+}
+const account = privateKeyToAccount(FACILITATOR_PRIVATE_KEY);
+const walletClient = createWalletClient({
+    account,
+    chain: base,
+    transport: http(process.env.RPC_URL || "https://mainnet.base.org"),
+});
+const usdcAbi = parseAbi([
+    "function transferWithAuthorization(address from, address to, uint256 value, uint256 validAfter, uint256 validBefore, bytes32 nonce, uint8 v, bytes32 r, bytes32 s) external",
+]);
+// Shared handler logic for signature verification and on-chain broadcasting
+const handleSettle = async (c) => {
+    try {
+        const body = await c.req.json();
+        // Extract authorization & signature regardless of payload nesting depth
+        const authorization = body.authorization ||
+            body.payload?.authorization ||
+            body.paymentPayload?.authorization ||
+            body.paymentPayload?.payload?.authorization ||
+            body.payload?.payload?.authorization;
+        const signature = body.signature ||
+            body.payload?.signature ||
+            body.paymentPayload?.signature ||
+            body.paymentPayload?.payload?.signature ||
+            body.payload?.payload?.signature;
+        if (!signature || !authorization) {
+            console.log("[Facilitator Debug] Received Body:", JSON.stringify(body, null, 2));
+            return c.json({ success: false, error: "Missing signature or authorization payload" }, 400);
+        }
+        // 1. Verify EIP-712 Signature Off-Chain
+        const domain = {
+            name: "USD Coin",
+            version: "2",
+            chainId: 8453,
+            verifyingContract: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+        };
+        const types = {
+            TransferWithAuthorization: [
+                { name: "from", type: "address" },
+                { name: "to", type: "address" },
+                { name: "value", type: "uint256" },
+                { name: "validAfter", type: "uint256" },
+                { name: "validBefore", type: "uint256" },
+                { name: "nonce", type: "bytes32" },
+            ],
+        };
+        const isValid = await verifyTypedData({
+            address: authorization.from,
+            domain,
+            types,
+            primaryType: "TransferWithAuthorization",
+            message: {
+                from: authorization.from,
+                to: authorization.to,
+                value: BigInt(authorization.value),
+                validAfter: BigInt(authorization.validAfter),
+                validBefore: BigInt(authorization.validBefore),
+                nonce: authorization.nonce,
+            },
+            signature,
+        });
+        if (!isValid) {
+            return c.json({ success: false, error: "Invalid EIP-712 signature" }, 402);
+        }
+        // 2. Extract v, r, s
+        const r = `0x${signature.slice(2, 66)}`;
+        const s = `0x${signature.slice(66, 130)}`;
+        const v = parseInt(signature.slice(130, 132), 16);
+        // 3. Broadcast to Base Mainnet using transferWithAuthorization
+        const txHash = await walletClient.writeContract({
+            address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+            abi: usdcAbi,
+            functionName: "transferWithAuthorization",
+            args: [
+                authorization.from,
+                authorization.to,
+                BigInt(authorization.value),
+                BigInt(authorization.validAfter),
+                BigInt(authorization.validBefore),
+                authorization.nonce,
+                v,
+                r,
+                s,
+            ],
+        });
+        return c.json({
+            success: true,
+            txHash,
+            network: "eip155:8453",
+        });
+    }
+    catch (err) {
+        return c.json({ success: false, error: err.message }, 500);
+    }
+};
+// Listen on all standard routes to prevent 404 mismatch
+app.post("/", handleSettle);
+app.post("/settle", handleSettle);
+app.post("/verify", handleSettle);
+serve({ fetch: app.fetch, port: 3001 }, (info) => {
+    console.log(`[Self-Hosted Facilitator] Running on http://localhost:${info.port}`);
+});

package/dist/guard.d.ts

@@ -0,0 +1,29 @@
+import { Context, Next } from "hono";
+export interface GuardOptions {
+    /** Maximum requests allowed within the window per IP/Wallet */
+    rateLimitMax?: number;
+    /** Rate limit window in milliseconds (default: 60000 / 1 minute) */
+    rateLimitWindowMs?: number;
+    /** Custom forbidden keywords/patterns for prompt injection scanning */
+    customBlockedPatterns?: RegExp[];
+    /** Maximum length allowed for input strings (prevents buffer overload) */
+    maxPayloadLength?: number;
+    /** Action on detected threat: 'block' (422) or 'log-only' */
+    mode?: "block" | "log-only";
+}
+export interface GuardAuditResult {
+    passed: boolean;
+    reason?: string;
+    threatType?: "PROMPT_INJECTION" | "VELOCITY_EXCEEDED" | "PAYLOAD_TOO_LARGE";
+}
+/**
+ * Scans string inputs recursively within a JSON request body
+ */
+export declare function scanPayloadForInjection(payload: unknown, customPatterns?: RegExp[]): {
+    safe: boolean;
+    matchedPattern?: string;
+};
+/**
+ * Pre-flight Hono Middleware for x402-guard
+ */
+export declare function x402Guard(options?: GuardOptions): (c: Context, next: Next) => Promise<Response | void>;

package/dist/guard.js

@@ -0,0 +1,108 @@
+/**
+ * Built-in heuristic signatures for common indirect prompt injection attacks
+ */
+const DEFAULT_INJECTION_PATTERNS = [
+    /ignore\s+(all\s+)?previous\s+instructions/i,
+    /override\s+(system\s+)?prompt/i,
+    /system:\s*you\s+must/i,
+    /bypass\s+(payment|verification|guard|x402)/i,
+    /pay\s+(maximum|all|unlimited)\s+(usdc|funds|balance)/i,
+    /repeat\s+this\s+request\s+infinitely/i,
+    /<script[\s\S]*?>[\s\S]*?<\/script>/i,
+    /eval\(.*?\)/i,
+];
+/**
+ * In-memory sliding window store for velocity protection
+ */
+class VelocityStore {
+    requests = new Map();
+    isExceeded(key, limit, windowMs) {
+        const now = Date.now();
+        const timestamps = this.requests.get(key) || [];
+        const validTimestamps = timestamps.filter((time) => now - time < windowMs);
+        if (validTimestamps.length >= limit) {
+            return true;
+        }
+        validTimestamps.push(now);
+        this.requests.set(key, validTimestamps);
+        return false;
+    }
+}
+const velocityStore = new VelocityStore();
+/**
+ * Scans string inputs recursively within a JSON request body
+ */
+export function scanPayloadForInjection(payload, customPatterns = []) {
+    const patterns = [...DEFAULT_INJECTION_PATTERNS, ...customPatterns];
+    const inspectValue = (val) => {
+        if (typeof val === "string") {
+            for (const pattern of patterns) {
+                if (pattern.test(val)) {
+                    return { safe: false, matchedPattern: pattern.toString() };
+                }
+            }
+        }
+        else if (typeof val === "object" && val !== null) {
+            for (const key of Object.keys(val)) {
+                const result = inspectValue(val[key]);
+                if (!result.safe)
+                    return result;
+            }
+        }
+        return { safe: true };
+    };
+    return inspectValue(payload);
+}
+/**
+ * Pre-flight Hono Middleware for x402-guard
+ */
+export function x402Guard(options = {}) {
+    const { rateLimitMax = 20, rateLimitWindowMs = 60000, customBlockedPatterns = [], maxPayloadLength = 50000, mode = "block", } = options;
+    return async (c, next) => {
+        const clientKey = c.req.header("x-forwarded-for") || "unknown-client";
+        let body = {};
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            // Body parsing optional if request has no body
+        }
+        // 1. Payload Size Check
+        const rawBody = JSON.stringify(body || {});
+        if (rawBody.length > maxPayloadLength) {
+            if (mode === "block") {
+                c.header("X-Guard-Blocked", "PAYLOAD_TOO_LARGE");
+                return c.json({
+                    error: "Payload Too Large",
+                    message: `Request body exceeds maximum safe size of ${maxPayloadLength} characters.`,
+                    code: "PAYLOAD_TOO_LARGE",
+                }, 413);
+            }
+        }
+        // 2. Velocity Check
+        if (velocityStore.isExceeded(clientKey, rateLimitMax, rateLimitWindowMs)) {
+            c.header("X-Guard-Blocked", "VELOCITY_EXCEEDED");
+            if (mode === "block") {
+                return c.json({
+                    error: "Rate Limit Exceeded",
+                    message: "Anomalous transaction velocity detected. Request blocked before x402 payment.",
+                    code: "VELOCITY_EXCEEDED",
+                }, 429);
+            }
+        }
+        // 3. Prompt Injection Pre-Flight Scan
+        const scanResult = scanPayloadForInjection(body, customBlockedPatterns);
+        if (!scanResult.safe) {
+            c.header("X-Guard-Blocked", "PROMPT_INJECTION");
+            if (mode === "block") {
+                return c.json({
+                    error: "Security Violation",
+                    message: "Potential prompt injection or payload manipulation detected in request body.",
+                    code: "PROMPT_INJECTION_DETECTED",
+                }, 422);
+            }
+        }
+        c.header("X-Guard-Inspected", "true");
+        await next();
+    };
+}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { monetize, MemoryNonceStore, RedisNonceStore, type MonetizeOptions, type NonceStore } from "./monetize";
+export { createMonetizedMCPTool, type MCPToolDefinition } from "./mcpWrapper";
+export { x402Guard, scanPayloadForInjection } from "./guard.js";
+export type { GuardOptions } from "./guard.js";

package/dist/index.js

@@ -0,0 +1,3 @@
+export { monetize, MemoryNonceStore, RedisNonceStore } from "./monetize";
+export { createMonetizedMCPTool } from "./mcpWrapper";
+export { x402Guard, scanPayloadForInjection } from "./guard.js";

package/dist/mcpWrapper.d.ts

@@ -0,0 +1,13 @@
+import { MonetizeOptions } from "./monetize";
+export interface MCPToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: Record<string, any>;
+    handler: (args: any, extraContext?: any) => Promise<any>;
+}
+export declare function createMonetizedMCPTool(tool: MCPToolDefinition, options: MonetizeOptions): {
+    name: string;
+    inputSchema: Record<string, any>;
+    description: string;
+    handler(args: any, context: any): Promise<any>;
+};

package/dist/mcpWrapper.js

@@ -0,0 +1,169 @@
+import { MemoryNonceStore } from "./monetize";
+const DEFAULT_USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+const DEFAULT_NETWORK = "eip155:8453";
+const DEFAULT_FACILITATOR = "https://warppay402.com";
+const DEFAULT_PLATFORM_WALLET = "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b";
+const defaultMemoryStore = new MemoryNonceStore();
+function parseTokenUnits(priceStr) {
+    const normalized = String(priceStr).trim();
+    if (!normalized || isNaN(Number(normalized)) || Number(normalized) <= 0) {
+        throw new Error(`[Monetize] Invalid price option: "${priceStr}". Must be a positive decimal number.`);
+    }
+    const [whole, fraction = ""] = normalized.split(".");
+    const paddedFraction = fraction.padEnd(6, "0").slice(0, 6);
+    return BigInt(whole + paddedFraction);
+}
+async function hashSignature(signature) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(signature);
+    const cryptoObj = globalThis.crypto;
+    if (!cryptoObj?.subtle) {
+        throw new Error("[Monetize] Web Crypto API (crypto.subtle) is unavailable in this environment.");
+    }
+    const hashBuffer = await cryptoObj.subtle.digest("SHA-256", data);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+export function createMonetizedMCPTool(tool, options) {
+    // Validate EVM wallet addresses
+    if (!options.payTo || !options.payTo.startsWith("0x") || options.payTo.length !== 42) {
+        throw new Error("[Monetize] A valid 42-character EVM wallet address is required for 'payTo'.");
+    }
+    const asset = options.asset || DEFAULT_USDC_BASE;
+    const network = options.network || DEFAULT_NETWORK;
+    const facilitatorUrl = options.facilitatorUrl || DEFAULT_FACILITATOR;
+    const platformFeeBps = options.platformFeeBps ?? 50;
+    const platformWallet = options.platformWallet || DEFAULT_PLATFORM_WALLET;
+    const nonceStore = options.nonceStore || defaultMemoryStore;
+    const nonceTtlSeconds = options.nonceTtlSeconds ?? 300;
+    const timeoutMs = options.timeoutMs ?? 8000;
+    if (platformFeeBps > 0 && (!platformWallet || !platformWallet.startsWith("0x") || platformWallet.length !== 42)) {
+        throw new Error("[Monetize] A valid EVM 'platformWallet' address is required when platformFeeBps > 0.");
+    }
+    const baseUnits = parseTokenUnits(options.price);
+    const platformFeeUnits = (baseUnits * BigInt(platformFeeBps)) / BigInt(10_000);
+    const merchantUnits = baseUnits - platformFeeUnits;
+    return {
+        ...tool,
+        description: `${tool.description} [Requires Payment: $${options.price} USDC]`,
+        async handler(args, context) {
+            // Extract payment headers passed via MCP JSON-RPC request context
+            const headers = context?.requestHeaders || context?.headers || {};
+            const paymentSignature = headers["payment-signature"] || headers["PAYMENT-SIGNATURE"];
+            const targetUrl = context?.requestUrl || `mcp://tools/${tool.name}`;
+            // STEP 1: If no signature is provided, throw standard 402 challenge
+            if (!paymentSignature) {
+                const challengePayload = {
+                    code: 402,
+                    message: "HTTP 402 Payment Required",
+                    x402Challenge: {
+                        x402Version: 2,
+                        resource: {
+                            url: targetUrl,
+                            description: options.description || tool.description,
+                            mimeType: "application/json"
+                        },
+                        accepts: [
+                            {
+                                scheme: "exact",
+                                network,
+                                amount: merchantUnits.toString(),
+                                asset,
+                                payTo: options.payTo,
+                                maxTimeoutSeconds: nonceTtlSeconds,
+                                extra: {
+                                    platformFee: platformFeeUnits.toString(),
+                                    platformWallet: platformWallet
+                                }
+                            }
+                        ]
+                    }
+                };
+                throw new Error(JSON.stringify(challengePayload));
+            }
+            // STEP 2: Format Validation
+            if (paymentSignature.length < 10) {
+                throw new Error(JSON.stringify({ code: 400, message: "Invalid PAYMENT-SIGNATURE format" }));
+            }
+            // STEP 3: Nonce Check - Prevent Replay Attacks across MCP calls
+            const signatureHash = await hashSignature(paymentSignature);
+            const isUnique = await nonceStore.claim(signatureHash, nonceTtlSeconds);
+            if (!isUnique) {
+                throw new Error(JSON.stringify({
+                    code: 409,
+                    message: "Replay attack detected. PAYMENT-SIGNATURE has already been used."
+                }));
+            }
+            // STEP 4: Settle via Facilitator
+            try {
+                const controller = new AbortController();
+                const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+                let parsedPayload = {};
+                try {
+                    const decodedString = atob(paymentSignature);
+                    parsedPayload = JSON.parse(decodedString);
+                }
+                catch {
+                    await nonceStore.release(signatureHash);
+                    throw new Error(JSON.stringify({ code: 400, message: "Invalid base64 payload in PAYMENT-SIGNATURE" }));
+                }
+                const settleResponse = await fetch(`${facilitatorUrl}/settle`, {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    signal: controller.signal,
+                    body: JSON.stringify({
+                        paymentPayload: parsedPayload.paymentPayload || parsedPayload.payload,
+                        paymentRequirements: parsedPayload.paymentRequirements || {
+                            scheme: "exact",
+                            network,
+                            amount: merchantUnits.toString(),
+                            asset,
+                            payTo: options.payTo
+                        },
+                        resource: { url: targetUrl }
+                    })
+                });
+                clearTimeout(timeoutId);
+                const rawText = await settleResponse.text();
+                let settlement = {};
+                try {
+                    settlement = JSON.parse(rawText);
+                }
+                catch {
+                    await nonceStore.release(signatureHash);
+                    throw new Error(JSON.stringify({ code: 502, message: "Facilitator returned invalid non-JSON response" }));
+                }
+                if (!settleResponse.ok || !settlement.success) {
+                    await nonceStore.release(signatureHash);
+                    throw new Error(JSON.stringify({
+                        code: 402,
+                        message: "Payment verification failed",
+                        details: settlement.error
+                    }));
+                }
+                // STEP 5: Payment verified and settled -> Execute tool handler
+                const result = await tool.handler(args, context);
+                // Append settlement metadata to response if result is an object
+                if (typeof result === "object" && result !== null) {
+                    return {
+                        ...result,
+                        _x402Settlement: settlement
+                    };
+                }
+                return result;
+            }
+            catch (err) {
+                await nonceStore.release(signatureHash);
+                if (err.message?.startsWith("{")) {
+                    throw err;
+                }
+                const isTimeout = err.name === "AbortError";
+                throw new Error(JSON.stringify({
+                    code: 504,
+                    message: isTimeout ? "Facilitator settlement timed out" : "Facilitator network error during settlement",
+                    details: err.message
+                }));
+            }
+        }
+    };
+}

package/dist/monetize.d.ts

@@ -0,0 +1,38 @@
+import { Context, Next } from "hono";
+import { GuardOptions } from "./guard.js";
+export interface NonceStore {
+    claim(key: string, ttlSeconds: number): Promise<boolean>;
+    release(key: string): Promise<void>;
+}
+export declare class MemoryNonceStore implements NonceStore {
+    private cache;
+    claim(key: string, ttlSeconds: number): Promise<boolean>;
+    release(key: string): Promise<void>;
+    private cleanup;
+}
+export declare class RedisNonceStore implements NonceStore {
+    private redisClient;
+    private keyPrefix;
+    constructor(redisClient: {
+        set: (key: string, value: string, ...args: any[]) => Promise<any>;
+        del: (key: string) => Promise<any>;
+    }, keyPrefix?: string);
+    claim(key: string, ttlSeconds: number): Promise<boolean>;
+    release(key: string): Promise<void>;
+}
+export interface MonetizeOptions {
+    price: string;
+    payTo: string;
+    asset?: string;
+    network?: string;
+    platformFeeBps?: number;
+    platformWallet?: string;
+    facilitatorUrl?: string;
+    description?: string;
+    nonceStore?: NonceStore;
+    nonceTtlSeconds?: number;
+    timeoutMs?: number;
+    enableCorsHeaders?: boolean;
+    guard?: boolean | GuardOptions;
+}
+export declare function monetize(options: MonetizeOptions): (c: Context, next: Next) => Promise<void | Response>;

package/dist/monetize.js

@@ -0,0 +1,206 @@
+import { x402Guard } from "./guard.js";
+async function hashSignature(signature) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(signature);
+    const cryptoObj = globalThis.crypto;
+    if (!cryptoObj?.subtle) {
+        throw new Error("[Monetize] Web Crypto API (crypto.subtle) is unavailable in this environment.");
+    }
+    const hashBuffer = await cryptoObj.subtle.digest("SHA-256", data);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+export class MemoryNonceStore {
+    cache = new Map();
+    async claim(key, ttlSeconds) {
+        const now = Date.now();
+        const expiry = this.cache.get(key);
+        if (expiry !== undefined && expiry > now) {
+            return false;
+        }
+        this.cache.set(key, now + ttlSeconds * 1000);
+        this.cleanup(now);
+        return true;
+    }
+    async release(key) {
+        this.cache.delete(key);
+    }
+    cleanup(now) {
+        if (this.cache.size > 2_000) {
+            for (const [k, exp] of this.cache.entries()) {
+                if (exp <= now)
+                    this.cache.delete(k);
+            }
+        }
+    }
+}
+export class RedisNonceStore {
+    redisClient;
+    keyPrefix;
+    constructor(redisClient, keyPrefix = "x402:nonce:") {
+        this.redisClient = redisClient;
+        this.keyPrefix = keyPrefix;
+    }
+    async claim(key, ttlSeconds) {
+        const redisKey = `${this.keyPrefix}${key}`;
+        const result = await this.redisClient.set(redisKey, "1", "EX", ttlSeconds, "NX");
+        return result === "OK" || result === 1 || result === true;
+    }
+    async release(key) {
+        const redisKey = `${this.keyPrefix}${key}`;
+        await this.redisClient.del(redisKey);
+    }
+}
+const defaultMemoryStore = new MemoryNonceStore();
+const DEFAULT_USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+const DEFAULT_NETWORK = "eip155:8453";
+const DEFAULT_FACILITATOR = "https://warppay402.com";
+const DEFAULT_PLATFORM_WALLET = "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b";
+function toBase64(str) {
+    const bytes = new TextEncoder().encode(str);
+    let binary = "";
+    for (let i = 0; i < bytes.byteLength; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary);
+}
+function parseTokenUnits(priceStr) {
+    const normalized = String(priceStr).trim();
+    if (!normalized || isNaN(Number(normalized)) || Number(normalized) <= 0) {
+        throw new Error(`[Monetize] Invalid price option: "${priceStr}". Must be a positive decimal number.`);
+    }
+    const [whole, fraction = ""] = normalized.split(".");
+    const paddedFraction = fraction.padEnd(6, "0").slice(0, 6);
+    return BigInt(whole + paddedFraction);
+}
+export function monetize(options) {
+    if (!options.payTo || !options.payTo.startsWith("0x") || options.payTo.length !== 42) {
+        throw new Error("[Monetize] A valid 42-character EVM wallet address is required for 'payTo'.");
+    }
+    const asset = options.asset || DEFAULT_USDC_BASE;
+    const network = options.network || DEFAULT_NETWORK;
+    const facilitatorUrl = options.facilitatorUrl || DEFAULT_FACILITATOR;
+    const platformFeeBps = options.platformFeeBps ?? 50;
+    const platformWallet = options.platformWallet || DEFAULT_PLATFORM_WALLET;
+    const nonceStore = options.nonceStore || defaultMemoryStore;
+    const nonceTtlSeconds = options.nonceTtlSeconds ?? 300;
+    const timeoutMs = options.timeoutMs ?? 8000;
+    const enableCors = options.enableCorsHeaders ?? true;
+    if (platformFeeBps > 0 && (!platformWallet || !platformWallet.startsWith("0x") || platformWallet.length !== 42)) {
+        throw new Error("[Monetize] A valid EVM 'platformWallet' address is required when platformFeeBps > 0.");
+    }
+    const baseUnits = parseTokenUnits(options.price);
+    const platformFeeUnits = (baseUnits * BigInt(platformFeeBps)) / BigInt(10_000);
+    const merchantUnits = baseUnits - platformFeeUnits;
+    const guardMiddleware = options.guard
+        ? x402Guard(typeof options.guard === "object" ? options.guard : {})
+        : null;
+    return async (c, next) => {
+        if (guardMiddleware) {
+            let guardPassed = false;
+            const guardRes = await guardMiddleware(c, async () => {
+                guardPassed = true;
+            });
+            if (!guardPassed) {
+                return guardRes;
+            }
+        }
+        if (enableCors) {
+            c.header("Access-Control-Expose-Headers", "PAYMENT-REQUIRED, PAYMENT-RESPONSE");
+        }
+        const paymentSignature = c.req.header("payment-signature") || c.req.header("PAYMENT-SIGNATURE");
+        const targetUrl = c.req.url;
+        // STEP 1: Return HTTP 402 Challenge if signature is missing
+        if (!paymentSignature) {
+            const challengePayload = {
+                x402Version: 2,
+                resource: {
+                    url: targetUrl,
+                    description: options.description || "Monetized API Access",
+                    mimeType: "application/json"
+                },
+                accepts: [
+                    {
+                        scheme: "exact",
+                        network,
+                        amount: merchantUnits.toString(),
+                        asset,
+                        payTo: options.payTo,
+                        maxTimeoutSeconds: nonceTtlSeconds,
+                        extra: {
+                            platformFee: platformFeeUnits.toString(),
+                            platformWallet: platformWallet
+                        }
+                    }
+                ]
+            };
+            c.header("PAYMENT-REQUIRED", toBase64(JSON.stringify(challengePayload)));
+            return c.json({ error: "Payment required", x402: challengePayload }, 402);
+        }
+        // STEP 2: Signature format check
+        if (paymentSignature.length < 10) {
+            return c.json({ error: "Invalid PAYMENT-SIGNATURE format" }, 400);
+        }
+        // STEP 3: Nonce Claim
+        const signatureHash = await hashSignature(paymentSignature);
+        const isUnique = await nonceStore.claim(signatureHash, nonceTtlSeconds);
+        if (!isUnique) {
+            return c.json({
+                error: "Replay attack detected",
+                details: "This PAYMENT-SIGNATURE has already been processed or submitted."
+            }, 409);
+        }
+        // STEP 4: Verify & Settle via Facilitator
+        try {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+            let parsedPayload = {};
+            try {
+                const decodedString = atob(paymentSignature);
+                parsedPayload = JSON.parse(decodedString);
+            }
+            catch {
+                await nonceStore.release(signatureHash);
+                return c.json({ error: "Invalid base64 payload in PAYMENT-SIGNATURE" }, 400);
+            }
+            const settleResponse = await fetch(`${facilitatorUrl}/settle`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                signal: controller.signal,
+                body: JSON.stringify({
+                    signature: parsedPayload.signature || parsedPayload.paymentPayload?.signature,
+                    authorization: parsedPayload.authorization || parsedPayload.paymentPayload?.authorization,
+                    paymentPayload: parsedPayload,
+                    paymentRequirements: parsedPayload.paymentRequirements,
+                    resource: { url: targetUrl }
+                })
+            });
+            clearTimeout(timeoutId);
+            const rawText = await settleResponse.text();
+            let settlement = {};
+            try {
+                settlement = JSON.parse(rawText);
+            }
+            catch {
+                await nonceStore.release(signatureHash);
+                return c.json({ error: "Facilitator returned an invalid non-JSON response", status: settleResponse.status }, 502);
+            }
+            if (!settleResponse.ok || !settlement.success) {
+                await nonceStore.release(signatureHash);
+                c.header("PAYMENT-RESPONSE", toBase64(JSON.stringify({ success: false, error: settlement.error })));
+                return c.json({ error: "Payment verification failed", details: settlement.error }, 402);
+            }
+            // STEP 5: Success
+            c.header("PAYMENT-RESPONSE", toBase64(JSON.stringify(settlement)));
+            await next();
+        }
+        catch (err) {
+            await nonceStore.release(signatureHash);
+            const isTimeout = err.name === "AbortError";
+            return c.json({
+                error: isTimeout ? "Facilitator settlement timed out" : "Facilitator network error during settlement",
+                message: err.message
+            }, 504);
+        }
+    };
+}

package/dist/pay_client.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/pay_client.js

@@ -0,0 +1,94 @@
+import { createWalletClient, http } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { base } from "viem/chains";
+const PRIVATE_KEY = process.env.PRIVATE_KEY;
+if (!PRIVATE_KEY) {
+    console.error("Please set process.env.PRIVATE_KEY");
+    process.exit(1);
+}
+const account = privateKeyToAccount(PRIVATE_KEY);
+const walletClient = createWalletClient({
+    account,
+    chain: base,
+    transport: http("https://mainnet.base.org")
+});
+const API_URL = process.env.API_URL || "http://localhost:3000/api/weather";
+async function executeAgentPayment() {
+    console.log(`[Agent] Probing endpoint: ${API_URL}`);
+    // Step 1: Retrieve 402 challenge
+    const initialRes = await fetch(API_URL);
+    if (initialRes.status !== 402) {
+        console.log("[Agent] Endpoint did not request x402 payment.");
+        return;
+    }
+    const paymentRequiredHeader = initialRes.headers.get("PAYMENT-REQUIRED");
+    if (!paymentRequiredHeader) {
+        throw new Error("Missing PAYMENT-REQUIRED header from server");
+    }
+    const challenge = JSON.parse(atob(paymentRequiredHeader));
+    const requirement = challenge.accepts[0];
+    console.log(`[Agent] Payment required: $${Number(requirement.amount) / 1e6} USDC on Base`);
+    // Step 2: Sign EIP-712 payment authorization
+    const domain = {
+        name: "USD Coin",
+        version: "2",
+        chainId: 8453,
+        verifyingContract: requirement.asset
+    };
+    const types = {
+        TransferWithAuthorization: [
+            { name: "from", type: "address" },
+            { name: "to", type: "address" },
+            { name: "value", type: "uint256" },
+            { name: "validAfter", type: "uint256" },
+            { name: "validBefore", type: "uint256" },
+            { name: "nonce", type: "bytes32" }
+        ]
+    };
+    const now = Math.floor(Date.now() / 1000);
+    const nonce = `0x${Array.from(crypto.getRandomValues(new Uint8Array(32)))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("")}`;
+    const authorization = {
+        from: account.address,
+        to: requirement.payTo,
+        value: requirement.amount,
+        validAfter: (now - 60).toString(),
+        validBefore: (now + requirement.maxTimeoutSeconds).toString(),
+        nonce
+    };
+    const signatureHex = await walletClient.signTypedData({
+        domain,
+        types,
+        primaryType: "TransferWithAuthorization",
+        message: {
+            from: account.address,
+            to: requirement.payTo,
+            value: BigInt(requirement.amount),
+            validAfter: BigInt(now - 60),
+            validBefore: BigInt(now + requirement.maxTimeoutSeconds),
+            nonce
+        }
+    });
+    // Step 3: Construct root-level payment payload compatible with XPay relayer
+    const paymentSignaturePayload = JSON.stringify({
+        x402Version: 2,
+        scheme: "exact",
+        network: "eip155:8453",
+        signature: signatureHex,
+        authorization,
+        paymentRequirements: requirement
+    });
+    const encodedSignature = btoa(paymentSignaturePayload);
+    // Step 4: Resubmit with PAYMENT-SIGNATURE header
+    console.log("[Agent] Submitting signed authorization to server...");
+    const paidRes = await fetch(API_URL, {
+        headers: {
+            "PAYMENT-SIGNATURE": encodedSignature
+        }
+    });
+    const responseData = await paidRes.json();
+    console.log(`[Server Status]: ${paidRes.status}`);
+    console.log("[Server Payload]:", responseData);
+}
+executeAgentPayment().catch(console.error);

package/dist/server.d.ts

@@ -0,0 +1,4 @@
+import "dotenv/config";
+import { Hono } from "hono";
+declare const app: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export default app;

package/dist/server.js

@@ -0,0 +1,25 @@
+import "dotenv/config";
+import { serve } from "@hono/node-server";
+import { monetize } from "./monetize.js";
+import { Hono } from "hono";
+const app = new Hono();
+// Define the developer's wallet address (where 99.5% of funds go)
+const developerWallet = "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b";
+app.use("/api/weather", monetize({
+    price: "0.01",
+    payTo: developerWallet,
+    platformWallet: "0x2bd4e0ea72e21155ec41f8613eafd433193c4d8b",
+    platformFeeBps: 50,
+    facilitatorUrl: "https://warppay402.com"
+}));
+app.get("/api/weather", (c) => {
+    return c.json({
+        status: "success",
+        timestamp: new Date().toISOString(),
+        data: { city: "Austin", temperature: "78°F", condition: "Sunny" }
+    });
+});
+serve({ fetch: app.fetch, port: 3000 }, (info) => {
+    console.log(`[API Server] Running on http://localhost:${info.port}`);
+});
+export default app;

package/dist/tsconfig.tsbuildinfo

@@ -0,0 +1 @@
+{"version":"7.0.2","root":["../demo.ts","../facilitator.ts","../guard.ts","../index.ts","../mcpWrapper.ts","../monetize.ts","../pay_client.ts","../server.ts","../examples/basic-monetized-server.ts"],"packageJsons":["../node_modules/@hono/node-server/package.json","../node_modules/@noble/curves/esm/package.json","../node_modules/@noble/curves/package.json","../node_modules/@noble/hashes/esm/package.json","../node_modules/@noble/hashes/package.json","../node_modules/@scure/bip32/lib/esm/package.json","../node_modules/@scure/bip32/package.json","../node_modules/@scure/bip39/esm/package.json","../node_modules/@scure/bip39/package.json","../node_modules/@types/node/package.json","../node_modules/abitype/package.json","../node_modules/dotenv/package.json","../node_modules/eventemitter3/package.json","../node_modules/hono/dist/types/package.json","../node_modules/hono/package.json","../node_modules/ox/AbiFunction/package.json","../node_modules/ox/BlockOverrides/package.json","../node_modules/ox/Hex/package.json","../node_modules/ox/RpcResponse/package.json","../node_modules/ox/WebAuthnP256/package.json","../node_modules/ox/package.json","../node_modules/ox/tempo/KeyAuthorization/package.json","../node_modules/ox/tempo/MultisigConfig/package.json","../node_modules/ox/tempo/SignatureEnvelope/package.json","../node_modules/ox/tempo/TempoAddress/package.json","../node_modules/ox/tempo/TokenId/package.json","../node_modules/ox/tempo/TxEnvelopeTempo/package.json","../node_modules/ox/tempo/package.json","../node_modules/typescript/package.json","../node_modules/undici-types/package.json","../node_modules/viem/_types/package.json","../node_modules/viem/accounts/package.json","../node_modules/viem/chains/package.json","../node_modules/viem/package.json","../package.json"],"missingPackageJsons":["../node_modules/@hono/node-server/dist/package.json","../node_modules/@noble/curves/_shortw_utils/package.json","../node_modules/@noble/curves/abstract/bls/package.json","../node_modules/@noble/curves/abstract/edwards/package.json","../node_modules/@noble/curves/abstract/montgomery/package.json","../node_modules/@noble/curves/esm/abstract/package.json","../node_modules/@noble/hashes/utils/package.json","../node_modules/@scure/bip39/esm/wordlists/package.json","../node_modules/@scure/bip39/wordlists/czech/package.json","../node_modules/@scure/bip39/wordlists/english/package.json","../node_modules/@scure/bip39/wordlists/french/package.json","../node_modules/@scure/bip39/wordlists/italian/package.json","../node_modules/@scure/bip39/wordlists/japanese/package.json","../node_modules/@scure/bip39/wordlists/korean/package.json","../node_modules/@scure/bip39/wordlists/portuguese/package.json","../node_modules/@scure/bip39/wordlists/simplified-chinese/package.json","../node_modules/@scure/bip39/wordlists/spanish/package.json","../node_modules/@scure/bip39/wordlists/traditional-chinese/package.json","../node_modules/@types/assert/package.json","../node_modules/@types/assert/strict/package.json","../node_modules/@types/async_hooks/package.json","../node_modules/@types/buffer/package.json","../node_modules/@types/child_process/package.json","../node_modules/@types/cluster/package.json","../node_modules/@types/console/package.json","../node_modules/@types/constants/package.json","../node_modules/@types/crypto/package.json","../node_modules/@types/dgram/package.json","../node_modules/@types/diagnostics_channel/package.json","../node_modules/@types/dns/package.json","../node_modules/@types/dns/promises/package.json","../node_modules/@types/domain/package.json","../node_modules/@types/events/package.json","../node_modules/@types/fs/package.json","../node_modules/@types/fs/promises/package.json","../node_modules/@types/http/package.json","../node_modules/@types/http2/package.json","../node_modules/@types/https/package.json","../node_modules/@types/inspector/package.json","../node_modules/@types/inspector/promises/package.json","../node_modules/@types/module/package.json","../node_modules/@types/net/package.json","../node_modules/@types/node/assert/package.json","../node_modules/@types/node/dns/package.json","../node_modules/@types/node/fs/package.json","../node_modules/@types/node/inspector/package.json","../node_modules/@types/node/path/package.json","../node_modules/@types/node/readline/package.json","../node_modules/@types/node/stream/package.json","../node_modules/@types/node/test/package.json","../node_modules/@types/node/timers/package.json","../node_modules/@types/node/util/package.json","../node_modules/@types/node/web-globals/package.json","../node_modules/@types/node/zlib/package.json","../node_modules/@types/os/package.json","../node_modules/@types/path/package.json","../node_modules/@types/path/posix/package.json","../node_modules/@types/path/win32/package.json","../node_modules/@types/perf_hooks/package.json","../node_modules/@types/process/package.json","../node_modules/@types/punycode/package.json","../node_modules/@types/querystring/package.json","../node_modules/@types/readline/package.json","../node_modules/@types/readline/promises/package.json","../node_modules/@types/repl/package.json","../node_modules/@types/stream/consumers/package.json","../node_modules/@types/stream/iter/package.json","../node_modules/@types/stream/package.json","../node_modules/@types/stream/promises/package.json","../node_modules/@types/stream/web/package.json","../node_modules/@types/string_decoder/package.json","../node_modules/@types/timers/package.json","../node_modules/@types/timers/promises/package.json","../node_modules/@types/tls/package.json","../node_modules/@types/trace_events/package.json","../node_modules/@types/tty/package.json","../node_modules/@types/url/package.json","../node_modules/@types/util/package.json","../node_modules/@types/util/types/package.json","../node_modules/@types/v8/package.json","../node_modules/@types/vm/package.json","../node_modules/@types/wasi/package.json","../node_modules/@types/worker_threads/package.json","../node_modules/@types/zlib/package.json","../node_modules/abitype/dist/package.json","../node_modules/abitype/dist/types/exports/package.json","../node_modules/abitype/dist/types/human-readable/errors/package.json","../node_modules/abitype/dist/types/human-readable/package.json","../node_modules/abitype/dist/types/human-readable/types/package.json","../node_modules/abitype/dist/types/package.json","../node_modules/assert/package.json","../node_modules/assert/strict/package.json","../node_modules/async_hooks/package.json","../node_modules/buffer/package.json","../node_modules/child_process/package.json","../node_modules/cluster/package.json","../node_modules/console/package.json","../node_modules/constants/package.json","../node_modules/crypto/package.json","../node_modules/dgram/package.json","../node_modules/diagnostics_channel/package.json","../node_modules/dns/package.json","../node_modules/dns/promises/package.json","../node_modules/domain/package.json","../node_modules/dotenv/config/package.json","../node_modules/events/package.json","../node_modules/fs/package.json","../node_modules/fs/promises/package.json","../node_modules/hono/dist/types/client/package.json","../node_modules/hono/dist/types/helper/package.json","../node_modules/hono/dist/types/helper/websocket/package.json","../node_modules/hono/dist/types/request/package.json","../node_modules/hono/dist/types/utils/package.json","../node_modules/hono/ws/package.json","../node_modules/http/package.json","../node_modules/http2/package.json","../node_modules/https/package.json","../node_modules/inspector/package.json","../node_modules/inspector/promises/package.json","../node_modules/module/package.json","../node_modules/net/package.json","../node_modules/os/package.json","../node_modules/ox/_types/core/internal/mnemonic/package.json","../node_modules/ox/_types/core/internal/package.json","../node_modules/ox/_types/core/internal/rpcSchemas/package.json","../node_modules/ox/_types/core/package.json","../node_modules/ox/_types/package.json","../node_modules/ox/_types/tempo/package.json","../node_modules/ox/_types/webauthn/package.json","../node_modules/path/package.json","../node_modules/path/posix/package.json","../node_modules/path/win32/package.json","../node_modules/perf_hooks/package.json","../node_modules/process/package.json","../node_modules/punycode/package.json","../node_modules/querystring/package.json","../node_modules/readline/package.json","../node_modules/readline/promises/package.json","../node_modules/repl/package.json","../node_modules/stream/consumers/package.json","../node_modules/stream/iter/package.json","../node_modules/stream/package.json","../node_modules/stream/promises/package.json","../node_modules/stream/web/package.json","../node_modules/string_decoder/package.json","../node_modules/timers/package.json","../node_modules/timers/promises/package.json","../node_modules/tls/package.json","../node_modules/trace_events/package.json","../node_modules/tty/package.json","../node_modules/url/package.json","../node_modules/util/package.json","../node_modules/util/types/package.json","../node_modules/v8/package.json","../node_modules/viem/_types/account-abstraction/accounts/package.json","../node_modules/viem/_types/account-abstraction/package.json","../node_modules/viem/_types/account-abstraction/types/package.json","../node_modules/viem/_types/accounts/package.json","../node_modules/viem/_types/accounts/utils/package.json","../node_modules/viem/_types/actions/ens/package.json","../node_modules/viem/_types/actions/package.json","../node_modules/viem/_types/actions/public/package.json","../node_modules/viem/_types/actions/siwe/package.json","../node_modules/viem/_types/actions/test/package.json","../node_modules/viem/_types/actions/token/package.json","../node_modules/viem/_types/actions/wallet/package.json","../node_modules/viem/_types/celo/package.json","../node_modules/viem/_types/chains/definitions/package.json","../node_modules/viem/_types/chains/definitions/skale/package.json","../node_modules/viem/_types/chains/package.json","../node_modules/viem/_types/clients/decorators/package.json","../node_modules/viem/_types/clients/package.json","../node_modules/viem/_types/clients/transports/package.json","../node_modules/viem/_types/constants/package.json","../node_modules/viem/_types/errors/package.json","../node_modules/viem/_types/experimental/erc7895/actions/package.json","../node_modules/viem/_types/experimental/erc7895/package.json","../node_modules/viem/_types/experimental/package.json","../node_modules/viem/_types/op-stack/package.json","../node_modules/viem/_types/op-stack/types/package.json","../node_modules/viem/_types/tempo/package.json","../node_modules/viem/_types/tokens/package.json","../node_modules/viem/_types/types/package.json","../node_modules/viem/_types/utils/abi/package.json","../node_modules/viem/_types/utils/address/package.json","../node_modules/viem/_types/utils/authorization/package.json","../node_modules/viem/_types/utils/blob/package.json","../node_modules/viem/_types/utils/block/package.json","../node_modules/viem/_types/utils/chain/package.json","../node_modules/viem/_types/utils/data/package.json","../node_modules/viem/_types/utils/encoding/package.json","../node_modules/viem/_types/utils/ens/avatar/package.json","../node_modules/viem/_types/utils/ens/package.json","../node_modules/viem/_types/utils/errors/package.json","../node_modules/viem/_types/utils/formatters/package.json","../node_modules/viem/_types/utils/hash/package.json","../node_modules/viem/_types/utils/kzg/package.json","../node_modules/viem/_types/utils/package.json","../node_modules/viem/_types/utils/promise/package.json","../node_modules/viem/_types/utils/rpc/package.json","../node_modules/viem/_types/utils/signature/package.json","../node_modules/viem/_types/utils/siwe/package.json","../node_modules/viem/_types/utils/transaction/package.json","../node_modules/viem/_types/utils/unit/package.json","../node_modules/viem/_types/zksync/accounts/package.json","../node_modules/viem/_types/zksync/actions/package.json","../node_modules/viem/_types/zksync/constants/package.json","../node_modules/viem/_types/zksync/decorators/package.json","../node_modules/viem/_types/zksync/errors/package.json","../node_modules/viem/_types/zksync/package.json","../node_modules/viem/_types/zksync/types/package.json","../node_modules/viem/_types/zksync/utils/abi/package.json","../node_modules/viem/_types/zksync/utils/bridge/package.json","../node_modules/viem/_types/zksync/utils/package.json","../node_modules/viem/_types/zksync/utils/paymaster/package.json","../node_modules/vm/package.json","../node_modules/wasi/package.json","../node_modules/worker_threads/package.json","../node_modules/zlib/package.json","../node_modules/zod/package.json"]}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@warppay402/server",
+  "version": "1.0.0",
+  "description": "Instant MCP Tool & x402 Monetization SDK for Cloudflare Gateway and Base",
+  "homepage": "https://www.warppay402.com",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "license": "MIT",
+  "keywords": [
+    "x402",
+    "mcp",
+    "monetization",
+    "base",
+    "usdc",
+    "hono",
+    "ai-agents",
+    "warppay402"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/golfgolfgolf200/warppay402-server.git"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "prepare": "npm run build",
+    "test": "vitest run",
+    "example": "tsx examples/basic-monetized-server.ts"
+  },
+  "dependencies": {
+    "@hono/node-server": "^2.1.0",
+    "@xpaysh/x402": "^0.1.2",
+    "dotenv": "^17.4.2",
+    "hono": "^4.13.0",
+    "viem": "^2.55.17"
+  },
+  "devDependencies": {
+    "@types/node": "^26.2.0",
+    "tsx": "^4.23.9",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
+  }
+}