moltspay 0.8.1 → 0.8.3

package/dist/cli/index.mjs

@@ -1,10 +1,16 @@
 #!/usr/bin/env node
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 
 // src/cli/index.ts
 import { Command } from "commander";
 import { homedir as homedir2 } from "os";
-import { join as join2, dirname, resolve } from "path";
-import { existsSync as existsSync2, writeFileSync as writeFileSync2, readFileSync as readFileSync3, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
+import { join as join3, dirname, resolve } from "path";
+import { existsSync as existsSync3, writeFileSync as writeFileSync2, readFileSync as readFileSync3, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
 import { spawn } from "child_process";
 
 // src/client/index.ts
@@ -342,30 +348,107 @@ var MoltsPayClient = class {
 };
 
 // src/server/index.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
 import { createServer } from "http";
+import * as path from "path";
 var X402_VERSION2 = 2;
 var PAYMENT_REQUIRED_HEADER2 = "x-payment-required";
 var PAYMENT_HEADER2 = "x-payment";
 var PAYMENT_RESPONSE_HEADER = "x-payment-response";
-var DEFAULT_FACILITATOR_URL = "https://x402.org/facilitator";
+var FACILITATOR_TESTNET = "https://www.x402.org/facilitator";
+var FACILITATOR_MAINNET = "https://api.cdp.coinbase.com/platform/v2/x402";
+var USDC_ADDRESSES = {
+  "eip155:8453": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+  // Base mainnet
+  "eip155:84532": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+  // Base Sepolia
+};
+var USDC_DOMAIN = {
+  name: "USD Coin",
+  version: "2"
+};
+function loadEnvFiles() {
+  try {
+    const dotenv = __require("dotenv");
+    const envPaths = [
+      path.join(process.cwd(), ".env"),
+      path.join(process.env.HOME || "", ".moltspay", ".env")
+    ];
+    for (const envPath of envPaths) {
+      if (existsSync2(envPath)) {
+        dotenv.config({ path: envPath });
+        console.log(`[MoltsPay] Loaded config from ${envPath}`);
+        break;
+      }
+    }
+  } catch {
+  }
+}
+function getCDPConfig() {
+  loadEnvFiles();
+  return {
+    useMainnet: process.env.USE_MAINNET?.toLowerCase() === "true",
+    apiKeyId: process.env.CDP_API_KEY_ID,
+    apiKeySecret: process.env.CDP_API_KEY_SECRET
+  };
+}
+async function getCDPAuthHeaders(method, urlPath, body) {
+  const config = getCDPConfig();
+  if (!config.apiKeyId || !config.apiKeySecret) {
+    throw new Error("CDP_API_KEY_ID and CDP_API_KEY_SECRET required for mainnet");
+  }
+  try {
+    const { getAuthHeaders } = await import("@coinbase/cdp-sdk/auth");
+    const headers = await getAuthHeaders({
+      apiKeyId: config.apiKeyId,
+      apiKeySecret: config.apiKeySecret,
+      requestMethod: method,
+      requestHost: "api.cdp.coinbase.com",
+      requestPath: urlPath,
+      requestBody: body
+    });
+    return headers;
+  } catch (err) {
+    console.error("[MoltsPay] Failed to generate CDP auth headers:", err.message);
+    throw err;
+  }
+}
 var MoltsPayServer = class {
   manifest;
   skills = /* @__PURE__ */ new Map();
   options;
+  cdpConfig;
   facilitatorUrl;
+  networkId;
   constructor(servicesPath, options = {}) {
+    this.cdpConfig = getCDPConfig();
     const content = readFileSync2(servicesPath, "utf-8");
     this.manifest = JSON.parse(content);
     this.options = {
       port: options.port || 3e3,
       host: options.host || "0.0.0.0"
     };
-    this.facilitatorUrl = options.facilitatorUrl || DEFAULT_FACILITATOR_URL;
+    if (this.cdpConfig.useMainnet) {
+      if (!this.cdpConfig.apiKeyId || !this.cdpConfig.apiKeySecret) {
+        console.warn("[MoltsPay] WARNING: USE_MAINNET=true but CDP keys not set!");
+        console.warn("[MoltsPay] Set CDP_API_KEY_ID and CDP_API_KEY_SECRET in ~/.moltspay/.env");
+      }
+      this.facilitatorUrl = FACILITATOR_MAINNET;
+      this.networkId = "eip155:8453";
+    } else {
+      this.facilitatorUrl = options.facilitatorUrl || FACILITATOR_TESTNET;
+      this.networkId = "eip155:84532";
+    }
+    const networkName = this.cdpConfig.useMainnet ? "Base mainnet" : "Base Sepolia (testnet)";
+    const facilitatorName = this.cdpConfig.useMainnet ? "CDP" : "x402.org";
     console.log(`[MoltsPay] Loaded ${this.manifest.services.length} services from ${servicesPath}`);
     console.log(`[MoltsPay] Provider: ${this.manifest.provider.name}`);
     console.log(`[MoltsPay] Receive wallet: ${this.manifest.provider.wallet}`);
-    console.log(`[MoltsPay] Facilitator: ${this.facilitatorUrl}`);
+    console.log(`[MoltsPay] Network: ${this.networkId} (${networkName})`);
+    console.log(`[MoltsPay] Facilitator: ${facilitatorName} (${this.facilitatorUrl})`);
+    if (this.cdpConfig.useMainnet && this.cdpConfig.apiKeyId) {
+      console.log(`[MoltsPay] CDP API Key: ${this.cdpConfig.apiKeyId.slice(0, 8)}...`);
+    }
     console.log(`[MoltsPay] Protocol: x402 (gasless for both client AND server)`);
   }
   /**
@@ -426,7 +509,6 @@ var MoltsPayServer = class {
    * GET /services - List available services
    */
   handleGetServices(res) {
-    const chain = getChain(this.manifest.provider.chain);
     const services = this.manifest.services.map((s) => ({
       id: s.id,
       name: s.name,
@@ -442,16 +524,15 @@ var MoltsPayServer = class {
       services,
       x402: {
         version: X402_VERSION2,
-        network: `eip155:${chain.chainId}`,
+        network: this.networkId,
         schemes: ["exact"],
-        facilitator: this.facilitatorUrl
+        facilitator: this.cdpConfig.useMainnet ? "cdp" : "x402.org",
+        mainnet: this.cdpConfig.useMainnet
       }
     });
   }
   /**
    * POST /execute - Execute service with x402 payment
-   * Body: { service: string, params: object }
-   * Header: X-Payment (optional - if missing, returns 402)
    */
   async handleExecute(body, paymentHeader, res) {
     const { service, params } = body;
@@ -526,17 +607,8 @@ var MoltsPayServer = class {
    * Return 402 with x402 payment requirements
    */
   sendPaymentRequired(config, res) {
-    const chain = getChain(this.manifest.provider.chain);
-    const amountInUnits = Math.floor(config.price * 1e6).toString();
-    const requirements = [{
-      scheme: "exact",
-      network: `eip155:${chain.chainId}`,
-      maxAmountRequired: amountInUnits,
-      resource: this.manifest.provider.wallet,
-      description: `${config.name} - $${config.price} ${config.currency}`,
-      // Include facilitator info for client
-      extra: JSON.stringify({ facilitator: this.facilitatorUrl })
-    }];
+    const requirements = [this.buildPaymentRequirements(config)];
+    requirements[0].description = `${config.name} - $${config.price} ${config.currency}`;
     const encoded = Buffer.from(JSON.stringify(requirements)).toString("base64");
     res.writeHead(402, {
       "Content-Type": "application/json",
@@ -549,7 +621,7 @@ var MoltsPayServer = class {
     }, null, 2));
   }
   /**
-   * Basic payment validation (before calling facilitator)
+   * Basic payment validation
    */
   validatePayment(payment, config) {
     if (payment.x402Version !== X402_VERSION2) {
@@ -558,37 +630,57 @@ var MoltsPayServer = class {
     if (payment.scheme !== "exact") {
       return { valid: false, error: `Unsupported scheme: ${payment.scheme}` };
     }
-    const chain = getChain(this.manifest.provider.chain);
-    const expectedNetwork = `eip155:${chain.chainId}`;
-    if (payment.network !== expectedNetwork) {
-      return { valid: false, error: `Network mismatch: expected ${expectedNetwork}` };
+    if (payment.network !== this.networkId) {
+      return { valid: false, error: `Network mismatch: expected ${this.networkId}, got ${payment.network}` };
     }
     return { valid: true };
   }
   /**
-   * Verify payment with facilitator
+   * Build complete payment requirements for facilitator
+   */
+  buildPaymentRequirements(config) {
+    const amountInUnits = Math.floor(config.price * 1e6).toString();
+    const usdcAddress = USDC_ADDRESSES[this.networkId];
+    return {
+      scheme: "exact",
+      network: this.networkId,
+      maxAmountRequired: amountInUnits,
+      amount: amountInUnits,
+      asset: usdcAddress,
+      payTo: this.manifest.provider.wallet,
+      maxTimeoutSeconds: 300,
+      extra: USDC_DOMAIN
+    };
+  }
+  /**
+   * Verify payment with facilitator (testnet or CDP)
    */
   async verifyWithFacilitator(payment, config) {
     try {
-      const chain = getChain(this.manifest.provider.chain);
-      const amountInUnits = Math.floor(config.price * 1e6).toString();
-      const requirements = {
-        scheme: "exact",
-        network: `eip155:${chain.chainId}`,
-        maxAmountRequired: amountInUnits,
-        resource: this.manifest.provider.wallet
+      const requirements = this.buildPaymentRequirements(config);
+      const requestBody = {
+        paymentPayload: payment,
+        paymentRequirements: requirements
       };
+      console.log("[MoltsPay] Verify request:", JSON.stringify(requestBody, null, 2));
+      let headers = { "Content-Type": "application/json" };
+      if (this.cdpConfig.useMainnet) {
+        const authHeaders = await getCDPAuthHeaders(
+          "POST",
+          "/platform/v2/x402/verify",
+          requestBody
+        );
+        headers = { ...headers, ...authHeaders };
+      }
       const response = await fetch(`${this.facilitatorUrl}/verify`, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          paymentPayload: payment,
-          paymentRequirements: requirements
-        })
+        headers,
+        body: JSON.stringify(requestBody)
       });
       const result = await response.json();
+      console.log("[MoltsPay] Verify response:", JSON.stringify(result, null, 2));
       if (!response.ok || !result.isValid) {
-        return { valid: false, error: result.invalidReason || "Verification failed" };
+        return { valid: false, error: result.invalidReason || result.error || "Verification failed" };
       }
       return { valid: true };
     } catch (err) {
@@ -599,25 +691,28 @@ var MoltsPayServer = class {
    * Settle payment with facilitator (execute on-chain transfer)
    */
   async settleWithFacilitator(payment, config) {
-    const chain = getChain(this.manifest.provider.chain);
-    const amountInUnits = Math.floor(config.price * 1e6).toString();
-    const requirements = {
-      scheme: "exact",
-      network: `eip155:${chain.chainId}`,
-      maxAmountRequired: amountInUnits,
-      resource: this.manifest.provider.wallet
+    const requirements = this.buildPaymentRequirements(config);
+    const requestBody = {
+      paymentPayload: payment,
+      paymentRequirements: requirements
     };
+    let headers = { "Content-Type": "application/json" };
+    if (this.cdpConfig.useMainnet) {
+      const authHeaders = await getCDPAuthHeaders(
+        "POST",
+        "/platform/v2/x402/settle",
+        requestBody
+      );
+      headers = { ...headers, ...authHeaders };
+    }
     const response = await fetch(`${this.facilitatorUrl}/settle`, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        paymentPayload: payment,
-        paymentRequirements: requirements
-      })
+      headers,
+      body: JSON.stringify(requestBody)
     });
     const result = await response.json();
-    if (!response.ok) {
-      throw new Error(result.error || "Settlement failed");
+    if (!response.ok || !result.success) {
+      throw new Error(result.error || result.errorReason || "Settlement failed");
     }
     return {
       transaction: result.transaction,
@@ -651,9 +746,9 @@ var MoltsPayServer = class {
 // src/cli/index.ts
 import * as readline from "readline";
 var program = new Command();
-var DEFAULT_CONFIG_DIR = join2(homedir2(), ".moltspay");
-var PID_FILE = join2(DEFAULT_CONFIG_DIR, "server.pid");
-if (!existsSync2(DEFAULT_CONFIG_DIR)) {
+var DEFAULT_CONFIG_DIR = join3(homedir2(), ".moltspay");
+var PID_FILE = join3(DEFAULT_CONFIG_DIR, "server.pid");
+if (!existsSync3(DEFAULT_CONFIG_DIR)) {
   mkdirSync2(DEFAULT_CONFIG_DIR, { recursive: true });
 }
 function prompt(question) {
@@ -671,7 +766,7 @@ function prompt(question) {
 program.name("moltspay").description("MoltsPay - Payment infrastructure for AI Agents").version("1.0.0");
 program.command("init").description("Initialize MoltsPay client (create wallet, set limits)").option("--chain <chain>", "Blockchain to use", "base").option("--max-per-tx <amount>", "Max amount per transaction").option("--max-per-day <amount>", "Max amount per day").option("--config-dir <dir>", "Config directory", DEFAULT_CONFIG_DIR).action(async (options) => {
   console.log("\n\u{1F510} MoltsPay Client Setup\n");
-  if (existsSync2(join2(options.configDir, "wallet.json"))) {
+  if (existsSync3(join3(options.configDir, "wallet.json"))) {
     console.log('\u26A0\uFE0F  Already initialized. Use "moltspay config" to update settings.');
     console.log(`   Config dir: ${options.configDir}`);
     return;
@@ -698,7 +793,7 @@ program.command("init").description("Initialize MoltsPay client (create wallet,
   console.log(`
 \u{1F4C1} Config saved to: ${result.configDir}`);
   console.log(`
-\u26A0\uFE0F  IMPORTANT: Back up ${join2(result.configDir, "wallet.json")}`);
+\u26A0\uFE0F  IMPORTANT: Back up ${join3(result.configDir, "wallet.json")}`);
   console.log(`   This file contains your private key!
 `);
   console.log(`\u{1F4B0} Fund your wallet with USDC on ${chain} to start using services.
@@ -806,7 +901,7 @@ program.command("services <url>").description("List services from a provider").o
 });
 program.command("start <manifest>").description("Start MoltsPay server from services manifest").option("-p, --port <port>", "Port to listen on", "3000").option("--host <host>", "Host to bind", "0.0.0.0").option("--facilitator <url>", "x402 facilitator URL (default: https://x402.org/facilitator)").action(async (manifest, options) => {
   const manifestPath = resolve(manifest);
-  if (!existsSync2(manifestPath)) {
+  if (!existsSync3(manifestPath)) {
     console.error(`\u274C Manifest not found: ${manifestPath}`);
     process.exit(1);
   }
@@ -870,7 +965,7 @@ program.command("start <manifest>").description("Start MoltsPay server from serv
     server.listen(port);
     const cleanup = () => {
       try {
-        if (existsSync2(PID_FILE)) {
+        if (existsSync3(PID_FILE)) {
           unlinkSync(PID_FILE);
         }
       } catch {
@@ -893,7 +988,7 @@ program.command("start <manifest>").description("Start MoltsPay server from serv
   }
 });
 program.command("stop").description("Stop the running MoltsPay server").action(async () => {
-  if (!existsSync2(PID_FILE)) {
+  if (!existsSync3(PID_FILE)) {
     console.log("\u274C No running server found (no PID file)");
     process.exit(1);
   }
@@ -923,7 +1018,7 @@ program.command("stop").description("Stop the running MoltsPay server").action(a
       process.kill(pid, "SIGKILL");
     } catch {
     }
-    if (existsSync2(PID_FILE)) {
+    if (existsSync3(PID_FILE)) {
       unlinkSync(PID_FILE);
     }
     console.log("\u2705 Server stopped\n");
@@ -954,7 +1049,7 @@ program.command("pay <server> <service> [params]").description("Pay for a servic
       params.image_url = imagePath;
     } else {
       const filePath = resolve(imagePath);
-      if (!existsSync2(filePath)) {
+      if (!existsSync3(filePath)) {
         console.error(`\u274C Image file not found: ${filePath}`);
         process.exit(1);
       }