@weftlabs/sdk 0.25.0

package/dist/facilitator/index.js

@@ -0,0 +1,180 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/facilitator/index.ts
+var facilitator_exports = {};
+__export(facilitator_exports, {
+  X402_FACILITATOR_URL: () => X402_FACILITATOR_URL,
+  createFacilitatorClient: () => createFacilitatorClient,
+  getFeeInfo: () => getFeeInfo,
+  invalidateFeeCache: () => invalidateFeeCache
+});
+module.exports = __toCommonJS(facilitator_exports);
+__reExport(facilitator_exports, require("@x402/core"), module.exports);
+__reExport(facilitator_exports, require("@x402/core/types"), module.exports);
+
+// src/facilitator/client.ts
+var import_server = require("@x402/core/server");
+var FACILITATOR_UNAVAILABLE_ERROR = "weft:facilitator-settle-unavailable";
+var X402_FACILITATOR_URL = "https://x402.weft.network";
+var X402_FACILITATOR_URL_ENV = "X402_FACILITATOR_URL";
+var FacilitatorUnavailableError = class extends Error {
+  constructor() {
+    super(FACILITATOR_UNAVAILABLE_ERROR);
+    this.statusCode = 503;
+    this.name = "FacilitatorUnavailableError";
+  }
+};
+function isUnavailableSettleError(error) {
+  if (!(error instanceof Error)) return false;
+  const candidate = error;
+  return candidate.name === "SettleError" && candidate.statusCode === 503 && "errorReason" in candidate && "errorMessage" in candidate && "payer" in candidate && "transaction" in candidate && "network" in candidate && !(candidate.errorReason === "settlement_pending" && candidate.transaction);
+}
+var WeftHTTPFacilitatorClient = class extends import_server.HTTPFacilitatorClient {
+  async settle(paymentPayload, paymentRequirements) {
+    try {
+      return await super.settle(paymentPayload, paymentRequirements);
+    } catch (error) {
+      if (isUnavailableSettleError(error)) {
+        throw new FacilitatorUnavailableError();
+      }
+      throw error;
+    }
+  }
+};
+function validateUrl(url) {
+  if (!url || url.trim() === "") {
+    throw new Error("Invalid URL: URL cannot be empty");
+  }
+  if (!url.startsWith("http://") && !url.startsWith("https://")) {
+    throw new Error(
+      `Invalid URL format: URL must start with http:// or https://, got: ${url}`
+    );
+  }
+}
+function resolveUrl(config) {
+  if (config?.url) {
+    return config.url;
+  }
+  if (typeof process !== "undefined" && process.env?.[X402_FACILITATOR_URL_ENV]) {
+    return process.env[X402_FACILITATOR_URL_ENV];
+  }
+  return X402_FACILITATOR_URL;
+}
+function assertPathKeyedAuthHeaders(headers) {
+  const isHeaderObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+  const hasPathKey = ["verify", "settle", "supported", "bazaar"].some(
+    (key) => isHeaderObject(headers[key])
+  );
+  const looksFlat = !hasPathKey && Object.values(headers).some((value) => !isHeaderObject(value));
+  if (looksFlat) {
+    throw new Error(
+      'createAuthHeaders must return an object keyed by facilitator path, e.g. { verify: { Authorization: "..." }, settle: { ... }, supported: { ... } }, but received a flat headers object.'
+    );
+  }
+}
+function mergeSellerWins(derived, seller) {
+  const merged = { ...derived };
+  for (const [name, value] of Object.entries(seller ?? {})) {
+    for (const existing of Object.keys(merged)) {
+      if (existing.toLowerCase() === name.toLowerCase()) {
+        delete merged[existing];
+      }
+    }
+    merged[name] = value;
+  }
+  return merged;
+}
+function createFacilitatorClient(config, weftAuthHeaders) {
+  const url = resolveUrl(config);
+  validateUrl(url);
+  const sellerCreateAuthHeaders = config?.createAuthHeaders;
+  const derivedByPath = Object.entries(weftAuthHeaders ?? {}).filter(
+    ([, headers]) => headers !== void 0 && Object.keys(headers).length > 0
+  );
+  const createAuthHeaders = derivedByPath.length > 0 ? async () => {
+    const sellerHeaders = sellerCreateAuthHeaders ? await sellerCreateAuthHeaders() : void 0;
+    if (sellerHeaders) {
+      assertPathKeyedAuthHeaders(sellerHeaders);
+    }
+    const merged = { ...sellerHeaders };
+    for (const [path, derived] of derivedByPath) {
+      merged[path] = mergeSellerWins(derived, sellerHeaders?.[path]);
+    }
+    return merged;
+  } : sellerCreateAuthHeaders;
+  return new WeftHTTPFacilitatorClient({
+    url,
+    createAuthHeaders
+  });
+}
+
+// src/facilitator/fee.ts
+var DEFAULT_CACHE_TTL = 5 * 60 * 1e3;
+var feeCache = null;
+function invalidateFeeCache() {
+  feeCache = null;
+}
+function isCacheValid() {
+  if (!feeCache) return false;
+  const now = Date.now();
+  return now - feeCache.fetchedAt < feeCache.ttl;
+}
+async function getFeeInfo(config, cacheConfig) {
+  if (isCacheValid() && feeCache) {
+    return feeCache.feeInfo;
+  }
+  const client = createFacilitatorClient(config);
+  const supported = await client.getSupported();
+  const fee = supported.fee;
+  if (!fee) {
+    throw new Error("Fee information not found in /supported response");
+  }
+  if (typeof fee.amount !== "string") {
+    throw new Error("Invalid fee structure: amount must be a string");
+  }
+  if (typeof fee.asset !== "string") {
+    throw new Error("Invalid fee structure: asset must be a string");
+  }
+  if (typeof fee.network !== "string") {
+    throw new Error("Invalid fee structure: network must be a string");
+  }
+  const feeInfo = {
+    amount: fee.amount,
+    asset: fee.asset,
+    network: fee.network
+  };
+  feeCache = {
+    feeInfo,
+    fetchedAt: Date.now(),
+    ttl: cacheConfig?.ttl ?? DEFAULT_CACHE_TTL
+  };
+  return feeInfo;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  X402_FACILITATOR_URL,
+  createFacilitatorClient,
+  getFeeInfo,
+  invalidateFeeCache,
+  ...require("@x402/core"),
+  ...require("@x402/core/types")
+});
+//# sourceMappingURL=index.js.map

package/dist/facilitator/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/facilitator/index.ts","../../src/facilitator/client.ts","../../src/facilitator/fee.ts"],"sourcesContent":["export * from \"@x402/core\";\nexport * from \"@x402/core/types\";\n\nexport { X402_FACILITATOR_URL, createFacilitatorClient } from \"./client\";\nexport type { WeftFacilitatorConfig } from \"./client\";\n\nexport { getFeeInfo, invalidateFeeCache } from \"./fee\";\nexport type { FeeInfo, FeeCacheConfig } from \"./fee\";\n","import { HTTPFacilitatorClient, FacilitatorConfig } from \"@x402/core/server\";\nimport type {\n  PaymentPayload,\n  PaymentRequirements,\n  SettleResponse,\n} from \"@x402/core/types\";\n\nexport const FACILITATOR_UNAVAILABLE_ERROR =\n  \"weft:facilitator-settle-unavailable\";\n\nexport const X402_FACILITATOR_URL = \"https://x402.weft.network\";\nexport const X402_FACILITATOR_URL_ENV = \"X402_FACILITATOR_URL\";\n\nexport interface WeftFacilitatorConfig {\n  url?: string;\n  createAuthHeaders?: FacilitatorConfig[\"createAuthHeaders\"];\n}\n\nclass FacilitatorUnavailableError extends Error {\n  readonly statusCode = 503;\n\n  constructor() {\n    super(FACILITATOR_UNAVAILABLE_ERROR);\n    this.name = \"FacilitatorUnavailableError\";\n  }\n}\n\nfunction isUnavailableSettleError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  const candidate = error as Error & Record<string, unknown>;\n  return (\n    candidate.name === \"SettleError\" &&\n    candidate.statusCode === 503 &&\n    \"errorReason\" in candidate &&\n    \"errorMessage\" in candidate &&\n    \"payer\" in candidate &&\n    \"transaction\" in candidate &&\n    \"network\" in candidate &&\n    !(candidate.errorReason === \"settlement_pending\" && candidate.transaction)\n  );\n}\n\nclass WeftHTTPFacilitatorClient extends HTTPFacilitatorClient {\n  override async settle(\n    paymentPayload: PaymentPayload,\n    paymentRequirements: PaymentRequirements,\n  ): Promise<SettleResponse> {\n    try {\n      return await super.settle(paymentPayload, paymentRequirements);\n    } catch (error) {\n      if (isUnavailableSettleError(error)) {\n        throw new FacilitatorUnavailableError();\n      }\n      throw error;\n    }\n  }\n}\n\nexport function validateUrl(url: string): void {\n  if (!url || url.trim() === \"\") {\n    throw new Error(\"Invalid URL: URL cannot be empty\");\n  }\n\n  if (!url.startsWith(\"http://\") && !url.startsWith(\"https://\")) {\n    throw new Error(\n      `Invalid URL format: URL must start with http:// or https://, got: ${url}`,\n    );\n  }\n}\n\nexport function resolveUrl(config?: WeftFacilitatorConfig): string {\n  if (config?.url) {\n    return config.url;\n  }\n\n  if (\n    typeof process !== \"undefined\" &&\n    process.env?.[X402_FACILITATOR_URL_ENV]\n  ) {\n    return process.env[X402_FACILITATOR_URL_ENV]!;\n  }\n\n  return X402_FACILITATOR_URL;\n}\n\ntype AuthHeadersByPath = Awaited<\n  ReturnType<NonNullable<FacilitatorConfig[\"createAuthHeaders\"]>>\n>;\n\n/**\n * Reject a flat headers object the way `@x402/core` itself would.\n *\n * Upstream's `HTTPFacilitatorClient` throws when `createAuthHeaders` returns\n * `{ Authorization: ... }` instead of `{ supported: { Authorization: ... } }`,\n * because silently dropping auth on every request is worse than failing loud.\n * Merging the handshake's own `supported` headers in would mask that check —\n * the merged object always has a path key — so the check runs here first,\n * with the same failure mode a misconfigured seller sees today.\n *\n * @param headers - What the seller's `createAuthHeaders` returned\n */\nfunction assertPathKeyedAuthHeaders(headers: AuthHeadersByPath): void {\n  const isHeaderObject = (value: unknown): boolean =>\n    typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n  const hasPathKey = [\"verify\", \"settle\", \"supported\", \"bazaar\"].some((key) =>\n    isHeaderObject(headers[key as keyof AuthHeadersByPath]),\n  );\n  const looksFlat =\n    !hasPathKey &&\n    Object.values(headers).some((value) => !isHeaderObject(value));\n\n  if (looksFlat) {\n    throw new Error(\n      \"createAuthHeaders must return an object keyed by facilitator path, \" +\n        'e.g. { verify: { Authorization: \"...\" }, settle: { ... }, ' +\n        \"supported: { ... } }, but received a flat headers object.\",\n    );\n  }\n}\n\n/**\n * Merge SDK-derived headers under a seller's, case-insensitively, seller wins.\n *\n * Header names are case-insensitive, but object keys are not: a plain spread\n * would keep a derived `Authorization` and a seller `authorization` as two\n * keys, and the HTTP layer folds those into one comma-joined value — a\n * garbled credential. So a seller header replaces any derived header of the\n * same name whatever its case, and the seller's spelling is the one sent.\n *\n * @param derived - Headers the SDK derived from config for one path\n * @param seller - The seller's own headers for that path, if any\n * @returns The merged headers, the seller's winning on conflict\n */\nfunction mergeSellerWins(\n  derived: Record<string, string>,\n  seller: Record<string, string> | undefined,\n): Record<string, string> {\n  const merged: Record<string, string> = { ...derived };\n  for (const [name, value] of Object.entries(seller ?? {})) {\n    for (const existing of Object.keys(merged)) {\n      if (existing.toLowerCase() === name.toLowerCase()) {\n        delete merged[existing];\n      }\n    }\n    merged[name] = value;\n  }\n  return merged;\n}\n\nexport function createFacilitatorClient(\n  config?: WeftFacilitatorConfig,\n  weftAuthHeaders?: AuthHeadersByPath,\n): HTTPFacilitatorClient {\n  const url = resolveUrl(config);\n  validateUrl(url);\n\n  const sellerCreateAuthHeaders = config?.createAuthHeaders;\n\n  // Only the paths the SDK actually derived headers for — `supported` always,\n  // `settle` and `verify` when an apiKey was configured. Empty paths are\n  // dropped so a caller with no derived headers is byte-identical to passing\n  // none.\n  const derivedByPath = Object.entries(weftAuthHeaders ?? {}).filter(\n    ([, headers]) => headers !== undefined && Object.keys(headers).length > 0,\n  ) as Array<[keyof AuthHeadersByPath, Record<string, string>]>;\n\n  const createAuthHeaders =\n    derivedByPath.length > 0\n      ? async (): Promise<AuthHeadersByPath> => {\n          const sellerHeaders = sellerCreateAuthHeaders\n            ? await sellerCreateAuthHeaders()\n            : undefined;\n          if (sellerHeaders) {\n            assertPathKeyedAuthHeaders(sellerHeaders);\n          }\n          // The seller's own headers win on conflict: an explicit\n          // createAuthHeaders is a more deliberate act than `apiKey`.\n          const merged: AuthHeadersByPath = { ...sellerHeaders };\n          for (const [path, derived] of derivedByPath) {\n            merged[path] = mergeSellerWins(derived, sellerHeaders?.[path]);\n          }\n          return merged;\n        }\n      : sellerCreateAuthHeaders;\n\n  return new WeftHTTPFacilitatorClient({\n    url,\n    createAuthHeaders,\n  });\n}\n","import { createFacilitatorClient, WeftFacilitatorConfig } from \"./client\";\n\nexport interface FeeInfo {\n  amount: string;\n  asset: string;\n  network: string;\n}\n\nexport interface FeeCacheConfig {\n  ttl?: number;\n}\n\ninterface FeeCache {\n  feeInfo: FeeInfo;\n  fetchedAt: number;\n  ttl: number;\n}\n\nconst DEFAULT_CACHE_TTL = 5 * 60 * 1000;\n\nlet feeCache: FeeCache | null = null;\n\nexport function invalidateFeeCache(): void {\n  feeCache = null;\n}\n\nfunction isCacheValid(): boolean {\n  if (!feeCache) return false;\n  const now = Date.now();\n  return now - feeCache.fetchedAt < feeCache.ttl;\n}\n\nexport async function getFeeInfo(\n  config?: WeftFacilitatorConfig,\n  cacheConfig?: FeeCacheConfig,\n): Promise<FeeInfo> {\n  if (isCacheValid() && feeCache) {\n    return feeCache.feeInfo;\n  }\n\n  const client = createFacilitatorClient(config);\n  const supported = await client.getSupported();\n\n  const fee = (supported as { fee?: FeeInfo }).fee;\n  if (!fee) {\n    throw new Error(\"Fee information not found in /supported response\");\n  }\n\n  if (typeof fee.amount !== \"string\") {\n    throw new Error(\"Invalid fee structure: amount must be a string\");\n  }\n  if (typeof fee.asset !== \"string\") {\n    throw new Error(\"Invalid fee structure: asset must be a string\");\n  }\n  if (typeof fee.network !== \"string\") {\n    throw new Error(\"Invalid fee structure: network must be a string\");\n  }\n\n  const feeInfo: FeeInfo = {\n    amount: fee.amount,\n    asset: fee.asset,\n    network: fee.network,\n  };\n\n  feeCache = {\n    feeInfo,\n    fetchedAt: Date.now(),\n    ttl: cacheConfig?.ttl ?? DEFAULT_CACHE_TTL,\n  };\n\n  return feeInfo;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gCAAc,uBAAd;AACA,gCAAc,6BADd;;;ACAA,oBAAyD;AAOlD,IAAM,gCACX;AAEK,IAAM,uBAAuB;AAC7B,IAAM,2BAA2B;AAOxC,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAG9C,cAAc;AACZ,UAAM,6BAA6B;AAHrC,SAAS,aAAa;AAIpB,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,yBAAyB,OAAyB;AACzD,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,QAAM,YAAY;AAClB,SACE,UAAU,SAAS,iBACnB,UAAU,eAAe,OACzB,iBAAiB,aACjB,kBAAkB,aAClB,WAAW,aACX,iBAAiB,aACjB,aAAa,aACb,EAAE,UAAU,gBAAgB,wBAAwB,UAAU;AAElE;AAEA,IAAM,4BAAN,cAAwC,oCAAsB;AAAA,EAC5D,MAAe,OACb,gBACA,qBACyB;AACzB,QAAI;AACF,aAAO,MAAM,MAAM,OAAO,gBAAgB,mBAAmB;AAAA,IAC/D,SAAS,OAAO;AACd,UAAI,yBAAyB,KAAK,GAAG;AACnC,cAAM,IAAI,4BAA4B;AAAA,MACxC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,YAAY,KAAmB;AAC7C,MAAI,CAAC,OAAO,IAAI,KAAK,MAAM,IAAI;AAC7B,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,MAAI,CAAC,IAAI,WAAW,SAAS,KAAK,CAAC,IAAI,WAAW,UAAU,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,qEAAqE,GAAG;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,WAAW,QAAwC;AACjE,MAAI,QAAQ,KAAK;AACf,WAAO,OAAO;AAAA,EAChB;AAEA,MACE,OAAO,YAAY,eACnB,QAAQ,MAAM,wBAAwB,GACtC;AACA,WAAO,QAAQ,IAAI,wBAAwB;AAAA,EAC7C;AAEA,SAAO;AACT;AAkBA,SAAS,2BAA2B,SAAkC;AACpE,QAAM,iBAAiB,CAAC,UACtB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,QAAM,aAAa,CAAC,UAAU,UAAU,aAAa,QAAQ,EAAE;AAAA,IAAK,CAAC,QACnE,eAAe,QAAQ,GAA8B,CAAC;AAAA,EACxD;AACA,QAAM,YACJ,CAAC,cACD,OAAO,OAAO,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,eAAe,KAAK,CAAC;AAE/D,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AACF;AAeA,SAAS,gBACP,SACA,QACwB;AACxB,QAAM,SAAiC,EAAE,GAAG,QAAQ;AACpD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,UAAU,CAAC,CAAC,GAAG;AACxD,eAAW,YAAY,OAAO,KAAK,MAAM,GAAG;AAC1C,UAAI,SAAS,YAAY,MAAM,KAAK,YAAY,GAAG;AACjD,eAAO,OAAO,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,WAAO,IAAI,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,wBACd,QACA,iBACuB;AACvB,QAAM,MAAM,WAAW,MAAM;AAC7B,cAAY,GAAG;AAEf,QAAM,0BAA0B,QAAQ;AAMxC,QAAM,gBAAgB,OAAO,QAAQ,mBAAmB,CAAC,CAAC,EAAE;AAAA,IAC1D,CAAC,CAAC,EAAE,OAAO,MAAM,YAAY,UAAa,OAAO,KAAK,OAAO,EAAE,SAAS;AAAA,EAC1E;AAEA,QAAM,oBACJ,cAAc,SAAS,IACnB,YAAwC;AACtC,UAAM,gBAAgB,0BAClB,MAAM,wBAAwB,IAC9B;AACJ,QAAI,eAAe;AACjB,iCAA2B,aAAa;AAAA,IAC1C;AAGA,UAAM,SAA4B,EAAE,GAAG,cAAc;AACrD,eAAW,CAAC,MAAM,OAAO,KAAK,eAAe;AAC3C,aAAO,IAAI,IAAI,gBAAgB,SAAS,gBAAgB,IAAI,CAAC;AAAA,IAC/D;AACA,WAAO;AAAA,EACT,IACA;AAEN,SAAO,IAAI,0BAA0B;AAAA,IACnC;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AC5KA,IAAM,oBAAoB,IAAI,KAAK;AAEnC,IAAI,WAA4B;AAEzB,SAAS,qBAA2B;AACzC,aAAW;AACb;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,MAAM,KAAK,IAAI;AACrB,SAAO,MAAM,SAAS,YAAY,SAAS;AAC7C;AAEA,eAAsB,WACpB,QACA,aACkB;AAClB,MAAI,aAAa,KAAK,UAAU;AAC9B,WAAO,SAAS;AAAA,EAClB;AAEA,QAAM,SAAS,wBAAwB,MAAM;AAC7C,QAAM,YAAY,MAAM,OAAO,aAAa;AAE5C,QAAM,MAAO,UAAgC;AAC7C,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,MAAI,OAAO,IAAI,WAAW,UAAU;AAClC,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,OAAO,IAAI,UAAU,UAAU;AACjC,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,OAAO,IAAI,YAAY,UAAU;AACnC,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,QAAM,UAAmB;AAAA,IACvB,QAAQ,IAAI;AAAA,IACZ,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,EACf;AAEA,aAAW;AAAA,IACT;AAAA,IACA,WAAW,KAAK,IAAI;AAAA,IACpB,KAAK,aAAa,OAAO;AAAA,EAC3B;AAEA,SAAO;AACT;","names":[]}

package/dist/facilitator/index.mjs

@@ -0,0 +1,149 @@
+// src/facilitator/index.ts
+export * from "@x402/core";
+export * from "@x402/core/types";
+
+// src/facilitator/client.ts
+import { HTTPFacilitatorClient } from "@x402/core/server";
+var FACILITATOR_UNAVAILABLE_ERROR = "weft:facilitator-settle-unavailable";
+var X402_FACILITATOR_URL = "https://x402.weft.network";
+var X402_FACILITATOR_URL_ENV = "X402_FACILITATOR_URL";
+var FacilitatorUnavailableError = class extends Error {
+  constructor() {
+    super(FACILITATOR_UNAVAILABLE_ERROR);
+    this.statusCode = 503;
+    this.name = "FacilitatorUnavailableError";
+  }
+};
+function isUnavailableSettleError(error) {
+  if (!(error instanceof Error)) return false;
+  const candidate = error;
+  return candidate.name === "SettleError" && candidate.statusCode === 503 && "errorReason" in candidate && "errorMessage" in candidate && "payer" in candidate && "transaction" in candidate && "network" in candidate && !(candidate.errorReason === "settlement_pending" && candidate.transaction);
+}
+var WeftHTTPFacilitatorClient = class extends HTTPFacilitatorClient {
+  async settle(paymentPayload, paymentRequirements) {
+    try {
+      return await super.settle(paymentPayload, paymentRequirements);
+    } catch (error) {
+      if (isUnavailableSettleError(error)) {
+        throw new FacilitatorUnavailableError();
+      }
+      throw error;
+    }
+  }
+};
+function validateUrl(url) {
+  if (!url || url.trim() === "") {
+    throw new Error("Invalid URL: URL cannot be empty");
+  }
+  if (!url.startsWith("http://") && !url.startsWith("https://")) {
+    throw new Error(
+      `Invalid URL format: URL must start with http:// or https://, got: ${url}`
+    );
+  }
+}
+function resolveUrl(config) {
+  if (config?.url) {
+    return config.url;
+  }
+  if (typeof process !== "undefined" && process.env?.[X402_FACILITATOR_URL_ENV]) {
+    return process.env[X402_FACILITATOR_URL_ENV];
+  }
+  return X402_FACILITATOR_URL;
+}
+function assertPathKeyedAuthHeaders(headers) {
+  const isHeaderObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+  const hasPathKey = ["verify", "settle", "supported", "bazaar"].some(
+    (key) => isHeaderObject(headers[key])
+  );
+  const looksFlat = !hasPathKey && Object.values(headers).some((value) => !isHeaderObject(value));
+  if (looksFlat) {
+    throw new Error(
+      'createAuthHeaders must return an object keyed by facilitator path, e.g. { verify: { Authorization: "..." }, settle: { ... }, supported: { ... } }, but received a flat headers object.'
+    );
+  }
+}
+function mergeSellerWins(derived, seller) {
+  const merged = { ...derived };
+  for (const [name, value] of Object.entries(seller ?? {})) {
+    for (const existing of Object.keys(merged)) {
+      if (existing.toLowerCase() === name.toLowerCase()) {
+        delete merged[existing];
+      }
+    }
+    merged[name] = value;
+  }
+  return merged;
+}
+function createFacilitatorClient(config, weftAuthHeaders) {
+  const url = resolveUrl(config);
+  validateUrl(url);
+  const sellerCreateAuthHeaders = config?.createAuthHeaders;
+  const derivedByPath = Object.entries(weftAuthHeaders ?? {}).filter(
+    ([, headers]) => headers !== void 0 && Object.keys(headers).length > 0
+  );
+  const createAuthHeaders = derivedByPath.length > 0 ? async () => {
+    const sellerHeaders = sellerCreateAuthHeaders ? await sellerCreateAuthHeaders() : void 0;
+    if (sellerHeaders) {
+      assertPathKeyedAuthHeaders(sellerHeaders);
+    }
+    const merged = { ...sellerHeaders };
+    for (const [path, derived] of derivedByPath) {
+      merged[path] = mergeSellerWins(derived, sellerHeaders?.[path]);
+    }
+    return merged;
+  } : sellerCreateAuthHeaders;
+  return new WeftHTTPFacilitatorClient({
+    url,
+    createAuthHeaders
+  });
+}
+
+// src/facilitator/fee.ts
+var DEFAULT_CACHE_TTL = 5 * 60 * 1e3;
+var feeCache = null;
+function invalidateFeeCache() {
+  feeCache = null;
+}
+function isCacheValid() {
+  if (!feeCache) return false;
+  const now = Date.now();
+  return now - feeCache.fetchedAt < feeCache.ttl;
+}
+async function getFeeInfo(config, cacheConfig) {
+  if (isCacheValid() && feeCache) {
+    return feeCache.feeInfo;
+  }
+  const client = createFacilitatorClient(config);
+  const supported = await client.getSupported();
+  const fee = supported.fee;
+  if (!fee) {
+    throw new Error("Fee information not found in /supported response");
+  }
+  if (typeof fee.amount !== "string") {
+    throw new Error("Invalid fee structure: amount must be a string");
+  }
+  if (typeof fee.asset !== "string") {
+    throw new Error("Invalid fee structure: asset must be a string");
+  }
+  if (typeof fee.network !== "string") {
+    throw new Error("Invalid fee structure: network must be a string");
+  }
+  const feeInfo = {
+    amount: fee.amount,
+    asset: fee.asset,
+    network: fee.network
+  };
+  feeCache = {
+    feeInfo,
+    fetchedAt: Date.now(),
+    ttl: cacheConfig?.ttl ?? DEFAULT_CACHE_TTL
+  };
+  return feeInfo;
+}
+export {
+  X402_FACILITATOR_URL,
+  createFacilitatorClient,
+  getFeeInfo,
+  invalidateFeeCache
+};
+//# sourceMappingURL=index.mjs.map

package/dist/facilitator/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/facilitator/index.ts","../../src/facilitator/client.ts","../../src/facilitator/fee.ts"],"sourcesContent":["export * from \"@x402/core\";\nexport * from \"@x402/core/types\";\n\nexport { X402_FACILITATOR_URL, createFacilitatorClient } from \"./client\";\nexport type { WeftFacilitatorConfig } from \"./client\";\n\nexport { getFeeInfo, invalidateFeeCache } from \"./fee\";\nexport type { FeeInfo, FeeCacheConfig } from \"./fee\";\n","import { HTTPFacilitatorClient, FacilitatorConfig } from \"@x402/core/server\";\nimport type {\n  PaymentPayload,\n  PaymentRequirements,\n  SettleResponse,\n} from \"@x402/core/types\";\n\nexport const FACILITATOR_UNAVAILABLE_ERROR =\n  \"weft:facilitator-settle-unavailable\";\n\nexport const X402_FACILITATOR_URL = \"https://x402.weft.network\";\nexport const X402_FACILITATOR_URL_ENV = \"X402_FACILITATOR_URL\";\n\nexport interface WeftFacilitatorConfig {\n  url?: string;\n  createAuthHeaders?: FacilitatorConfig[\"createAuthHeaders\"];\n}\n\nclass FacilitatorUnavailableError extends Error {\n  readonly statusCode = 503;\n\n  constructor() {\n    super(FACILITATOR_UNAVAILABLE_ERROR);\n    this.name = \"FacilitatorUnavailableError\";\n  }\n}\n\nfunction isUnavailableSettleError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  const candidate = error as Error & Record<string, unknown>;\n  return (\n    candidate.name === \"SettleError\" &&\n    candidate.statusCode === 503 &&\n    \"errorReason\" in candidate &&\n    \"errorMessage\" in candidate &&\n    \"payer\" in candidate &&\n    \"transaction\" in candidate &&\n    \"network\" in candidate &&\n    !(candidate.errorReason === \"settlement_pending\" && candidate.transaction)\n  );\n}\n\nclass WeftHTTPFacilitatorClient extends HTTPFacilitatorClient {\n  override async settle(\n    paymentPayload: PaymentPayload,\n    paymentRequirements: PaymentRequirements,\n  ): Promise<SettleResponse> {\n    try {\n      return await super.settle(paymentPayload, paymentRequirements);\n    } catch (error) {\n      if (isUnavailableSettleError(error)) {\n        throw new FacilitatorUnavailableError();\n      }\n      throw error;\n    }\n  }\n}\n\nexport function validateUrl(url: string): void {\n  if (!url || url.trim() === \"\") {\n    throw new Error(\"Invalid URL: URL cannot be empty\");\n  }\n\n  if (!url.startsWith(\"http://\") && !url.startsWith(\"https://\")) {\n    throw new Error(\n      `Invalid URL format: URL must start with http:// or https://, got: ${url}`,\n    );\n  }\n}\n\nexport function resolveUrl(config?: WeftFacilitatorConfig): string {\n  if (config?.url) {\n    return config.url;\n  }\n\n  if (\n    typeof process !== \"undefined\" &&\n    process.env?.[X402_FACILITATOR_URL_ENV]\n  ) {\n    return process.env[X402_FACILITATOR_URL_ENV]!;\n  }\n\n  return X402_FACILITATOR_URL;\n}\n\ntype AuthHeadersByPath = Awaited<\n  ReturnType<NonNullable<FacilitatorConfig[\"createAuthHeaders\"]>>\n>;\n\n/**\n * Reject a flat headers object the way `@x402/core` itself would.\n *\n * Upstream's `HTTPFacilitatorClient` throws when `createAuthHeaders` returns\n * `{ Authorization: ... }` instead of `{ supported: { Authorization: ... } }`,\n * because silently dropping auth on every request is worse than failing loud.\n * Merging the handshake's own `supported` headers in would mask that check —\n * the merged object always has a path key — so the check runs here first,\n * with the same failure mode a misconfigured seller sees today.\n *\n * @param headers - What the seller's `createAuthHeaders` returned\n */\nfunction assertPathKeyedAuthHeaders(headers: AuthHeadersByPath): void {\n  const isHeaderObject = (value: unknown): boolean =>\n    typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n  const hasPathKey = [\"verify\", \"settle\", \"supported\", \"bazaar\"].some((key) =>\n    isHeaderObject(headers[key as keyof AuthHeadersByPath]),\n  );\n  const looksFlat =\n    !hasPathKey &&\n    Object.values(headers).some((value) => !isHeaderObject(value));\n\n  if (looksFlat) {\n    throw new Error(\n      \"createAuthHeaders must return an object keyed by facilitator path, \" +\n        'e.g. { verify: { Authorization: \"...\" }, settle: { ... }, ' +\n        \"supported: { ... } }, but received a flat headers object.\",\n    );\n  }\n}\n\n/**\n * Merge SDK-derived headers under a seller's, case-insensitively, seller wins.\n *\n * Header names are case-insensitive, but object keys are not: a plain spread\n * would keep a derived `Authorization` and a seller `authorization` as two\n * keys, and the HTTP layer folds those into one comma-joined value — a\n * garbled credential. So a seller header replaces any derived header of the\n * same name whatever its case, and the seller's spelling is the one sent.\n *\n * @param derived - Headers the SDK derived from config for one path\n * @param seller - The seller's own headers for that path, if any\n * @returns The merged headers, the seller's winning on conflict\n */\nfunction mergeSellerWins(\n  derived: Record<string, string>,\n  seller: Record<string, string> | undefined,\n): Record<string, string> {\n  const merged: Record<string, string> = { ...derived };\n  for (const [name, value] of Object.entries(seller ?? {})) {\n    for (const existing of Object.keys(merged)) {\n      if (existing.toLowerCase() === name.toLowerCase()) {\n        delete merged[existing];\n      }\n    }\n    merged[name] = value;\n  }\n  return merged;\n}\n\nexport function createFacilitatorClient(\n  config?: WeftFacilitatorConfig,\n  weftAuthHeaders?: AuthHeadersByPath,\n): HTTPFacilitatorClient {\n  const url = resolveUrl(config);\n  validateUrl(url);\n\n  const sellerCreateAuthHeaders = config?.createAuthHeaders;\n\n  // Only the paths the SDK actually derived headers for — `supported` always,\n  // `settle` and `verify` when an apiKey was configured. Empty paths are\n  // dropped so a caller with no derived headers is byte-identical to passing\n  // none.\n  const derivedByPath = Object.entries(weftAuthHeaders ?? {}).filter(\n    ([, headers]) => headers !== undefined && Object.keys(headers).length > 0,\n  ) as Array<[keyof AuthHeadersByPath, Record<string, string>]>;\n\n  const createAuthHeaders =\n    derivedByPath.length > 0\n      ? async (): Promise<AuthHeadersByPath> => {\n          const sellerHeaders = sellerCreateAuthHeaders\n            ? await sellerCreateAuthHeaders()\n            : undefined;\n          if (sellerHeaders) {\n            assertPathKeyedAuthHeaders(sellerHeaders);\n          }\n          // The seller's own headers win on conflict: an explicit\n          // createAuthHeaders is a more deliberate act than `apiKey`.\n          const merged: AuthHeadersByPath = { ...sellerHeaders };\n          for (const [path, derived] of derivedByPath) {\n            merged[path] = mergeSellerWins(derived, sellerHeaders?.[path]);\n          }\n          return merged;\n        }\n      : sellerCreateAuthHeaders;\n\n  return new WeftHTTPFacilitatorClient({\n    url,\n    createAuthHeaders,\n  });\n}\n","import { createFacilitatorClient, WeftFacilitatorConfig } from \"./client\";\n\nexport interface FeeInfo {\n  amount: string;\n  asset: string;\n  network: string;\n}\n\nexport interface FeeCacheConfig {\n  ttl?: number;\n}\n\ninterface FeeCache {\n  feeInfo: FeeInfo;\n  fetchedAt: number;\n  ttl: number;\n}\n\nconst DEFAULT_CACHE_TTL = 5 * 60 * 1000;\n\nlet feeCache: FeeCache | null = null;\n\nexport function invalidateFeeCache(): void {\n  feeCache = null;\n}\n\nfunction isCacheValid(): boolean {\n  if (!feeCache) return false;\n  const now = Date.now();\n  return now - feeCache.fetchedAt < feeCache.ttl;\n}\n\nexport async function getFeeInfo(\n  config?: WeftFacilitatorConfig,\n  cacheConfig?: FeeCacheConfig,\n): Promise<FeeInfo> {\n  if (isCacheValid() && feeCache) {\n    return feeCache.feeInfo;\n  }\n\n  const client = createFacilitatorClient(config);\n  const supported = await client.getSupported();\n\n  const fee = (supported as { fee?: FeeInfo }).fee;\n  if (!fee) {\n    throw new Error(\"Fee information not found in /supported response\");\n  }\n\n  if (typeof fee.amount !== \"string\") {\n    throw new Error(\"Invalid fee structure: amount must be a string\");\n  }\n  if (typeof fee.asset !== \"string\") {\n    throw new Error(\"Invalid fee structure: asset must be a string\");\n  }\n  if (typeof fee.network !== \"string\") {\n    throw new Error(\"Invalid fee structure: network must be a string\");\n  }\n\n  const feeInfo: FeeInfo = {\n    amount: fee.amount,\n    asset: fee.asset,\n    network: fee.network,\n  };\n\n  feeCache = {\n    feeInfo,\n    fetchedAt: Date.now(),\n    ttl: cacheConfig?.ttl ?? DEFAULT_CACHE_TTL,\n  };\n\n  return feeInfo;\n}\n"],"mappings":";AAAA,cAAc;AACd,cAAc;;;ACDd,SAAS,6BAAgD;AAOlD,IAAM,gCACX;AAEK,IAAM,uBAAuB;AAC7B,IAAM,2BAA2B;AAOxC,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAG9C,cAAc;AACZ,UAAM,6BAA6B;AAHrC,SAAS,aAAa;AAIpB,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,yBAAyB,OAAyB;AACzD,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,QAAM,YAAY;AAClB,SACE,UAAU,SAAS,iBACnB,UAAU,eAAe,OACzB,iBAAiB,aACjB,kBAAkB,aAClB,WAAW,aACX,iBAAiB,aACjB,aAAa,aACb,EAAE,UAAU,gBAAgB,wBAAwB,UAAU;AAElE;AAEA,IAAM,4BAAN,cAAwC,sBAAsB;AAAA,EAC5D,MAAe,OACb,gBACA,qBACyB;AACzB,QAAI;AACF,aAAO,MAAM,MAAM,OAAO,gBAAgB,mBAAmB;AAAA,IAC/D,SAAS,OAAO;AACd,UAAI,yBAAyB,KAAK,GAAG;AACnC,cAAM,IAAI,4BAA4B;AAAA,MACxC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEO,SAAS,YAAY,KAAmB;AAC7C,MAAI,CAAC,OAAO,IAAI,KAAK,MAAM,IAAI;AAC7B,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,MAAI,CAAC,IAAI,WAAW,SAAS,KAAK,CAAC,IAAI,WAAW,UAAU,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,qEAAqE,GAAG;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,WAAW,QAAwC;AACjE,MAAI,QAAQ,KAAK;AACf,WAAO,OAAO;AAAA,EAChB;AAEA,MACE,OAAO,YAAY,eACnB,QAAQ,MAAM,wBAAwB,GACtC;AACA,WAAO,QAAQ,IAAI,wBAAwB;AAAA,EAC7C;AAEA,SAAO;AACT;AAkBA,SAAS,2BAA2B,SAAkC;AACpE,QAAM,iBAAiB,CAAC,UACtB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,QAAM,aAAa,CAAC,UAAU,UAAU,aAAa,QAAQ,EAAE;AAAA,IAAK,CAAC,QACnE,eAAe,QAAQ,GAA8B,CAAC;AAAA,EACxD;AACA,QAAM,YACJ,CAAC,cACD,OAAO,OAAO,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,eAAe,KAAK,CAAC;AAE/D,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AACF;AAeA,SAAS,gBACP,SACA,QACwB;AACxB,QAAM,SAAiC,EAAE,GAAG,QAAQ;AACpD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,UAAU,CAAC,CAAC,GAAG;AACxD,eAAW,YAAY,OAAO,KAAK,MAAM,GAAG;AAC1C,UAAI,SAAS,YAAY,MAAM,KAAK,YAAY,GAAG;AACjD,eAAO,OAAO,QAAQ;AAAA,MACxB;AAAA,IACF;AACA,WAAO,IAAI,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,wBACd,QACA,iBACuB;AACvB,QAAM,MAAM,WAAW,MAAM;AAC7B,cAAY,GAAG;AAEf,QAAM,0BAA0B,QAAQ;AAMxC,QAAM,gBAAgB,OAAO,QAAQ,mBAAmB,CAAC,CAAC,EAAE;AAAA,IAC1D,CAAC,CAAC,EAAE,OAAO,MAAM,YAAY,UAAa,OAAO,KAAK,OAAO,EAAE,SAAS;AAAA,EAC1E;AAEA,QAAM,oBACJ,cAAc,SAAS,IACnB,YAAwC;AACtC,UAAM,gBAAgB,0BAClB,MAAM,wBAAwB,IAC9B;AACJ,QAAI,eAAe;AACjB,iCAA2B,aAAa;AAAA,IAC1C;AAGA,UAAM,SAA4B,EAAE,GAAG,cAAc;AACrD,eAAW,CAAC,MAAM,OAAO,KAAK,eAAe;AAC3C,aAAO,IAAI,IAAI,gBAAgB,SAAS,gBAAgB,IAAI,CAAC;AAAA,IAC/D;AACA,WAAO;AAAA,EACT,IACA;AAEN,SAAO,IAAI,0BAA0B;AAAA,IACnC;AAAA,IACA;AAAA,EACF,CAAC;AACH;;;AC5KA,IAAM,oBAAoB,IAAI,KAAK;AAEnC,IAAI,WAA4B;AAEzB,SAAS,qBAA2B;AACzC,aAAW;AACb;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,MAAM,KAAK,IAAI;AACrB,SAAO,MAAM,SAAS,YAAY,SAAS;AAC7C;AAEA,eAAsB,WACpB,QACA,aACkB;AAClB,MAAI,aAAa,KAAK,UAAU;AAC9B,WAAO,SAAS;AAAA,EAClB;AAEA,QAAM,SAAS,wBAAwB,MAAM;AAC7C,QAAM,YAAY,MAAM,OAAO,aAAa;AAE5C,QAAM,MAAO,UAAgC;AAC7C,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,MAAI,OAAO,IAAI,WAAW,UAAU;AAClC,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,MAAI,OAAO,IAAI,UAAU,UAAU;AACjC,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,OAAO,IAAI,YAAY,UAAU;AACnC,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,QAAM,UAAmB;AAAA,IACvB,QAAQ,IAAI;AAAA,IACZ,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,EACf;AAEA,aAAW;AAAA,IACT;AAAA,IACA,WAAW,KAAK,IAAI;AAAA,IACpB,KAAK,aAAa,OAAO;AAAA,EAC3B;AAEA,SAAO;AACT;","names":[]}