agent402-openclaw 0.4.4 → 0.5.0

package/README.md

@@ -2,10 +2,11 @@
 
 Part of [Agent402](https://agent402.tools), the open-source paid door for AI agents.
 
-Agent402 as an [OpenClaw](https://openclaw.ai) model provider: auto-routed and
-explicit frontier models at a **flat per-call price**, paid **by card** (a prepaid
-credits key, no wallet) or in **USDC over x402** from a wallet. The same key and
-gateway reach Agent402's 500+ pay-per-call tools.
+Agent402 as an [OpenClaw](https://openclaw.ai) model provider: the auto-routed
+tier at a **flat per-call price** and explicit frontier models **priced per
+request** from the body, paid in **USDC over x402** from a wallet or with a
+prepaid credits key already issued (new credits are not on sale). The same key
+and gateway reach Agent402's 500+ pay-per-call tools.
 
 Guide: https://agent402.tools/guides/openclaw-model-provider
 
@@ -21,8 +22,7 @@ With no credits key and no `AGENT402_WALLET_KEY`, `setup` generates an EVM
 wallet into `~/.openclaw/agent402/wallet.key` (0600, the only copy, never
 printed) and prints its address: send it USDC on Base and every call is paid
 from it over x402. `agent402-openclaw wallet` shows the address and balance;
-`--no-wallet` skips the generation. Prefer a card? Buy a pack at
-https://agent402.tools/credits and run
+`--no-wallet` skips the generation. Holding a credits key already issued? Run
 `AGENT402_CREDITS_KEY=a402_... npx agent402-openclaw setup --write` (key by env,
 or `--credits-key -` on stdin).
 
@@ -43,6 +43,16 @@ model listing, gateway boot and one agent turn (`test-real-install.js`).
 No OpenClaw? `agent402-openclaw proxy` runs the proxy alone; point any OpenAI
 client at `http://127.0.0.1:8412/v1` with model `auto`.
 
+**Claude Code and other Anthropic-wire clients** (0.5.0): the proxy also answers
+`POST /v1/messages` and forwards it to the gateway's metered Messages route,
+paid from the same wallet:
+
+```bash
+export ANTHROPIC_BASE_URL=http://127.0.0.1:8412
+export ANTHROPIC_AUTH_TOKEN=unused     # the proxy pays; this value is ignored
+claude --model claude-sonnet-5
+```
+
 ## Pay from a wallet instead
 
 ```bash
@@ -64,7 +74,7 @@ Two ways the wallet can pay a metered call:
   what the call actually used, so a short answer costs a fraction of the
   quote. `agent402-openclaw doctor` says which mode the wallet is in.
 
-Card / credits buyers already pay actual usage on metered calls.
+Credits-key buyers already pay actual usage on metered calls.
 
 ## Models and pricing
 
@@ -79,8 +89,9 @@ Either way OpenClaw's per-token cost fields stay zero; the price is per call. A
 tier's route is priced at its home tier: the 402 quotes that tier's price, and the paid call is served under
 that tier's caps (the answer says so in `agent402_tier`). The router, grounded and stealth tiers still answer a
 400 naming the right route; nothing is charged. A client-supplied `Idempotency-Key`
-is passed through (an x402 retry with the same key replays the paid answer);
-without one, each call is its own payment.
+is passed through: on a credits key, a retry with the same key replays the paid
+answer; on a wallet, each forwarded call signs a fresh payment, which the server
+treats as a new purchase. Without a key, each call is its own payment.
 
 The proxy answers native clients on loopback only: requests carrying a browser
 `Origin` header or a non-loopback `Host` are refused, so a web page cannot spend
@@ -88,7 +99,7 @@ the key.
 
 ## Commands
 
-- `agent402-openclaw setup [--credits-key K | --credits-key - (stdin) | AGENT402_CREDITS_KEY env] [--write] [--port N] [--flat]`
+- `agent402-openclaw setup [--credits-key K | --credits-key - (stdin) | AGENT402_CREDITS_KEY env] [--no-wallet] [--write] [--port N] [--flat]`
 - `agent402-openclaw proxy [--port N] [--upstream URL]`
 - `agent402-openclaw doctor`
 - `agent402-openclaw wallet [--rpc URL]` (address + USDC balance of the wallet the proxy pays from)
@@ -102,11 +113,12 @@ Anthropic Messages wires, embeddings, rerank, images, video, speech,
 transcription, grounded answers with citations, 500+ tools over
 MCP or HTTP, wallet-keyed memory, finished reports (dossiers, insider flow, 13F,
 domain audits, token risk, deep research) and monitors, plus routing that buys
-from proven external sellers on the agent's behalf.
+from external sellers on the agent's behalf.
 
 Why pay here, with every claim linked to its proof: https://agent402.tools/why.
 Usage is priced under a ceiling quoted before you pay, a failed call is not
-charged and the receipt proves it, a keyed retry never pays twice, and uptime and transactions are
-published from outside production.
+charged and the receipt proves it, a keyed retry on a credits key is not
+debited twice, and uptime and transactions are published from outside
+production.
 
 Zero dependencies. MIT. Maintained by Havok Holdings LLC.

package/cli.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 // agent402-openclaw <command>
 //   setup [--credits-key a402_...] [--write]   store the key, print (or merge) the openclaw.json block
-//   proxy [--port N] [--upstream URL]          run the local proxy on its own (no OpenClaw needed)
+//   proxy [--port N] [--upstream URL]          run the local proxy on its own (no OpenClaw needed;
+//                                              serves the OpenAI wire and Anthropic POST /v1/messages)
 //   doctor                                     show what is configured and whether the gateway answers
 import { mkdirSync, writeFileSync, readFileSync, existsSync, chmodSync, statSync, realpathSync, renameSync } from "node:fs";
 import { pathToFileURL } from "node:url";
@@ -90,7 +91,7 @@ async function main() {
       // per-token router that prints a wallet at install; the card path
       // (credits key) stays available. --no-wallet keeps the old behaviour.
       if (has("--no-wallet")) {
-        out(`no payment method yet: buy a pack by card at ${upstream}/credits and rerun with --credits-key a402_..., or set AGENT402_WALLET_KEY`);
+        out(`no payment method yet: set AGENT402_WALLET_KEY, rerun without --no-wallet to generate a wallet, or rerun with --credits-key a402_... if you hold a credits key`);
       } else {
         const w = await generateWallet();
         if (w) {
@@ -99,9 +100,9 @@ async function main() {
           out(`  key:     ${WALLET_KEY_FILE()} (0600; back it up, it is the only copy)`);
           out(`fund it with USDC on Base (any amount; a call costs from $0.001), then every call is paid from it over x402.`);
           out(`optional: \`agent402-openclaw permit2-approve\` once (needs a little ETH on Base for gas) to pay actual usage instead of the per-request quote.`);
-          out(`prefer a card? buy a pack at ${upstream}/credits and rerun with --credits-key a402_...`);
+          out(`holding a credits key already issued? rerun with --credits-key a402_... instead`);
         } else {
-          out(`no payment method yet: buy a pack by card at ${upstream}/credits and rerun with --credits-key a402_..., or install viem + @x402/fetch + @x402/evm and rerun to generate a wallet`);
+          out(`no payment method yet: install viem + @x402/fetch + @x402/evm and rerun to generate a wallet, set AGENT402_WALLET_KEY, or rerun with --credits-key a402_... if you hold a credits key`);
         }
       }
     }

package/index.js

@@ -37,7 +37,7 @@ export function resolveCreditsKey(pluginConfig = {}) {
 
 // x402 wallet payment - optional (peer deps) and, when the wallet has a
 // Permit2 allowance, METERED: the `upto` scheme authorizes a CEILING (the
-// per-request quote) and the gateway settles actual usage x 1.15, the way a
+// per-request quote) and the gateway settles actual usage plus a markup, the way a
 // per-token router bills. Without the allowance it pays `exact` (the quote).
 export const USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
 export const BASE_CAIP2 = "eip155:8453";

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "agent402",
   "name": "Agent402",
-  "description": "Agent402 model provider: auto-routed and explicit frontier models at a flat per-call price, paid by card (prepaid credits key) or in USDC over x402. Same key reaches 500+ pay-per-call tools.",
+  "description": "Agent402 model provider: an auto-routed tier at a flat per-call price and explicit frontier models priced per request, paid in USDC over x402 or with a prepaid credits key. Same key reaches 500+ pay-per-call tools.",
   "activation": {
     "onStartup": true
   },
@@ -49,7 +49,7 @@
   "uiHints": {
     "creditsKey": {
       "label": "Credits key",
-      "help": "Buy by card at https://agent402.tools/credits",
+      "help": "Issued at https://agent402.tools/credits; that page says whether new keys are on sale",
       "sensitive": true
     },
     "walletKey": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agent402-openclaw",
-  "version": "0.4.4",
-  "description": "OpenClaw model provider for Agent402: auto-routed and explicit LLM models at a flat per-call price, paid by card (prepaid credits key) or in USDC over x402 through a local proxy. Zero dependencies; x402 wallet payment is an optional peer.",
+  "version": "0.5.0",
+  "description": "OpenClaw model provider for Agent402: an auto-routed tier at a flat per-call price and explicit LLM models priced per request, paid in USDC over x402 or with a prepaid credits key through a local proxy. Zero dependencies; x402 wallet payment is an optional peer.",
   "type": "module",
   "main": "index.js",
   "exports": {
@@ -44,7 +44,8 @@
   },
   "peerDependencies": {
     "@x402/evm": ">=2.20.0",
-    "@x402/fetch": ">=2.20.0"
+    "@x402/fetch": ">=2.20.0",
+    "viem": ">=2.48.11"
   },
   "peerDependenciesMeta": {
     "@x402/evm": {
@@ -52,6 +53,9 @@
     },
     "@x402/fetch": {
       "optional": true
+    },
+    "viem": {
+      "optional": true
     }
   },
   "keywords": [

package/proxy.js

@@ -1,5 +1,9 @@
-// Local OpenAI-compatible proxy: OpenClaw (or any client) talks to
-// http://127.0.0.1:<port>/v1, the proxy pays Agent402 and forwards.
+// Local proxy: OpenClaw (or any client) talks to http://127.0.0.1:<port>, the
+// proxy pays Agent402 and forwards. Two wires:
+//   OpenAI     POST /v1/chat/completions -> the tier the model id names
+//   Anthropic  POST /v1/messages         -> the gateway's metered Messages
+//              route (/v1/metered/messages), so Claude Code and the Anthropic
+//              SDK pay from a wallet too (ANTHROPIC_BASE_URL=http://127.0.0.1:<port>).
 //
 // Two ways to pay, chosen at start:
 //   creditsKey  - a prepaid card-credits key (a402_...) sent as a Bearer; the
@@ -79,6 +83,20 @@ export function refusalAsOpenAIError(status, doc) {
   };
 }
 
+/** The same refusal in the Anthropic error shape ({type:"error", error:{type,
+ *  message}}), which Anthropic clients read their error text from. Null for any
+ *  other body, which the caller relays unchanged. */
+export function refusalAsAnthropicError(status, doc) {
+  const o = refusalAsOpenAIError(status, doc);
+  if (!o) return null;
+  const { error, ...fields } = o;
+  return { type: "error", error: { type: status === 402 ? "payment_required" : "api_error", message: error.message }, ...fields };
+}
+
+// The gateway's metered Anthropic Messages route: quoted per request from the
+// body, any model id the gateway lists (dated Claude ids resolve to the live one).
+export const MESSAGES_UPSTREAM_PATH = "/v1/metered/messages";
+
 const json = (res, status, obj, headers = {}) => {
   res.writeHead(status, { "content-type": "application/json; charset=utf-8", ...headers });
   res.end(JSON.stringify(obj));
@@ -105,6 +123,39 @@ export async function startProxy({ upstream = DEFAULT_UPSTREAM, creditsKey = nul
   let table = routes || await loadRoutes(upstream, fetchImpl, { pricing });
   const stats = { requests: 0, forwarded: 0, errors: 0, startedAt: new Date().toISOString() };
 
+  // Pays and forwards one call. Streams pass through byte for byte; a refused
+  // paid call's offer-carrying JSON body is answered in the client wire's own
+  // error shape (mapRefusal); every other upstream body is relayed as sent.
+  async function forward(req, res, endpoint, outbound, extraHeaders, mapRefusal) {
+    const clientIdem = typeof req.headers["idempotency-key"] === "string" && /^[\w.:-]{8,128}$/.test(req.headers["idempotency-key"]) ? req.headers["idempotency-key"] : null;
+    const headers = { "content-type": "application/json", accept: req.headers.accept || "application/json", "idempotency-key": clientIdem || randomUUID(), "user-agent": `agent402-openclaw/${PKG_VERSION}`, ...extraHeaders };
+    if (key) headers.authorization = `Bearer ${key}`;
+    const up = await paid(`${upstream}${endpoint}`, { method: "POST", headers, body: JSON.stringify(outbound), signal: AbortSignal.timeout(300_000) });
+    stats.forwarded++;
+    const passthrough = {};
+    // payment-response / x-payment-response carry the x402 settlement receipt
+    // (v2 / v1); payment-receipt is MPP's. The client sees what it paid.
+    for (const h of ["content-type", "x-credits-balance", "payment-response", "x-payment-response", "payment-receipt", "x-cache", "cache-control"]) { const v = up.headers.get(h); if (v) passthrough[h] = v; }
+    if (!up.ok && /json/i.test(passthrough["content-type"] || "")) {
+      const raw = await up.text();
+      let doc = null;
+      try { doc = JSON.parse(raw); } catch { /* not JSON after all: relayed as sent */ }
+      const mapped = mapRefusal(up.status, doc);
+      if (mapped) {
+        const { "content-type": _ct, ...rest } = passthrough;
+        return json(res, up.status, mapped, rest);
+      }
+      res.writeHead(up.status, passthrough);
+      return res.end(raw);
+    }
+    res.writeHead(up.status, passthrough);
+    if (!up.body) return res.end();
+    const reader = up.body.getReader();
+    req.on("close", () => { reader.cancel().catch(() => {}); });
+    for (;;) { const { done, value } = await reader.read(); if (done) break; res.write(Buffer.from(value)); }
+    return res.end();
+  }
+
   const server = createServer(async (req, res) => {
     stats.requests++;
     const url = new URL(req.url, "http://localhost");
@@ -132,35 +183,26 @@ export async function startProxy({ upstream = DEFAULT_UPSTREAM, creditsKey = nul
           return json(res, 400, { error: { message: `Unknown model "${requested}". Use "auto" or an id from GET /v1/models (${table.size} available).`, type: "invalid_request_error", code: "model_not_found" } });
         }
         if (!paid) {
-          return json(res, 402, { error: { message: "No payment method configured. Set AGENT402_CREDITS_KEY (buy a pack by card at agent402.tools/credits) or configure an x402 wallet (agent402-openclaw setup --wallet).", type: "payment_required", code: "agent402_unconfigured" }, topup: `${upstream}/credits`, priceUsd: route.priceUsd });
+          return json(res, 402, { error: { message: "No payment method configured. Run `agent402-openclaw setup` to generate an x402 wallet, set AGENT402_WALLET_KEY, or set AGENT402_CREDITS_KEY to a credits key already issued.", type: "payment_required", code: "agent402_unconfigured" }, topup: `${upstream}/credits`, priceUsd: route.priceUsd });
         }
         const outbound = { ...body };
         if (requested === AUTO_ID) delete outbound.model; else outbound.model = route.id;
-        const clientIdem = typeof req.headers["idempotency-key"] === "string" && /^[\w.:-]{8,128}$/.test(req.headers["idempotency-key"]) ? req.headers["idempotency-key"] : null;
-        const headers = { "content-type": "application/json", accept: req.headers.accept || "application/json", "idempotency-key": clientIdem || randomUUID(), "user-agent": `agent402-openclaw/${PKG_VERSION}` };
-        if (key) headers.authorization = `Bearer ${key}`;
-        const up = await paid(`${upstream}${route.endpoint}`, { method: "POST", headers, body: JSON.stringify(outbound), signal: AbortSignal.timeout(300_000) });
-        stats.forwarded++;
-        const passthrough = {};
-        for (const h of ["content-type", "x-credits-balance", "payment-receipt", "x-cache", "cache-control"]) { const v = up.headers.get(h); if (v) passthrough[h] = v; }
-        if (!up.ok && /json/i.test(passthrough["content-type"] || "")) {
-          const raw = await up.text();
-          let doc = null;
-          try { doc = JSON.parse(raw); } catch { /* not JSON after all: relayed as sent */ }
-          const mapped = refusalAsOpenAIError(up.status, doc);
-          if (mapped) {
-            const { "content-type": _ct, ...rest } = passthrough;
-            return json(res, up.status, mapped, rest);
-          }
-          res.writeHead(up.status, passthrough);
-          return res.end(raw);
+        return forward(req, res, route.endpoint, outbound, {}, refusalAsOpenAIError);
+      }
+      if (req.method === "POST" && url.pathname === "/v1/messages") {
+        const raw = await readBody(req);
+        let body;
+        try { body = JSON.parse(raw.toString("utf8") || "{}"); } catch { return json(res, 400, { type: "error", error: { type: "invalid_request_error", message: "Request body must be JSON" } }); }
+        if (typeof body.model !== "string" || !body.model.trim()) {
+          return json(res, 400, { type: "error", error: { type: "invalid_request_error", message: "\"model\" is required (any id from GET /v1/models, or a Claude id such as claude-sonnet-5)" } });
+        }
+        if (!paid) {
+          return json(res, 402, { type: "error", error: { type: "payment_required", message: "No payment method configured. Set AGENT402_WALLET_KEY to an EVM key holding USDC on Base (or run `agent402-openclaw setup`), or set AGENT402_CREDITS_KEY to a credits key already issued." } });
         }
-        res.writeHead(up.status, passthrough);
-        if (!up.body) return res.end();
-        const reader = up.body.getReader();
-        req.on("close", () => { reader.cancel().catch(() => {}); });
-        for (;;) { const { done, value } = await reader.read(); if (done) break; res.write(Buffer.from(value)); }
-        return res.end();
+        const outbound = { ...body, model: body.model.trim().replace(/^agent402\//, "") };
+        const extra = {};
+        for (const h of ["anthropic-version", "anthropic-beta"]) { const v = req.headers[h]; if (typeof v === "string" && v.length <= 512) extra[h] = v; }
+        return forward(req, res, MESSAGES_UPSTREAM_PATH, outbound, extra, refusalAsAnthropicError);
       }
       return json(res, 404, { error: { message: `No route for ${req.method} ${url.pathname}`, type: "invalid_request_error" } });
     } catch (e) {