mtok-relay 0.1.3 → 0.1.5

package/dist/mtok-relay.mjs

@@ -2157,7 +2157,7 @@ var secp256k1 = createCurve({
 }, sha256);
 
 // node_modules/viem/_esm/errors/version.js
-var version = "2.54.3";
+var version = "2.54.6";
 
 // node_modules/viem/_esm/errors/base.js
 var errorConfig = {
@@ -4645,6 +4645,7 @@ function readRelayConfig({ argv = process.argv.slice(2), env = process.env } = {
   const port = Number(flag(argv, "--port") ?? 8788);
   const rpcFlag = flag(argv, "--rpc");
   const settlementPubkeyFlag = flag(argv, "--settlement-pubkey");
+  const sellerAgentId = flag(argv, "--seller-agent");
   const outPrice = Number(flag(argv, "--out-price") ?? 0);
   const inPrice = Number(flag(argv, "--in-price") ?? outPrice);
   const redemptionFile = flag(argv, "--redemption-file") ?? env.RELAY_REDEMPTION_FILE ?? null;
@@ -4671,6 +4672,7 @@ function readRelayConfig({ argv = process.argv.slice(2), env = process.env } = {
   return {
     offerId,
     model,
+    sellerAgentId,
     upstream,
     apiBase,
     port,
@@ -5068,6 +5070,30 @@ function createOnchainVerifier({
   };
 }
 
+// bridge/bridge.mjs
+function httpUpstream({ baseUrl, key }) {
+  const url = String(baseUrl || "").replace(/\/$/, "") + "/chat/completions";
+  return async (payload) => {
+    const res = await fetch(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...key ? { authorization: `Bearer ${key}` } : {}
+      },
+      body: JSON.stringify(payload)
+    });
+    const text = await res.text();
+    let json;
+    try {
+      json = JSON.parse(text);
+    } catch {
+      throw new Error(`non-JSON upstream response (${res.status})`);
+    }
+    if (!res.ok) throw new Error(json?.error?.message || `upstream ${res.status}`);
+    return json;
+  };
+}
+
 // src/rpc.mjs
 var BASE_MAINNET_RPCS = [
   "https://mainnet.base.org",
@@ -5089,10 +5115,11 @@ async function createRelayRuntime(config) {
   const served = createRedemptionStore({ file: config.redemptionFile });
   const drawLocks = /* @__PURE__ */ new Map();
   const platform = await fetchPlatformConfig(config);
-  const verifier = createOnchainVerifier({ rpcUrls: rpcUrlsFor(platform.chainId, config.rpcFlag), usdcAddress: platform.usdcAddress });
+  const verifier = createOnchainVerifier({ rpcUrls: rpcUrlsFor(platform.chainId, config.rpcFlag), usdcAddress: platform.usdcAddress, expectedChainId: platform.chainId });
   if (!verifier.configured) throw new Error("onchain verifier not configured (missing usdcAddress in /api/config)");
   const payerDenylist = new Set((config.payerDenylist ?? []).map((a) => String(a).trim().toLowerCase()).filter(Boolean));
   const screenPayer = typeof config.screenPayer === "function" ? config.screenPayer : null;
+  const upstream = httpUpstream({ baseUrl: config.upstream + "/v1", key: config.upstreamKey });
   const payerDenied = async (payer) => {
     if (!payer) return false;
     if (payerDenylist.has(payer)) return true;
@@ -5134,6 +5161,8 @@ async function createRelayRuntime(config) {
         paid = await verifier.verifyDrawPaid(drawPaidTxHash, {
           contractAddress: platform.dripContractAddress,
           buyerAgentId: buyerId,
+          sellerAgentId: config.sellerAgentId,
+          // when set, enforces the offer-owner match (#codex review)
           bookingId,
           offerId: config.offerId,
           model: config.model,
@@ -5175,12 +5204,7 @@ async function createRelayRuntime(config) {
       const safeRequest = { ...request, max_tokens: bound.maxTok };
       let completion;
       try {
-        const upstreamRes = await fetch(config.upstream + "/v1/chat/completions", {
-          method: "POST",
-          headers: { "content-type": "application/json", authorization: "Bearer " + config.upstreamKey },
-          body: JSON.stringify(safeRequest)
-        });
-        completion = await upstreamRes.json();
+        completion = await upstream(safeRequest);
       } catch (e) {
         return send(res, 502, { error: "upstream_error", detail: e.message });
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtok-relay",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Reference seller relay for mtok.market — accepts on-chain-prepaid chunk draws and serves inference from an upstream you control. Run with: npx mtok-relay --offer <id> --model <id> --upstream <url>.",
   "type": "module",
   "bin": {