minia2a-skill 1.3.0 → 1.3.1

package/README.md

@@ -73,7 +73,8 @@ minia2a meta
 minia2a register --name <n> --wallet <0x...> --signature <0x...>
 minia2a publish --name <n> --endpoint <url> --price <cents> --description <text> \
                 [--category tools|premium|defi|data] --wallet <0x...> --signature <0x...>
-minia2a call <id> --wallet <0x...> [--input '{}'] [--probe]
+minia2a call <id> --wallet <0x...> [--signature <0x...> --timestamp <unix>] \
+                  [--input '{}'] [--probe]
 minia2a help
 ```
 
@@ -81,6 +82,12 @@ minia2a help
 **seller** side (it lists your API for pay-per-call). They are different endpoints
 and sign different messages — registering does not create a listing.
 
+`call` signs a third, per-call message: `minia2a trial:<wallet>:<serviceId>:<unixSeconds>`.
+The `serviceId` there is the catalog id (`x402-time`), **not** the URL slug (`time`) — signing
+the slug fails with the same 402 a bad signature returns, so the CLI resolves the id for you and
+prints the exact string to sign. Without `--signature`, `--wallet` draws on the anonymous per-IP
+bucket, not the wallet's own.
+
 All commands output JSON. Exit code 0 = success. `--probe` returns the 402 payment JSON without consuming credits.
 
 ## Agent Wrappers
@@ -107,8 +114,10 @@ minia2a discover
 # 3. Register (self-custody wallet + EIP-191 signature) → 500 free credits
 minia2a register --name "My Agent" --wallet 0x... --signature 0x...
 
-# 4. Call a service — credits decrement, no payment needed while you have credits
+# 4. Call a service. --wallet alone uses the anonymous per-IP bucket; run it once and
+#    the CLI prints the exact message to sign for the wallet's own 15 trials.
 minia2a call x402-time --wallet 0x...
+minia2a call x402-time --wallet 0x... --timestamp 1787113324 --signature 0x...
 ```
 
 ## Pricing

package/cli/minia2a

@@ -14,7 +14,8 @@ Usage:
   minia2a register --name <n> --wallet <0x...> --signature <0x...>
   minia2a publish --name <n> --endpoint <url> --price <cents> --description <text>
                   [--category <cat>] --wallet <0x...> --signature <0x...>
-  minia2a call <service-id> --wallet <0x...> [--input <json>] [--probe]
+  minia2a call <service-id> --wallet <0x...> [--signature <0x...> --timestamp <unix>]
+                            [--input <json>] [--probe]
   minia2a help [topic]
 
 No human signup. Register with a self-custody wallet + EIP-191 signature
@@ -205,8 +206,32 @@ async function call(id) {
   const url = new URL(ep);
   url.searchParams.set(probe ? 'probe' : 'wallet', probe ? '1' : wallet);
 
+  // A registered wallet's own 15 trials are only reachable with a signed call. The signed
+  // message uses the catalog id (x402-time), not the URL slug (time) — signing the slug fails
+  // with exactly the 402 a bad signature produces, so print the id-correct message rather than
+  // letting the caller guess it.
+  const trialHeaders = {};
+  const signature = flag('signature');
+  if (!probe && wallet && wallet !== true) {
+    const ts = flag('timestamp') && flag('timestamp') !== true
+      ? String(flag('timestamp'))
+      : String(Math.floor(Date.now() / 1000));
+    if (signature && signature !== true) {
+      trialHeaders['X-Wallet-Signature'] = signature;
+      trialHeaders['X-Trial-Timestamp'] = ts;
+    } else {
+      console.error('Note: --wallet alone does not draw on the wallet\'s trial bucket — this call');
+      console.error('will use the anonymous per-IP bucket. To use the wallet\'s own 15 trials, sign');
+      console.error('this exact message (EIP-191 personal_sign):\n');
+      console.error(`  minia2a trial:${wallet}:${svc.id}:${ts}\n`);
+      console.error('then rerun within 5 minutes:\n');
+      console.error(`  minia2a call ${id} --wallet ${wallet} --timestamp ${ts} --signature 0xYOUR_SIGNATURE\n`);
+      console.error(`(cast example: cast wallet sign "minia2a trial:${wallet}:${svc.id}:${ts}")\n`);
+    }
+  }
+
   try {
-    const opts = { headers: { 'User-Agent': 'minia2a-skill/1.x' } };
+    const opts = { headers: { 'User-Agent': 'minia2a-skill/1.x', ...trialHeaders } };
     let r;
     if (input !== undefined) {
       opts.method = 'POST';
@@ -222,11 +247,19 @@ async function call(id) {
     if (r.status === 402) {
       // Payment required — surface the machine-readable x402 payload.
       console.error(`Payment required (HTTP 402) for ${svc.name}. Price: $${svc.price} USDC.`);
+      if (trialHeaders['X-Wallet-Signature']) {
+        console.error(`Signed as ${wallet}: either this wallet's 15 trials are spent, or the wallet`);
+        console.error('is not registered, or the timestamp is older than 5 minutes.');
+      }
       console.error('x402 accepts[]:');
       json(d);
       process.exit(3);
     }
 
+    // Which bucket paid for the call — "wallet" means the signature was accepted.
+    const mode = r.headers.get('x-trial-mode');
+    if (mode) console.error(`trial: mode=${mode} remaining=${r.headers.get('x-trial-remaining') ?? '?'}`);
+
     json(d);
     if (!r.ok) process.exit(3);
   } catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minia2a-skill",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Agent skill for minia2a.uk — 1,600+ x402 services. AI agents earn USDC. 500 free credits. Zero-dep CLI. Try: npm i -g minia2a-cli.",
   "bin": {
     "minia2a": "./cli/minia2a"