thebuyside-x402-agent 0.2.0 → 0.4.0

package/dist/chains/adapter.d.ts

@@ -1,33 +1,59 @@
 /**
  * ChainAdapter — encapsulates per-chain knowledge: network identifier
- * matching, EIP-712 domain, and how to build the typed-data + authorization
- * payload for an x402 payment.
+ * matching and how to build the payment payload for an x402 challenge.
  *
- * v0 has one implementation: `BaseUsdcAdapter`. Adding Solana (Pay.sh) for
- * v0.2 means writing one new class and registering it; no rewrite.
+ * The interface is a discriminated union because EVM and SVM (Solana)
+ * have fundamentally different signing models — EVM signs EIP-712 typed
+ * data and produces an EIP-3009 authorization, SVM partially-signs a
+ * full Solana transaction. Branching on `kind` keeps each chain's path
+ * straightforward; widening to a single shared shape would force a lot
+ * of conditionals + casts down the call chain.
  *
- * Note: the return type is currently EVM-shaped (EIP-712 typed data). When
- * Solana lands we'll either widen this interface or split it into
- * `EvmChainAdapter` / `SolanaChainAdapter` siblings — both are clean changes
- * from here.
+ * Adding a new chain = add a sibling interface here and a class in the
+ * same shape. The protocol loop (`payAndFetch`) is the only place that
+ * needs a new branch.
  */
 import type { Address } from 'viem';
+import type { VersionedTransaction } from '@solana/web3.js';
 import type { Eip712TypedData } from '../signer/signer.js';
 import type { Authorization, PaymentRequirements } from '../x402/types.js';
-export interface ChainAdapter {
+export type ChainKind = 'evm' | 'svm';
+export interface ChainAdapterBase {
     /** Short identifier used in logs and receipts (e.g. 'base', 'solana'). */
     readonly id: string;
+    /** Discriminator for which signing pipeline this adapter slots into. */
+    readonly kind: ChainKind;
     /** Returns true if this adapter handles the network ID in a 402 challenge. */
     matches(network: string): boolean;
+}
+export interface EvmChainAdapter extends ChainAdapterBase {
+    readonly kind: 'evm';
     /**
      * Build the data to sign and the authorization body for a given payment
      * requirement. The gateway then signs `typedData` with its `Signer`,
      * combines the signature with `authorization`, and base64-encodes the
-     * whole thing into the `X-PAYMENT` header.
+     * result into the v1 X-PAYMENT (or v2 PAYMENT-SIGNATURE) header.
      */
     buildPayment(reqs: PaymentRequirements, payerAddress: Address): {
         typedData: Eip712TypedData;
         authorization: Authorization;
     };
 }
+export interface SolanaChainAdapter extends ChainAdapterBase {
+    readonly kind: 'svm';
+    /**
+     * Build a partially-signed Solana transaction for the payment. Returns
+     * the unsigned tx with the seller-provided feePayer already set; the
+     * gateway's SolanaSigner adds the buyer's signature and the result is
+     * base64-encoded into the v2 `payload.transaction` field.
+     *
+     * Async because ATA derivation can require an RPC roundtrip in some
+     * implementations (this one derives PDAs synchronously, but keeping the
+     * shape async leaves room for future RPC-backed lookups).
+     */
+    buildPayment(reqs: PaymentRequirements, payerPubkey: string): Promise<{
+        tx: VersionedTransaction;
+    }>;
+}
+export type ChainAdapter = EvmChainAdapter | SolanaChainAdapter;
 //# sourceMappingURL=adapter.d.ts.map

package/dist/chains/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/chains/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,8EAA8E;IAC9E,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC;;;;;OAKG;IACH,YAAY,CACV,IAAI,EAAE,mBAAmB,EACzB,YAAY,EAAE,OAAO,GACpB;QAAE,SAAS,EAAE,eAAe,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CACjE"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/chains/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC;AAEtC,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,8EAA8E;IAC9E,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB;;;;;OAKG;IACH,YAAY,CACV,IAAI,EAAE,mBAAmB,EACzB,YAAY,EAAE,OAAO,GACpB;QAAE,SAAS,EAAE,eAAe,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CACjE;AAED,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB;;;;;;;;;OASG;IACH,YAAY,CACV,IAAI,EAAE,mBAAmB,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,EAAE,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC"}

package/dist/chains/adapter.js

@@ -1,15 +1,17 @@
 /**
  * ChainAdapter — encapsulates per-chain knowledge: network identifier
- * matching, EIP-712 domain, and how to build the typed-data + authorization
- * payload for an x402 payment.
+ * matching and how to build the payment payload for an x402 challenge.
  *
- * v0 has one implementation: `BaseUsdcAdapter`. Adding Solana (Pay.sh) for
- * v0.2 means writing one new class and registering it; no rewrite.
+ * The interface is a discriminated union because EVM and SVM (Solana)
+ * have fundamentally different signing models — EVM signs EIP-712 typed
+ * data and produces an EIP-3009 authorization, SVM partially-signs a
+ * full Solana transaction. Branching on `kind` keeps each chain's path
+ * straightforward; widening to a single shared shape would force a lot
+ * of conditionals + casts down the call chain.
  *
- * Note: the return type is currently EVM-shaped (EIP-712 typed data). When
- * Solana lands we'll either widen this interface or split it into
- * `EvmChainAdapter` / `SolanaChainAdapter` siblings — both are clean changes
- * from here.
+ * Adding a new chain = add a sibling interface here and a class in the
+ * same shape. The protocol loop (`payAndFetch`) is the only place that
+ * needs a new branch.
  */
 export {};
 //# sourceMappingURL=adapter.js.map

package/dist/chains/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/chains/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/chains/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/chains/base-usdc.d.ts

@@ -10,9 +10,10 @@
 import type { Address } from 'viem';
 import type { Eip712TypedData } from '../signer/signer.js';
 import type { Authorization, PaymentRequirements } from '../x402/types.js';
-import type { ChainAdapter } from './adapter.js';
-export declare class BaseUsdcAdapter implements ChainAdapter {
+import type { EvmChainAdapter } from './adapter.js';
+export declare class BaseUsdcAdapter implements EvmChainAdapter {
     readonly id = "base";
+    readonly kind: "evm";
     matches(network: string): boolean;
     buildPayment(reqs: PaymentRequirements, payerAddress: Address): {
         typedData: Eip712TypedData;

package/dist/chains/base-usdc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-usdc.d.ts","sourceRoot":"","sources":["../../src/chains/base-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAO,MAAM,MAAM,CAAC;AAEzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAajD,qBAAa,eAAgB,YAAW,YAAY;IAClD,QAAQ,CAAC,EAAE,UAAU;IAErB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIjC,YAAY,CACV,IAAI,EAAE,mBAAmB,EACzB,YAAY,EAAE,OAAO,GACpB;QAAE,SAAS,EAAE,eAAe,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE;CAqChE"}
+{"version":3,"file":"base-usdc.d.ts","sourceRoot":"","sources":["../../src/chains/base-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAO,MAAM,MAAM,CAAC;AAEzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAapD,qBAAa,eAAgB,YAAW,eAAe;IACrD,QAAQ,CAAC,EAAE,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAE/B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIjC,YAAY,CACV,IAAI,EAAE,mBAAmB,EACzB,YAAY,EAAE,OAAO,GACpB;QAAE,SAAS,EAAE,eAAe,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE;CA2ChE"}

package/dist/chains/base-usdc.js

@@ -21,6 +21,7 @@ const TRANSFER_WITH_AUTHORIZATION_TYPES = {
 };
 export class BaseUsdcAdapter {
     id = 'base';
+    kind = 'evm';
     matches(network) {
         return network === 'base' || network === 'eip155:8453';
     }
@@ -28,10 +29,16 @@ export class BaseUsdcAdapter {
         const validAfter = 0n;
         const validBefore = BigInt(Math.floor(Date.now() / 1000) + reqs.maxTimeoutSeconds);
         const nonce = `0x${randomBytes(32).toString('hex')}`;
+        // EIP-712 domain identity comes from `extra.name` / `extra.version`.
+        // Critical: Base mainnet USDC's name is "USD Coin" (NOT "USDC"); Base
+        // Sepolia uses "USDC" — sellers MUST set both correctly in the challenge.
+        const evmExtra = reqs.extra;
+        const extraName = typeof evmExtra.name === 'string' ? evmExtra.name : '';
+        const extraVersion = typeof evmExtra.version === 'string' ? evmExtra.version : '';
         const typedData = {
             domain: {
-                name: reqs.extra.name,
-                version: reqs.extra.version,
+                name: extraName,
+                version: extraVersion,
                 chainId: base.id,
                 verifyingContract: reqs.asset,
             },

package/dist/chains/base-usdc.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-usdc.js","sourceRoot":"","sources":["../../src/chains/base-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAKnC,MAAM,iCAAiC,GAAG;IACxC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX,MAAM,OAAO,eAAe;IACjB,EAAE,GAAG,MAAM,CAAC;IAErB,OAAO,CAAC,OAAe;QACrB,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,aAAa,CAAC;IACzD,CAAC;IAED,YAAY,CACV,IAAyB,EACzB,YAAqB;QAErB,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,CACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CACvD,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAC;QAE5D,MAAM,SAAS,GAAoB;YACjC,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;gBACrB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;gBAC3B,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,iBAAiB,EAAE,IAAI,CAAC,KAAK;aAC9B;YACD,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,UAAU;gBACV,WAAW;gBACX,KAAK;aACN;SACF,CAAC;QAEF,MAAM,aAAa,GAAkB;YACnC,IAAI,EAAE,YAAY;YAClB,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,iBAAiB;YAC7B,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;YACnC,KAAK;SACN,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"base-usdc.js","sourceRoot":"","sources":["../../src/chains/base-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAKnC,MAAM,iCAAiC,GAAG;IACxC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX,MAAM,OAAO,eAAe;IACjB,EAAE,GAAG,MAAM,CAAC;IACZ,IAAI,GAAG,KAAc,CAAC;IAE/B,OAAO,CAAC,OAAe;QACrB,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,aAAa,CAAC;IACzD,CAAC;IAED,YAAY,CACV,IAAyB,EACzB,YAAqB;QAErB,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,CACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CACvD,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAC;QAE5D,qEAAqE;QACrE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAA8C,CAAC;QACrE,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,YAAY,GAAG,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,SAAS,GAAoB;YACjC,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,iBAAiB,EAAE,IAAI,CAAC,KAAK;aAC9B;YACD,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACrC,UAAU;gBACV,WAAW;gBACX,KAAK;aACN;SACF,CAAC;QAEF,MAAM,aAAa,GAAkB;YACnC,IAAI,EAAE,YAAY;YAClB,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,KAAK,EAAE,IAAI,CAAC,iBAAiB;YAC7B,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;YACnC,KAAK;SACN,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/chains/solana-usdc.d.ts

@@ -0,0 +1,51 @@
+/**
+ * SolanaUsdcAdapter — Solana mainnet, USDC SPL transfer, x402 v2 `exact` SVM.
+ *
+ * Builds the partially-signed transaction that the buyer signs and the
+ * facilitator (the seller's `extra.feePayer`) co-signs and broadcasts.
+ *
+ * Required instruction order per spec (scheme_exact_svm.md):
+ *   1. ComputeBudget: SetComputeUnitLimit
+ *   2. ComputeBudget: SetComputeUnitPrice
+ *   3. SPL Token TransferChecked (source ATA → seller ATA)
+ *   4. Memo — value from `extra.memo` if present, else a random 16-byte
+ *      hex nonce
+ *
+ * The buyer is NOT the feePayer — the seller's facilitator covers SOL gas.
+ * Critical safety rule (also enforced explicitly below): the feePayer
+ * pubkey MUST NOT appear in any instruction's accounts list, otherwise
+ * the buyer would be implicitly signing as the feePayer.
+ *
+ * Asset scope: this adapter only handles the USDC mint on Solana mainnet.
+ * Other SPL tokens or the Token-2022 program would need a sibling
+ * adapter — the wire-level scheme is the same but decimals and program
+ * ID differ.
+ *
+ * Blockhash: a versioned tx requires a recent blockhash. We fetch one
+ * from a public Solana RPC at build time. Configurable via
+ * X402_SOLANA_RPC; default is api.mainnet-beta.solana.com. Cached for
+ * a short window since Solana blockhashes are valid for ~60 seconds
+ * and an x402 round trip typically fits well inside that.
+ */
+import { VersionedTransaction } from '@solana/web3.js';
+import type { PaymentRequirements } from '../x402/types.js';
+import type { SolanaChainAdapter } from './adapter.js';
+export type SolanaUsdcAdapterOptions = {
+    /** Override the Solana RPC URL. Defaults to mainnet-beta. */
+    rpcUrl?: string;
+    /** Test seam — fetch a blockhash without a real RPC. */
+    blockhashFetcher?: () => Promise<string>;
+};
+export declare class SolanaUsdcAdapter implements SolanaChainAdapter {
+    readonly id = "solana";
+    readonly kind: "svm";
+    private readonly rpcUrl;
+    private readonly blockhashFetcher?;
+    constructor(opts?: SolanaUsdcAdapterOptions);
+    matches(network: string): boolean;
+    buildPayment(reqs: PaymentRequirements, payerPubkey: string): Promise<{
+        tx: VersionedTransaction;
+    }>;
+    private fetchBlockhash;
+}
+//# sourceMappingURL=solana-usdc.d.ts.map

package/dist/chains/solana-usdc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-usdc.d.ts","sourceRoot":"","sources":["../../src/chains/solana-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAML,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AAMzB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAavD,MAAM,MAAM,wBAAwB,GAAG;IACrC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C,CAAC;AAEF,qBAAa,iBAAkB,YAAW,kBAAkB;IAC1D,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAwB;gBAE9C,IAAI,GAAE,wBAA6B;IAK/C,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAO3B,YAAY,CAChB,IAAI,EAAE,mBAAmB,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,EAAE,EAAE,oBAAoB,CAAA;KAAE,CAAC;YA4E1B,cAAc;CAM7B"}

package/dist/chains/solana-usdc.js

@@ -0,0 +1,131 @@
+/**
+ * SolanaUsdcAdapter — Solana mainnet, USDC SPL transfer, x402 v2 `exact` SVM.
+ *
+ * Builds the partially-signed transaction that the buyer signs and the
+ * facilitator (the seller's `extra.feePayer`) co-signs and broadcasts.
+ *
+ * Required instruction order per spec (scheme_exact_svm.md):
+ *   1. ComputeBudget: SetComputeUnitLimit
+ *   2. ComputeBudget: SetComputeUnitPrice
+ *   3. SPL Token TransferChecked (source ATA → seller ATA)
+ *   4. Memo — value from `extra.memo` if present, else a random 16-byte
+ *      hex nonce
+ *
+ * The buyer is NOT the feePayer — the seller's facilitator covers SOL gas.
+ * Critical safety rule (also enforced explicitly below): the feePayer
+ * pubkey MUST NOT appear in any instruction's accounts list, otherwise
+ * the buyer would be implicitly signing as the feePayer.
+ *
+ * Asset scope: this adapter only handles the USDC mint on Solana mainnet.
+ * Other SPL tokens or the Token-2022 program would need a sibling
+ * adapter — the wire-level scheme is the same but decimals and program
+ * ID differ.
+ *
+ * Blockhash: a versioned tx requires a recent blockhash. We fetch one
+ * from a public Solana RPC at build time. Configurable via
+ * X402_SOLANA_RPC; default is api.mainnet-beta.solana.com. Cached for
+ * a short window since Solana blockhashes are valid for ~60 seconds
+ * and an x402 round trip typically fits well inside that.
+ */
+import { randomBytes } from 'node:crypto';
+import { ComputeBudgetProgram, Connection, PublicKey, TransactionInstruction, TransactionMessage, VersionedTransaction, } from '@solana/web3.js';
+import { createTransferCheckedInstruction, getAssociatedTokenAddressSync, TOKEN_PROGRAM_ID, } from '@solana/spl-token';
+const SOLANA_MAINNET_GENESIS = '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp';
+const USDC_MAINNET_MINT = 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v';
+const USDC_DECIMALS = 6;
+const MEMO_PROGRAM_ID = new PublicKey('MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr');
+const DEFAULT_RPC_URL = 'https://api.mainnet-beta.solana.com';
+/** Compute budget — generous enough for transferChecked + memo + a touch of slack. */
+const COMPUTE_UNIT_LIMIT = 60_000;
+/** Micro-lamports per CU. 1000 = ~0.0006 SOL on a 60k CU tx; adequate priority. */
+const COMPUTE_UNIT_PRICE = 1_000;
+export class SolanaUsdcAdapter {
+    id = 'solana';
+    kind = 'svm';
+    rpcUrl;
+    blockhashFetcher;
+    constructor(opts = {}) {
+        this.rpcUrl = opts.rpcUrl ?? process.env.X402_SOLANA_RPC ?? DEFAULT_RPC_URL;
+        this.blockhashFetcher = opts.blockhashFetcher;
+    }
+    matches(network) {
+        return (network === 'solana' ||
+            network === `solana:${SOLANA_MAINNET_GENESIS}`);
+    }
+    async buildPayment(reqs, payerPubkey) {
+        if (reqs.asset !== USDC_MAINNET_MINT) {
+            throw new Error(`solana-usdc adapter only handles the USDC mint (${USDC_MAINNET_MINT}); ` +
+                `seller asked for asset=${reqs.asset}. Different SPL token or Token-2022 ` +
+                `would need a sibling adapter.`);
+        }
+        const feePayerStr = readFeePayer(reqs.extra);
+        if (!feePayerStr) {
+            throw new Error('solana 402 challenge missing required `extra.feePayer` — the seller ' +
+                'must declare a facilitator pubkey to cover SOL gas. The x402 SVM ' +
+                'spec does not allow the buyer to be the fee payer.');
+        }
+        const payer = new PublicKey(payerPubkey);
+        const seller = new PublicKey(reqs.payTo);
+        const feePayer = new PublicKey(feePayerStr);
+        const mint = new PublicKey(reqs.asset);
+        if (feePayer.equals(payer)) {
+            throw new Error('seller-declared feePayer equals the buyer pubkey — refusing to sign. ' +
+                'Per scheme_exact_svm.md the buyer must not appear as feePayer.');
+        }
+        const sourceAta = getAssociatedTokenAddressSync(mint, payer);
+        const destAta = getAssociatedTokenAddressSync(mint, seller);
+        // Spec: feePayer MUST NOT appear in any instruction's accounts.
+        if (feePayer.equals(sourceAta) || feePayer.equals(destAta) || feePayer.equals(seller) || feePayer.equals(mint)) {
+            throw new Error('feePayer collides with an instruction account (source ATA, dest ATA, ' +
+                'seller, or mint) — refusing to build tx. This violates the SVM scheme ' +
+                'safety rule.');
+        }
+        const memoText = readMemo(reqs.extra) ?? randomHexNonce(16);
+        const amount = BigInt(reqs.maxAmountRequired);
+        const instructions = [
+            ComputeBudgetProgram.setComputeUnitLimit({ units: COMPUTE_UNIT_LIMIT }),
+            ComputeBudgetProgram.setComputeUnitPrice({ microLamports: COMPUTE_UNIT_PRICE }),
+            createTransferCheckedInstruction(sourceAta, mint, destAta, payer, amount, USDC_DECIMALS, [], TOKEN_PROGRAM_ID),
+            new TransactionInstruction({
+                programId: MEMO_PROGRAM_ID,
+                keys: [],
+                data: Buffer.from(memoText, 'utf8'),
+            }),
+        ];
+        const recentBlockhash = await this.fetchBlockhash();
+        const messageV0 = new TransactionMessage({
+            payerKey: feePayer,
+            recentBlockhash,
+            instructions,
+        }).compileToV0Message();
+        const tx = new VersionedTransaction(messageV0);
+        return { tx };
+    }
+    async fetchBlockhash() {
+        if (this.blockhashFetcher)
+            return this.blockhashFetcher();
+        const conn = new Connection(this.rpcUrl, 'confirmed');
+        const { blockhash } = await conn.getLatestBlockhash('confirmed');
+        return blockhash;
+    }
+}
+function readFeePayer(extra) {
+    if (extra && typeof extra === 'object' && 'feePayer' in extra) {
+        const f = extra.feePayer;
+        if (typeof f === 'string' && f.length > 0)
+            return f;
+    }
+    return null;
+}
+function readMemo(extra) {
+    if (extra && typeof extra === 'object' && 'memo' in extra) {
+        const m = extra.memo;
+        if (typeof m === 'string' && m.length > 0)
+            return m;
+    }
+    return null;
+}
+function randomHexNonce(byteLen) {
+    return randomBytes(byteLen).toString('hex');
+}
+//# sourceMappingURL=solana-usdc.js.map

package/dist/chains/solana-usdc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-usdc.js","sourceRoot":"","sources":["../../src/chains/solana-usdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AACzE,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;AACrF,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,sFAAsF;AACtF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,KAAK,CAAC;AASjC,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,QAAQ,CAAC;IACd,IAAI,GAAG,KAAc,CAAC;IACd,MAAM,CAAS;IACf,gBAAgB,CAAyB;IAE1D,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC;QAC5E,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,OAAO,CACL,OAAO,KAAK,QAAQ;YACpB,OAAO,KAAK,UAAU,sBAAsB,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAyB,EACzB,WAAmB;QAEnB,IAAK,IAAI,CAAC,KAAgB,KAAK,iBAAiB,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,mDAAmD,iBAAiB,KAAK;gBACvE,0BAA0B,IAAI,CAAC,KAAK,sCAAsC;gBAC1E,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,sEAAsE;gBACpE,mEAAmE;gBACnE,oDAAoD,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACrE,gEAAgE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,6BAA6B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE5D,gEAAgE;QAChE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACrE,wEAAwE;gBACxE,cAAc,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE9C,MAAM,YAAY,GAA6B;YAC7C,oBAAoB,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACvE,oBAAoB,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;YAC/E,gCAAgC,CAC9B,SAAS,EACT,IAAI,EACJ,OAAO,EACP,KAAK,EACL,MAAM,EACN,aAAa,EACb,EAAE,EACF,gBAAgB,CACjB;YACD,IAAI,sBAAsB,CAAC;gBACzB,SAAS,EAAE,eAAe;gBAC1B,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;aACpC,CAAC;SACH,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC;YACvC,QAAQ,EAAE,QAAQ;YAClB,eAAe;YACf,YAAY;SACb,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAExB,MAAM,EAAE,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAI,KAAiC,CAAC,QAAQ,CAAC;QACtD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAI,KAAiC,CAAC,IAAI,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC"}

package/dist/config.d.ts

@@ -1,8 +1,10 @@
 /**
  * Config loader. Reads `.env` (via dotenv) and validates env vars at startup.
  *
- * The wallet key is intentionally optional at M1 — the gateway boots and lists
- * tools without it; payment-shaped tools just won't have a real address to use.
+ * Wallet keys are optional at boot — the gateway boots and lists tools
+ * without any keys; payment-shaped tools simply error if asked to pay
+ * on a chain without a configured signer. Users can configure EVM only,
+ * Solana only, or both.
  *
  * `.env` is loaded by absolute path (relative to this file) so the gateway
  * works correctly when spawned from any cwd — e.g. by Claude Desktop, where
@@ -10,8 +12,14 @@
  */
 import type { Hex } from 'viem';
 export type Config = {
-    /** Hex 0x-prefixed private key, or null if unset / placeholder. */
+    /** Hex 0x-prefixed EVM private key, or null if unset / placeholder. */
     payerPrivateKey: Hex | null;
+    /**
+     * Solana secret key in either base58 (Phantom export) or
+     * JSON-array (solana-keygen output) format. Stored as the raw string;
+     * the signer decodes + validates. Null if unset / placeholder.
+     */
+    payerSolanaKey: string | null;
 };
 export declare function loadConfig(): Config;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAMhC,MAAM,MAAM,MAAM,GAAG;IACnB,mEAAmE;IACnE,eAAe,EAAE,GAAG,GAAG,IAAI,CAAC;CAC7B,CAAC;AAaF,wBAAgB,UAAU,IAAI,MAAM,CAInC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAMhC,MAAM,MAAM,MAAM,GAAG;IACnB,uEAAuE;IACvE,eAAe,EAAE,GAAG,GAAG,IAAI,CAAC;IAC5B;;;;OAIG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,CAAC;AAoBF,wBAAgB,UAAU,IAAI,MAAM,CAKnC"}

package/dist/config.js

@@ -1,8 +1,10 @@
 /**
  * Config loader. Reads `.env` (via dotenv) and validates env vars at startup.
  *
- * The wallet key is intentionally optional at M1 — the gateway boots and lists
- * tools without it; payment-shaped tools just won't have a real address to use.
+ * Wallet keys are optional at boot — the gateway boots and lists tools
+ * without any keys; payment-shaped tools simply error if asked to pay
+ * on a chain without a configured signer. Users can configure EVM only,
+ * Solana only, or both.
  *
  * `.env` is loaded by absolute path (relative to this file) so the gateway
  * works correctly when spawned from any cwd — e.g. by Claude Desktop, where
@@ -24,9 +26,18 @@ function parsePrivateKey(raw) {
     }
     return raw;
 }
+function parseSolanaKey(raw) {
+    if (!raw)
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed === '' || trimmed === 'PASTE_YOUR_SOLANA_KEY_HERE')
+        return null;
+    return trimmed;
+}
 export function loadConfig() {
     return {
         payerPrivateKey: parsePrivateKey(process.env.X402_PAYER_PRIVATE_KEY),
+        payerSolanaKey: parseSolanaKey(process.env.X402_PAYER_SOLANA_KEY),
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG9C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAOnD,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,+BAA+B;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,GAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;KACrE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG9C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;AAanD,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,+BAA+B;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,GAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,4BAA4B;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,eAAe,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACpE,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;KAClE,CAAC;AACJ,CAAC"}

package/dist/gateway.d.ts

@@ -4,6 +4,11 @@
  * Built once at server startup and passed by reference to each tool's
  * register function. Keeps tool signatures stable as we add modules
  * (analytics, hosted-wallet, multi-chain, etc.) over time.
+ *
+ * Multi-chain (M8): the gateway holds at most one signer per chain
+ * kind (`evm`, `svm`). Either, both, or neither may be configured —
+ * the tools error clearly when an MCP call would need a signer that
+ * isn't set.
  */
 import type { ChainAdapter } from './chains/adapter.js';
 import type { Config } from './config.js';
@@ -11,16 +16,24 @@ import { Allowlist } from './policy/allowlist.js';
 import { CapPolicy } from './policy/caps.js';
 import { ConfirmPolicy } from './policy/confirm.js';
 import { Receipts } from './policy/receipts.js';
+import { Federation } from './registry/federation.js';
 import { Registry } from './registry/lookup.js';
-import type { Signer } from './signer/signer.js';
+import type { EvmSigner, SolanaSigner } from './signer/signer.js';
+export type Signers = {
+    evm: EvmSigner | null;
+    svm: SolanaSigner | null;
+};
 export type Gateway = {
-    signer: Signer | null;
+    signers: Signers;
     chains: ChainAdapter[];
     allowlist: Allowlist;
     receipts: Receipts;
     caps: CapPolicy;
     confirm: ConfirmPolicy;
     registry: Registry;
+    federation: Federation;
 };
 export declare function buildGateway(config: Config): Promise<Gateway>;
+/** True if at least one chain has a configured signer. */
+export declare function hasAnySigner(s: Signers): boolean;
 //# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,MAAM,OAAO,GAAG;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAanE"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,MAAM,OAAO,GAAG;IACpB,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBnE;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAEhD"}

package/dist/gateway.js

@@ -4,25 +4,42 @@
  * Built once at server startup and passed by reference to each tool's
  * register function. Keeps tool signatures stable as we add modules
  * (analytics, hosted-wallet, multi-chain, etc.) over time.
+ *
+ * Multi-chain (M8): the gateway holds at most one signer per chain
+ * kind (`evm`, `svm`). Either, both, or neither may be configured —
+ * the tools error clearly when an MCP call would need a signer that
+ * isn't set.
  */
 import { BaseUsdcAdapter } from './chains/base-usdc.js';
+import { SolanaUsdcAdapter } from './chains/solana-usdc.js';
 import { Allowlist } from './policy/allowlist.js';
 import { CapPolicy } from './policy/caps.js';
 import { ConfirmPolicy } from './policy/confirm.js';
 import { Receipts } from './policy/receipts.js';
+import { Federation } from './registry/federation.js';
 import { Registry } from './registry/lookup.js';
 import { EnvKeySigner } from './signer/env-key.js';
+import { EnvSolanaKeySigner } from './signer/env-solana-key.js';
 export async function buildGateway(config) {
     const receipts = Receipts.fromEnv();
     const registry = await Registry.load();
+    const signers = {
+        evm: config.payerPrivateKey ? new EnvKeySigner(config.payerPrivateKey) : null,
+        svm: config.payerSolanaKey ? new EnvSolanaKeySigner(config.payerSolanaKey) : null,
+    };
     return {
-        signer: config.payerPrivateKey ? new EnvKeySigner(config.payerPrivateKey) : null,
-        chains: [new BaseUsdcAdapter()],
+        signers,
+        chains: [new BaseUsdcAdapter(), new SolanaUsdcAdapter()],
         allowlist: Allowlist.fromEnv({ defaultHosts: registry.hosts() }),
         receipts,
         caps: CapPolicy.fromEnv(receipts),
         confirm: ConfirmPolicy.fromEnv(),
         registry,
+        federation: Federation.fromEnv(),
     };
 }
+/** True if at least one chain has a configured signer. */
+export function hasAnySigner(s) {
+    return s.evm !== null || s.svm !== null;
+}
 //# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAanD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEvC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;QAChF,MAAM,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;QAC/B,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QAChE,QAAQ;QACR,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE;QAChC,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAmBhE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEvC,MAAM,OAAO,GAAY;QACvB,GAAG,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7E,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;KAClF,CAAC;IAEF,OAAO;QACL,OAAO;QACP,MAAM,EAAE,CAAC,IAAI,eAAe,EAAE,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACxD,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QAChE,QAAQ;QACR,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE;QAChC,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,OAAO,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC;AAC1C,CAAC"}

package/dist/policy/confirm.d.ts

@@ -38,6 +38,13 @@ export type ConfirmAskArgs = {
     url: string;
     todaySpentAtomic: bigint;
     dailyCapAtomic: bigint;
+    /**
+     * Optional `extensions.*` metadata from the 402 challenge. When the seller
+     * (or an index like CDP Bazaar) embeds listing metadata in the challenge,
+     * we surface a short summary in the prompt so the user has a trust signal
+     * beyond the bare URL.
+     */
+    extensions?: Record<string, unknown>;
 };
 export declare class ConfirmPolicy {
     readonly config: ConfirmConfig;

package/dist/policy/confirm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../src/policy/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,WAAgC,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,qBAAa,aAAa;aAGI,MAAM,EAAE,aAAa;IAFjD,OAAO,CAAC,mBAAmB,CAAS;gBAER,MAAM,EAAE,aAAa;IAEjD,MAAM,CAAC,OAAO,IAAI,aAAa;IAqB/B,mEAAmE;IACnE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAW5C;;;;;OAKG;IACG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;CAyD7E"}
+{"version":3,"file":"confirm.d.ts","sourceRoot":"","sources":["../../src/policy/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,WAAgC,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,aAAa;aAGI,MAAM,EAAE,aAAa;IAFjD,OAAO,CAAC,mBAAmB,CAAS;gBAER,MAAM,EAAE,aAAa;IAEjD,MAAM,CAAC,OAAO,IAAI,aAAa;IAqB/B,mEAAmE;IACnE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAW5C;;;;;OAKG;IACG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;CAyD7E"}

package/dist/policy/confirm.js

@@ -121,11 +121,47 @@ function formatPrompt(args) {
             return args.url;
         }
     })();
-    return [
+    const lines = [
         `Confirm payment to ${args.host}`,
         `  Amount:   $${formatUsdcAtomic(args.amountAtomic)} USDC (Base mainnet)`,
         `  Resource: ${args.method} ${path}`,
         `  Today:    $${formatUsdcAtomic(args.todaySpentAtomic)} of $${formatUsdcAtomic(args.dailyCapAtomic)} daily cap`,
-    ].join('\n');
+    ];
+    const meta = formatExtensions(args.extensions);
+    if (meta)
+        lines.push(meta);
+    return lines.join('\n');
+}
+/**
+ * Render `extensions.*` metadata for the prompt. Currently knows the
+ * `bazaar` namespace (CDP Bazaar listings); other namespaces fall through
+ * to a generic key-list. Returns null when there's nothing useful to show.
+ *
+ * Only surfaces string/number values to keep the prompt readable and
+ * resistant to nested-object spam from a hostile seller.
+ */
+function formatExtensions(extensions) {
+    if (!extensions || Object.keys(extensions).length === 0)
+        return null;
+    const bazaar = extensions.bazaar;
+    if (bazaar && typeof bazaar === 'object') {
+        const b = bazaar;
+        const parts = [];
+        if (typeof b.name === 'string')
+            parts.push(b.name);
+        if (typeof b.category === 'string')
+            parts.push(`category: ${b.category}`);
+        if (typeof b.listingId === 'string')
+            parts.push(`listing: ${b.listingId}`);
+        if (parts.length > 0)
+            return `  Bazaar:   ${parts.join(' • ')}`;
+    }
+    const flat = Object.entries(extensions)
+        .filter(([, v]) => typeof v === 'string' || typeof v === 'number')
+        .slice(0, 3)
+        .map(([k, v]) => `${k}=${v}`);
+    if (flat.length === 0)
+        return null;
+    return `  Meta:     ${flat.join(', ')}`;
 }
 //# sourceMappingURL=confirm.js.map