apinow-sdk 0.26.0 → 0.27.0

package/dist/cli.js

@@ -7,7 +7,7 @@ const program = new Command();
 program
     .name('apinow')
     .description('CLI for APINow.fun — search, inspect, and call pay-per-request APIs')
-    .version('0.26.0');
+    .version('0.27.0');
 // ─── Helpers ───
 function getPrivateKey(opts) {
     const raw = opts.key || process.env.APINOW_WALLET_PKEY || process.env.PRIVATE_KEY;

package/dist/index.d.ts

@@ -18,11 +18,31 @@ export interface PriceDiscovery {
     network: string;
     upstreamAccepts: any[];
 }
-export interface ApinowConfig {
+/**
+ * Agent/server path — signs everything with a raw private key. Enables
+ * both x402 paid calls and signed-auth write calls.
+ */
+export interface ApinowServerConfig {
     privateKey: `0x${string}`;
     baseUrl?: string;
     fetch?: typeof globalThis.fetch;
 }
+/**
+ * Browser/wallet path — you provide a `signer` (any EIP-191 `personal_sign`
+ * function, e.g. from wagmi's `walletClient.signMessage`) and the connected
+ * `address`. Enables signed-auth writes. Paid x402 calls are NOT provided by
+ * this path — construct the x402 fetch yourself (see useX402Fetch pattern in
+ * the skill docs) and pass it to `paidFetch` if you need unified behaviour.
+ */
+export interface ApinowBrowserConfig {
+    signer: (message: string) => Promise<`0x${string}` | string>;
+    address: `0x${string}`;
+    baseUrl?: string;
+    fetch?: typeof globalThis.fetch;
+    /** Optional externally-prepared x402 fetch for paid calls. */
+    paidFetch?: typeof globalThis.fetch;
+}
+export type ApinowConfig = ApinowServerConfig | ApinowBrowserConfig;
 export interface GenerateUIOptions {
     endpointName: string;
     namespace: string;

package/dist/index.js

@@ -2,6 +2,9 @@ import { x402Client, wrapFetchWithPayment } from '@x402/fetch';
 import { registerExactEvmScheme } from '@x402/evm/exact/client';
 import { privateKeyToAccount } from 'viem/accounts';
 const APINOW_BASE = 'https://apinow.fun';
+function isServerConfig(c) {
+    return 'privateKey' in c && typeof c.privateKey === 'string';
+}
 // ─── SDK ───
 // Prevent undici (Node 20+ / Vercel) from crashing when @x402/fetch retries
 // a POST with a cloned Request body stream and the server returns a 3xx redirect.
@@ -23,31 +26,50 @@ async function followRedirects(res) {
     return res;
 }
 export function createClient(config) {
-    const { privateKey, baseUrl = APINOW_BASE, fetch: customFetch } = config;
-    const account = privateKeyToAccount(privateKey);
-    const client = new x402Client();
-    registerExactEvmScheme(client, { signer: account });
-    const safeFetch = makeSafeFetch(customFetch ?? fetch);
-    const rawFetchWithPayment = wrapFetchWithPayment(safeFetch, client);
-    const fetchWithPayment = (async (input, init) => {
-        const res = await rawFetchWithPayment(input, init);
-        return followRedirects(res);
-    });
+    const server = isServerConfig(config);
+    const baseUrl = config.baseUrl ?? APINOW_BASE;
+    const customFetch = config.fetch;
+    // Resolve address + signer from whichever config shape the caller passed.
+    const account = server ? privateKeyToAccount(config.privateKey) : null;
+    const address = server
+        ? account.address
+        : config.address.toLowerCase();
+    const signMessage = server
+        ? (msg) => account.signMessage({ message: msg })
+        : (msg) => Promise.resolve(config.signer(msg)).then((s) => String(s));
+    // x402 paid fetch — only available when a private key is provided. Browsers
+    // should build their own x402 fetch (see skill.md useX402Fetch) and pass it
+    // as `paidFetch` to fall back through here.
+    const paidFetchExternal = !server ? config.paidFetch : undefined;
+    const fetchWithPayment = server
+        ? (() => {
+            const client = new x402Client();
+            registerExactEvmScheme(client, { signer: account });
+            const safeFetch = makeSafeFetch(customFetch ?? fetch);
+            const rawFetchWithPayment = wrapFetchWithPayment(safeFetch, client);
+            return (async (input, init) => {
+                const res = await rawFetchWithPayment(input, init);
+                return followRedirects(res);
+            });
+        })()
+        : (paidFetchExternal ??
+            (() => {
+                throw new Error('createClient: paid calls require a `privateKey` config or an explicit `paidFetch`. Pass an x402-wrapped fetch to make paid calls from the browser.');
+            }));
     /**
      * Produce an `Authorization: Bearer <msg>||<sig>||<addr>` header signed by
-     * the wallet's private key. Backend verifies with ethers.recoverAddress and
-     * rejects messages older than ~10 min.
-     *
-     * Exposed as a public helper so agents can sign custom write calls too.
+     * the wallet. Backend verifies with ethers.recoverAddress and rejects
+     * messages older than ~10 min. Works for both server (privateKey) and
+     * browser (walletClient.signMessage) configs.
      */
     async function signAuthHeader() {
         const issuedAt = new Date().toISOString();
         const nonce = Math.random().toString(36).slice(2) + Date.now().toString(36);
-        const message = `APINow auth\naddress: ${account.address}\nissuedAt: ${issuedAt}\nnonce: ${nonce}`;
-        const signature = await account.signMessage({ message });
+        const message = `APINow auth\naddress: ${address}\nissuedAt: ${issuedAt}\nnonce: ${nonce}`;
+        const signature = await signMessage(message);
         return {
-            Authorization: `Bearer ${message}||${signature}||${account.address}`,
-            'x-wallet-address': account.address,
+            Authorization: `Bearer ${message}||${signature}||${address}`,
+            'x-wallet-address': address,
         };
     }
     /**
@@ -75,7 +97,7 @@ export function createClient(config) {
         return res.json();
     }
     return {
-        wallet: account.address,
+        wallet: address,
         /**
          * Produce a signed `Authorization` header for custom write calls.
          * Pairs with `x-wallet-address`. Backend accepts msg within ~10 min.
@@ -210,7 +232,7 @@ export function createClient(config) {
          * List workflows you created (convenience for `listWorkflows({ creator: yourWallet })`).
          */
         async listMyWorkflows(opts = {}) {
-            return this.listWorkflows({ ...opts, creator: account.address });
+            return this.listWorkflows({ ...opts, creator: address });
         },
         // ─── Workflow Versions ───
         /**
@@ -374,7 +396,7 @@ export function createClient(config) {
             const res = await fetch(`${baseUrl}/api/ai/generate-ui`, {
                 method: 'POST',
                 headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ ...opts, walletAddress: account.address }),
+                body: JSON.stringify({ ...opts, walletAddress: address }),
             });
             if (!res.ok) {
                 const text = await res.text();
@@ -409,7 +431,7 @@ export function createClient(config) {
          * Check free-tier UI generation eligibility for a wallet.
          */
         async checkFreeUI() {
-            const params = new URLSearchParams({ checkFree: '1', wallet: account.address });
+            const params = new URLSearchParams({ checkFree: '1', wallet: address });
             const res = await fetch(`${baseUrl}/api/ai/generate-ui?${params}`);
             if (!res.ok)
                 throw new Error(`Failed to check free tier: ${res.status}`);
@@ -419,7 +441,7 @@ export function createClient(config) {
          * Like, dislike, or comment on a generated UI.
          */
         async reactToUI(id, action, comment) {
-            const body = { id, action, wallet: account.address };
+            const body = { id, action, wallet: address };
             if (comment)
                 body.comment = comment;
             const res = await fetch(`${baseUrl}/api/ai/generate-ui`, {
@@ -440,7 +462,7 @@ export function createClient(config) {
             const res = await fetch(`${baseUrl}/api/ai/generate-ui`, {
                 method: 'DELETE',
                 headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ id, wallet: account.address }),
+                body: JSON.stringify({ id, wallet: address }),
             });
             if (!res.ok) {
                 const text = await res.text();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apinow-sdk",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Pay-per-call API SDK & CLI for APINow.fun — endpoints + workflows, wraps x402 so you don't have to",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",